54%
HSTS
4,640 / 8,519
29%
Content-Security-Policy
2,529 / 8,580
54%
X-Content-Type-Options
4,675 / 8,580
49%
X-Frame-Options
4,187 / 8,580
By market
| Metric | Global | Netherlands | United Kingdom | Italy | Spain | Japan | Latin America |
|---|---|---|---|---|---|---|---|
| HSTS | 53% | 54% | 54% | 40% | 50% | 33% | 44% |
| HSTS preload | 17% | 16% | 14% | 11% | 15% | 5% | 15% |
| Content-Security-Policy | 29% | 29% | 33% | 22% | 28% | 13% | 29% |
| X-Frame-Options | 44% | 49% | 52% | 39% | 44% | 38% | 40% |
| X-Content-Type-Options | 45% | 54% | 56% | 41% | 46% | 38% | 43% |
| Referrer-Policy | 25% | 36% | 29% | 21% | 24% | 11% | 24% |
| Permissions-Policy | 12% | 16% | 13% | 10% | 11% | 3% | 13% |
| Cross-Origin-Opener-Policy | 4% | 6.2% | 4.9% | 3.4% | 2.8% | 0.8% | 3.7% |
| Server version exposed | 11% | 13% | 8.1% | 15% | 11% | 11% | 15% |
| X-Powered-By exposed | 19% | 23% | 21% | 25% | 28% | 14% | 25% |
| All cookies Secure | 45% | 51% | 45% | 37% | 43% | 38% | 43% |
Security headers
- 1X-Content-Type-Options54%4,675
- 2Strict-Transport-Security54%4,640
- 3X-Frame-Options49%4,187
- 4Referrer-Policy36%3,060
- 5X-XSS-Protection33%2,852
- 6Content-Security-Policy29%2,529
- 7Report-To26%2,234
- 8NEL24%2,096
- 9Permissions-Policy16%1,377
- 10COOP6.2%536
- 11CSP Report-Only5.1%434
- 12CORP2%168
- 13COEP0.9%79
Share of 8,580 sites in the sample.
X-Powered-By values
- 1PHP7.6%655
- 2Nextjs3%259
- 3PHP/, PleskLin2.7%232
- 4PleskLin2.3%201
- 5ASPNET1.8%153
- 6Nuxt0.9%77
- 7Express0.7%59
- 8—0.6%48
- 9WP Engine0.2%14
- 10Acorn (Laravel )0.2%14
Share of 8,580 sites in the sample.
Our crawler: 8,580 sites · Netherlands · updated 23 Oct 2026 · Methodology
Lots of domains, little time?
We review your whole domain portfolio and fix DNS and email security.