Skip to main content
All Industries

EU Industry Benchmark

Telecom

Anonymized security posture data for the telecom sector across the EU. Based on 370 monitored sites.

52.7

Avg. Score /100

D

Avg. Grade

370

Sites Tracked

+9.0

vs. EU Average

Critical findings in this industry

218 of 370 without HTTPS redirect

59.0%

240 of 370 with unencrypted email (no STARTTLS)

65.0%

207 of 370 without DMARC protection (spoofable)

56.0%

100 of 370 missing 3+ critical security headers

27.0%

315 of 370 without DNSSEC (vulnerable to DNS spoofing)

85.0%

309 of 370 without CAA records (unrestricted certificate issuance)

84.0%

357 of 370 without MTA-STS (email downgrade attacks possible)

96.0%

Grade Distribution

A
0 (0.0%)
B
18 (5.0%)
C
91 (25.0%)
D
212 (57.0%)
F
49 (13.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Hosting & Data Residency

30%

EU-headquartered provider

70%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 42 23.3%
Amazon Web Services (US) 42 23.3%
Imperva/Incapsula (US) 25 13.9%
Microsoft Azure (US) 19 10.6%
Google Cloud (US) 16 8.9%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.