Skip to content
An independent index of 1,651 brand websites — platforms, security, email and SEOWeb indexAdvertiseContact
coolbrands
Find a brand
coolbrands
Get in touch
  1. Home
  2. Data
  3. Security headers
1,277 sitesUK brands

Security headers statistics on brand websites: HSTS, CSP

HSTS, CSP, X-Frame-Options and other protective headers.

77%
HSTS
979 / 1,272
48%
Content-Security-Policy
615 / 1,277
71%
X-Content-Type-Options
910 / 1,277
64%
X-Frame-Options
814 / 1,277

By market

MetricUK brandsUnited KingdomGlobal
HSTS77%50%53%
HSTS preload24%14%17%
Content-Security-Policy48%29%30%
X-Frame-Options64%53%44%
X-Content-Type-Options71%57%47%
Referrer-Policy36%34%27%
Permissions-Policy20%14%13%
Cross-Origin-Opener-Policy4.4%8.7%4.2%
Server version exposed4.8%7.9%10%
X-Powered-By exposed17%20%19%
All cookies Secure46%52%47%

Security headers

  1. 1Strict-Transport-Security77%979
  2. 2X-Content-Type-Options71%910
  3. 3X-Frame-Options64%814
  4. 4Content-Security-Policy48%615
  5. 5X-XSS-Protection44%556
  6. 6Referrer-Policy36%464
  7. 7Permissions-Policy20%253
  8. 8Report-To15%190
  9. 9NEL12%159
  10. 10CSP Report-Only4.7%60
  11. 11COOP4.4%56
  12. 12CORP2.3%30
  13. 13COEP1.1%14

Share of 1,277 sites in the sample.

X-Powered-By values

  1. 1Nextjs4.7%60
  2. 2WP Engine2.5%32
  3. 3PHP2.5%32
  4. 4ASPNET1.7%22
  5. 5Express1.3%16
  6. 6Nuxt0.7%9
  7. 7WordPress VIP <https://wpvipcom>0.6%8
  8. 8—0.5%6
  9. 9PHP/, PleskLin0.5%6
  10. 10NIMHOST0.3%4

Share of 1,277 sites in the sample.

Our crawler: 1,277 sites · UK brands · updated 13 Nov 2026 · Methodology

Want your brand’s website benchmarked?

We compare your site with your category on security, speed, email and SEO — and fix what lags behind.

Get in touchServices