Skip to main content
All Industries

EU Industry Benchmark

Media

Anonymized security posture data for the media sector across the EU. Based on 4112 monitored sites.

40.6

Avg. Score /100

D

Avg. Grade

4112

Sites Tracked

0.0

vs. EU Average

Critical findings in this industry

3366 of 4112 without HTTPS redirect

82.0%

4008 of 4112 with unencrypted email (no STARTTLS)

97.0%

4099 of 4112 without DMARC protection (spoofable)

100.0%

1421 of 4112 missing 3+ critical security headers

35.0%

3584 of 4112 without DNSSEC (vulnerable to DNS spoofing)

87.0%

3675 of 4112 without CAA records (unrestricted certificate issuance)

89.0%

4040 of 4112 without MTA-STS (email downgrade attacks possible)

98.0%

Grade Distribution

A
0 (0.0%)
B
5 (0.0%)
C
105 (3.0%)
D
2029 (49.0%)
F
1973 (48.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 42.3/100 (86 sites) Belgium: 44.4/100 (81 sites) Bulgaria: 42.3/100 (52 sites) Croatia: 40.0/100 (57 sites) Cyprus: 40.6/100 (18 sites) Czech Republic: 42.4/100 (94 sites) Denmark: 45.1/100 (54 sites) Estonia: 38.6/100 (27 sites) Finland: 43.0/100 (112 sites) France: 38.7/100 (389 sites) Germany: 40.2/100 (882 sites) Greece: 38.6/100 (126 sites) Hungary: 40.1/100 (81 sites) Ireland: 42.6/100 (58 sites) Italy: 39.0/100 (350 sites) Latvia: 41.8/100 (32 sites) Lithuania: 40.7/100 (40 sites) Luxembourg: 34.7/100 (14 sites) Netherlands: 41.9/100 (168 sites) Norway: 45.1/100 (64 sites) Poland: 39.6/100 (294 sites) Portugal: 42.7/100 (51 sites) Romania: 40.1/100 (83 sites) Slovakia: 40.4/100 (59 sites) Slovenia: 38.8/100 (41 sites) Spain: 39.3/100 (225 sites) Sweden: 46.1/100 (79 sites) Switzerland: 43.9/100 (96 sites) United Kingdom: 41.3/100 (357 sites)
Worse
Better

Score by Country

🇦🇹 Austria
42.3 86 🇧🇪 Belgium
44.4 81 🇧🇬 Bulgaria
42.3 52 🇭🇷 Croatia
40.0 57 🇨🇾 Cyprus
40.6 18 🇨🇿 Czech Republic
42.4 94 🇩🇰 Denmark
45.1 54 🇪🇪 Estonia
38.6 27 🇪🇺 European Union
38.0 16 🇫🇮 Finland
43.0 112 🇫🇷 France
38.7 389 🇩🇪 Germany
40.2 882 🇬🇷 Greece
38.6 126 🇭🇺 Hungary
40.1 81 🇮🇸 Iceland
39.6 8 🇮🇪 Ireland
42.6 58 🇮🇹 Italy
39.0 350 🇱🇻 Latvia
41.8 32 🇱🇮 Liechtenstein
37.8 5 🇱🇹 Lithuania
40.7 40 🇱🇺 Luxembourg
34.7 14 🇲🇹 Malta
42.6 13 🇳🇱 Netherlands
41.9 168 🇳🇴 Norway
45.1 64 🇵🇱 Poland
39.6 294 🇵🇹 Portugal
42.7 51 🇷🇴 Romania
40.1 83 🇸🇰 Slovakia
40.4 59 🇸🇮 Slovenia
38.8 41 🇪🇸 Spain
39.3 225 🇸🇪 Sweden
46.1 79 🇨🇭 Switzerland
43.9 96 🇬🇧 United Kingdom
41.3 357

Hosting & Data Residency

33%

EU-headquartered provider

67%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 909 37.5%
Amazon Web Services (US) 534 22.0%
Hetzner (DE) 242 10.0%
OVHcloud (FR) 177 7.3%
Google Cloud (US) 155 6.4%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.