← All technologies

AWS WAF on new websites

Name: AWS WAF adoption on new websites
Creator: StackScope

Amazon Web Services managed web application firewall for filtering HTTP traffic to apps and APIs.

#20 of 398 in Security First seen: Apr 16, 2026 Last seen: Oct 17, 2026 Most recent launch: Any Day Out · Things to do near you, any day, Oct 12, 2026 Website: aws.amazon.com

331 sites

306 found by StackScope, 25 via launch platforms

StackScope Wider Web 292
StackScope Discovery (Indie) 14
Product Hunt 20
Hacker News 3
PeerPush 2

View: All sites All launches Launch platforms StackScope Discovery StackScope Wider Web

AWS WAF appeared on about 100 new sites in the last 30 days.

These figures cover websites that went live since April 2026, not the web as a whole.

Stackdar alerts

Get told when a new site ships with AWS WAF.

100 new sites with AWS WAF first seen in the last 30 days.

Stackdar watches every launch we detect and sends you the ones using AWS WAF, by email, Slack or webhook. On every plan, from £15 a month.

See how alerts work

Share of new sites using AWS WAF

Each dot is one launch day. Line is the 7-day rolling average; weekly averages before July 2026.

0.0%

last 7 days

-0.0pp vs prior week

0.0%

30 days to Oct 16

-0.0pp vs 30 days before

331

sites all time

since Apr 2026

Mar 30, 2026 90 days Oct 16, 2026

The shaded areas were measured against a different set of sites, so the line can step there without AWS WAF itself changing.

Coverage details

Before the dashed line where the dots begin, the line is a weekly average. After it, the last 90 days are shown one day at a time.

Grey: before 8 July 2026, we only tracked launches from launch platforms. From that date we crawl the wider web as well.

Amber: 8 July to 10 September 2026, before we improved our infrastructure to index new sites much sooner, often on the day they go live. Sites found that early often haven't finished setting up, so anything usually added after launch reads lower from 10 September. We record each site as it was when we found it.

The share is a proportion of whatever we were tracking at the time. For a single continuous measure, switch to launch platforms.

How StackScope detects technologies

What kind of sites use AWS WAF

81 sites with a known type, all time

Crypto

22.2%

E-commerce

11.1%

9.9%

Finance

9.9%

Games

9.9%

Education

6.2%

Health

6.2%

Developer Tools

4.9%

Hiring & HR

4.9%

Social

4.9%

Productivity

3.7%

Design

2.5%

Marketing

2.5%

Content

1.2%

Domain endings using AWS WAF

331 sites, all time

.com 58.3%
.uk 6.7%
.xyz 5.7%
.pl 3.9%
.io 3.3%
.org 3.0%
.store 2.7%
.co 1.8%
.live 1.5%
.net 1.5%
.ai 1.2%
.au 0.9%
.fr 0.9%
.app 0.6%

Country

Country likely for 65 of 331 sites (19.6%), all time.

How we know

Country comes from what each site says about itself, such as a company registration, legal terms or a phone number, not just its domain ending. Too few sites state their country plainly for the usual count, so this one also counts single signals: a country domain ending, a phone number (for North America, its area code), a location the site declares in its own page metadata, or a country-specific vendor stack and the page language where they agree and nothing contradicts them. Read these as likely rather than certain.

United Kingdom 30.8%
Poland 20.0%
United States 16.9%
Australia 4.6%
Germany 4.6%
France 4.6%
Canada 3.1%
Italy 3.1%
Netherlands 3.1%
Sweden 3.1%
Bulgaria 1.5%
Brazil 1.5%
Switzerland 1.5%
Japan 1.5%

Green hosting

25 checked sites since Apr 2026.

What this means

The share whose web host The Green Web Foundation lists as running on green energy, against the average for every new site we checked.

AWS WAF 8%
Average 47%

Security leaders

		Tool	% of sitesall time	% of categoryall time
#1	–	HSTS	47.5%	87.5%
#2	–	Cloudflare Bot Management	13.7%	25.2%
#3	–	Google reCAPTCHA	1.9%	3.5%
#4	▲1	Anubis	0.1%	0.2%
#5	▼2	DDoS-Guard	0.1%	0.2%
…
#20	▲1	AWS WAF Current page	<0.1%	<0.1%

Percentages show all-time adoption across the new sites we track: the share of all of them, and of the sites using any Security tool.AWS WAF is typically used alongside HSTS rather than instead of it. All 398 in Security →

Often used with

Tool	Sites	vs all new sites
AWS ALB	141	172x
Amazon Web Services	217	88x
AWS CloudFront	138	39x
AWS Route 53	85	27x
Google Analytics	109	3.2x

Tools that turn up far more often on AWS WAF sites than on new sites in general, and how many times as common each one is there.

Recent launches using AWS WAF

39 of the 331 sites using AWS WAF are product launches we list individually. The other 292 are sites we found crawling the wider web: they count towards the figures above, but we do not publish them one by one. They are included in the StackScope API and in Stackdar alerts. How StackScope Discovery works

Any Day Out · Things to do near you, any day Oct 12, 2026 Also detected