Skip to main content
All Industries

EU Industry Benchmark

Technology

Anonymized security posture data for the technology sector across the EU. Based on 17882 monitored sites.

41.6

Avg. Score /100

D

Avg. Grade

17882

Sites Tracked

+2.0

vs. EU Average

Critical findings in this industry

12254 of 17882 without HTTPS redirect

69.0%

17435 of 17882 with unencrypted email (no STARTTLS)

98.0%

17837 of 17882 without DMARC protection (spoofable)

100.0%

5602 of 17882 missing 3+ critical security headers

31.0%

14648 of 17882 without DNSSEC (vulnerable to DNS spoofing)

82.0%

16370 of 17882 without CAA records (unrestricted certificate issuance)

92.0%

17474 of 17882 without MTA-STS (email downgrade attacks possible)

98.0%

Grade Distribution

A
0 (0.0%)
B
28 (0.0%)
C
854 (5.0%)
D
9278 (52.0%)
F
7722 (43.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 41.6/100 (732 sites) Belgium: 40.6/100 (484 sites) Bulgaria: 42.8/100 (185 sites) Croatia: 40.9/100 (164 sites) Cyprus: 44.7/100 (80 sites) Czech Republic: 44.2/100 (353 sites) Denmark: 43.1/100 (236 sites) Estonia: 47.4/100 (127 sites) Finland: 42.8/100 (242 sites) France: 38.9/100 (1582 sites) Germany: 41.1/100 (5243 sites) Greece: 39.6/100 (295 sites) Hungary: 40.5/100 (317 sites) Ireland: 42.4/100 (213 sites) Italy: 39.2/100 (1021 sites) Latvia: 46.3/100 (96 sites) Lithuania: 44.1/100 (132 sites) Luxembourg: 46.1/100 (57 sites) Netherlands: 44.1/100 (1177 sites) Norway: 45.5/100 (197 sites) Poland: 41.0/100 (1116 sites) Portugal: 41.6/100 (241 sites) Romania: 41.4/100 (266 sites) Slovakia: 45.0/100 (343 sites) Slovenia: 44.2/100 (125 sites) Spain: 40.3/100 (769 sites) Sweden: 47.1/100 (184 sites) Switzerland: 43.8/100 (682 sites) United Kingdom: 41.0/100 (1017 sites)
Worse
Better

Score by Country

🇦🇹 Austria
41.6 732 🇧🇪 Belgium
40.6 484 🇧🇬 Bulgaria
42.8 185 🇭🇷 Croatia
40.9 164 🇨🇾 Cyprus
44.7 80 🇨🇿 Czech Republic
44.2 353 🇩🇰 Denmark
43.1 236 🇪🇪 Estonia
47.4 127 🇪🇺 European Union
48.5 79 🇫🇮 Finland
42.8 242 🇫🇷 France
38.9 1582 🇩🇪 Germany
41.1 5243 🇬🇷 Greece
39.6 295 🇭🇺 Hungary
40.5 317 🇮🇸 Iceland
45.8 73 🇮🇪 Ireland
42.4 213 🇮🇹 Italy
39.2 1021 🇱🇻 Latvia
46.3 96 🇱🇮 Liechtenstein
54.5 8 🇱🇹 Lithuania
44.1 132 🇱🇺 Luxembourg
46.1 57 🇲🇹 Malta
46.1 46 🇳🇱 Netherlands
44.1 1177 🇳🇴 Norway
45.5 197 🇵🇱 Poland
41.0 1116 🇵🇹 Portugal
41.6 241 🇷🇴 Romania
41.4 266 🇸🇰 Slovakia
45.0 343 🇸🇮 Slovenia
44.2 125 🇪🇸 Spain
40.3 769 🇸🇪 Sweden
47.1 184 🇨🇭 Switzerland
43.8 682 🇬🇧 United Kingdom
41.0 1017

Hosting & Data Residency

57%

EU-headquartered provider

43%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 2501 27.9%
Hetzner (DE) 1398 15.6%
IONOS (1&1) (DE) 1248 13.9%
Amazon Web Services (US) 1051 11.7%
OVHcloud (FR) 911 10.2%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.