Skip to main content
All Industries

EU Industry Benchmark

Pharma

Anonymized security posture data for the pharma sector across the EU. Based on 13787 monitored sites.

46.1

Avg. Score /100

D

Avg. Grade

13787

Sites Tracked

+2.0

vs. EU Average

Critical findings in this industry

9945 of 13787 without HTTPS redirect

72.0%

9257 of 13787 with unencrypted email (no STARTTLS)

67.0%

11349 of 13787 without DMARC protection (spoofable)

82.0%

3430 of 13787 missing 3+ critical security headers

25.0%

12402 of 13787 without DNSSEC (vulnerable to DNS spoofing)

90.0%

13517 of 13787 without CAA records (unrestricted certificate issuance)

98.0%

13734 of 13787 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
197 (1.0%)
C
959 (7.0%)
D
9210 (67.0%)
F
3421 (25.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 41.3/100 (655 sites) Belgium: 41.9/100 (644 sites) Bulgaria: 44.8/100 (44 sites) Croatia: 43.3/100 (49 sites) Cyprus: 40.2/100 (8 sites) Czech Republic: 41.6/100 (174 sites) Denmark: 41.8/100 (97 sites) Estonia: 46.7/100 (10 sites) Finland: 41.7/100 (586 sites) France: 43.3/100 (1832 sites) Germany: 50.6/100 (6041 sites) Greece: 43.1/100 (42 sites) Hungary: 43.0/100 (81 sites) Ireland: 43.6/100 (123 sites) Italy: 41.3/100 (994 sites) Latvia: 45.6/100 (23 sites) Lithuania: 46.5/100 (19 sites) Luxembourg: 48.7/100 (16 sites) Netherlands: 43.8/100 (429 sites) Norway: 50.6/100 (19 sites) Poland: 41.2/100 (218 sites) Portugal: 45.6/100 (75 sites) Romania: 45.8/100 (55 sites) Slovakia: 44.4/100 (83 sites) Slovenia: 46.4/100 (36 sites) Spain: 39.0/100 (522 sites) Sweden: 48.5/100 (40 sites) Switzerland: 45.4/100 (339 sites) United Kingdom: 45.2/100 (506 sites)
Worse
Better

Score by Country

🇦🇹 Austria
41.3 655 🇧🇪 Belgium
41.9 644 🇧🇬 Bulgaria
44.8 44 🇭🇷 Croatia
43.3 49 🇨🇾 Cyprus
40.2 8 🇨🇿 Czech Republic
41.6 174 🇩🇰 Denmark
41.8 97 🇪🇪 Estonia
46.7 10 🇪🇺 European Union
49.0 1 🇫🇮 Finland
41.7 586 🇫🇷 France
43.3 1832 🇩🇪 Germany
50.6 6041 🇬🇷 Greece
43.1 42 🇭🇺 Hungary
43.0 81 🇮🇸 Iceland
54.0 9 🇮🇪 Ireland
43.6 123 🇮🇹 Italy
41.3 994 🇱🇻 Latvia
45.6 23 🇱🇮 Liechtenstein
54.5 4 🇱🇹 Lithuania
46.5 19 🇱🇺 Luxembourg
48.7 16 🇲🇹 Malta
46.6 13 🇳🇱 Netherlands
43.8 429 🇳🇴 Norway
50.6 19 🇵🇱 Poland
41.2 218 🇵🇹 Portugal
45.6 75 🇷🇴 Romania
45.8 55 🇸🇰 Slovakia
44.4 83 🇸🇮 Slovenia
46.4 36 🇪🇸 Spain
39.0 522 🇸🇪 Sweden
48.5 40 🇨🇭 Switzerland
45.4 339 🇬🇧 United Kingdom
45.2 506

Hosting & Data Residency

52%

EU-headquartered provider

48%

Non-EU provider (CLOUD Act / Schrems II)

Amazon Web Services (US) 2020 27.7%
Cloudflare (US) 857 11.7%
Hetzner (DE) 805 11.0%
OVHcloud (FR) 795 10.9%
IONOS (1&1) (DE) 758 10.4%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.