Share of municipal domains passing all hardening checks (SPF, DMARC, CAA, HSTS, MTA-STS) — all 41 countries · ← top 10
1
Sweden
2.41%
2
United Kingdom
1.11%
3
Denmark
1.01%
4
Portugal
0.32%
5
Germany
0.05%
6
Poland
0.04%
7
France
0.03%
8
Italy
0.01%
9
Kosovo
0.00%
10
Ukraine
0.00%
11
Slovakia
0.00%
12
Slovenia
0.00%
13
Serbia
0.00%
14
Norway
0.00%
15
Netherlands
0.00%
16
Malta
0.00%
17
North Macedonia
0.00%
18
Montenegro
0.00%
19
Moldova
0.00%
20
Latvia
0.00%
21
Luxembourg
0.00%
22
Lithuania
0.00%
23
Jersey
0.00%
24
Iceland
0.00%
25
Isle of Man
0.00%
26
Ireland
0.00%
27
Hungary
0.00%
28
Croatia
0.00%
29
Greece
0.00%
30
Greenland
0.00%
31
Guernsey
0.00%
32
Faroe Islands
0.00%
33
Finland
0.00%
34
Spain
0.00%
35
Estonia
0.00%
36
Czechia
0.00%
37
Switzerland
0.00%
38
Belgium
0.00%
39
Bosnia and Herzegovina
0.00%
40
Austria
0.00%
41
Albania
0.00%
2.41%
Sweden: 7 of 290 municipalities pass all hardening checks
1st
place of 41 countries
0.04%
average across all 41 countries (27 of 69,466 domains)
Source: kommunermedipv6.se, latest scan per country (Sept 2026). Hardening = SPF -all (or ~all with DMARC p=reject), DMARC p=reject, a CAA record, HSTS max-age ≥ 1 year and MTA-STS in enforce mode – informational, not part of the grade. Counted per municipal domain – municipalities without a known website are not included. Hover over a row for the counts.