Ciphercue

Ireland faces EU Court action over its late NIS2 transposition. We fingerprinted 310 Irish organisations: 88.2% of security vendor detections were US-parented.

We ran 56,251 HTTP header checks across 50,769 companies. 47.4% of observations found none of seven standard security headers present.

DMARC has been public since 2012. We checked 67,336 domains: 68.4% still have no policy or one that does not enforce it.

A public-source review of 40 European organisations and public bodies publicly linked to Palantir. Evidence quality varies from confirmed deployments to pilots, partnerships, LOIs and infrastructure observations.

Vendor attribution study of 19,450 European company websites. Cloudflare is the largest internet-facing infrastructure vendor in every one of seven EU markets.

The claim that Europe has no cybersecurity vendors is measurable. When you measure it, it does not hold up. A working list across 10 categories.

We fingerprinted 9,916 European organisations. 77% of the Meta Pixel sites we observed also exposed Google Analytics, and the lift table shows why.

A 2,165-entity snapshot of the Polish public web perimeter. Where European hosting alternatives exist, Polish organisations use them. Where CDN and hosted mail are outsourced, the observed market is exclusively US-headquartered.

MX records for 2,584 SEC EDGAR-linked entities show Proofpoint and Mimecast account for 91.4% of non-mailbox secure email gateway matches.

Analysis of ransomware leak-site claims tracked by CipherCue shows 7,760 in 2025, up 30.7% from 2024. Gartner security spend grew 10.1%.