EU Industry Benchmark
Insurance
Anonymized security posture data for the insurance sector across the EU. Based on 2978 monitored sites.
46.6
Avg. Score /100
D
Avg. Grade
2978
Sites Tracked
+3.0
vs. EU Average
Critical findings in this industry
1672 of 2978 without HTTPS redirect
1965 of 2978 with unencrypted email (no STARTTLS)
2279 of 2978 without DMARC protection (spoofable)
1279 of 2978 missing 3+ critical security headers
2608 of 2978 without DNSSEC (vulnerable to DNS spoofing)
2797 of 2978 without CAA records (unrestricted certificate issuance)
2942 of 2978 without MTA-STS (email downgrade attacks possible)
Grade Distribution
Security across Europe
Average security score by country — hover for details, click to explore.
/100 · sites
Score by Country
Hosting & Data Residency
50%
EU-headquartered provider
50%
Non-EU provider (CLOUD Act / Schrems II)
Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49
All data is anonymized. No individual sites are identified. Statistics updated weekly.