Skip to main content
All Industries

EU Industry Benchmark

Gambling

Anonymized security posture data for the gambling sector across the EU. Based on 331 monitored sites.

50.6

Avg. Score /100

D

Avg. Grade

331

Sites Tracked

+6.0

vs. EU Average

Critical findings in this industry

245 of 331 without HTTPS redirect

74.0%

244 of 331 with unencrypted email (no STARTTLS)

74.0%

176 of 331 without DMARC protection (spoofable)

53.0%

84 of 331 missing 3+ critical security headers

25.0%

273 of 331 without DNSSEC (vulnerable to DNS spoofing)

82.0%

262 of 331 without CAA records (unrestricted certificate issuance)

79.0%

321 of 331 without MTA-STS (email downgrade attacks possible)

97.0%

Grade Distribution

A
0 (0.0%)
B
5 (2.0%)
C
48 (15.0%)
D
233 (70.0%)
F
45 (14.0%)

Security across Europe

Average security score by country — hover for details, click to explore.

Hosting & Data Residency

7%

EU-headquartered provider

93%

Non-EU provider (CLOUD Act / Schrems II)

Cloudflare (US) 150 59.8%
Amazon Web Services (US) 56 22.3%
Microsoft Azure (US) 10 4.0%
Akamai (US) 10 4.0%
Google Cloud (US) 7 2.8%

Server location via IP geolocation (MaxMind GeoLite2). Company HQ from ASN registry. A site may be physically hosted in the EU but use a US-headquartered provider subject to the CLOUD Act — per Schrems II (CJEU C-311/18), this requires SCCs with supplementary measures. · GDPR Art. 44–49

How does your site compare?

Run a free security scan and see your grade instantly.

Scan your site

All data is anonymized. No individual sites are identified. Statistics updated weekly.