BACK TO UNPWNED
LAST UPDATED: June 5, 2026
REAL-WORLD DATA
STATE OF WEB SECURITY
Aggregated from 1,000+ real site scans. No synthetic benchmarks.
1,000+
SITES SCANNED
72.03/100
AVG SCORE
6.9%
HAVE CRITICAL VULNS
57.3%
HAVE HIGH VULNS
GRADE DISTRIBUTION
7%A
25%B
36%C
15%D
10%F
TOP VULNERABILITIES
1dns & email security
60.5%
2security headers
59.7%
3api security
48.3%
4privacy & compliance
35.9%
5cloud storage
7.9%
6sensitive data exposure
3.9%
7authentication & authorization
3.3%
8secrets & credentials
3.3%
FRAMEWORKS
1Vercel7.4%74.7
2Lovable6.5%69.8
3Next.js4.3%77.7
4cloudflare3.8%73.8
5WordPress3%71.7
6Base442.1%62.2
HOSTING PROVIDERS
1Vercel
23.4%
2Cloudflare
14.3%
3Cloudflare Pages
5.7%
4Netlify
1.6%
5Render
0.6%
6Railway
0.4%
AVERAGE SCORE BY APP TYPE
75.7
ecommerce
295 sites
68.1
ai app
91 sites
71.2
web app
31 sites
72.9
website
10 sites
62
blog
3 sites