Skip to main content
All Industries

EU Industry Benchmark

Telecom

Anonymized security posture data for the telecom sector across the EU. Based on 370 monitored sites.

49.2

Avg. Score /100

D

Avg. Grade

370

Sites Tracked

+10.0

vs. EU Average

Critical findings in this industry

155 of 370 without HTTPS redirect

42.0%

361 of 370 with unencrypted email (no STARTTLS)

98.0%

370 of 370 without DMARC protection (spoofable)

100.0%

126 of 370 missing 3+ critical security headers

34.0%

315 of 370 without DNSSEC (vulnerable to DNS spoofing)

85.0%

308 of 370 without CAA records (unrestricted certificate issuance)

83.0%

356 of 370 without MTA-STS (email downgrade attacks possible)

96.0%

Grade Distribution

A
0 (0.0%)
B
5 (1.0%)
C
80 (22.0%)
D
208 (56.0%)
F
77 (21.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 48.2/100 (13 sites) Belgium: 46.6/100 (17 sites) Bulgaria: 45.4/100 (7 sites) Croatia: 44.9/100 (8 sites) Cyprus: 42.6/100 (5 sites) Czech Republic: 53.6/100 (8 sites) Denmark: 50.7/100 (7 sites) Estonia: 42.6/100 (9 sites) Finland: 49.0/100 (11 sites) France: 48.3/100 (18 sites) Germany: 48.8/100 (36 sites) Greece: 52.8/100 (6 sites) Hungary: 50.2/100 (6 sites) Ireland: 45.6/100 (5 sites) Italy: 49.9/100 (24 sites) Latvia: 50.4/100 (7 sites) Lithuania: 42.2/100 (8 sites) Luxembourg: 44.1/100 (10 sites) Netherlands: 59.1/100 (18 sites) Norway: 51.8/100 (12 sites) Poland: 51.6/100 (18 sites) Portugal: 45.8/100 (11 sites) Romania: 43.3/100 (7 sites) Slovakia: 49.4/100 (7 sites) Slovenia: 34.7/100 (6 sites) Spain: 50.0/100 (22 sites) Sweden: 53.6/100 (17 sites) Switzerland: 52.1/100 (12 sites) United Kingdom: 52.3/100 (24 sites)
Worse
Better

Score by Country

🇦🇹 Austria
48.2 13 🇧🇪 Belgium
46.6 17 🇧🇬 Bulgaria
45.4 7 🇭🇷 Croatia
44.9 8 🇨🇾 Cyprus
42.6 5 🇨🇿 Czech Republic
53.6 8 🇩🇰 Denmark
50.7 7 🇪🇪 Estonia
42.6 9 🇫🇮 Finland
49.0 11 🇫🇷 France
48.3 18 🇩🇪 Germany
48.8 36 🇬🇷 Greece
52.8 6 🇭🇺 Hungary
50.2 6 🇮🇸 Iceland
49.0 4 🇮🇪 Ireland
45.6 5 🇮🇹 Italy
49.9 24 🇱🇻 Latvia
50.4 7 🇱🇮 Liechtenstein
46.0 2 🇱🇹 Lithuania
42.2 8 🇱🇺 Luxembourg
44.1 10 🇲🇹 Malta
49.0 5 🇳🇱 Netherlands
59.1 18 🇳🇴 Norway
51.8 12 🇵🇱 Poland
51.6 18 🇵🇹 Portugal
45.8 11 🇷🇴 Romania
43.3 7 🇸🇰 Slovakia
49.4 7 🇸🇮 Slovenia
34.7 6 🇪🇸 Spain
50.0 22 🇸🇪 Sweden
53.6 17 🇨🇭 Switzerland
52.1 12 🇬🇧 United Kingdom
52.3 24

Hosting & Data Residency

30%

EU-headquartered provider

70%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 45 24.6%
Amazon Web Services (US) 42 23.0%
Imperva/Incapsula (US) 25 13.7%
Microsoft Azure (US) 19 10.4%
Google Cloud (US) 16 8.7%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.