Data-driven insights on cybersecurity breaches, vulnerabilities, and infrastructure signals.
Across 44,143 European companies where we detected a content delivery network, 89.6% sit behind Cloudflare. The nearest pure-CDN competitor accounts for 1,299.
CAA checking has been mandatory for certificate authorities since 2017, but across 130,700 company domains we checked, 93.1% still don't publish a CAA record.
Ireland is one of four member states referred to the Court of Justice over its late NIS2 transposition. We fingerprinted security and access-control vendors across an Irish dataset of 310 organisations. 88.2% of detections trace to US-parented companies; no independently EU-founded vendor appeared in the core firewall, WAF, IAM, or VPN subset except one, via a French acquisition.
We ran 56,251 HTTP header checks across 50,769 companies. In 47.4% of observations, the response carried none of seven standard security headers. This is a presence-only measurement, not a security audit.
DMARC has been public since 2012. Across 67,336 company domains we checked, 45.1% have no record at all, and of the rest, most are set to p=none: collecting reports, not enforcing a policy.
A public-source review of 40 European organisations and public bodies publicly linked to Palantir. Evidence quality varies: some are confirmed deployments, others are pilots, partnerships, letters of intent, reported relationships or infrastructure observations.
We looked at the apex and www records for 19,450 European company entities and mapped each to its internet-facing infrastructure vendor. US-headquartered vendors serve the majority of primary company websites in the UK and the Netherlands, the plurality in Italy, Spain, and France. Cloudflare is the largest single vendor in every one of the seven markets.
Someone told us European procurement teams looking for a sovereign cybersecurity alternative are stuck choosing a foreign incumbent. We started counting EU-headquartered vendors instead. The shortage is not in the supply. It is in what gets seen.
77% of the European sites we observed running Meta Pixel also exposed Google Analytics, but the deeper pattern is how analytics, advertising, consent and infrastructure products repeatedly arrive as a bundle.
CipherCue observed the public web perimeter of 2,165 Polish organisations. At the hosting layer they prefer European providers. At the outsourced perimeter layer (CDN, hosted mail, consent, WAF) the credible non-European choice is conceded. Where European sovereign alternatives exist, this is an account map.
I matched MX records against a vendor rule dictionary for 2,584 SEC EDGAR-linked entities. The Microsoft 365 share was unsurprising. The gateway market is a duopoly: Proofpoint and Mimecast account for 91.4% of non-mailbox MX matches.
Nearly 24,000 ransomware leak-site claims tracked over five years show volume growing at 31% annually. Gartner puts security spending growth at 10%. The gap is widening.
Browse observed tech stacks, DNS posture, and open services for organisations. All data sourced from public authority records.
CIPHERCUE