Websites Powered by HSTS
13,510,547 websites tracked using HSTS (Security) · www.rfc-editor.org
HTTP Strict Transport Security (HSTS) is a security policy, sent via the Strict-Transport-Security response header, that tells browsers to only connect to a site over HTTPS. It protects against protocol-downgrade and cookie-hijacking attacks and is a common baseline security measure.
Usage trend
2M
4M
6M
Sep 2022
Sep 2023
Oct 2024
Oct 2025
Oct 2026
Domains observed using HSTS in each month's HTTP Archive crawl,
Sep 2022 to Oct 2026 · peak 4,813,836 in Oct 2026. The tracked total above also
counts sites not re-crawled recently.
Core Web Vitals
LCP 1.7 s
INP 75 ms
CLS 0
TTFB 600 ms
Median site among 4,386,327 HSTS sites with Chrome UX data, p75 values, Sep 2026.
Top countries
United States
1,338,613
United Kingdom
411,483
India
404,554
Germany
400,616
France
326,363
Brazil
292,843
Canada
290,713
Italy
229,495
Sites using HSTS by audience country, Chrome UX Report.
Usage by industry
| Industry | Share | Websites |
|---|---|---|
| Retail | 62.47% | 229,171 |
| Finance and insurance | 59.09% | 12,274 |
| Real estate | 58.49% | 47,479 |
| Automotive | 57.66% | 48,391 |
| Restaurants and food | 56.66% | 88,707 |
| Government | 55.64% | 5,222 |
| Software and apps | 54.58% | 87,553 |
| Non-profit and religious | 54.38% | 5,637 |
| Industrial and manufacturing | 53.30% | 2,725 |
| Professional services | 48.23% | 26,257 |
| Sports and fitness | 46.64% | 10,106 |
| Legal | 44.05% | 12,358 |
Share of each industry's websites with a detected stack that use HSTS; industries come from what sites declare in their own structured data.
Top sites by authority
9+
75% · 279 of 372 sites
8+
77% · 5,906 of 7,677 sites
7+
66% · 30,134 of 45,712 sites
6+
59% · 64,486 of 110,136 sites
5+
49% · 120,212 of 246,751 sites
The share of the web's most authoritative domains, by Open Page Rank tier, seen running HSTS in recent crawls. Only 372 domains worldwide score 9 or higher.
Websites using HSTS
| # | Domain | Open Page RankOPR | Est. monthly visits (US)Visits (US) | Keywords | First seen |
|---|---|---|---|---|---|
| 3501 | kodansha.co.jp | 8.26/10 | 28 | 52 | Sep 2022 |
| 3502 | unifr.ch | 8.26/10 | 2,900 | 1,156 | Sep 2022 |
| 3503 | zeldman.com | 8.25/10 | 160 | 107 | Mar 2024 |
| 3504 | apollographql.com | 8.25/10 | 18,700 | 3,729 | Sep 2022 |
| 3505 | websitedemos.net | 8.25/10 | 23 | 155 | Jan 2025 |
| 3506 | loopia.se | 8.25/10 | 130 | 49 | Sep 2022 |
| 3507 | transloadit.com | 8.25/10 | 1,200 | 996 | Sep 2022 |
| 3508 | esrb.org | 8.25/10 | 84,900 | 41,531 | Jun 2026 |
| 3509 | feishu.cn | 8.25/10 | 250 | 745 | Sep 2022 |
| 3510 | mux.com | 8.25/10 | 7,300 | 3,712 | Sep 2022 |
| 3511 | abtasty.com | 8.25/10 | 11,400 | 2,255 | Jun 2023 |
| 3512 | joomag.com | 8.25/10 | 96 | 125 | Sep 2022 |
| 3513 | supabase.com | 8.25/10 | 31,400 | 53,344 | Sep 2022 |
| 3514 | betterstack.com | 8.25/10 | 23,400 | 18,491 | Sep 2022 |
| 3515 | cloudera.com | 8.25/10 | 3,900 | 3,506 | Sep 2022 |
| 3516 | hse.ru | 8.25/10 | 1,500 | 2,325 | Sep 2022 |
| 3517 | dynatrace.com | 8.25/10 | 23,800 | 11,707 | Sep 2022 |
| 3518 | swift.org | 8.25/10 | 13,600 | 1,398 | Sep 2022 |
| 3519 | netcraft.com | 8.25/10 | 1,500 | 1,532 | Sep 2022 |
| 3520 | hostgator.com | 8.25/10 | 57,400 | 14,216 | Sep 2022 |
| 3521 | domaintools.com | 8.25/10 | 1,900 | 1,017 | Sep 2022 |
| 3522 | kajabi.com | 8.25/10 | 8,500 | 7,412 | Sep 2022 |
| 3523 | grubhub.com | 8.25/10 | 5,087,100 | 1,354,156 | Sep 2022 |
| 3524 | linode.com | 8.25/10 | 21,300 | 21,696 | Sep 2022 |
| 3525 | luckyorange.com | 8.25/10 | 960 | 267 | Sep 2022 |
| 3526 | fillout.com | 8.25/10 | 8,600 | 9,316 | Oct 2022 |
| 3527 | openclaw.ai | 8.25/10 | - | - | Feb 2026 |
| 3528 | acortar.link | 8.25/10 | 110 | 84 | Sep 2022 |
| 3529 | siriusxm.com | 8.25/10 | 1,735,900 | 187,049 | Sep 2022 |
| 3530 | nielseniq.com | 8.25/10 | 13,800 | 10,583 | Sep 2022 |
| 3531 | confluent.io | 8.25/10 | 78,000 | 5,981 | Sep 2022 |
| 3532 | freedomscientific.com | 8.25/10 | 13,000 | 4,302 | Sep 2022 |
| 3533 | vse.cz | 8.25/10 | 320 | 216 | Sep 2022 |
| 3534 | bundesumweltministerium.de | 8.25/10 | 2,900 | 1,552 | Jul 2025 |
| 3535 | allstate.com | 8.25/10 | 2,889,800 | 135,815 | Sep 2022 |
| 3536 | roberthalf.com | 8.25/10 | 414,200 | 79,385 | Sep 2022 |
| 3537 | ura.news | 8.25/10 | 290 | 193 | Oct 2025 |
| 3538 | eventscloud.com | 8.25/10 | 12 | 1 | Sep 2022 |
| 3539 | periscope.tv | 8.25/10 | 170 | 35 | Sep 2022 |
| 3540 | cureus.com | 8.25/10 | 173,700 | 188,639 | Sep 2022 |
| 3541 | shoper.pl | 8.25/10 | 79 | 62 | Sep 2022 |
| 3542 | haz.de | 8.25/10 | 560 | 1,377 | Sep 2022 |
| 3543 | carfax.com | 8.25/10 | 18,702,600 | 1,281,065 | Sep 2022 |
| 3544 | omnisend.com | 8.25/10 | 38,900 | 20,660 | Sep 2022 |
| 3545 | aon.com | 8.25/10 | 41,100 | 22,888 | Sep 2022 |
| 3546 | cqc.org.uk | 8.25/10 | 13,600 | 14,760 | Sep 2022 |
| 3547 | utep.edu | 8.25/10 | 186,400 | 42,898 | Sep 2022 |
| 3548 | lazada.co.th | 8.25/10 | 1,900 | 7,247 | Sep 2022 |
| 3549 | granicus.com | 8.25/10 | 11,300 | 3,414 | Sep 2022 |
| 3550 | notes.io | 8.25/10 | 1,900 | 884 | Sep 2022 |
| 3551 | elearningindustry.com | 8.25/10 | 71,000 | 22,400 | Nov 2024 |
| 3552 | state.md.us | 8.25/10 | - | - | Sep 2022 |
| 3553 | lazada.vn | 8.25/10 | 1,300 | 6,306 | Sep 2022 |
| 3554 | uhc.com | 8.25/10 | 1,963,700 | 235,514 | Sep 2022 |
| 3555 | kompas.com | 8.25/10 | 3,500 | 11,149 | Sep 2022 |
| 3556 | nationwidechildrens.org | 8.25/10 | 743,200 | 219,735 | Sep 2022 |
| 3557 | asco.org | 8.25/10 | 21,600 | 11,882 | Sep 2022 |
| 3558 | mercedes-benz.com | 8.25/10 | 186,400 | 15,625 | Sep 2022 |
| 3559 | statesman.com | 8.25/10 | 666,200 | 255,000 | Sep 2022 |
| 3560 | shopee.co.id | 8.25/10 | 27,300 | 103,068 | Sep 2025 |
| 3561 | thriveglobal.com | 8.25/10 | 28,500 | 2,878 | Sep 2022 |
| 3562 | themoviedb.org | 8.25/10 | 25,116,700 | 1,542,798 | Sep 2022 |
| 3563 | lockheedmartin.com | 8.25/10 | 869,300 | 79,863 | Sep 2022 |
| 3564 | blubrry.com | 8.25/10 | 1,200 | 647 | Jan 2025 |
| 3565 | pagesjaunes.fr | 8.25/10 | 8,500 | 31,087 | Sep 2022 |
| 3566 | toyota.com | 8.25/10 | 6,010,700 | 283,955 | Sep 2022 |
| 3567 | archive-it.org | 8.25/10 | 31,300 | 4,250 | Sep 2022 |
| 3568 | brainyquote.com | 8.25/10 | 1,864,300 | 343,079 | Sep 2022 |
| 3569 | news24.com | 8.25/10 | 93,800 | 83,126 | Sep 2022 |
| 3570 | quizlet.com | 8.25/10 | 7,052,100 | 1,611,272 | Sep 2022 |
| 3571 | visa.de | 8.25/10 | 6 | 67 | Sep 2022 |
| 3572 | broadwayworld.com | 8.25/10 | 958,600 | 419,767 | Sep 2023 |
| 3573 | bgbl.de | 8.25/10 | 1 | 14 | Feb 2024 |
| 3574 | chosun.com | 8.25/10 | 268,400 | 143,766 | Sep 2022 |
| 3575 | bundesjustizamt.de | 8.25/10 | 2,300 | 3,387 | Sep 2022 |
| 3576 | conference-board.org | 8.25/10 | 59,500 | 32,782 | Mar 2026 |
| 3577 | naic.org | 8.25/10 | 300 | 126 | Sep 2022 |
| 3578 | quantamagazine.org | 8.25/10 | 85,600 | 26,632 | Sep 2022 |
| 3579 | tugraz.at | 8.25/10 | 1,400 | 989 | Sep 2022 |
| 3580 | cybermalveillance.gouv.fr | 8.25/10 | 440 | 662 | Sep 2022 |
| 3581 | apollo.io | 8.25/10 | 49,000 | 5,651 | Sep 2022 |
| 3582 | kiplinger.com | 8.25/10 | 487,000 | 247,794 | Sep 2022 |
| 3583 | sfr.fr | 8.25/10 | 1,500 | 2,124 | Sep 2022 |
| 3584 | mygov.in | 8.25/10 | 1,900 | 2,221 | Sep 2022 |
| 3585 | wam.go.jp | 8.25/10 | 46 | 21 | Oct 2022 |
| 3586 | sae.org | 8.25/10 | 60,300 | 24,570 | Sep 2022 |
| 3587 | nahb.org | 8.25/10 | 97,300 | 29,858 | Sep 2022 |
| 3588 | rhs.org.uk | 8.25/10 | 439,000 | 246,520 | Sep 2022 |
| 3589 | goodfirms.co | 8.25/10 | 34,100 | 32,695 | Sep 2022 |
| 3590 | canalblog.com | 8.25/10 | 12 | 4 | Jul 2023 |
| 3591 | theiet.org | 8.25/10 | 19,600 | 4,631 | Sep 2022 |
| 3592 | scotsman.com | 8.25/10 | 134,000 | 79,200 | Sep 2022 |
| 3593 | bleacherreport.com | 8.25/10 | 2,652,200 | 853,604 | Sep 2022 |
| 3594 | euskadi.eus | 8.25/10 | 42,700 | 10,687 | Sep 2022 |
| 3595 | cepal.org | 8.25/10 | 12,600 | 10,537 | Sep 2022 |
| 3596 | globaltimes.cn | 8.25/10 | 58,700 | 45,812 | Nov 2023 |
| 3597 | oregonlegislature.gov | 8.25/10 | 60,700 | 19,014 | Sep 2022 |
| 3598 | novascotia.ca | 8.25/10 | 22,700 | 24,976 | Sep 2022 |
| 3599 | dfg.de | 8.25/10 | 1,700 | 1,356 | Dec 2023 |
| 3600 | unaids.org | 8.25/10 | 15,200 | 13,299 | Jul 2025 |
Open Page Rank is the domain's authority score (0 to 10, from the open web link graph); the list is ordered by it and covers sites seen in recent crawls. Visits and keywords are estimated US organic search figures.
Download top 10,000 as CSV (zip) →
Columns: domain, Open Page Rank, first seen, last seen, industry (from the site's own structured data, blank when none).
Compare HSTS
- HSTS vs reCAPTCHA
- HSTS vs Cloudflare Bot Management
- HSTS vs Really Simple SSL & Security
- HSTS vs DDoS-Guard
- HSTS vs Cloudflare Turnstile