EU Industry Benchmark
Regulatory
Anonymized security posture data for the regulatory sector across the EU. Based on 90 monitored sites.
63.5
Avg. Score /100
C
Avg. Grade
90
Sites Tracked
+6.0
vs. EU Average
Critical findings in this industry
12 of 90 without HTTPS redirect
5 of 90 with unencrypted email (no STARTTLS)
25 of 90 without DMARC protection (spoofable)
46 of 90 missing 3+ critical security headers
53 of 90 without DNSSEC (vulnerable to DNS spoofing)
67 of 90 without CAA records (unrestricted certificate issuance)
83 of 90 without MTA-STS (email downgrade attacks possible)
Grade Distribution
All data is anonymized. No individual sites are identified. Statistics updated weekly.