Skip to main content
All Industries

EU Industry Benchmark

Technology

Anonymized security posture data for the technology sector across the EU. Based on 17820 monitored sites.

41.6

Avg. Score /100

D

Avg. Grade

17820

Sites Tracked

+1.0

vs. EU Average

Critical findings in this industry

14231 of 17820 without HTTPS redirect

80.0%

17448 of 17820 with unencrypted email (no STARTTLS)

98.0%

17776 of 17820 without DMARC protection (spoofable)

100.0%

7420 of 17820 missing 3+ critical security headers

42.0%

14618 of 17820 without DNSSEC (vulnerable to DNS spoofing)

82.0%

16320 of 17820 without CAA records (unrestricted certificate issuance)

92.0%

17422 of 17820 without MTA-STS (email downgrade attacks possible)

98.0%

Grade Distribution

A
0 (0.0%)
B
12 (0.0%)
C
682 (4.0%)
D
9700 (54.0%)
F
7426 (42.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 43.3/100 (733 sites) Belgium: 44.6/100 (482 sites) Bulgaria: 41.7/100 (185 sites) Croatia: 39.9/100 (164 sites) Cyprus: 42.1/100 (77 sites) Czech Republic: 42.9/100 (353 sites) Denmark: 46.5/100 (237 sites) Estonia: 44.1/100 (127 sites) Finland: 45.4/100 (242 sites) France: 38.9/100 (1577 sites) Germany: 40.8/100 (5219 sites) Greece: 41.2/100 (295 sites) Hungary: 39.9/100 (315 sites) Ireland: 45.4/100 (213 sites) Italy: 38.8/100 (1015 sites) Latvia: 42.0/100 (96 sites) Lithuania: 41.3/100 (132 sites) Luxembourg: 41.8/100 (58 sites) Netherlands: 43.2/100 (1172 sites) Norway: 47.4/100 (196 sites) Poland: 40.5/100 (1112 sites) Portugal: 43.2/100 (240 sites) Romania: 40.9/100 (266 sites) Slovakia: 40.4/100 (343 sites) Slovenia: 40.8/100 (125 sites) Spain: 40.3/100 (761 sites) Sweden: 46.7/100 (183 sites) Switzerland: 47.6/100 (680 sites) United Kingdom: 40.9/100 (1016 sites)
Worse
Better

Score by Country

🇦🇹 Austria
43.3 733 🇧🇪 Belgium
44.6 482 🇧🇬 Bulgaria
41.7 185 🇭🇷 Croatia
39.9 164 🇨🇾 Cyprus
42.1 77 🇨🇿 Czech Republic
42.9 353 🇩🇰 Denmark
46.5 237 🇪🇪 Estonia
44.1 127 🇪🇺 European Union
44.4 79 🇫🇮 Finland
45.4 242 🇫🇷 France
38.9 1577 🇩🇪 Germany
40.8 5219 🇬🇷 Greece
41.2 295 🇭🇺 Hungary
39.9 315 🇮🇸 Iceland
43.8 73 🇮🇪 Ireland
45.4 213 🇮🇹 Italy
38.8 1015 🇱🇻 Latvia
42.0 96 🇱🇮 Liechtenstein
40.9 8 🇱🇹 Lithuania
41.3 132 🇱🇺 Luxembourg
41.8 58 🇲🇹 Malta
43.6 46 🇳🇱 Netherlands
43.2 1172 🇳🇴 Norway
47.4 196 🇵🇱 Poland
40.5 1112 🇵🇹 Portugal
43.2 240 🇷🇴 Romania
40.9 266 🇸🇰 Slovakia
40.4 343 🇸🇮 Slovenia
40.8 125 🇪🇸 Spain
40.3 761 🇸🇪 Sweden
46.7 183 🇨🇭 Switzerland
47.6 680 🇬🇧 United Kingdom
40.9 1016

Hosting & Data Residency

57%

EU-headquartered provider

43%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 2483 27.8%
Hetzner (DE) 1396 15.7%
IONOS (1&1) (DE) 1246 14.0%
Amazon Web Services (US) 1048 11.8%
OVHcloud (FR) 907 10.2%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.