Sites using HSTS
HTTP Strict-Transport-Security (RFC 6797): site forbids HTTP downgrade.
Get told when a new site ships with HSTS.
Stackdar watches every launch we detect and sends you the ones using HSTS, by email, Slack or webhook. On every plan, from £15 a month.
See how alerts work1,243,598 sites
1,187,044 found by StackScope, 56,554 via launch platforms
- StackScope Wider Web 912,740
- StackScope Discovery (Indie) 274,304
- Product Hunt 46,167
- PeerPush 4,380
- Hacker News 3,555
- Other 2,452
HSTS has been detected on 1,243,598 launches we've crawled. The 7-day rolling share is 47.9%, up 1.9 percentage points from last week. Most recent detection: Galene — Supervision and release for legal AI, today.
It's most commonly paired with Cloudflare, Tailwind CSS, and Google Fonts. By product type, the launches using it are most often E-commerce (15%), Health (13%), and Productivity (9%). By estimated origin, the United States leads (35%), ahead of India (14%). By domain ending, launches using it are 5.4 times as likely as the average launch to live on a .store domain. The 56,352 scored launches using HSTS average a StackScope score of 6.8 out of 10, against 6.4 across all launches we score.
What kind of products ship with HSTS
443,454 launches
Domain endings using HSTS
1,240,242 sites
- .com 52.32%
- .app 7.15%
- .online 3.91%
- .in 3.29%
- .org 2.64%
- .co 2.60%
- .store 2.57%
- .site 2.40%
- .uk 2.21%
- .ai 2.21%
- .ca 2.16%
- .dev 2.13%
- .xyz 2.10%
- .io 2.07%
- .net 1.66%
Country
9,583 of 1,243,598 sites, where we are confident of the country.
-
United States 35.38%
-
India 13.89%
-
United Kingdom 10.58%
-
Canada 3.22%
-
France 2.94%
-
Australia 2.90%
-
Germany 2.41%
-
Netherlands 2.06%
-
Spain 1.54%
-
Singapore 1.28%
-
Japan 1.19%
-
Brazil 1.17%
-
United Arab Emirates 1.03%
-
Romania 0.99%
-
Poland 0.96%
Share of new sites using HSTS
Each dot is one launch day. Line is the 7-day rolling average; weekly averages before June 2026.
The shaded part of the chart is measured against a different set of sites. Until 8 July 2026 we only tracked launches from launch platforms; from that date we crawl the wider web as well. The share is a proportion of whatever we were tracking at the time, so it can step at that line without the technology itself changing. For a single continuous measure, switch to launch platforms.
How StackScope detects technologies
⋮ Jul 1, 2026: Adoption figures now count launches from launch platforms. Use the source view to include StackScope Discovery.
Security leaders
| Tool | % of launches | % of category | ||
|---|---|---|---|---|
| #1 | – | HSTS Current page | 47.23% | 91.20% |
| #2 | – |
|
11.26% | 21.74% |
| #3 | – |
|
1.82% | 3.51% |
| #4 | – |
|
0.09% | 0.18% |
| #5 | ▲1 |
|
0.07% | 0.13% |
Percentages show adoption among indie launches: the share of all analysed launches, and of launches using any Security tool.HSTS is typically used alongside Cloudflare Bot Management rather than instead of it. All 249 in Security →
Recent launches we can show
330,858 of the 1,243,598 sites using HSTS are product launches we list individually. The other 912,740 are sites we found crawling the wider web: they count towards the figures above, but we do not publish them one by one. How StackScope Discovery works
Showing the most recent 12 of 330,858.
The StackScope API serves all 1,243,598 sites using HSTS, filterable and exportable, from £15 a month.