kommunermedipv6.se
Regions with full hardening in Europe
Share of regional domains passing all hardening checks (SPF, DMARC, CAA, HSTS, MTA-STS) — top 10 of 25 countries
1
Austria
11%
2
Italy
5%
3
Sweden
5%
4
Switzerland
4%
5
United Kingdom
0%
6
Ukraine
0%
7
Slovakia
0%
8
Portugal
0%
9
Poland
0%
10
Norway
0%
5%
Sweden: 1 of 21 regions pass all hardening checks
3rd
place of 25 countries
1%
average across all 25 countries
(4 of 579 domains)
(4 of 579 domains)
Source: kommunermedipv6.se, latest scan per country (Sept 2026). Hardening = SPF -all (or ~all with DMARC p=reject), DMARC p=reject, a CAA record, HSTS max-age ≥ 1 year and MTA-STS in enforce mode – informational, not part of the grade. Counted per regional domain – regions without a known website are not included. Countries with few regions vary more.