BACK TO UNPWNED
LAST UPDATED: August 4, 2026
REAL-WORLD DATA
STATE OF WEB SECURITY
Aggregated from 500+ eligible production sites. Small comparison groups are suppressed.
500+
SITES SCANNED
78.66/100
AVG SCORE
11.31%
HAVE CRITICAL VULNS
45.83%
HAVE HIGH VULNS
GRADE DISTRIBUTION
39%A
26%B
18%C
6%D
11%F
TOP VULNERABILITIES
1security headers
97.4%
2dns & email security
93.8%
3vulnerability disclosure
93.1%
4privacy & compliance
40.9%
5api security
26.2%
6open ports
12.5%
7info disclosure
5.8%
8sensitive data exposure
4%
FRAMEWORKS
1Next.js14.9%80.2
2React6.5%82.1
HOSTING PROVIDERS
1Vercel
22.8%
2Cloudflare Pages
19.8%
AVERAGE SCORE BY APP TYPE
79.9
web app
335 sites
75.9
website
40 sites
76
blog
30 sites