Skip to main content
All Industries

EU Industry Benchmark

Pharma

Anonymized security posture data for the pharma sector across the EU. Based on 13761 monitored sites.

41.4

Avg. Score /100

D

Avg. Grade

13761

Sites Tracked

+2.0

vs. EU Average

Critical findings in this industry

9607 of 13761 without HTTPS redirect

70.0%

13561 of 13761 with unencrypted email (no STARTTLS)

99.0%

13734 of 13761 without DMARC protection (spoofable)

100.0%

3773 of 13761 missing 3+ critical security headers

27.0%

12395 of 13761 without DNSSEC (vulnerable to DNS spoofing)

90.0%

13485 of 13761 without CAA records (unrestricted certificate issuance)

98.0%

13712 of 13761 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
7 (0.0%)
C
558 (4.0%)
D
7233 (53.0%)
F
5963 (43.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 40.8/100 (651 sites) Belgium: 40.4/100 (644 sites) Bulgaria: 40.2/100 (44 sites) Croatia: 41.7/100 (49 sites) Cyprus: 39.4/100 (8 sites) Czech Republic: 40.2/100 (172 sites) Denmark: 45.5/100 (96 sites) Estonia: 43.4/100 (10 sites) Finland: 41.4/100 (585 sites) France: 37.6/100 (1838 sites) Germany: 43.3/100 (6026 sites) Greece: 41.1/100 (42 sites) Hungary: 42.2/100 (81 sites) Ireland: 42.3/100 (123 sites) Italy: 37.4/100 (1001 sites) Latvia: 40.1/100 (23 sites) Lithuania: 44.3/100 (19 sites) Luxembourg: 43.9/100 (16 sites) Netherlands: 43.2/100 (428 sites) Norway: 52.1/100 (19 sites) Poland: 38.7/100 (217 sites) Portugal: 42.6/100 (75 sites) Romania: 42.5/100 (55 sites) Slovakia: 43.8/100 (82 sites) Slovenia: 44.3/100 (36 sites) Spain: 38.0/100 (511 sites) Sweden: 46.8/100 (38 sites) Switzerland: 44.8/100 (339 sites) United Kingdom: 40.0/100 (506 sites)
Worse
Better

Score by Country

🇦🇹 Austria
40.8 651 🇧🇪 Belgium
40.4 644 🇧🇬 Bulgaria
40.2 44 🇭🇷 Croatia
41.7 49 🇨🇾 Cyprus
39.4 8 🇨🇿 Czech Republic
40.2 172 🇩🇰 Denmark
45.5 96 🇪🇪 Estonia
43.4 10 🇪🇺 European Union
49.0 1 🇫🇮 Finland
41.4 585 🇫🇷 France
37.6 1838 🇩🇪 Germany
43.3 6026 🇬🇷 Greece
41.1 42 🇭🇺 Hungary
42.2 81 🇮🇸 Iceland
48.6 9 🇮🇪 Ireland
42.3 123 🇮🇹 Italy
37.4 1001 🇱🇻 Latvia
40.1 23 🇱🇮 Liechtenstein
50.2 4 🇱🇹 Lithuania
44.3 19 🇱🇺 Luxembourg
43.9 16 🇲🇹 Malta
42.0 13 🇳🇱 Netherlands
43.2 428 🇳🇴 Norway
52.1 19 🇵🇱 Poland
38.7 217 🇵🇹 Portugal
42.6 75 🇷🇴 Romania
42.5 55 🇸🇰 Slovakia
43.8 82 🇸🇮 Slovenia
44.3 36 🇪🇸 Spain
38.0 511 🇸🇪 Sweden
46.8 38 🇨🇭 Switzerland
44.8 339 🇬🇧 United Kingdom
40.0 506

Hosting & Data Residency

52%

EU-headquartered provider

48%

Non-EU provider (CLOUD Act / Schrems II)

Amazon Web Services (US) 2016 27.6%
Cloudflare (US) 844 11.6%
Hetzner (DE) 806 11.1%
OVHcloud (FR) 801 11.0%
IONOS (1&1) (DE) 763 10.5%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.