Industry benchmark
UK charities
Donation pages take card details and donation fraud is common, because a fake appeal from a real-looking charity address is unusually persuasive. Charities also run on small teams and donated time, which is exactly where certificate and DNS drift goes unnoticed.
Headline25 domains scanned
24%
graded D or worse overall.
2.2
issues per domain on average, counting only real faults rather than suggestions.
B:2 C:17 F:6
Grade spread across the sector.
Where this sector is weakest
Email authentication
20% graded D or worse.
Exposed secrets
8% graded D or worse.
DNS
4% graded D or worse.
How we measure this
Registered charities from the Charity Commission register, which is public. We run the same public checks we run for customers, entirely from the public internet, with nothing installed anywhere. We publish sector averages only: no organisation is named, linked or individually reported, and we do not publish findings about any specific business.
See how you compare.
Free, no signup, about a minute.