Skip to main content
All Industries

EU Industry Benchmark

Real Estate

Anonymized security posture data for the real estate sector across the EU. Based on 12005 monitored sites.

38.0

Avg. Score /100

F

Avg. Grade

12005

Sites Tracked

-2.0

vs. EU Average

Critical findings in this industry

9823 of 12005 without HTTPS redirect

82.0%

11655 of 12005 with unencrypted email (no STARTTLS)

97.0%

11988 of 12005 without DMARC protection (spoofable)

100.0%

2462 of 12005 missing 3+ critical security headers

21.0%

10572 of 12005 without DNSSEC (vulnerable to DNS spoofing)

88.0%

11674 of 12005 without CAA records (unrestricted certificate issuance)

97.0%

11936 of 12005 without MTA-STS (email downgrade attacks possible)

99.0%

Grade Distribution

A
0 (0.0%)
B
3 (0.0%)
C
166 (1.0%)
D
4420 (37.0%)
F
7416 (62.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 40.7/100 (163 sites) Belgium: 40.0/100 (353 sites) Bulgaria: 37.8/100 (48 sites) Croatia: 37.6/100 (25 sites) Cyprus: 38.0/100 (49 sites) Czech Republic: 39.9/100 (94 sites) Denmark: 41.7/100 (47 sites) Estonia: 40.0/100 (24 sites) Finland: 41.2/100 (129 sites) France: 36.3/100 (3812 sites) Germany: 39.4/100 (1819 sites) Greece: 38.4/100 (36 sites) Hungary: 39.3/100 (48 sites) Ireland: 38.9/100 (176 sites) Italy: 37.1/100 (747 sites) Latvia: 39.6/100 (18 sites) Lithuania: 37.8/100 (15 sites) Luxembourg: 38.8/100 (36 sites) Netherlands: 40.2/100 (663 sites) Norway: 42.6/100 (28 sites) Poland: 38.2/100 (417 sites) Portugal: 37.9/100 (168 sites) Romania: 38.8/100 (46 sites) Slovakia: 40.4/100 (138 sites) Slovenia: 38.4/100 (24 sites) Spain: 38.4/100 (623 sites) Sweden: 42.8/100 (84 sites) Switzerland: 41.7/100 (189 sites) United Kingdom: 37.5/100 (1955 sites)
Worse
Better

Score by Country

🇦🇹 Austria
40.7 163 🇧🇪 Belgium
40.0 353 🇧🇬 Bulgaria
37.8 48 🇭🇷 Croatia
37.6 25 🇨🇾 Cyprus
38.0 49 🇨🇿 Czech Republic
39.9 94 🇩🇰 Denmark
41.7 47 🇪🇪 Estonia
40.0 24 🇫🇮 Finland
41.2 129 🇫🇷 France
36.3 3812 🇩🇪 Germany
39.4 1819 🇬🇷 Greece
38.4 36 🇭🇺 Hungary
39.3 48 🇮🇸 Iceland
41.7 11 🇮🇪 Ireland
38.9 176 🇮🇹 Italy
37.1 747 🇱🇻 Latvia
39.6 18 🇱🇮 Liechtenstein
44.8 6 🇱🇹 Lithuania
37.8 15 🇱🇺 Luxembourg
38.8 36 🇲🇹 Malta
35.8 14 🇳🇱 Netherlands
40.2 663 🇳🇴 Norway
42.6 28 🇵🇱 Poland
38.2 417 🇵🇹 Portugal
37.9 168 🇷🇴 Romania
38.8 46 🇸🇰 Slovakia
40.4 138 🇸🇮 Slovenia
38.4 24 🇪🇸 Spain
38.4 623 🇸🇪 Sweden
42.8 84 🇨🇭 Switzerland
41.7 189 🇬🇧 United Kingdom
37.5 1955

Hosting & Data Residency

58%

EU-headquartered provider

42%

Non-EU provider (CLOUD Act / Schrems II)

OVHcloud (FR) 1707 26.1%
Cloudflare (US) 1149 17.6%
Amazon Web Services (US) 1129 17.3%
IONOS (1&1) (DE) 719 11.0%
Hetzner (DE) 546 8.3%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.