100%
HTTPS homepage
1,272 / 1,277
91%
HTTP → HTTPS redirect
1,087 / 1,198
96%
TLS 1.3
1,545 / 1,612
77%
HSTS
979 / 1,272
Certificate authorities
- 1Let's Encrypt31%507
- 2DigiCert22%354
- 3Google Trust Services21%332
- 4Amazon8.3%133
- 5Sectigo7.1%114
- 6GlobalSign5.2%84
- 7Other1.7%28
- 8GoDaddy / Starfield1.7%27
- 9Entrust0.6%10
- 10Microsoft0.2%4
- 11Cloudflare0.2%3
- 12SwissSign<0.1%1
Share of 1,612 sites in the sample.
By market
| Metric | UK brands | United Kingdom | Global |
|---|---|---|---|
| HTTPS homepage | 100% | 99% | 99% |
| HTTP → HTTPS redirect | 91% | 89% | 85% |
| TLS 1.3 | 96% | 97% | 90% |
| Let's Encrypt certificate | 31% | 64% | 29% |
| HSTS | 77% | 50% | 53% |
| HSTS preload | 24% | 14% | 17% |
| Invalid certificate | 0.9% | 1% | 2.4% |
| Certificate expires in < 14 days | 1.5% | 0.3% | 1.1% |
Certificate lifetime
1%≤ 31
55%32–90
0.1%91–100
34%101–200
9.9%201–398
0%399–800
0%> 800
Days · Share of 1,598 sites in the sample.
TLS version
- 1TLSv1.396%1,545
- 2TLSv1.24.2%67
Share of 1,612 sites in the sample.
Cipher suites
- 1TLS_AES_256_GCM_SHA38471%1,149
- 2TLS_AES_128_GCM_SHA25624%390
- 3ECDHE-RSA-AES128-GCM-SHA2562.2%36
- 4ECDHE-RSA-AES256-GCM-SHA3841.1%17
- 5ECDHE-ECDSA-AES128-GCM-SHA2560.6%9
- 6TLS_CHACHA20_POLY1305_SHA2560.4%6
- 7ECDHE-ECDSA-AES256-GCM-SHA3840.2%4
- 8ECDHE-RSA-AES256-SHA384<0.1%1
Share of 1,612 sites in the sample.
Our crawler: 1,277 sites · UK brands · updated 13 Nov 2026 · Methodology
Want your brand’s website benchmarked?
We compare your site with your category on security, speed, email and SEO — and fix what lags behind.