Skip to main content
All Industries

EU Industry Benchmark

Pharma

Anonymized security posture data for the pharma sector across the EU. Based on 13715 monitored sites.

40.8

Avg. Score /100

D

Avg. Grade

13715

Sites Tracked

0.0

vs. EU Average

Critical findings in this industry

11179 of 13715 without HTTPS redirect

82.0%

13517 of 13715 with unencrypted email (no STARTTLS)

99.0%

13696 of 13715 without DMARC protection (spoofable)

100.0%

5112 of 13715 missing 3+ critical security headers

37.0%

12357 of 13715 without DNSSEC (vulnerable to DNS spoofing)

90.0%

13444 of 13715 without CAA records (unrestricted certificate issuance)

98.0%

13666 of 13715 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
3 (0.0%)
C
283 (2.0%)
D
7515 (55.0%)
F
5914 (43.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 41.4/100 (651 sites) Belgium: 46.6/100 (641 sites) Bulgaria: 39.2/100 (44 sites) Croatia: 37.3/100 (49 sites) Cyprus: 37.9/100 (8 sites) Czech Republic: 39.4/100 (171 sites) Denmark: 40.0/100 (92 sites) Estonia: 42.0/100 (10 sites) Finland: 43.4/100 (584 sites) France: 39.4/100 (1828 sites) Germany: 41.4/100 (6010 sites) Greece: 38.4/100 (42 sites) Hungary: 37.9/100 (81 sites) Ireland: 39.0/100 (123 sites) Italy: 37.3/100 (1002 sites) Latvia: 41.0/100 (23 sites) Lithuania: 40.9/100 (19 sites) Luxembourg: 39.0/100 (16 sites) Netherlands: 41.5/100 (426 sites) Norway: 39.5/100 (19 sites) Poland: 37.4/100 (217 sites) Portugal: 38.6/100 (75 sites) Romania: 38.6/100 (54 sites) Slovakia: 38.8/100 (82 sites) Slovenia: 38.1/100 (36 sites) Spain: 38.4/100 (504 sites) Sweden: 41.2/100 (38 sites) Switzerland: 44.5/100 (338 sites) United Kingdom: 39.3/100 (505 sites)
Worse
Better

Score by Country

🇦🇹 Austria
41.4 651 🇧🇪 Belgium
46.6 641 🇧🇬 Bulgaria
39.2 44 🇭🇷 Croatia
37.3 49 🇨🇾 Cyprus
37.9 8 🇨🇿 Czech Republic
39.4 171 🇩🇰 Denmark
40.0 92 🇪🇪 Estonia
42.0 10 🇪🇺 European Union
42.0 1 🇫🇮 Finland
43.4 584 🇫🇷 France
39.4 1828 🇩🇪 Germany
41.4 6010 🇬🇷 Greece
38.4 42 🇭🇺 Hungary
37.9 81 🇮🇸 Iceland
39.2 9 🇮🇪 Ireland
39.0 123 🇮🇹 Italy
37.3 1002 🇱🇻 Latvia
41.0 23 🇱🇮 Liechtenstein
39.0 4 🇱🇹 Lithuania
40.9 19 🇱🇺 Luxembourg
39.0 16 🇲🇹 Malta
37.5 13 🇳🇱 Netherlands
41.5 426 🇳🇴 Norway
39.5 19 🇵🇱 Poland
37.4 217 🇵🇹 Portugal
38.6 75 🇷🇴 Romania
38.6 54 🇸🇰 Slovakia
38.8 82 🇸🇮 Slovenia
38.1 36 🇪🇸 Spain
38.4 504 🇸🇪 Sweden
41.2 38 🇨🇭 Switzerland
44.5 338 🇬🇧 United Kingdom
39.3 505

Hosting & Data Residency

52%

EU-headquartered provider

48%

Non-EU provider (CLOUD Act / Schrems II)

Amazon Web Services (US) 2012 27.6%
Cloudflare (US) 841 11.5%
Hetzner (DE) 807 11.1%
OVHcloud (FR) 802 11.0%
IONOS (1&1) (DE) 763 10.5%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.