Skip to main content
All Industries

EU Industry Benchmark

Real Estate

Anonymized security posture data for the real estate sector across the EU. Based on 12031 monitored sites.

44.1

Avg. Score /100

D

Avg. Grade

12031

Sites Tracked

0.0

vs. EU Average

Critical findings in this industry

8170 of 12031 without HTTPS redirect

68.0%

9603 of 12031 with unencrypted email (no STARTTLS)

80.0%

10772 of 12031 without DMARC protection (spoofable)

90.0%

3782 of 12031 missing 3+ critical security headers

31.0%

10561 of 12031 without DNSSEC (vulnerable to DNS spoofing)

88.0%

11699 of 12031 without CAA records (unrestricted certificate issuance)

97.0%

11955 of 12031 without MTA-STS (email downgrade attacks possible)

99.0%

Grade Distribution

A
0 (0.0%)
B
43 (0.0%)
C
747 (6.0%)
D
7330 (61.0%)
F
3911 (33.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 46.1/100 (162 sites) Belgium: 42.8/100 (356 sites) Bulgaria: 43.0/100 (48 sites) Croatia: 45.8/100 (26 sites) Cyprus: 42.3/100 (51 sites) Czech Republic: 44.6/100 (94 sites) Denmark: 48.2/100 (48 sites) Estonia: 47.0/100 (24 sites) Finland: 45.5/100 (130 sites) France: 42.2/100 (3823 sites) Germany: 50.0/100 (1815 sites) Greece: 43.2/100 (36 sites) Hungary: 43.5/100 (48 sites) Ireland: 41.8/100 (176 sites) Italy: 39.3/100 (741 sites) Latvia: 42.6/100 (18 sites) Lithuania: 45.0/100 (15 sites) Luxembourg: 43.7/100 (36 sites) Netherlands: 41.3/100 (667 sites) Norway: 54.1/100 (28 sites) Poland: 40.3/100 (416 sites) Portugal: 40.1/100 (168 sites) Romania: 43.1/100 (46 sites) Slovakia: 43.5/100 (139 sites) Slovenia: 40.9/100 (24 sites) Spain: 39.4/100 (627 sites) Sweden: 46.8/100 (84 sites) Switzerland: 46.8/100 (189 sites) United Kingdom: 47.4/100 (1965 sites)
Worse
Better

Score by Country

🇦🇹 Austria
46.1 162 🇧🇪 Belgium
42.8 356 🇧🇬 Bulgaria
43.0 48 🇭🇷 Croatia
45.8 26 🇨🇾 Cyprus
42.3 51 🇨🇿 Czech Republic
44.6 94 🇩🇰 Denmark
48.2 48 🇪🇪 Estonia
47.0 24 🇫🇮 Finland
45.5 130 🇫🇷 France
42.2 3823 🇩🇪 Germany
50.0 1815 🇬🇷 Greece
43.2 36 🇭🇺 Hungary
43.5 48 🇮🇸 Iceland
45.5 11 🇮🇪 Ireland
41.8 176 🇮🇹 Italy
39.3 741 🇱🇻 Latvia
42.6 18 🇱🇮 Liechtenstein
43.5 6 🇱🇹 Lithuania
45.0 15 🇱🇺 Luxembourg
43.7 36 🇲🇹 Malta
41.5 14 🇳🇱 Netherlands
41.3 667 🇳🇴 Norway
54.1 28 🇵🇱 Poland
40.3 416 🇵🇹 Portugal
40.1 168 🇷🇴 Romania
43.1 46 🇸🇰 Slovakia
43.5 139 🇸🇮 Slovenia
40.9 24 🇪🇸 Spain
39.4 627 🇸🇪 Sweden
46.8 84 🇨🇭 Switzerland
46.8 189 🇬🇧 United Kingdom
47.4 1965

Hosting & Data Residency

58%

EU-headquartered provider

42%

Non-EU provider (CLOUD Act / Schrems II)

OVHcloud (FR) 1707 25.9%
Cloudflare (US) 1180 17.9%
Amazon Web Services (US) 1130 17.2%
IONOS (1&1) (DE) 722 11.0%
Hetzner (DE) 546 8.3%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.