BACK TO UNPWNED
LAST UPDATED: July 18, 2026
REAL-WORLD DATA
STATE OF WEB SECURITY
Aggregated from 400+ eligible production sites. Small comparison groups are suppressed.
400+
SITES SCANNED
78.22/100
AVG SCORE
11.89%
HAVE CRITICAL VULNS
46.92%
HAVE HIGH VULNS
GRADE DISTRIBUTION
38%A
26%B
18%C
6%D
12%F
TOP VULNERABILITIES
1security headers
97.5%
2dns & email security
96%
3vulnerability disclosure
93.4%
4privacy & compliance
40.8%
5api security
28%
6open ports
13.2%
7info disclosure
5.7%
8sensitive data exposure
4.2%
FRAMEWORKS
1Next.js13.6%79.3
2React7%82.1
HOSTING PROVIDERS
1Vercel
23.4%
2Cloudflare Pages
21.2%
AVERAGE SCORE BY APP TYPE
79.4
web app
316 sites
75.4
website
34 sites