Defaults.Exposed

Defaults.Exposed › Stats › Web servers & hosting

What is the most common web server?

October 2026 census edition

As of October 12, 2026, the most common Server header on the web is "cloudflare" at 21.33% of the 220.4 million domain records in the census's HTTP (Hypertext Transfer Protocol) pass that disclose one, ahead of "nginx" at 17.61% and "apache" at 16.10%, in the Defaults.Exposed census.

Share of the domain records in the census's HTTP pass that disclose a Server header (server values grouped by product, version stripped; about 1.1% re-scan duplicates). /research/server-and-x-powered-by-headers ranks values from a different extraction, per-TLD top 40 over the domains that sent a Server, CSP (Content Security Policy) or X-Powered-By header, so its counts differ from these. CDN (Content Delivery Network) front-ends (for example "cloudflare") mask the origin server behind them.

Most common web server: how it is measured

It comes from the HTTP response pass, which records the headers every reachable host actually returns, including whatever it volunteers about its own software. Every domain in the census is measured directly and counted once.

Server header values are self-reported and can be changed or suppressed, so this ranks what the web says it runs rather than what it provably runs. That caveat does not undermine the figure: the same self-reporting is what an attacker enumerates from, so the reported distribution is the one that matters operationally.

The figure is a name rather than a number: whichever entry holds the largest share of the population being measured, with that share stated beside it.

It moves when hosting platforms change their defaults, and when operators decide whether to advertise their software to every visitor. A version string in a response header is free reconnaissance for anyone hunting unpatched hosts. The number is recomputed from the raw evidence at every edition. What it cannot tell you is where one particular domain stands: for that, see what the headers reveal.

the full grading methodology · the underlying dataset, published open with the counts behind every percentage. If a figure here disagrees with one elsewhere on the site, the dataset is canonical and we would like to know.

Server headerResponsesShare of disclosed
cloudflare47,008,59621.33%
nginx38,826,00517.61%
apache35,478,98816.10%
openresty11,851,7955.38%
litespeed10,372,2124.71%
squarespace9,473,8654.30%
pepyaka7,606,5303.45%
hcdn6,981,9163.17%
namecheap-nginx5,360,5082.43%
vercel4,782,2372.17%
caddy2,608,4651.18%
kestrel2,188,1300.99%

Most common web server: how to cite it

Please cite Defaults.Exposed and link this page. The citation below carries the date.

Defaults.Exposed, "What is the most common web server?" (as of October 12, 2026). https://defaults.exposed/stats/what-is-the-most-common-web-server

Permalink: https://defaults.exposed/stats/what-is-the-most-common-web-server · Machine-readable: /stats/s/top-web-server.json · Licence: open data

Methodology: how we grade the internet · Source data: census data and downloads. Updated with each census edition.

← All statistics · Data & downloads