Skip to main content
All Industries

EU Industry Benchmark

Technology

Anonymized security posture data for the technology sector across the EU. Based on 17945 monitored sites.

45.1

Avg. Score /100

D

Avg. Grade

17945

Sites Tracked

+1.0

vs. EU Average

Critical findings in this industry

13042 of 17945 without HTTPS redirect

73.0%

14552 of 17945 with unencrypted email (no STARTTLS)

81.0%

15032 of 17945 without DMARC protection (spoofable)

84.0%

4843 of 17945 missing 3+ critical security headers

27.0%

14656 of 17945 without DNSSEC (vulnerable to DNS spoofing)

82.0%

16418 of 17945 without CAA records (unrestricted certificate issuance)

91.0%

17518 of 17945 without MTA-STS (email downgrade attacks possible)

98.0%

Grade Distribution

A
4 (0.0%)
B
193 (1.0%)
C
1347 (8.0%)
D
10910 (61.0%)
F
5491 (31.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 41.7/100 (732 sites) Belgium: 40.9/100 (485 sites) Bulgaria: 41.6/100 (185 sites) Croatia: 40.0/100 (164 sites) Cyprus: 41.6/100 (82 sites) Czech Republic: 41.8/100 (355 sites) Denmark: 43.2/100 (237 sites) Estonia: 43.2/100 (125 sites) Finland: 43.1/100 (243 sites) France: 44.6/100 (1588 sites) Germany: 50.8/100 (5274 sites) Greece: 39.7/100 (296 sites) Hungary: 40.3/100 (316 sites) Ireland: 42.2/100 (212 sites) Italy: 41.8/100 (1023 sites) Latvia: 42.5/100 (97 sites) Lithuania: 39.7/100 (133 sites) Luxembourg: 43.0/100 (57 sites) Netherlands: 43.3/100 (1187 sites) Norway: 45.3/100 (197 sites) Poland: 40.2/100 (1116 sites) Portugal: 41.5/100 (243 sites) Romania: 41.4/100 (269 sites) Slovakia: 42.0/100 (344 sites) Slovenia: 42.4/100 (124 sites) Spain: 40.2/100 (769 sites) Sweden: 44.4/100 (183 sites) Switzerland: 44.5/100 (687 sites) United Kingdom: 48.3/100 (1012 sites)
Worse
Better

Score by Country

🇦🇹 Austria
41.7 732 🇧🇪 Belgium
40.9 485 🇧🇬 Bulgaria
41.6 185 🇭🇷 Croatia
40.0 164 🇨🇾 Cyprus
41.6 82 🇨🇿 Czech Republic
41.8 355 🇩🇰 Denmark
43.2 237 🇪🇪 Estonia
43.2 125 🇪🇺 European Union
46.5 82 🇫🇮 Finland
43.1 243 🇫🇷 France
44.6 1588 🇩🇪 Germany
50.8 5274 🇬🇷 Greece
39.7 296 🇭🇺 Hungary
40.3 316 🇮🇸 Iceland
43.7 74 🇮🇪 Ireland
42.2 212 🇮🇹 Italy
41.8 1023 🇱🇻 Latvia
42.5 97 🇱🇮 Liechtenstein
49.6 8 🇱🇹 Lithuania
39.7 133 🇱🇺 Luxembourg
43.0 57 🇲🇹 Malta
41.5 46 🇳🇱 Netherlands
43.3 1187 🇳🇴 Norway
45.3 197 🇵🇱 Poland
40.2 1116 🇵🇹 Portugal
41.5 243 🇷🇴 Romania
41.4 269 🇸🇰 Slovakia
42.0 344 🇸🇮 Slovenia
42.4 124 🇪🇸 Spain
40.2 769 🇸🇪 Sweden
44.4 183 🇨🇭 Switzerland
44.5 687 🇬🇧 United Kingdom
48.3 1012

Hosting & Data Residency

56%

EU-headquartered provider

44%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 2532 28.2%
Hetzner (DE) 1399 15.6%
IONOS (1&1) (DE) 1249 13.9%
Amazon Web Services (US) 1055 11.7%
OVHcloud (FR) 908 10.1%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.