Skip to main content
All Industries

EU Industry Benchmark

Real Estate

Anonymized security posture data for the real estate sector across the EU. Based on 12001 monitored sites.

38.5

Avg. Score /100

F

Avg. Grade

12001

Sites Tracked

-1.0

vs. EU Average

Critical findings in this industry

9205 of 12001 without HTTPS redirect

77.0%

11652 of 12001 with unencrypted email (no STARTTLS)

97.0%

11984 of 12001 without DMARC protection (spoofable)

100.0%

2959 of 12001 missing 3+ critical security headers

25.0%

10557 of 12001 without DNSSEC (vulnerable to DNS spoofing)

88.0%

11670 of 12001 without CAA records (unrestricted certificate issuance)

97.0%

11931 of 12001 without MTA-STS (email downgrade attacks possible)

99.0%

Grade Distribution

A
0 (0.0%)
B
3 (0.0%)
C
200 (2.0%)
D
4721 (39.0%)
F
7077 (59.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 42.9/100 (163 sites) Belgium: 41.3/100 (353 sites) Bulgaria: 40.8/100 (48 sites) Croatia: 41.7/100 (25 sites) Cyprus: 39.0/100 (50 sites) Czech Republic: 42.6/100 (94 sites) Denmark: 46.7/100 (48 sites) Estonia: 44.4/100 (24 sites) Finland: 44.0/100 (129 sites) France: 36.1/100 (3812 sites) Germany: 39.7/100 (1818 sites) Greece: 40.9/100 (36 sites) Hungary: 40.2/100 (48 sites) Ireland: 41.2/100 (176 sites) Italy: 37.4/100 (744 sites) Latvia: 40.2/100 (18 sites) Lithuania: 41.6/100 (15 sites) Luxembourg: 43.4/100 (36 sites) Netherlands: 39.9/100 (663 sites) Norway: 50.4/100 (28 sites) Poland: 38.6/100 (415 sites) Portugal: 39.2/100 (168 sites) Romania: 43.0/100 (46 sites) Slovakia: 41.6/100 (138 sites) Slovenia: 40.5/100 (24 sites) Spain: 38.2/100 (623 sites) Sweden: 43.7/100 (84 sites) Switzerland: 45.4/100 (189 sites) United Kingdom: 38.7/100 (1955 sites)
Worse
Better

Score by Country

🇦🇹 Austria
42.9 163 🇧🇪 Belgium
41.3 353 🇧🇬 Bulgaria
40.8 48 🇭🇷 Croatia
41.7 25 🇨🇾 Cyprus
39.0 50 🇨🇿 Czech Republic
42.6 94 🇩🇰 Denmark
46.7 48 🇪🇪 Estonia
44.4 24 🇫🇮 Finland
44.0 129 🇫🇷 France
36.1 3812 🇩🇪 Germany
39.7 1818 🇬🇷 Greece
40.9 36 🇭🇺 Hungary
40.2 48 🇮🇸 Iceland
38.1 11 🇮🇪 Ireland
41.2 176 🇮🇹 Italy
37.4 744 🇱🇻 Latvia
40.2 18 🇱🇮 Liechtenstein
37.8 6 🇱🇹 Lithuania
41.6 15 🇱🇺 Luxembourg
43.4 36 🇲🇹 Malta
37.0 14 🇳🇱 Netherlands
39.9 663 🇳🇴 Norway
50.4 28 🇵🇱 Poland
38.6 415 🇵🇹 Portugal
39.2 168 🇷🇴 Romania
43.0 46 🇸🇰 Slovakia
41.6 138 🇸🇮 Slovenia
40.5 24 🇪🇸 Spain
38.2 623 🇸🇪 Sweden
43.7 84 🇨🇭 Switzerland
45.4 189 🇬🇧 United Kingdom
38.7 1955

Hosting & Data Residency

58%

EU-headquartered provider

42%

Non-EU provider (CLOUD Act / Schrems II)

OVHcloud (FR) 1707 26.1%
Cloudflare (US) 1151 17.6%
Amazon Web Services (US) 1129 17.2%
IONOS (1&1) (DE) 720 11.0%
Hetzner (DE) 546 8.3%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.