EU Industry Benchmark
Food & Delivery
Anonymized security posture data for the food & delivery sector across the EU. Based on 222 monitored sites.
53.2
Avg. Score /100
D
Avg. Grade
222
Sites Tracked
-1.0
vs. EU Average
Critical findings in this industry
21 of 222 without HTTPS redirect
15 of 222 with unencrypted email (no STARTTLS)
34 of 222 without DMARC protection (spoofable)
142 of 222 missing 3+ critical security headers
65 of 222 without DNSSEC (vulnerable to DNS spoofing)
66 of 222 without CAA records (unrestricted certificate issuance)
69 of 222 without MTA-STS (email downgrade attacks possible)
Grade Distribution
Score by Country
Hosting & Data Residency
13%
EU-headquartered provider
87%
Non-EU provider (CLOUD Act / Schrems II)
Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49
All data is anonymized. No individual sites are identified. Statistics updated weekly.