Data-driven insights on cybersecurity breaches, vulnerabilities, and infrastructure signals.
Across 44,143 European companies where we detected a content delivery network, 89.6% sit behind Cloudflare. The nearest pure-CDN competitor accounts for 1,299.
CAA checking has been mandatory for certificate authorities since 2017, but across 130,700 company domains we checked, 93.1% still don't publish a CAA record.
Ireland is one of four member states referred to the Court of Justice over its late NIS2 transposition. We fingerprinted security and access-control vendors across an Irish dataset of 310 organisations. 88.2% of detections trace to US-parented companies; no independently EU-founded vendor appeared in the core firewall, WAF, IAM, or VPN subset except one, via a French acquisition.
We ran 56,251 HTTP header checks across 50,769 companies. In 47.4% of observations, the response carried none of seven standard security headers. This is a presence-only measurement, not a security audit.
DMARC has been public since 2012. Across 67,336 company domains we checked, 45.1% have no record at all, and of the rest, most are set to p=none: collecting reports, not enforcing a policy.
I matched MX records against a vendor rule dictionary for 2,584 SEC EDGAR-linked entities. The Microsoft 365 share was unsurprising. The gateway market is a duopoly: Proofpoint and Mimecast account for 91.4% of non-mailbox MX matches.
Nearly 24,000 ransomware leak-site claims tracked over five years show volume growing at 31% annually. Gartner puts security spending growth at 10%. The gap is widening.
Browse observed tech stacks, DNS posture, and open services for organisations. All data sourced from public authority records.
CIPHERCUE