Skip to main content
All Industries

EU Industry Benchmark

Telecom

Anonymized security posture data for the telecom sector across the EU. Based on 371 monitored sites.

43.2

Avg. Score /100

D

Avg. Grade

371

Sites Tracked

+3.0

vs. EU Average

Critical findings in this industry

319 of 371 without HTTPS redirect

86.0%

365 of 371 with unencrypted email (no STARTTLS)

98.0%

371 of 371 without DMARC protection (spoofable)

100.0%

75 of 371 missing 3+ critical security headers

20.0%

316 of 371 without DNSSEC (vulnerable to DNS spoofing)

85.0%

310 of 371 without CAA records (unrestricted certificate issuance)

84.0%

357 of 371 without MTA-STS (email downgrade attacks possible)

96.0%

Grade Distribution

A
0 (0.0%)
B
0 (0.0%)
C
17 (5.0%)
D
235 (63.0%)
F
119 (32.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Hosting & Data Residency

30%

EU-headquartered provider

70%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 43 23.8%
Amazon Web Services (US) 42 23.2%
Imperva/Incapsula (US) 25 13.8%
Microsoft Azure (US) 19 10.5%
Google Cloud (US) 16 8.8%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.