Skip to main content
All Industries

EU Industry Benchmark

Real Estate

Anonymized security posture data for the real estate sector across the EU. Based on 11979 monitored sites.

38.5

Avg. Score /100

F

Avg. Grade

11979

Sites Tracked

-2.0

vs. EU Average

Critical findings in this industry

10388 of 11979 without HTTPS redirect

87.0%

11618 of 11979 with unencrypted email (no STARTTLS)

97.0%

11959 of 11979 without DMARC protection (spoofable)

100.0%

4274 of 11979 missing 3+ critical security headers

36.0%

10548 of 11979 without DNSSEC (vulnerable to DNS spoofing)

88.0%

11648 of 11979 without CAA records (unrestricted certificate issuance)

97.0%

11916 of 11979 without MTA-STS (email downgrade attacks possible)

99.0%

Grade Distribution

A
0 (0.0%)
B
2 (0.0%)
C
163 (1.0%)
D
4755 (40.0%)
F
7059 (59.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 40.8/100 (163 sites) Belgium: 43.0/100 (354 sites) Bulgaria: 38.5/100 (48 sites) Croatia: 39.4/100 (25 sites) Cyprus: 37.5/100 (49 sites) Czech Republic: 39.7/100 (94 sites) Denmark: 45.0/100 (47 sites) Estonia: 39.0/100 (24 sites) Finland: 43.0/100 (129 sites) France: 36.6/100 (3800 sites) Germany: 40.1/100 (1812 sites) Greece: 38.6/100 (36 sites) Hungary: 38.8/100 (48 sites) Ireland: 40.1/100 (176 sites) Italy: 37.3/100 (746 sites) Latvia: 39.1/100 (18 sites) Lithuania: 40.3/100 (15 sites) Luxembourg: 37.1/100 (35 sites) Netherlands: 39.6/100 (662 sites) Norway: 40.7/100 (28 sites) Poland: 38.5/100 (416 sites) Portugal: 38.5/100 (169 sites) Romania: 36.9/100 (46 sites) Slovakia: 38.8/100 (138 sites) Slovenia: 39.5/100 (24 sites) Spain: 38.5/100 (619 sites) Sweden: 42.8/100 (84 sites) Switzerland: 43.9/100 (189 sites) United Kingdom: 38.1/100 (1954 sites)
Worse
Better

Score by Country

🇦🇹 Austria
40.8 163 🇧🇪 Belgium
43.0 354 🇧🇬 Bulgaria
38.5 48 🇭🇷 Croatia
39.4 25 🇨🇾 Cyprus
37.5 49 🇨🇿 Czech Republic
39.7 94 🇩🇰 Denmark
45.0 47 🇪🇪 Estonia
39.0 24 🇫🇮 Finland
43.0 129 🇫🇷 France
36.6 3800 🇩🇪 Germany
40.1 1812 🇬🇷 Greece
38.6 36 🇭🇺 Hungary
38.8 48 🇮🇸 Iceland
38.2 11 🇮🇪 Ireland
40.1 176 🇮🇹 Italy
37.3 746 🇱🇻 Latvia
39.1 18 🇱🇮 Liechtenstein
41.5 6 🇱🇹 Lithuania
40.3 15 🇱🇺 Luxembourg
37.1 35 🇲🇹 Malta
35.2 14 🇳🇱 Netherlands
39.6 662 🇳🇴 Norway
40.7 28 🇵🇱 Poland
38.5 416 🇵🇹 Portugal
38.5 169 🇷🇴 Romania
36.9 46 🇸🇰 Slovakia
38.8 138 🇸🇮 Slovenia
39.5 24 🇪🇸 Spain
38.5 619 🇸🇪 Sweden
42.8 84 🇨🇭 Switzerland
43.9 189 🇬🇧 United Kingdom
38.1 1954

Hosting & Data Residency

58%

EU-headquartered provider

42%

Non-EU provider (CLOUD Act / Schrems II)

OVHcloud (FR) 1706 26.1%
Cloudflare (US) 1138 17.4%
Amazon Web Services (US) 1130 17.3%
IONOS (1&1) (DE) 718 11.0%
Hetzner (DE) 546 8.4%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.