Skip to main content
All Industries

EU Industry Benchmark

Pharma

Anonymized security posture data for the pharma sector across the EU. Based on 13766 monitored sites.

41.1

Avg. Score /100

D

Avg. Grade

13766

Sites Tracked

+1.0

vs. EU Average

Critical findings in this industry

9622 of 13766 without HTTPS redirect

70.0%

13566 of 13766 with unencrypted email (no STARTTLS)

99.0%

13739 of 13766 without DMARC protection (spoofable)

100.0%

3910 of 13766 missing 3+ critical security headers

28.0%

12399 of 13766 without DNSSEC (vulnerable to DNS spoofing)

90.0%

13493 of 13766 without CAA records (unrestricted certificate issuance)

98.0%

13717 of 13766 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
7 (0.0%)
C
505 (4.0%)
D
7124 (52.0%)
F
6130 (45.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 40.3/100 (652 sites) Belgium: 40.8/100 (644 sites) Bulgaria: 39.1/100 (44 sites) Croatia: 37.3/100 (49 sites) Cyprus: 38.9/100 (8 sites) Czech Republic: 40.2/100 (172 sites) Denmark: 39.9/100 (96 sites) Estonia: 44.8/100 (10 sites) Finland: 40.6/100 (585 sites) France: 38.5/100 (1838 sites) Germany: 43.0/100 (6028 sites) Greece: 38.2/100 (42 sites) Hungary: 38.1/100 (81 sites) Ireland: 37.9/100 (123 sites) Italy: 37.8/100 (1002 sites) Latvia: 41.0/100 (23 sites) Lithuania: 42.9/100 (19 sites) Luxembourg: 41.2/100 (16 sites) Netherlands: 44.2/100 (428 sites) Norway: 43.4/100 (19 sites) Poland: 38.2/100 (217 sites) Portugal: 39.8/100 (75 sites) Romania: 38.4/100 (55 sites) Slovakia: 40.5/100 (82 sites) Slovenia: 41.6/100 (36 sites) Spain: 38.2/100 (512 sites) Sweden: 42.7/100 (38 sites) Switzerland: 42.9/100 (339 sites) United Kingdom: 39.8/100 (506 sites)
Worse
Better

Score by Country

🇦🇹 Austria
40.3 652 🇧🇪 Belgium
40.8 644 🇧🇬 Bulgaria
39.1 44 🇭🇷 Croatia
37.3 49 🇨🇾 Cyprus
38.9 8 🇨🇿 Czech Republic
40.2 172 🇩🇰 Denmark
39.9 96 🇪🇪 Estonia
44.8 10 🇪🇺 European Union
49.0 1 🇫🇮 Finland
40.6 585 🇫🇷 France
38.5 1838 🇩🇪 Germany
43.0 6028 🇬🇷 Greece
38.2 42 🇭🇺 Hungary
38.1 81 🇮🇸 Iceland
43.4 9 🇮🇪 Ireland
37.9 123 🇮🇹 Italy
37.8 1002 🇱🇻 Latvia
41.0 23 🇱🇮 Liechtenstein
44.0 4 🇱🇹 Lithuania
42.9 19 🇱🇺 Luxembourg
41.2 16 🇲🇹 Malta
38.7 13 🇳🇱 Netherlands
44.2 428 🇳🇴 Norway
43.4 19 🇵🇱 Poland
38.2 217 🇵🇹 Portugal
39.8 75 🇷🇴 Romania
38.4 55 🇸🇰 Slovakia
40.5 82 🇸🇮 Slovenia
41.6 36 🇪🇸 Spain
38.2 512 🇸🇪 Sweden
42.7 38 🇨🇭 Switzerland
42.9 339 🇬🇧 United Kingdom
39.8 506

Hosting & Data Residency

52%

EU-headquartered provider

48%

Non-EU provider (CLOUD Act / Schrems II)

Amazon Web Services (US) 2016 27.6%
Cloudflare (US) 844 11.6%
Hetzner (DE) 806 11.1%
OVHcloud (FR) 801 11.0%
IONOS (1&1) (DE) 763 10.5%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.