Skip to main content
All Industries

EU Industry Benchmark

Travel

Anonymized security posture data for the travel sector across the EU. Based on 23484 monitored sites.

44.4

Avg. Score /100

D

Avg. Grade

23484

Sites Tracked

-0.0

vs. EU Average

Critical findings in this industry

13923 of 23484 without HTTPS redirect

59.0%

19636 of 23484 with unencrypted email (no STARTTLS)

84.0%

21700 of 23484 without DMARC protection (spoofable)

92.0%

10087 of 23484 missing 3+ critical security headers

43.0%

19192 of 23484 without DNSSEC (vulnerable to DNS spoofing)

82.0%

22798 of 23484 without CAA records (unrestricted certificate issuance)

97.0%

23367 of 23484 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
88 (0.0%)
C
1374 (6.0%)
D
14822 (63.0%)
F
7200 (31.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 43.3/100 (700 sites) Belgium: 42.8/100 (420 sites) Bulgaria: 41.3/100 (105 sites) Croatia: 41.2/100 (206 sites) Cyprus: 39.8/100 (29 sites) Czech Republic: 41.8/100 (570 sites) Denmark: 43.4/100 (694 sites) Estonia: 43.6/100 (172 sites) Finland: 42.8/100 (468 sites) France: 44.3/100 (2785 sites) Germany: 49.5/100 (5622 sites) Greece: 39.9/100 (207 sites) Hungary: 39.7/100 (334 sites) Ireland: 43.2/100 (172 sites) Italy: 41.5/100 (1870 sites) Latvia: 42.5/100 (111 sites) Lithuania: 38.9/100 (211 sites) Luxembourg: 44.7/100 (34 sites) Netherlands: 43.1/100 (1663 sites) Norway: 43.7/100 (361 sites) Poland: 39.0/100 (1221 sites) Portugal: 40.6/100 (297 sites) Romania: 40.1/100 (245 sites) Slovakia: 42.3/100 (253 sites) Slovenia: 38.7/100 (124 sites) Spain: 39.9/100 (1134 sites) Sweden: 43.0/100 (608 sites) Switzerland: 46.1/100 (835 sites) United Kingdom: 46.5/100 (1943 sites)
Worse
Better

Score by Country

🇦🇹 Austria
43.3 700 🇧🇪 Belgium
42.8 420 🇧🇬 Bulgaria
41.3 105 🇭🇷 Croatia
41.2 206 🇨🇾 Cyprus
39.8 29 🇨🇿 Czech Republic
41.8 570 🇩🇰 Denmark
43.4 694 🇪🇪 Estonia
43.6 172 🇫🇮 Finland
42.8 468 🇫🇷 France
44.3 2785 🇩🇪 Germany
49.5 5622 🇬🇷 Greece
39.9 207 🇭🇺 Hungary
39.7 334 🇮🇸 Iceland
44.3 62 🇮🇪 Ireland
43.2 172 🇮🇹 Italy
41.5 1870 🇱🇻 Latvia
42.5 111 🇱🇮 Liechtenstein
40.5 2 🇱🇹 Lithuania
38.9 211 🇱🇺 Luxembourg
44.7 34 🇲🇹 Malta
42.8 26 🇳🇱 Netherlands
43.1 1663 🇳🇴 Norway
43.7 361 🇵🇱 Poland
39.0 1221 🇵🇹 Portugal
40.6 297 🇷🇴 Romania
40.1 245 🇸🇰 Slovakia
42.3 253 🇸🇮 Slovenia
38.7 124 🇪🇸 Spain
39.9 1134 🇸🇪 Sweden
43.0 608 🇨🇭 Switzerland
46.1 835 🇬🇧 United Kingdom
46.5 1943

Hosting & Data Residency

64%

EU-headquartered provider

36%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 2069 19.9%
IONOS (1&1) (DE) 1656 15.9%
OVHcloud (FR) 1556 15.0%
Hetzner (DE) 1474 14.2%
Amazon Web Services (US) 860 8.3%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.