Skip to main content
All Industries

EU Industry Benchmark

Travel

Anonymized security posture data for the travel sector across the EU. Based on 23323 monitored sites.

38.9

Avg. Score /100

F

Avg. Grade

23323

Sites Tracked

0.0

vs. EU Average

Critical findings in this industry

21291 of 23323 without HTTPS redirect

91.0%

22931 of 23323 with unencrypted email (no STARTTLS)

98.0%

23289 of 23323 without DMARC protection (spoofable)

100.0%

5212 of 23323 missing 3+ critical security headers

22.0%

19061 of 23323 without DNSSEC (vulnerable to DNS spoofing)

82.0%

22643 of 23323 without CAA records (unrestricted certificate issuance)

97.0%

23210 of 23323 without MTA-STS (email downgrade attacks possible)

100.0%

Grade Distribution

A
0 (0.0%)
B
0 (0.0%)
C
241 (1.0%)
D
10688 (46.0%)
F
12394 (53.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Austria: 40.8/100 (696 sites) Belgium: 44.3/100 (416 sites) Bulgaria: 39.2/100 (104 sites) Croatia: 39.4/100 (204 sites) Cyprus: 38.9/100 (25 sites) Czech Republic: 42.2/100 (561 sites) Denmark: 40.8/100 (688 sites) Estonia: 40.9/100 (172 sites) Finland: 40.3/100 (468 sites) France: 36.3/100 (2769 sites) Germany: 38.4/100 (5599 sites) Greece: 40.5/100 (206 sites) Hungary: 38.3/100 (332 sites) Ireland: 42.3/100 (172 sites) Italy: 37.1/100 (1852 sites) Latvia: 38.7/100 (107 sites) Lithuania: 37.6/100 (209 sites) Luxembourg: 39.0/100 (34 sites) Netherlands: 40.6/100 (1655 sites) Norway: 40.6/100 (360 sites) Poland: 37.5/100 (1216 sites) Portugal: 42.0/100 (289 sites) Romania: 38.1/100 (245 sites) Slovakia: 39.8/100 (253 sites) Slovenia: 37.0/100 (124 sites) Spain: 37.7/100 (1124 sites) Sweden: 40.7/100 (605 sites) Switzerland: 45.6/100 (835 sites) United Kingdom: 37.9/100 (1914 sites)
Worse
Better

Score by Country

🇦🇹 Austria
40.8 696 🇧🇪 Belgium
44.3 416 🇧🇬 Bulgaria
39.2 104 🇭🇷 Croatia
39.4 204 🇨🇾 Cyprus
38.9 25 🇨🇿 Czech Republic
42.2 561 🇩🇰 Denmark
40.8 688 🇪🇪 Estonia
40.9 172 🇫🇮 Finland
40.3 468 🇫🇷 France
36.3 2769 🇩🇪 Germany
38.4 5599 🇬🇷 Greece
40.5 206 🇭🇺 Hungary
38.3 332 🇮🇸 Iceland
38.6 61 🇮🇪 Ireland
42.3 172 🇮🇹 Italy
37.1 1852 🇱🇻 Latvia
38.7 107 🇱🇮 Liechtenstein
40.5 2 🇱🇹 Lithuania
37.6 209 🇱🇺 Luxembourg
39.0 34 🇲🇹 Malta
40.7 26 🇳🇱 Netherlands
40.6 1655 🇳🇴 Norway
40.6 360 🇵🇱 Poland
37.5 1216 🇵🇹 Portugal
42.0 289 🇷🇴 Romania
38.1 245 🇸🇰 Slovakia
39.8 253 🇸🇮 Slovenia
37.0 124 🇪🇸 Spain
37.7 1124 🇸🇪 Sweden
40.7 605 🇨🇭 Switzerland
45.6 835 🇬🇧 United Kingdom
37.9 1914

Hosting & Data Residency

65%

EU-headquartered provider

35%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 1995 19.4%
IONOS (1&1) (DE) 1653 16.1%
OVHcloud (FR) 1555 15.1%
Hetzner (DE) 1470 14.3%
Amazon Web Services (US) 853 8.3%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.