Skip to main content
All Industries

EU Industry Benchmark

Technology

Anonymized security posture data for the technology sector across the EU. Based on 17878 monitored sites.

40.9

Avg. Score /100

D

Avg. Grade

17878

Sites Tracked

+1.0

vs. EU Average

Critical findings in this industry

13756 of 17878 without HTTPS redirect

77.0%

17431 of 17878 with unencrypted email (no STARTTLS)

97.0%

17833 of 17878 without DMARC protection (spoofable)

100.0%

4064 of 17878 missing 3+ critical security headers

23.0%

14637 of 17878 without DNSSEC (vulnerable to DNS spoofing)

82.0%

16358 of 17878 without CAA records (unrestricted certificate issuance)

91.0%

17469 of 17878 without MTA-STS (email downgrade attacks possible)

98.0%

Grade Distribution

A
0 (0.0%)
B
37 (0.0%)
C
718 (4.0%)
D
8728 (49.0%)
F
8395 (47.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 41.1/100 (732 sites) Belgium: 39.6/100 (484 sites) Bulgaria: 42.0/100 (185 sites) Croatia: 41.6/100 (164 sites) Cyprus: 42.2/100 (80 sites) Czech Republic: 41.3/100 (353 sites) Denmark: 42.9/100 (236 sites) Estonia: 44.8/100 (126 sites) Finland: 43.3/100 (242 sites) France: 38.2/100 (1582 sites) Germany: 40.5/100 (5243 sites) Greece: 39.2/100 (295 sites) Hungary: 40.3/100 (317 sites) Ireland: 41.1/100 (213 sites) Italy: 39.0/100 (1020 sites) Latvia: 43.6/100 (96 sites) Lithuania: 42.0/100 (132 sites) Luxembourg: 44.5/100 (57 sites) Netherlands: 43.0/100 (1177 sites) Norway: 45.9/100 (197 sites) Poland: 39.5/100 (1116 sites) Portugal: 40.9/100 (241 sites) Romania: 42.1/100 (266 sites) Slovakia: 43.6/100 (343 sites) Slovenia: 42.3/100 (125 sites) Spain: 39.5/100 (769 sites) Sweden: 44.4/100 (184 sites) Switzerland: 43.0/100 (682 sites) United Kingdom: 41.2/100 (1015 sites)
Worse
Better

Score by Country

🇦🇹 Austria
41.1 732 🇧🇪 Belgium
39.6 484 🇧🇬 Bulgaria
42.0 185 🇭🇷 Croatia
41.6 164 🇨🇾 Cyprus
42.2 80 🇨🇿 Czech Republic
41.3 353 🇩🇰 Denmark
42.9 236 🇪🇪 Estonia
44.8 126 🇪🇺 European Union
50.4 79 🇫🇮 Finland
43.3 242 🇫🇷 France
38.2 1582 🇩🇪 Germany
40.5 5243 🇬🇷 Greece
39.2 295 🇭🇺 Hungary
40.3 317 🇮🇸 Iceland
45.7 73 🇮🇪 Ireland
41.1 213 🇮🇹 Italy
39.0 1020 🇱🇻 Latvia
43.6 96 🇱🇮 Liechtenstein
48.9 8 🇱🇹 Lithuania
42.0 132 🇱🇺 Luxembourg
44.5 57 🇲🇹 Malta
43.9 46 🇳🇱 Netherlands
43.0 1177 🇳🇴 Norway
45.9 197 🇵🇱 Poland
39.5 1116 🇵🇹 Portugal
40.9 241 🇷🇴 Romania
42.1 266 🇸🇰 Slovakia
43.6 343 🇸🇮 Slovenia
42.3 125 🇪🇸 Spain
39.5 769 🇸🇪 Sweden
44.4 184 🇨🇭 Switzerland
43.0 682 🇬🇧 United Kingdom
41.2 1015

Hosting & Data Residency

57%

EU-headquartered provider

43%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 2505 28.0%
Hetzner (DE) 1399 15.6%
IONOS (1&1) (DE) 1248 13.9%
Amazon Web Services (US) 1051 11.7%
OVHcloud (FR) 911 10.2%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.