{
  "id": "fully-exposed",
  "url": "https://defaults.exposed/stats/how-many-domains-have-zero-security-controls",
  "question": "How many domains have zero baseline security controls?",
  "answer": "As of July 28, 2026, 23,298,293 domains — 8.5% of the 276 million graded in the Defaults.Exposed census — deploy none of the five baseline controls (SPF, enforcing DMARC, DNSSEC, HTTPS, HSTS).",
  "value": 23298293,
  "formatted": "23,298,293",
  "unit": "count",
  "values": {
    "COUNT": {
      "value": 23298293,
      "formatted": "23,298,293"
    },
    "PCT": {
      "value": 8.451629783149933,
      "formatted": "8.5"
    },
    "TOTALM": {
      "value": 275666275,
      "formatted": "276 million"
    }
  },
  "asOf": "2026-07-28",
  "alternates": [
    {
      "lang": "de",
      "url": "https://defaults.exposed/de/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "es",
      "url": "https://defaults.exposed/es/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "nl",
      "url": "https://defaults.exposed/nl/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "pt",
      "url": "https://defaults.exposed/pt/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "ru",
      "url": "https://defaults.exposed/ru/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "fr",
      "url": "https://defaults.exposed/fr/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "zh",
      "url": "https://defaults.exposed/zh/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "it",
      "url": "https://defaults.exposed/it/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "pl",
      "url": "https://defaults.exposed/pl/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "ja",
      "url": "https://defaults.exposed/ja/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "ar",
      "url": "https://defaults.exposed/ar/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "sv",
      "url": "https://defaults.exposed/sv/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "cs",
      "url": "https://defaults.exposed/cs/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "id",
      "url": "https://defaults.exposed/id/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "da",
      "url": "https://defaults.exposed/da/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "hu",
      "url": "https://defaults.exposed/hu/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "tr",
      "url": "https://defaults.exposed/tr/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "ro",
      "url": "https://defaults.exposed/ro/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "no",
      "url": "https://defaults.exposed/no/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "fa",
      "url": "https://defaults.exposed/fa/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "ko",
      "url": "https://defaults.exposed/ko/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "el",
      "url": "https://defaults.exposed/el/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "fi",
      "url": "https://defaults.exposed/fi/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "vi",
      "url": "https://defaults.exposed/vi/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "ms",
      "url": "https://defaults.exposed/ms/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "uk",
      "url": "https://defaults.exposed/uk/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "sk",
      "url": "https://defaults.exposed/sk/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "he",
      "url": "https://defaults.exposed/he/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "lt",
      "url": "https://defaults.exposed/lt/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "et",
      "url": "https://defaults.exposed/et/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "sr",
      "url": "https://defaults.exposed/sr/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "sl",
      "url": "https://defaults.exposed/sl/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "hr",
      "url": "https://defaults.exposed/hr/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "hi",
      "url": "https://defaults.exposed/hi/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "bn",
      "url": "https://defaults.exposed/bn/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "th",
      "url": "https://defaults.exposed/th/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "bg",
      "url": "https://defaults.exposed/bg/stats/how-many-domains-have-zero-security-controls"
    },
    {
      "lang": "zht",
      "url": "https://defaults.exposed/zht/stats/how-many-domains-have-zero-security-controls"
    }
  ],
  "source": "Defaults.Exposed census",
  "dataset": "https://defaults.exposed/data",
  "methodology": "https://defaults.exposed/en/methodology",
  "license": "https://defaults.exposed/license",
  "citation": "Defaults.Exposed, \"How many domains have zero baseline security controls?\" (as of July 28, 2026). https://defaults.exposed/stats/how-many-domains-have-zero-security-controls"
}