Websites Powered by HSTS
13,172,138 websites tracked using HSTS (Security) · www.rfc-editor.org
HTTP Strict Transport Security (HSTS) is a security policy, sent via the Strict-Transport-Security response header, that tells browsers to only connect to a site over HTTPS. It protects against protocol-downgrade and cookie-hijacking attacks and is a common baseline security measure.
Usage trend
2M
4M
6M
Sep 2022
Sep 2023
Sep 2024
Sep 2025
Sep 2026
Domains observed using HSTS in each month's HTTP Archive crawl,
Sep 2022 to Sep 2026 · peak 4,752,481 in Sep 2026. The tracked total above also
counts sites not re-crawled recently.
Core Web Vitals
LCP 1.7 s
INP 75 ms
CLS 0
TTFB 600 ms
Median site among 4,318,072 HSTS sites with Chrome UX data, p75 values, Aug 2026.
Top countries
United States
1,348,640
United Kingdom
403,486
Germany
403,347
India
400,388
France
317,870
Brazil
290,538
Canada
289,821
Italy
219,709
Sites using HSTS by audience country, Chrome UX Report.
Usage by industry
| Industry | Share | Websites |
|---|---|---|
| Retail | 63.63% | 191,715 |
| Automotive | 60.71% | 42,154 |
| Real estate | 58.43% | 41,435 |
| Finance and insurance | 58.39% | 9,685 |
| Restaurants and food | 56.83% | 77,594 |
| Software and apps | 55.55% | 64,483 |
| Government | 55.54% | 4,464 |
| Non-profit and religious | 54.45% | 4,261 |
| Industrial and manufacturing | 53.20% | 2,308 |
| Professional services | 46.59% | 19,171 |
| Sports and fitness | 45.51% | 7,579 |
| Legal | 43.33% | 10,150 |
Share of each industry's websites with a detected stack that use HSTS; industries come from what sites declare in their own structured data.
Top sites by authority
9+
75% · 279 of 372 sites
8+
77% · 5,896 of 7,677 sites
7+
66% · 30,057 of 45,712 sites
6+
58% · 64,312 of 110,136 sites
5+
49% · 119,764 of 246,751 sites
The share of the web's most authoritative domains, by Open Page Rank tier, seen running HSTS in recent crawls. Only 372 domains worldwide score 9 or higher.
Websites using HSTS
| # | Domain | Open Page RankOPR | Est. monthly visits (US)Visits (US) | Keywords | First seen |
|---|---|---|---|---|---|
| 3001 | jfc.go.jp | 8.32/10 | 45 | 57 | Sep 2022 |
| 3002 | eur.nl | 8.32/10 | 8,800 | 4,656 | Sep 2022 |
| 3003 | stadt-zuerich.ch | 8.32/10 | 1,400 | 1,153 | Sep 2022 |
| 3004 | rijksmuseum.nl | 8.32/10 | 31,100 | 6,477 | Sep 2022 |
| 3005 | childnet.com | 8.31/10 | 3,000 | 2,310 | Sep 2022 |
| 3006 | tiny.cloud | 8.31/10 | 11,800 | 8,956 | Sep 2022 |
| 3007 | churchcenter.com | 8.31/10 | 1,500 | 85 | Sep 2022 |
| 3008 | cafe24.com | 8.31/10 | 6 | 6 | Sep 2022 |
| 3009 | cbr.ru | 8.31/10 | 45,500 | 11,972 | Sep 2022 |
| 3010 | babeljs.io | 8.31/10 | 4,100 | 2,058 | Sep 2022 |
| 3011 | posthog.com | 8.31/10 | 5,200 | 5,311 | Sep 2022 |
| 3012 | mxtoolbox.com | 8.31/10 | 130,700 | 16,977 | Sep 2022 |
| 3013 | codecanyon.net | 8.31/10 | 10,900 | 15,340 | Sep 2022 |
| 3014 | pepsico.com | 8.31/10 | 67,100 | 51,832 | Sep 2022 |
| 3015 | ideal.nl | 8.31/10 | 230 | 208 | Sep 2022 |
| 3016 | 3ds.com | 8.31/10 | 61,300 | 21,868 | Sep 2022 |
| 3017 | raspberrypi.com | 8.31/10 | 252,500 | 70,130 | Sep 2022 |
| 3018 | doctolib.de | 8.31/10 | 230 | 1,079 | Sep 2022 |
| 3019 | agoda.com | 8.31/10 | 1,738,200 | 1,213,645 | Sep 2022 |
| 3020 | ringcentral.com | 8.31/10 | 566,500 | 36,089 | Sep 2022 |
| 3021 | alistapart.com | 8.31/10 | 4,000 | 1,345 | May 2023 |
| 3022 | autonews.com | 8.31/10 | 113,400 | 86,742 | Sep 2022 |
| 3023 | rakuten.com | 8.31/10 | 841,500 | 137,433 | Sep 2022 |
| 3024 | eset.com | 8.31/10 | 67,600 | 18,838 | Sep 2022 |
| 3025 | home-assistant.io | 8.31/10 | 188,500 | 149,033 | Sep 2022 |
| 3026 | qt.io | 8.31/10 | 18,400 | 10,504 | Sep 2022 |
| 3027 | uniswap.org | 8.31/10 | - | 8 | Sep 2022 |
| 3028 | occrp.org | 8.31/10 | 20,500 | 9,473 | Sep 2022 |
| 3029 | lrt.lt | 8.31/10 | 6,100 | 6,442 | Sep 2022 |
| 3030 | networkforgood.com | 8.31/10 | - | - | Sep 2022 |
| 3031 | dailycaller.com | 8.31/10 | 67,100 | 11,530 | Sep 2022 |
| 3032 | awwwards.com | 8.31/10 | 72,000 | 18,906 | Sep 2022 |
| 3033 | mga.org.mt | 8.31/10 | 670 | 402 | Sep 2022 |
| 3034 | dzone.com | 8.31/10 | 20,900 | 37,774 | Nov 2022 |
| 3035 | stackoverflow.co | 8.31/10 | 1,100 | 924 | Sep 2022 |
| 3036 | ul.com | 8.31/10 | 45,600 | 23,537 | Sep 2022 |
| 3037 | porsche.com | 8.31/10 | 939,700 | 121,265 | Sep 2022 |
| 3038 | alliedmarketresearch.com | 8.31/10 | 6,400 | 10,405 | Apr 2026 |
| 3039 | fhfa.gov | 8.31/10 | 67,600 | 20,345 | Sep 2022 |
| 3040 | messefrankfurt.com | 8.31/10 | 2,100 | 791 | Sep 2022 |
| 3041 | abb.com | 8.31/10 | 14,000 | 15,537 | Sep 2022 |
| 3042 | delish.com | 8.31/10 | 3,995,600 | 1,173,979 | Sep 2022 |
| 3043 | wiz.io | 8.31/10 | 44,000 | 17,157 | Sep 2022 |
| 3044 | google.co.kr | 8.31/10 | 650 | 128 | Sep 2022 |
| 3045 | libguides.com | 8.31/10 | - | - | Sep 2022 |
| 3046 | publishersweekly.com | 8.31/10 | 208,900 | 170,234 | Sep 2022 |
| 3047 | veed.io | 8.31/10 | 244,400 | 114,704 | Dec 2022 |
| 3048 | womenshealthmag.com | 8.31/10 | 925,000 | 654,603 | Sep 2022 |
| 3049 | comptia.org | 8.31/10 | 114,300 | 26,830 | Sep 2022 |
| 3050 | benzinga.com | 8.31/10 | 387,900 | 208,175 | Sep 2022 |
| 3051 | penguin.co.uk | 8.31/10 | 161,700 | 76,878 | Sep 2022 |
| 3052 | asha.org | 8.31/10 | 252,400 | 50,669 | Sep 2022 |
| 3053 | post-gazette.com | 8.31/10 | 274,300 | 265,457 | Sep 2022 |
| 3054 | moncompteformation.gouv.fr | 8.31/10 | 430 | 446 | Sep 2022 |
| 3055 | tripadvisor.in | 8.31/10 | 407,800 | 683,694 | Sep 2026 |
| 3056 | cleveland.com | 8.31/10 | 862,300 | 551,230 | Sep 2022 |
| 3057 | eib.org | 8.31/10 | 43,900 | 50,590 | Sep 2022 |
| 3058 | lmu.de | 8.31/10 | 18,700 | 7,012 | Sep 2022 |
| 3059 | aalto.fi | 8.31/10 | 4,800 | 4,406 | Sep 2022 |
| 3060 | mediaset.it | 8.31/10 | - | 1 | Sep 2022 |
| 3061 | newrepublic.com | 8.31/10 | 107,100 | 73,029 | Jan 2023 |
| 3062 | nine.com.au | 8.31/10 | 94,800 | 50,813 | Sep 2022 |
| 3063 | wm.edu | 8.31/10 | 210,900 | 51,291 | Sep 2022 |
| 3064 | chathamhouse.org | 8.31/10 | 85,200 | 35,278 | Sep 2022 |
| 3065 | wvu.edu | 8.31/10 | 89,800 | 17,348 | Sep 2022 |
| 3066 | polskieradio.pl | 8.31/10 | 5,900 | 7,517 | Sep 2022 |
| 3067 | electrek.co | 8.31/10 | 198,200 | 139,146 | Sep 2022 |
| 3068 | oxfam.org | 8.31/10 | 13,900 | 7,210 | Sep 2022 |
| 3069 | uab.edu | 8.31/10 | 332,800 | 129,887 | Sep 2022 |
| 3070 | uniroma1.it | 8.31/10 | 5,100 | 3,214 | Sep 2022 |
| 3071 | neh.gov | 8.31/10 | 216,500 | 37,159 | Sep 2022 |
| 3072 | lamoncloa.gob.es | 8.31/10 | 48,400 | 9,504 | Sep 2022 |
| 3073 | radiko.jp | 8.31/10 | 48 | 99 | Sep 2022 |
| 3074 | persee.fr | 8.31/10 | 5,600 | 15,558 | Sep 2022 |
| 3075 | suntory.co.jp | 8.31/10 | 350 | 279 | Sep 2022 |
| 3076 | united-domains.de | 8.30/10 | 130 | 237 | Sep 2022 |
| 3077 | ncmec.org | 8.30/10 | 39 | 13 | Nov 2024 |
| 3078 | attracta.com | 8.30/10 | 130 | 226 | Sep 2022 |
| 3079 | fpf.org | 8.30/10 | 1,800 | 1,451 | Sep 2022 |
| 3080 | maxmind.com | 8.30/10 | 21,000 | 2,871 | Sep 2022 |
| 3081 | 37signals.com | 8.30/10 | 9,100 | 831 | Oct 2022 |
| 3082 | asa.org.uk | 8.30/10 | 5,900 | 4,049 | Sep 2022 |
| 3083 | contentful.com | 8.30/10 | 23,400 | 7,441 | Sep 2022 |
| 3084 | successfactors.com | 8.30/10 | - | - | Sep 2022 |
| 3085 | eslint.org | 8.30/10 | 11,200 | 12,047 | Sep 2022 |
| 3086 | podia.com | 8.30/10 | 5,400 | 2,810 | Sep 2022 |
| 3087 | matrix.org | 8.30/10 | 8,500 | 3,550 | Sep 2022 |
| 3088 | studiopress.com | 8.30/10 | 1,700 | 580 | Sep 2022 |
| 3089 | brightedge.com | 8.30/10 | 9,800 | 4,007 | Apr 2023 |
| 3090 | anwalt.de | 8.30/10 | 850 | 1,348 | Sep 2022 |
| 3091 | wikimediafoundation.org | 8.30/10 | 23,400 | 5,952 | Sep 2022 |
| 3092 | bio.link | 8.30/10 | 6,600 | 2,961 | Sep 2022 |
| 3093 | samba.org | 8.30/10 | 95,500 | 1,239 | Sep 2022 |
| 3094 | dreamwidth.org | 8.30/10 | 170 | 243 | Jun 2024 |
| 3095 | tsinghua.edu.cn | 8.30/10 | 17,600 | 2,428 | Sep 2022 |
| 3096 | aiga.org | 8.30/10 | 12,000 | 5,966 | Nov 2022 |
| 3097 | cvent.me | 8.30/10 | 9 | 26 | Apr 2026 |
| 3098 | lilly.com | 8.30/10 | 205,900 | 25,401 | Sep 2022 |
| 3099 | alamy.com | 8.30/10 | 2,323,200 | 3,353,709 | Sep 2022 |
| 3100 | helm.sh | 8.30/10 | 45,800 | 15,353 | Sep 2022 |
Open Page Rank is the domain's authority score (0 to 10, from the open web link graph); the list is ordered by it and covers sites seen in recent crawls. Visits and keywords are estimated US organic search figures.
Download top 10,000 as CSV (zip) →
Columns: domain, Open Page Rank, first seen, last seen, industry (from the site's own structured data, blank when none).
Compare HSTS
- HSTS vs reCAPTCHA
- HSTS vs Cloudflare Bot Management
- HSTS vs Really Simple SSL & Security
- HSTS vs DDoS-Guard
- HSTS vs Cloudflare Turnstile