Skip to main content
All Industries

EU Industry Benchmark

Healthcare

Anonymized security posture data for the healthcare sector across the EU. Based on 51657 monitored sites.

40.3

Avg. Score /100

D

Avg. Grade

51657

Sites Tracked

+1.0

vs. EU Average

Critical findings in this industry

40440 of 51657 without HTTPS redirect

78.0%

50733 of 51657 with unencrypted email (no STARTTLS)

98.0%

51544 of 51657 without DMARC protection (spoofable)

100.0%

12716 of 51657 missing 3+ critical security headers

25.0%

45116 of 51657 without DNSSEC (vulnerable to DNS spoofing)

87.0%

50360 of 51657 without CAA records (unrestricted certificate issuance)

97.0%

51467 of 51657 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
21 (0.0%)
C
1072 (2.0%)
D
26971 (52.0%)
F
23593 (46.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 41.2/100 (2716 sites) Belgium: 41.3/100 (1352 sites) Bulgaria: 39.3/100 (327 sites) Croatia: 39.2/100 (255 sites) Cyprus: 38.9/100 (68 sites) Czech Republic: 42.8/100 (652 sites) Denmark: 41.9/100 (490 sites) Estonia: 44.2/100 (136 sites) Finland: 40.5/100 (369 sites) France: 38.1/100 (2541 sites) Germany: 39.9/100 (22003 sites) Greece: 39.2/100 (280 sites) Hungary: 39.7/100 (359 sites) Ireland: 40.8/100 (621 sites) Italy: 38.6/100 (1493 sites) Latvia: 42.4/100 (126 sites) Lithuania: 41.6/100 (259 sites) Luxembourg: 42.9/100 (92 sites) Netherlands: 43.8/100 (3271 sites) Norway: 41.8/100 (279 sites) Poland: 39.4/100 (3517 sites) Portugal: 38.9/100 (417 sites) Romania: 39.6/100 (545 sites) Slovakia: 43.8/100 (483 sites) Slovenia: 38.9/100 (132 sites) Spain: 39.4/100 (1920 sites) Sweden: 42.6/100 (280 sites) Switzerland: 42.8/100 (1671 sites) United Kingdom: 40.0/100 (4960 sites)
Worse
Better

Score by Country

🇦🇹 Austria
41.2 2716 🇧🇪 Belgium
41.3 1352 🇧🇬 Bulgaria
39.3 327 🇭🇷 Croatia
39.2 255 🇨🇾 Cyprus
38.9 68 🇨🇿 Czech Republic
42.8 652 🇩🇰 Denmark
41.9 490 🇪🇪 Estonia
44.2 136 🇪🇺 European Union
42.0 2 🇫🇮 Finland
40.5 369 🇫🇷 France
38.1 2541 🇩🇪 Germany
39.9 22003 🇬🇷 Greece
39.2 280 🇭🇺 Hungary
39.7 359 🇮🇸 Iceland
45.0 25 🇮🇪 Ireland
40.8 621 🇮🇹 Italy
38.6 1493 🇱🇻 Latvia
42.4 126 🇱🇮 Liechtenstein
44.0 5 🇱🇹 Lithuania
41.6 259 🇱🇺 Luxembourg
42.9 92 🇲🇹 Malta
40.6 11 🇳🇱 Netherlands
43.8 3271 🇳🇴 Norway
41.8 279 🇵🇱 Poland
39.4 3517 🇵🇹 Portugal
38.9 417 🇷🇴 Romania
39.6 545 🇸🇰 Slovakia
43.8 483 🇸🇮 Slovenia
38.9 132 🇪🇸 Spain
39.4 1920 🇸🇪 Sweden
42.6 280 🇨🇭 Switzerland
42.8 1671 🇬🇧 United Kingdom
40.0 4960

Hosting & Data Residency

63%

EU-headquartered provider

37%

Non-EU provider (CLOUD Act / Schrems II)

IONOS (1&1) (DE) 5924 22.9%
Cloudflare (US) 4155 16.1%
Hetzner (DE) 3346 13.0%
Strato (DE) 3182 12.3%
Amazon Web Services (US) 2264 8.8%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.