Share of regional domains with a valid security.txt (RFC 9116) — all 32 countries · ← top 10
1
Netherlands
75%
2
Sweden
43%
3
Austria
33%
4
Switzerland
31%
5
Belgium
23%
6
Germany
12%
7
Norway
7%
8
France
6%
9
Portugal
3%
10
Moldova
3%
11
United Kingdom
3%
12
Ukraine
0%
13
Slovakia
0%
14
Slovenia
0%
15
Serbia
0%
16
Poland
0%
17
North Macedonia
0%
18
Latvia
0%
19
Lithuania
0%
20
Italy
0%
21
Iceland
0%
22
Ireland
0%
23
Hungary
0%
24
Croatia
0%
25
Greece
0%
26
Finland
0%
27
Spain
0%
28
Estonia
0%
29
Denmark
0%
30
Czechia
0%
31
Bosnia and Herzegovina
0%
32
Albania
0%
43%
Sweden: 9 of 21 regions have a valid security.txt
2nd
place of 32 countries
6%
average across all 32 countries (43 of 699 domains)
Source: kommunermedipv6.se, latest scan per country (Sept 2026). Valid security.txt = https://<domain>/.well-known/security.txt with a Contact and an unexpired Expires field (RFC 9116), or an equivalent DNS Security TXT record. Counted per regional domain – regions without a known website are not included. Hover over a row for the counts.