Celebrating 27 Years

Celebrating 27 Years – Announcing the new GeoTrust Horizon® platform. Learn More

GEOTRUST RESEARCH · OCTOBER 2026 CRAWL

The State of SSL/TLS

We used GeoTrust SSL Monitor to analyze the security of the world's 1,000,000 most-visited websites.

INDUSTRY
  • All industries1,000,000
  • Adult25,205
  • Cloud & Infrastructure53,759
  • E-commerce & Retail153,639
  • Education104,381
  • Finance34,943
  • Gaming & Gambling91,102
  • Government22,430
  • Healthcare43,301
  • Media & Social122,588
  • News & Publishing34,946
  • Software & Internet234,505
  • Telecom7,357
  • Travel & Local59,026
  • Other12,818
REGION
  • All regions1,000,000
  • North America151,666
  • South America36,166
  • Europe261,572
  • Asia180,128
  • Middle East23,626
  • Africa11,295
  • Oceania14,128
  • Unknown321,408
RANK
  • All ranks1,000,000
  • top 1k781
  • 1k–10k7,514
  • 10k–100k77,557
  • 100k+914,148

Showing 1,000,000 of 1,000,000 websites

Retired cryptography

Legacy protocols & insecure ciphers

Outdated SSL/TLS versions still offered

Many sites accept older protocols, but legacy protocol support is often a deliberate reach decision, not neglect.

SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% SSLv2 offering: 0% 0%SSLv2 offering0 of 973,441 deep-scanned websites
SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% SSLv3 offering: 0.4% 0.4%SSLv3 offering3,796 of 973,441 deep-scanned websites
TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% TLS 1.0 offering: 34.9% 34.9%TLS 1.0 offering339,634 of 973,441 deep-scanned websites
TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% TLS 1.1 offering: 36.5% 36.5%TLS 1.1 offering354,819 of 973,441 deep-scanned websites

Denominator: deep-scanned websites · n = 973,441

View as table
MeasureShareSitesn
SSLv2 offering0%0973,441
SSLv3 offering0.4%3,796973,441
TLS 1.0 offering34.9%339,634973,441
TLS 1.1 offering36.5%354,819973,441

Insecure cipher suites offered

Weak cipher categories a server still accepts.

NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% NULL cipher family: 0% 0%NULL cipher family292 of 973,441 deep-scanned websites
anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% anonymous cipher family: 0.1% 0.1%anonymous cipher family681 of 973,441 deep-scanned websites
EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% EXPORT cipher family: 0% 0%EXPORT cipher family97 of 973,441 deep-scanned websites
LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% LOW cipher family: 0.9% 0.9%LOW cipher family8,566 of 973,441 deep-scanned websites
3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 3DES cipher family: 10.6% 10.6%3DES cipher family102,893 of 973,441 deep-scanned websites
RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% RC4 cipher family: 0.9% 0.9%RC4 cipher family8,566 of 973,441 deep-scanned websites
obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% obsoleted CBC cipher family: 72.3% 72.3%obsoleted CBC cipher family703,700 of 973,441 deep-scanned websites

Denominator: deep-scanned websites · n = 973,441

View as table
MeasureShareSitesn
NULL cipher family0%292973,441
anonymous cipher family0.1%681973,441
EXPORT cipher family0%97973,441
LOW cipher family0.9%8,566973,441
3DES cipher family10.6%102,893973,441
RC4 cipher family0.9%8,566973,441
obsoleted CBC cipher family72.3%703,700973,441
Modern cryptography

Best practice protocols and ciphers

Adoption of recommended protocols and ciphers

How widely are modern protocols adopted?

TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% TLS 1.2 offering: 99.3% 99.3%TLS 1.2 offering966,822 of 973,441 deep-scanned websites
TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% TLS 1.3 offering: 89.5% 89.5%TLS 1.3 offering870,743 of 973,441 deep-scanned websites
Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% Encrypted Client Hello: 23.8% 23.8%Encrypted Client Hello231,484 of 973,441 deep-scanned websites
Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% Forward secrecy: 99.9% 99.9%Forward secrecy972,273 of 973,441 deep-scanned websites
strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% strong forward-secrecy cipher family: 99.8% 99.8%strong forward-secrecy cipher family971,397 of 973,441 deep-scanned websites

Denominator: deep-scanned websites · n = 973,441

Adoption of modern TLS versions and forward secrecy is strong

View as table
MeasureShareSitesn
TLS 1.2 offering99.3%966,822973,441
TLS 1.3 offering89.5%870,743973,441
Encrypted Client Hello23.8%231,484973,441
Forward secrecy99.9%972,273973,441
strong forward-secrecy cipher family99.8%971,397973,441
Ratings

SSL/TLS grade distribution

The overall security grade websites received

Based on all factors combined (protocols, ciphers, exploits, etc.)

A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% A+: 53% 53%A+515,634 of 973,441 deep-scanned websites
A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% A / A−: 7.6% 7.6%A / A−73,765 of 973,441 deep-scanned websites
B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% B or worse: 36% 36%B or worse350,458 of 973,441 deep-scanned websites
Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% Untrusted / mismatch: 3.4% 3.4%Untrusted / mismatch33,581 of 973,441 deep-scanned websites

Denominator: deep-scanned websites · n = 973,441

View as table
CategorySitesShare
A+515,63453%
A / A−73,7657.6%
B or worse350,45836%
Untrusted / mismatch33,5813.4%
Vulnerability conditions

Exploit prerequisites detected

Each bar is the share of deep-scanned websites where a prerequisite condition is present at any severity — real-world exploitation typically requires additional factors a black-box scan can't verify.

Prerequisite conditions across the top 973,441 deep scans

Share of deep-scanned websites where each of the 17 named checks finds its prerequisite condition, at any severity. Prerequisite conditions, not confirmed exploitability; serious-severity shares are in the open data.

BREACH prerequisite: 73.2%; n=973,441 deep-scanned websitesBREACH prerequisite73.2%LUCKY13 prerequisite: 72.3%; n=973,441 deep-scanned websitesLUCKY13 prerequisite72.3%BEAST prerequisite: 34.9%; n=973,441 deep-scanned websitesBEAST prerequisite34.9%SWEET32 prerequisite: 10.6%; n=973,441 deep-scanned websitesSWEET32 prerequisite10.6%secure_client_renego prerequisite: 1%; n=973,441 deep-scanned websitessecure_client_renego prer…1%RC4 prerequisite: 0.9%; n=973,441 deep-scanned websitesRC4 prerequisite0.9%POODLE_SSL prerequisite: 0.4%; n=973,441 deep-scanned websitesPOODLE_SSL prerequisite0.4%ROBOT prerequisite: 0.2%; n=973,441 deep-scanned websitesROBOT prerequisite0.2%LOGJAM prerequisite: 0%; n=973,441 deep-scanned websitesLOGJAM prerequisite0%CCS prerequisite: 0%; n=973,441 deep-scanned websitesCCS prerequisite0%DROWN prerequisite: 0%; n=973,441 deep-scanned websitesDROWN prerequisite0%winshock prerequisite: 0%; n=973,441 deep-scanned websiteswinshock prerequisite0%FREAK prerequisite: 0%; n=973,441 deep-scanned websitesFREAK prerequisite0%secure_renego prerequisite: 0%; n=973,441 deep-scanned websitessecure_renego prerequisite0%CRIME prerequisite: 0%; n=973,441 deep-scanned websitesCRIME prerequisite0%heartbleed prerequisite: 0%; n=973,441 deep-scanned websitesheartbleed prerequisite0%ticketbleed prerequisite: 0%; n=973,441 deep-scanned websitesticketbleed prerequisite0%

Denominator: deep-scanned websites · n = 973,441

View as table
MeasureValuen
BREACH prerequisite73.2%973,441
LUCKY13 prerequisite72.3%973,441
BEAST prerequisite34.9%973,441
SWEET32 prerequisite10.6%973,441
secure_client_renego prerequisite1%973,441
RC4 prerequisite0.9%973,441
POODLE_SSL prerequisite0.4%973,441
ROBOT prerequisite0.2%973,441
LOGJAM prerequisite0%973,441
CCS prerequisite0%973,441
DROWN prerequisite0%973,441
winshock prerequisite0%973,441
FREAK prerequisite0%973,441
secure_renego prerequisite0%973,441
CRIME prerequisite0%973,441
heartbleed prerequisite0%973,441
ticketbleed prerequisite0%973,441