Share of regional domains passing all hardening checks (SPF, DMARC, CAA, HSTS, MTA-STS) — all 25 countries · ← top 10
1
Austria
11%
2
Italy
5%
3
Sweden
5%
4
Switzerland
4%
5
United Kingdom
0%
6
Ukraine
0%
7
Slovakia
0%
8
Portugal
0%
9
Poland
0%
10
Norway
0%
11
Netherlands
0%
12
Latvia
0%
13
Lithuania
0%
14
Iceland
0%
15
Ireland
0%
16
Hungary
0%
17
France
0%
18
Finland
0%
19
Spain
0%
20
Estonia
0%
21
Denmark
0%
22
Germany
0%
23
Czechia
0%
24
Belgium
0%
25
Bosnia and Herzegovina
0%
5%
Sweden: 1 of 21 regions pass all hardening checks
3rd
place of 25 countries
1%
average across all 25 countries (4 of 579 domains)
Source: kommunermedipv6.se, latest scan per country (Sept 2026). Hardening = SPF -all (or ~all with DMARC p=reject), DMARC p=reject, a CAA record, HSTS max-age ≥ 1 year and MTA-STS in enforce mode – informational, not part of the grade. Counted per regional domain – regions without a known website are not included. Hover over a row for the counts.