Skip to main content
All Industries

EU Industry Benchmark

Telecom

Anonymized security posture data for the telecom sector across the EU. Based on 372 monitored sites.

49.1

Avg. Score /100

D

Avg. Grade

372

Sites Tracked

+9.0

vs. EU Average

Critical findings in this industry

146 of 372 without HTTPS redirect

39.0%

363 of 372 with unencrypted email (no STARTTLS)

98.0%

372 of 372 without DMARC protection (spoofable)

100.0%

133 of 372 missing 3+ critical security headers

36.0%

317 of 372 without DNSSEC (vulnerable to DNS spoofing)

85.0%

311 of 372 without CAA records (unrestricted certificate issuance)

84.0%

358 of 372 without MTA-STS (email downgrade attacks possible)

96.0%

Grade Distribution

A
0 (0.0%)
B
6 (2.0%)
C
75 (20.0%)
D
202 (54.0%)
F
89 (24.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Hosting & Data Residency

30%

EU-headquartered provider

70%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 45 24.6%
Amazon Web Services (US) 42 23.0%
Imperva/Incapsula (US) 25 13.7%
Microsoft Azure (US) 19 10.4%
Google Cloud (US) 16 8.7%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.