Defaults.Exposed › Compare › .app vs .dev
.app vs .dev: which is more secure?
We graded 2,425,305 .app domains and 1,142,657 .dev domains across 34 checks. Data as of 2026-07-29.
The verdict
.dev comes out ahead. 85.6% of .dev domains score grade F (effectively unprotected — can be email-spoofed), versus 88.6% of .app — a 3-point gap. But both leave the clear majority exposed.
The numbers, side by side
| TLD | Domains graded | Grade F (exposed) | Grade A–B (secure) |
|---|---|---|---|
| .app | 2,425,305 | 88.6% | 1.1% |
| .dev | 1,142,657 | 85.6% | 1.8% |
Grade-by-grade breakdown
| Grade | .app | .dev |
|---|---|---|
| A+ | 468 (0%) | 738 (0.1%) |
| A | 1,855 (0.1%) | 2,394 (0.2%) |
| B | 23,596 (1%) | 17,019 (1.5%) |
| C | 93,445 (3.9%) | 50,309 (4.4%) |
| D | 156,505 (6.5%) | 94,435 (8.3%) |
| F | 2,149,436 (88.6%) | 977,762 (85.6%) |
Here's the thing: your domain's security depends on how it is configured, not which ending you picked — even the stronger TLD here leaves most of its domains at grade F. The good news is that almost every problem is free and quick to fix.
Frequently asked questions
Is .app more secure than .dev?
.dev has the lower failure rate in this census edition: 85.6% of graded .dev domains score an F, versus 88.6% for .app — a 3-point gap. As of 2026-07-29.
Does the domain ending decide how secure a site is?
No. Security comes from how each individual domain is configured — SPF, DMARC, DNSSEC, TLS and the rest of the 34 checks — not from the ending itself. The averages here reflect the mix of owners and registrar defaults behind each ending, and even the stronger ending leaves most of its domains exposed.
How many domains are behind this comparison?
2,425,305 graded .app domains and 1,142,657 graded .dev domains, from a census of more than 296 million graded domains. Figures refresh with each census edition; this page reflects the 2026-07-29 snapshot.
Whatever your domain ends in, check it free → and see your grade across all 34 checks (private — only you ever see it).
Full grade breakdowns: .app · .dev · .io vs .dev · .com vs .app