Every week, our robot checks the websites of a panel of organisations from the outside, like any visitor would. Three scores out of 100 — the higher, the better: compliance with security good practice, resistance to known vulnerabilities, and speed.
Compliance score of each website of the panel, by level:
| Group | Sites | Compliance | Vulnerability | Speed |
|---|---|---|---|---|
| Banking and insurance | 21 | 84.6 | 87.6 | 69 |
| Media, publishing and culture | 73 | 79.8 | 75.3 | 68.5 |
| Technology and software | 38 | 78.1 | 70.3 | 72.1 |
| All websites of the panel | 962 | 76.5 | 77.7 | 72.2 |
Not enough websites yet (fewer than 20): Education and research (19), Consulting and business services (16), Retail and e-commerce (14), Public administration (9), Non-profits and other services (7), Industry, energy and agriculture (3), Telecommunications (3), Health and social care (2), Tourism, hotels and restaurants (2), Transport and logistics (2).
| Group | Sites | Compliance | Vulnerability | Speed |
|---|---|---|---|---|
| Very large companies | 64 | 82.7 | 83.6 | 70.2 |
| Large companies | 79 | 79.6 | 73.6 | 66.3 |
| Medium-sized companies | 31 | 77.5 | 69.1 | 72 |
| Small companies | 35 | 77.1 | 72.5 | 69.5 |
| All websites of the panel | 962 | 76.5 | 77.7 | 72.2 |
Sector and size are known for 209 of the 962 websites, from the official company register (Sirene for French organisations). The other websites count in the overall averages only.
Number of websites of the panel by domain extension:
The barometer is calculated on Wednesday evening and published on Thursday morning. A group is shown only from 20 websites measured, and no website is ever named for a weakness. Every organisation can contest a result or ask to be removed from the panel.