Skip to main content
All Industries

EU Industry Benchmark

Telecom

Anonymized security posture data for the telecom sector across the EU. Based on 372 monitored sites.

49.6

Avg. Score /100

D

Avg. Grade

372

Sites Tracked

+6.0

vs. EU Average

Critical findings in this industry

345 of 372 without HTTPS redirect

93.0%

231 of 372 with unencrypted email (no STARTTLS)

62.0%

196 of 372 without DMARC protection (spoofable)

53.0%

26 of 372 missing 3+ critical security headers

7.0%

318 of 372 without DNSSEC (vulnerable to DNS spoofing)

85.0%

309 of 372 without CAA records (unrestricted certificate issuance)

83.0%

358 of 372 without MTA-STS (email downgrade attacks possible)

96.0%

Grade Distribution

A
0 (0.0%)
B
5 (1.0%)
C
39 (10.0%)
D
277 (74.0%)
F
51 (14.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Hosting & Data Residency

30%

EU-headquartered provider

70%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 44 23.8%
Amazon Web Services (US) 42 22.7%
Imperva/Incapsula (US) 26 14.1%
Microsoft Azure (US) 19 10.3%
Google Cloud (US) 17 9.2%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.