EU Industry Benchmark
Sports
Anonymized security posture data for the sports sector across the EU. Based on 394 monitored sites.
41.5
Avg. Score /100
D
Avg. Grade
394
Sites Tracked
-12.0
vs. EU Average
Critical findings in this industry
47 of 394 without HTTPS redirect
12 of 394 with unencrypted email (no STARTTLS)
72 of 394 without DMARC protection (spoofable)
311 of 394 missing 3+ critical security headers
90 of 394 without DNSSEC (vulnerable to DNS spoofing)
106 of 394 without CAA records (unrestricted certificate issuance)
106 of 394 without MTA-STS (email downgrade attacks possible)
Grade Distribution
Score by Country
Hosting & Data Residency
27%
EU-headquartered provider
73%
Non-EU provider (CLOUD Act / Schrems II)
Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49
All data is anonymized. No individual sites are identified. Statistics updated weekly.