Websites Powered by HSTS
13,510,557 websites tracked using HSTS (Security) · www.rfc-editor.org
HTTP Strict Transport Security (HSTS) is a security policy, sent via the Strict-Transport-Security response header, that tells browsers to only connect to a site over HTTPS. It protects against protocol-downgrade and cookie-hijacking attacks and is a common baseline security measure.
Usage trend
2M
4M
6M
Sep 2022
Sep 2023
Oct 2024
Oct 2025
Oct 2026
Domains observed using HSTS in each month's HTTP Archive crawl,
Sep 2022 to Oct 2026 · peak 4,813,836 in Oct 2026. The tracked total above also
counts sites not re-crawled recently.
Core Web Vitals
LCP 1.7 s
INP 75 ms
CLS 0
TTFB 600 ms
Median site among 4,399,228 HSTS sites with Chrome UX data, p75 values, Oct 2026.
Top countries
United States
1,328,199
United Kingdom
409,707
Germany
403,684
India
401,511
France
320,148
Brazil
290,902
Canada
287,656
Italy
227,001
Sites using HSTS by audience country, Chrome UX Report.
Usage by industry
| Industry | Share | Websites |
|---|---|---|
| Retail | 62.47% | 229,171 |
| Finance and insurance | 59.09% | 12,274 |
| Real estate | 58.49% | 47,479 |
| Automotive | 57.66% | 48,391 |
| Restaurants and food | 56.66% | 88,707 |
| Government | 55.64% | 5,222 |
| Software and apps | 54.58% | 87,553 |
| Non-profit and religious | 54.38% | 5,637 |
| Industrial and manufacturing | 53.30% | 2,725 |
| Professional services | 48.23% | 26,257 |
| Sports and fitness | 46.64% | 10,106 |
| Legal | 44.05% | 12,358 |
Share of each industry's websites with a detected stack that use HSTS; industries come from what sites declare in their own structured data.
Top sites by authority
9+
75% · 279 of 372 sites
8+
77% · 5,906 of 7,677 sites
7+
66% · 30,134 of 45,712 sites
6+
59% · 64,486 of 110,136 sites
5+
49% · 120,212 of 246,751 sites
The share of the web's most authoritative domains, by Open Page Rank tier, seen running HSTS in recent crawls. Only 372 domains worldwide score 9 or higher.
Websites using HSTS
| # | Domain | Open Page RankOPR | Est. monthly visits (US)Visits (US) | Keywords | First seen |
|---|---|---|---|---|---|
| 3701 | nbcnewyork.com | 8.24/10 | 636,600 | 230,103 | Sep 2022 |
| 3702 | aa.org | 8.24/10 | 283,400 | 98,227 | Sep 2022 |
| 3703 | bp.com | 8.24/10 | 1,607,700 | 39,699 | Sep 2022 |
| 3704 | canva.link | 8.24/10 | - | - | Aug 2026 |
| 3705 | beck.de | 8.24/10 | 17 | 2 | Mar 2023 |
| 3706 | finlex.fi | 8.24/10 | 200 | 430 | Sep 2022 |
| 3707 | toronto.edu | 8.24/10 | 1 | 6 | Sep 2022 |
| 3708 | ntu.edu.tw | 8.24/10 | 1,500 | 817 | Sep 2022 |
| 3709 | bath.ac.uk | 8.24/10 | 21,600 | 13,262 | Sep 2022 |
| 3710 | meity.gov.in | 8.24/10 | 1,900 | 2,982 | Oct 2022 |
| 3711 | istruzione.it | 8.24/10 | 1,500 | 514 | Sep 2022 |
| 3712 | houstonchronicle.com | 8.24/10 | 552,200 | 335,850 | Sep 2022 |
| 3713 | t1p.de | 8.24/10 | 3 | 17 | Sep 2022 |
| 3714 | s.id | 8.24/10 | 440 | 901 | Sep 2022 |
| 3715 | healthdata.org | 8.24/10 | 22,000 | 22,703 | Sep 2022 |
| 3716 | ssi.gouv.fr | 8.24/10 | - | - | Sep 2022 |
| 3717 | inps.it | 8.24/10 | 3,600 | 3,743 | Sep 2022 |
| 3718 | publico.pt | 8.24/10 | 3,900 | 10,022 | Sep 2022 |
| 3719 | umaryland.edu | 8.24/10 | 115,000 | 25,947 | Sep 2022 |
| 3720 | treehugger.com | 8.24/10 | 713,300 | 171,323 | Sep 2022 |
| 3721 | umbc.edu | 8.24/10 | 70,000 | 11,630 | Sep 2022 |
| 3722 | bigthink.com | 8.24/10 | 165,900 | 104,413 | Nov 2023 |
| 3723 | boredpanda.com | 8.24/10 | 662,000 | 374,404 | Sep 2022 |
| 3724 | universal-music.co.jp | 8.24/10 | 2,000 | 3,115 | Sep 2022 |
| 3725 | nme.com | 8.24/10 | 723,500 | 429,785 | Sep 2024 |
| 3726 | msstate.edu | 8.24/10 | 95,100 | 16,967 | Sep 2022 |
| 3727 | ascopubs.org | 8.24/10 | 60,000 | 41,831 | Sep 2022 |
| 3728 | aau.dk | 8.24/10 | 210 | 165 | Sep 2022 |
| 3729 | wwf.de | 8.24/10 | 530 | 726 | Sep 2022 |
| 3730 | disney.co.jp | 8.24/10 | 610 | 239 | Mar 2023 |
| 3731 | uni-jena.de | 8.24/10 | 2,000 | 1,033 | Sep 2022 |
| 3732 | du.edu | 8.24/10 | 98,500 | 37,216 | Sep 2022 |
| 3733 | pm.gc.ca | 8.24/10 | 139,300 | 12,730 | Sep 2022 |
| 3734 | uibk.ac.at | 8.24/10 | 7,200 | 4,770 | Sep 2022 |
| 3735 | dcceew.gov.au | 8.24/10 | 101,600 | 32,057 | Sep 2022 |
| 3736 | augsburger-allgemeine.de | 8.24/10 | 4,200 | 7,142 | Sep 2022 |
| 3737 | gazeta.pl | 8.24/10 | 380 | 383 | Sep 2022 |
| 3738 | mixi.jp | 8.24/10 | 39 | 124 | Apr 2026 |
| 3739 | wayne.edu | 8.24/10 | 157,300 | 20,945 | Sep 2022 |
| 3740 | aninews.in | 8.24/10 | 17,900 | 27,612 | Sep 2022 |
| 3741 | unr.edu | 8.24/10 | 321,100 | 76,915 | Sep 2022 |
| 3742 | labiennale.org | 8.24/10 | 27,900 | 9,998 | Sep 2022 |
| 3743 | iss.it | 8.24/10 | 430 | 270 | Sep 2022 |
| 3744 | migros.ch | 8.24/10 | 1,900 | 4,229 | Sep 2022 |
| 3745 | pap.pl | 8.24/10 | 2,000 | 3,013 | Sep 2022 |
| 3746 | tga.gov.au | 8.24/10 | 83,300 | 60,806 | Sep 2022 |
| 3747 | kingcounty.gov | 8.24/10 | 763,400 | 268,597 | Sep 2022 |
| 3748 | boell.de | 8.24/10 | 3,800 | 3,251 | Sep 2022 |
| 3749 | airnow.gov | 8.24/10 | 1,348,000 | 92,960 | Sep 2022 |
| 3750 | curtin.edu.au | 8.24/10 | 8,500 | 7,713 | Sep 2022 |
| 3751 | polisen.se | 8.24/10 | 1,500 | 1,581 | Sep 2022 |
| 3752 | gda.pl | 8.24/10 | - | - | Sep 2022 |
| 3753 | hiroshima.lg.jp | 8.24/10 | - | - | Jun 2023 |
| 3754 | ntsb.gov | 8.24/10 | 197,000 | 22,542 | Aug 2024 |
| 3755 | kyoto.lg.jp | 8.24/10 | - | - | Sep 2022 |
| 3756 | uned.es | 8.24/10 | 2,000 | 3,725 | Sep 2022 |
| 3757 | expo2025.or.jp | 8.24/10 | 31,200 | 2,692 | Sep 2022 |
| 3758 | unesp.br | 8.24/10 | - | 2 | Sep 2022 |
| 3759 | uj.edu.pl | 8.24/10 | 360 | 132 | Sep 2022 |
| 3760 | mbs.jp | 8.24/10 | 180 | 164 | Sep 2022 |
| 3761 | centrepompidou.fr | 8.24/10 | 31,800 | 6,253 | Sep 2022 |
| 3762 | nameshift.com | 8.23/10 | - | - | Dec 2024 |
| 3763 | liadm.com | 8.23/10 | - | - | Jun 2023 |
| 3764 | carrierzone.com | 8.23/10 | - | - | Oct 2023 |
| 3765 | juuuport.de | 8.23/10 | 4 | 20 | Sep 2022 |
| 3766 | piano.io | 8.23/10 | 1,400 | 1,953 | Sep 2022 |
| 3767 | indiamart.com | 8.23/10 | 51,500 | 240,930 | Sep 2022 |
| 3768 | zj.gov.cn | 8.23/10 | 6 | 10 | Sep 2022 |
| 3769 | kinopoisk.ru | 8.23/10 | 113,700 | 69,404 | Sep 2022 |
| 3770 | gd.gov.cn | 8.23/10 | 8 | 9 | Sep 2022 |
| 3771 | xcelenergy.com | 8.23/10 | 60,100 | 2,642 | Sep 2022 |
| 3772 | lycos.com | 8.23/10 | 6,600 | 319 | Sep 2022 |
| 3773 | eurid.eu | 8.23/10 | 160 | 63 | Sep 2022 |
| 3774 | tidyverse.org | 8.23/10 | 1,700 | 1,152 | Sep 2022 |
| 3775 | bolt.new | 8.23/10 | 2,900 | 2,888 | Dec 2024 |
| 3776 | fly.io | 8.23/10 | 4,000 | 5,381 | Sep 2022 |
| 3777 | coachingfederation.org | 8.23/10 | 38,300 | 10,584 | Sep 2022 |
| 3778 | wildberries.ru | 8.23/10 | 3,000 | 8,217 | Sep 2022 |
| 3779 | yubico.com | 8.23/10 | 416,400 | 10,675 | Sep 2022 |
| 3780 | globalsign.com | 8.23/10 | 8,000 | 3,575 | Sep 2022 |
| 3781 | cxl.com | 8.23/10 | 22,900 | 9,713 | Sep 2022 |
| 3782 | limesurvey.org | 8.23/10 | 6,500 | 4,330 | Sep 2022 |
| 3783 | xn--80aapampemcchfmo7a3c9ehj.xn--p1ai | 8.23/10 | - | 17 | Sep 2026 |
| 3784 | isc.org | 8.23/10 | 4,300 | 692 | Sep 2022 |
| 3785 | podium.com | 8.23/10 | 34,500 | 270 | Sep 2022 |
| 3786 | sourceware.org | 8.23/10 | 6,200 | 1,951 | Sep 2022 |
| 3787 | hrmos.co | 8.23/10 | 27 | 73 | Sep 2022 |
| 3788 | jobvite.com | 8.23/10 | 6,500 | 1,824 | Sep 2022 |
| 3789 | opensource.com | 8.23/10 | 66,700 | 35,460 | Sep 2022 |
| 3790 | welcometothejungle.com | 8.23/10 | 35,600 | 14,382 | Sep 2022 |
| 3791 | bybit.com | 8.23/10 | 30,900 | 12,078 | Sep 2022 |
| 3792 | smu.edu.sg | 8.23/10 | 3,700 | 1,696 | Sep 2022 |
| 3793 | astral.sh | 8.23/10 | 1,000 | 374 | May 2023 |
| 3794 | sidn.nl | 8.23/10 | 450 | 381 | Sep 2022 |
| 3795 | pscp.tv | 8.23/10 | 2,200 | 918 | Sep 2022 |
| 3796 | mysanantonio.com | 8.23/10 | 369,900 | 210,112 | Mar 2023 |
| 3797 | jameda.de | 8.23/10 | 88 | 708 | Sep 2022 |
| 3798 | rospotrebnadzor.ru | 8.23/10 | 4 | 5 | Sep 2022 |
| 3799 | eye-able.com | 8.23/10 | 860 | 365 | Aug 2024 |
| 3800 | playwright.dev | 8.23/10 | 33,800 | 61,951 | Nov 2022 |
Open Page Rank is the domain's authority score (0 to 10, from the open web link graph); the list is ordered by it and covers sites seen in recent crawls. Visits and keywords are estimated US organic search figures.
Download top 10,000 as CSV (zip) →
Columns: domain, Open Page Rank, first seen, last seen, industry (from the site's own structured data, blank when none).
Compare HSTS
- HSTS vs reCAPTCHA
- HSTS vs Cloudflare Bot Management
- HSTS vs Really Simple SSL & Security
- HSTS vs DDoS-Guard
- HSTS vs Cloudflare Turnstile