Skip to main content

Security statistics

Aggregates from Guard’s public scans of websites’ web, DNS, TLS, email-authentication and privacy controls. Security scores run 0–100, higher is better. NIS2 and GDPR figures are indicative outside views from public signals, not certification.

Directory

All scanned sites, all time

Websites scanned
150,148
Average security score
60of100
Countries
112
Industries
115

Sites by risk level

150,148 rated sites, all time

High risk
24%36,503
Medium risk
66%99,073
Low risk
9%14,240

Scans in the last 7 days

24 scans

NIS2 and GDPR outside view

Indicative, from public signals; not part of the security score

NIS2 outside view ≥ 50
100%
NIS2 outside view, average
76of100
GDPR outside view ≥ 50
91%
GDPR outside view, average
78of100

Control areas

Average score per check, higher is better

AreaAvg scoreSites below 50
NIS2 outside view760%
GDPR outside view789%
SSL / TLS950%
Email authentication840%
DNS950%
Security headers700%
Network exposure964%
Website hygiene940%

Most frequent findings

Sample of up to 5,000 most recent scans

All findings by severity

Critical
1
High
35
Medium
100
Low
228
FindingOccurrences
DNSSEC Not EnabledDNSLow21
CAA Records Not ConfiguredDNSLow21
No accessibility statement link on the home pageaccessibilityLow21
No MTA-STS PolicyEmail authenticationLow19
No security.txt fileWebsite hygieneLow18
Missing Permissions-Policy headerSecurity headersLow17
No IPv6 SupportDNSLow15
Missing Content-Security-Policy headerSecurity headersMedium14
Missing Strict-Transport-Security headerSecurity headersMedium10
Missing X-Frame-Options headerSecurity headersMedium10

By country and industry

Groups with at least 5 scans

Top industries by scans
IndustryScansAvg score
Technology1186