Skip to main content
All Industries

EU Industry Benchmark

Technology

Anonymized security posture data for the technology sector across the EU. Based on 17882 monitored sites.

41.6

Avg. Score /100

D

Avg. Grade

17882

Sites Tracked

+2.0

vs. EU Average

Critical findings in this industry

12254 of 17882 without HTTPS redirect

69.0%

17435 of 17882 with unencrypted email (no STARTTLS)

98.0%

17837 of 17882 without DMARC protection (spoofable)

100.0%

5602 of 17882 missing 3+ critical security headers

31.0%

14648 of 17882 without DNSSEC (vulnerable to DNS spoofing)

82.0%

16370 of 17882 without CAA records (unrestricted certificate issuance)

92.0%

17474 of 17882 without MTA-STS (email downgrade attacks possible)

98.0%

Grade Distribution

A
0 (0.0%)
B
28 (0.0%)
C
854 (5.0%)
D
9278 (52.0%)
F
7722 (43.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Hosting & Data Residency

57%

EU-headquartered provider

43%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 2501 27.9%
Hetzner (DE) 1398 15.6%
IONOS (1&1) (DE) 1248 13.9%
Amazon Web Services (US) 1051 11.7%
OVHcloud (FR) 911 10.2%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.