BACK TO UNPWNED
LAST UPDATED: August 22, 2026
REAL-WORLD DATA
STATE OF WEB SECURITY
Aggregated from 500+ eligible production sites. Small comparison groups are suppressed.
500+
SITES SCANNED
11.56/100
AVG SCORE
11.24%
HAVE CRITICAL VULNS
45.52%
HAVE HIGH VULNS
GRADE DISTRIBUTION
43%A
25%B
17%C
4%D
11%F
TOP VULNERABILITIES
1security headers
97.1%
2vulnerability disclosure
93%
3dns & email security
92.6%
4privacy & compliance
39.2%
5api security
25.1%
6open ports
12.2%
7info disclosure
5.7%
8sensitive data exposure
3.8%
FRAMEWORKS
1Next.js15.2%27.5
2React6.3%4
HOSTING PROVIDERS
1Vercel
23.6%
2Cloudflare Pages
19%
3Render
6.3%
AVERAGE SCORE BY APP TYPE
14.5
web app
349 sites
2.4
website
40 sites
12.8
blog
30 sites