Defaults.Exposed › Stats › Web security headers
How many websites pass every security-header check?
As of July 28, 2026 · census snapshot 2026-07-28
As of July 28, 2026, only 1,190,045 domains — 0.4% of the 276 million graded in the Defaults.Exposed census — pass every security-header check simultaneously.
Cite this
Statistic current as of July 28, 2026. Recomputed from the live census each edition; the number on this page and the machine-readable twin always match. Please cite Defaults.Exposed and link this page.
Defaults.Exposed, "How many websites pass every security-header check?" (as of July 28, 2026). https://defaults.exposed/stats/how-many-websites-pass-every-security-header-check
Permalink:https://defaults.exposed/stats/how-many-websites-pass-every-security-header-check · Machine-readable:all-headers-pass.json · Licence:open data
Methodology: how we grade the internet · Source data: defaults.exposed/data. Updated with each census edition.
Related statistics
- What percent of websites have a Content-Security-Policy?
- What percent of websites block clickjacking?
- What percent of websites set X-Content-Type-Options?
- What percent of websites set a Referrer-Policy?
- How many websites use cross-origin isolation headers?
- How many websites deploy HTTPS, HSTS and CSP together?