Industry benchmark
UK accountants
Invoice fraud and client-data duty in one place. A practice sends payment instructions and holds financial records for dozens of businesses, so a spoofable domain is not a theoretical risk to them, it is a risk to every client on their books.
Headline31 domains scanned
38.7%
graded D or worse overall.
2.7
issues per domain on average, counting only real faults rather than suggestions.
B:2 C:17 F:12
Grade spread across the sector.
Where this sector is weakest
Email authentication
25.8% graded D or worse.
DNS
6.5% graded D or worse.
Exposed secrets
6.5% graded D or worse.
Web security
3.2% graded D or worse.
Performance
3.2% graded D or worse.
How we measure this
Practices listed on UK professional body registers. We run the same public checks we run for customers, entirely from the public internet, with nothing installed anywhere. We publish sector averages only: no organisation is named, linked or individually reported, and we do not publish findings about any specific business.
See how you compare.
Free, no signup, about a minute.