Celebrating 27 Years

Celebrating 27 Years – Announcing the new GeoTrust Horizon® platform. Learn More

GEOTRUST RESEARCH · OCTOBER 2026 CRAWL

The State of SSL/TLS

We used GeoTrust SSL Monitor to analyze the security of the world's 1,000,000 most-visited websites.

INDUSTRY
  • All industries1,000,000
  • Adult25,205
  • Cloud & Infrastructure53,759
  • E-commerce & Retail153,639
  • Education104,381
  • Finance34,943
  • Gaming & Gambling91,102
  • Government22,430
  • Healthcare43,301
  • Media & Social122,588
  • News & Publishing34,946
  • Software & Internet234,505
  • Telecom7,357
  • Travel & Local59,026
  • Other12,818
REGION
  • All regions1,000,000
  • North America151,666
  • South America36,166
  • Europe261,572
  • Asia180,128
  • Middle East23,626
  • Africa11,295
  • Oceania14,128
  • Unknown321,408
RANK
  • All ranks1,000,000
  • top 1k781
  • 1k–10k7,514
  • 10k–100k77,557
  • 100k+914,148

Showing 1,000,000 of 1,000,000 websites

Operational controls

Modern HTTPS hygiene

Adoption of modern HTTPS practices

Core protections that every site can add.

HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% HTTPS redirects: 78.6% 78.6%HTTPS redirects785,700 of 1,000,000 websites
HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% HTTP/2 adoption: 85.8% 85.8%HTTP/2 adoption835,602 of 973,441 deep-scanned websites
HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% 34.4%HSTS adoption344,100 of 1,000,000 websites
CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% 6.3%CAA adoption62,800 of 1,000,000 websites
OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% 8.3%OCSP stapling81,282 of 973,441 deep-scanned websites
HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% 9.4%HSTS preload directive93,900 of 1,000,000 websites

Denominators: websites / deep-scanned websites — each measure states its own

View as table
MeasureShareSitesn
HTTPS redirects78.6%785,7001,000,000
HTTP/2 adoption85.8%835,602973,441
HSTS adoption34.4%344,1001,000,000
CAA adoption6.3%62,8001,000,000
OCSP stapling8.3%81,282973,441
HSTS preload directive9.4%93,9001,000,000
HSTS

Sending the header vs committing to it

How many sites send an HSTS header vs. how many are preloaded.

Not affected by the filter above.

HSTS adoption

Sending the header is common; committing to the preload list is not.

HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% HSTS adoption: 34.4% 34.4%HSTS adoption344,100 of 1,000,000 websites
HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% HSTS preload directive: 9.4% 9.4%HSTS preload directive93,900 of 1,000,000 websites

Denominator: websites · n = 1,000,000

View as table
MeasureShareSitesn
HSTS adoption34.4%344,1001,000,000
HSTS preload directive9.4%93,9001,000,000

HSTS adoption by country

34.4% of 1,000,000 — HSTS adoption

web average = 34.4%United States: HSTS adoption 53.3%; n=130,147United States53.3%Australia: HSTS adoption 47.6%; n=11,595Australia47.6%Germany: HSTS adoption 47.5%; n=40,422Germany47.5%France: HSTS adoption 45.6%; n=21,177France45.6%Canada: HSTS adoption 45.2%; n=13,890Canada45.2%Spain: HSTS adoption 42.6%; n=13,647Spain42.6%India: HSTS adoption 41%; n=23,441India41%United Kingdom: HSTS adoption 36.4%; n=46,415United Kingdom36.4%Brazil: HSTS adoption 36.4%; n=22,071Brazil36.4%Netherlands: HSTS adoption 33.2%; n=24,701Netherlands33.2%Indonesia: HSTS adoption 32%; n=19,004Indonesia32%Poland: HSTS adoption 31.5%; n=12,411Poland31.5%Italy: HSTS adoption 31.4%; n=17,020Italy31.4%Japan: HSTS adoption 28.8%; n=27,446Japan28.8%China: HSTS adoption 26.8%; n=28,552China26.8%Russia: HSTS adoption 23.4%; n=40,882Russia23.4%Unknown: HSTS adoption 23%; n=324,353Unknown23%
web average = 34.4%

Countries with 10,000+ sites in dataset

Denominator: websites · n per cohort in the table

View as table
CohortSharevs benchmarkn
United States53.3%+18.9pp130,147
Australia47.6%+13.2pp11,595
Germany47.5%+13.1pp40,422
France45.6%+11.2pp21,177
Canada45.2%+10.8pp13,890
Spain42.6%+8.2pp13,647
India41%+6.5pp23,441
United Kingdom36.4%+2pp46,415
Brazil36.4%+2pp22,071
Netherlands33.2%−1.2pp24,701
Indonesia32%−2.4pp19,004
Poland31.5%−2.9pp12,411
Italy31.4%−3pp17,020
Japan28.8%−5.6pp27,446
China26.8%−7.7pp28,552
Russia23.4%−11.1pp40,882
Unknown23%−11.4pp324,353

HSTS adoption by industry

Share of websites sending an HSTS policy.

web average = 34.4%Finance: 49.6; +15.2pp vs web average = 34.4% (better); n=34943 Finance +15.2ppE-commerce & Retail: 47.7; +13.3pp vs web average = 34.4% (better); n=153639 E-commerce & Retail +13.3ppGovernment: 46.3; +11.9pp vs web average = 34.4% (better); n=22430 Government +11.9ppHealthcare: 44.8; +10.4pp vs web average = 34.4% (better); n=43301 Healthcare +10.4ppTelecom: 38.2; +3.8pp vs web average = 34.4% (better); n=7357 Telecom +3.8ppTravel & Local: 35.8; +1.4pp vs web average = 34.4% (better); n=59026 Travel & Local +1.4ppEducation: 32.9; −1.5pp vs web average = 34.4% (worse); n=104381 Education −1.5ppSoftware & Internet: 32.8; −1.6pp vs web average = 34.4% (worse); n=234505 Software & Internet −1.6ppNews & Publishing: 32.8; −1.6pp vs web average = 34.4% (worse); n=34946 News & Publishing −1.6ppAdult: 28.8; −5.6pp vs web average = 34.4% (worse); n=25205 Adult −5.6ppMedia & Social: 27.3; −7.1pp vs web average = 34.4% (worse); n=122588 Media & Social −7.1ppCloud & Infrastructure: 24.8; −9.6pp vs web average = 34.4% (worse); n=53759 Cloud & Infrastructure −9.6ppGaming & Gambling: 22.3; −12.1pp vs web average = 34.4% (worse); n=91102 Gaming & Gambling −12.1ppOther: 19.7; −14.7pp vs web average = 34.4% (worse); n=12818 Other −14.7pp
Better than benchmarkWorse than benchmark

Denominator: websites · n per cohort in the table

Finance leads at 49.6%; Other trails at 19.7%.

View as table
SliceSharevs benchmarkn
Finance49.6%+15.2pp34,943
E-commerce & Retail47.7%+13.3pp153,639
Government46.3%+11.9pp22,430
Healthcare44.8%+10.4pp43,301
Telecom38.2%+3.8pp7,357
Travel & Local35.8%+1.4pp59,026
Education32.9%−1.5pp104,381
Software & Internet32.8%−1.6pp234,505
News & Publishing32.8%−1.6pp34,946
Adult28.8%−5.6pp25,205
Media & Social27.3%−7.1pp122,588
Cloud & Infrastructure24.8%−9.6pp53,759
Gaming & Gambling22.3%−12.1pp91,102
Other19.7%−14.7pp12,818

HSTS adoption by edge provider

Share of websites sending an HSTS policy.

web average = 34.4%fastly: 73.2; +38.8pp vs web average = 34.4% (better); n=14984 fastly +38.8ppakamai: 58.3; +23.9pp vs web average = 34.4% (better); n=16020 akamai +23.9ppazure-front-door: 53.4; +19pp vs web average = 34.4% (better); n=14942 azure-front-door +19ppother-cdn: 48.6; +14.2pp vs web average = 34.4% (better); n=31639 other-cdn +14.2ppcloudfront: 37.9; +3.5pp vs web average = 34.4% (better); n=5921 cloudfront +3.5ppcloudflare: 35.2; +0.8pp vs web average = 34.4% (better); n=420717 cloudflare +0.8ppnone: 30.5; −3.9pp vs web average = 34.4% (worse); n=488816 none −3.9ppgoogle: 17.3; −17.1pp vs web average = 34.4% (worse); n=6961 google −17.1pp
Better than benchmarkWorse than benchmark

Denominator: websites · n per cohort in the table

fastly leads at 73.2%; google trails at 17.3%.

View as table
SliceSharevs benchmarkn
fastly73.2%+38.8pp14,984
akamai58.3%+23.9pp16,020
azure-front-door53.4%+19pp14,942
other-cdn48.6%+14.2pp31,639
cloudfront37.9%+3.5pp5,921
cloudflare35.2%+0.8pp420,717
none30.5%−3.9pp488,816
google17.3%−17.1pp6,961
Edge-driven adoption

HTTP/3 and OCSP stapling are often implemented at the edge

Not affected by the filter above.

HTTP/3 by edge provider

Advertised via the HTTPS DNS record or Alt-Svc — a CDN-driven adoption curve.

web average = 45.2%cloudflare: 83.5; +38.2pp vs web average = 45.2% (better); n=419551 cloudflare +38.2ppgoogle: 53.3; +8.1pp vs web average = 45.2% (better); n=6802 google +8.1ppcloudfront: 41.6; −3.6pp vs web average = 45.2% (worse); n=5920 cloudfront −3.6ppother-cdn: 29.8; −15.4pp vs web average = 45.2% (worse); n=31530 other-cdn −15.4ppakamai: 24.4; −20.8pp vs web average = 45.2% (worse); n=15946 akamai −20.8ppfastly: 19; −26.3pp vs web average = 45.2% (worse); n=14964 fastly −26.3ppnone: 14.6; −30.7pp vs web average = 45.2% (worse); n=463955 none −30.7ppazure-front-door: 2.6; −42.6pp vs web average = 45.2% (worse); n=14773 azure-front-door −42.6pp
Better than benchmarkWorse than benchmark

Denominator: deep-scanned websites · n per cohort in the table

cloudflare leads at 83.5%; azure-front-door trails at 2.6%.

View as table
SliceSharevs benchmarkn
cloudflare83.5%+38.2pp419,551
google53.3%+8.1pp6,802
cloudfront41.6%−3.6pp5,920
other-cdn29.8%−15.4pp31,530
akamai24.4%−20.8pp15,946
fastly19%−26.3pp14,964
none14.6%−30.7pp463,955
azure-front-door2.6%−42.6pp14,773

OCSP stapling by edge provider

Share of deep-scanned websites observed stapling OCSP.

web average = 8.3%akamai: 59.4; +51pp vs web average = 8.3% (better); n=15946 akamai +51ppcloudfront: 59.2; +50.9pp vs web average = 8.3% (better); n=5920 cloudfront +50.9ppazure-front-door: 49; +40.6pp vs web average = 8.3% (better); n=14773 azure-front-door +40.6ppfastly: 19.4; +11pp vs web average = 8.3% (better); n=14964 fastly +11ppnone: 10.4; +2pp vs web average = 8.3% (better); n=463955 none +2ppcloudflare: 2.3; −6.1pp vs web average = 8.3% (worse); n=419551 cloudflare −6.1ppgoogle: 1.6; −6.8pp vs web average = 8.3% (worse); n=6802 google −6.8ppother-cdn: 1.3; −7.1pp vs web average = 8.3% (worse); n=31530 other-cdn −7.1pp
Better than benchmarkWorse than benchmark

Denominator: deep-scanned websites · n per cohort in the table

akamai leads at 59.4%; other-cdn trails at 1.3%.

View as table
SliceSharevs benchmarkn
akamai59.4%+51pp15,946
cloudfront59.2%+50.9pp5,920
azure-front-door49%+40.6pp14,773
fastly19.4%+11pp14,964
none10.4%+2pp463,955
cloudflare2.3%−6.1pp419,551
google1.6%−6.8pp6,802
other-cdn1.3%−7.1pp31,530