Skip to main content
All Industries

EU Industry Benchmark

Hospitality

Anonymized security posture data for the hospitality sector across the EU. Based on 110588 monitored sites.

39.4

Avg. Score /100

F

Avg. Grade

110588

Sites Tracked

-1.0

vs. EU Average

Critical findings in this industry

79681 of 110588 without HTTPS redirect

72.0%

108473 of 110588 with unencrypted email (no STARTTLS)

98.0%

110369 of 110588 without DMARC protection (spoofable)

100.0%

38306 of 110588 missing 3+ critical security headers

35.0%

95336 of 110588 without DNSSEC (vulnerable to DNS spoofing)

86.0%

107895 of 110588 without CAA records (unrestricted certificate issuance)

98.0%

110418 of 110588 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
9 (0.0%)
C
1411 (1.0%)
D
52330 (47.0%)
F
56838 (51.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 40.8/100 (7163 sites) Belgium: 40.1/100 (1730 sites) Bulgaria: 39.6/100 (786 sites) Croatia: 40.2/100 (1004 sites) Cyprus: 40.3/100 (198 sites) Czech Republic: 41.5/100 (3113 sites) Denmark: 41.8/100 (1230 sites) Estonia: 42.4/100 (349 sites) Finland: 40.0/100 (891 sites) France: 37.8/100 (13600 sites) Germany: 39.5/100 (25281 sites) Greece: 39.3/100 (2603 sites) Hungary: 39.2/100 (1276 sites) Ireland: 40.2/100 (1067 sites) Italy: 38.4/100 (14608 sites) Latvia: 40.1/100 (226 sites) Lithuania: 39.4/100 (473 sites) Luxembourg: 39.9/100 (122 sites) Netherlands: 41.6/100 (4635 sites) Norway: 42.5/100 (1366 sites) Poland: 37.6/100 (6342 sites) Portugal: 39.4/100 (1438 sites) Romania: 40.1/100 (1220 sites) Slovakia: 42.0/100 (1521 sites) Slovenia: 39.2/100 (520 sites) Spain: 38.9/100 (7106 sites) Sweden: 42.3/100 (1518 sites) Switzerland: 42.2/100 (2782 sites) United Kingdom: 38.9/100 (5989 sites)
Worse
Better

Score by Country

🇦🇹 Austria
40.8 7163 🇧🇪 Belgium
40.1 1730 🇧🇬 Bulgaria
39.6 786 🇭🇷 Croatia
40.2 1004 🇨🇾 Cyprus
40.3 198 🇨🇿 Czech Republic
41.5 3113 🇩🇰 Denmark
41.8 1230 🇪🇪 Estonia
42.4 349 🇫🇮 Finland
40.0 891 🇫🇷 France
37.8 13600 🇩🇪 Germany
39.5 25281 🇬🇷 Greece
39.3 2603 🇭🇺 Hungary
39.2 1276 🇮🇸 Iceland
42.7 292 🇮🇪 Ireland
40.2 1067 🇮🇹 Italy
38.4 14608 🇱🇻 Latvia
40.1 226 🇱🇮 Liechtenstein
39.6 13 🇱🇹 Lithuania
39.4 473 🇱🇺 Luxembourg
39.9 122 🇲🇹 Malta
39.7 126 🇳🇱 Netherlands
41.6 4635 🇳🇴 Norway
42.5 1366 🇵🇱 Poland
37.6 6342 🇵🇹 Portugal
39.4 1438 🇷🇴 Romania
40.1 1220 🇸🇰 Slovakia
42.0 1521 🇸🇮 Slovenia
39.2 520 🇪🇸 Spain
38.9 7106 🇸🇪 Sweden
42.3 1518 🇨🇭 Switzerland
42.2 2782 🇬🇧 United Kingdom
38.9 5989

Hosting & Data Residency

62%

EU-headquartered provider

38%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 9905 17.9%
IONOS (1&1) (DE) 8484 15.3%
OVHcloud (FR) 7205 13.0%
Hetzner (DE) 7161 12.9%
Amazon Web Services (US) 5972 10.8%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.