Industry benchmark
UK estate agents
Deposit diversion is the same attack wearing a different hat: an email that looks like it came from the agent, sending a tenant or buyer to the wrong account. High transaction values and a lot of email between strangers make this sector a standing target.
Headline33 domains scanned
57.6%
graded D or worse overall.
3.2
issues per domain on average, counting only real faults rather than suggestions.
C:14 F:19
Grade spread across the sector.
Where this sector is weakest
Exposed secrets
33.3% graded D or worse.
Email authentication
24.2% graded D or worse.
Web security
9.1% graded D or worse.
DNS
3% graded D or worse.
How we measure this
Agencies listed on major UK property portals and trade bodies. We run the same public checks we run for customers, entirely from the public internet, with nothing installed anywhere. We publish sector averages only: no organisation is named, linked or individually reported, and we do not publish findings about any specific business.
See how you compare.
Free, no signup, about a minute.