Skip to main content
All Industries

EU Industry Benchmark

Media

Anonymized security posture data for the media sector across the EU. Based on 4114 monitored sites.

43.4

Avg. Score /100

D

Avg. Grade

4114

Sites Tracked

+4.0

vs. EU Average

Critical findings in this industry

2020 of 4114 without HTTPS redirect

49.0%

4006 of 4114 with unencrypted email (no STARTTLS)

97.0%

4104 of 4114 without DMARC protection (spoofable)

100.0%

1820 of 4114 missing 3+ critical security headers

44.0%

3583 of 4114 without DNSSEC (vulnerable to DNS spoofing)

87.0%

3680 of 4114 without CAA records (unrestricted certificate issuance)

89.0%

4039 of 4114 without MTA-STS (email downgrade attacks possible)

98.0%

Grade Distribution

A
0 (0.0%)
B
9 (0.0%)
C
277 (7.0%)
D
2206 (54.0%)
F
1622 (39.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Hosting & Data Residency

33%

EU-headquartered provider

67%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 913 37.5%
Amazon Web Services (US) 534 21.9%
Hetzner (DE) 242 9.9%
OVHcloud (FR) 177 7.3%
Google Cloud (US) 156 6.4%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.