Updated

Technology · Web Development

HSTS

rfc-editor.org

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS belongs toSecuritycategory.

1,637websites

use it — 64.1% of the 2,555 websites we scanned in the last 12 months

#1of 29

tools in its category seen in our scans (we recognize 116)

671public pages

on UptimeCard — open any of them to see how that site is doing

Used on more than half of the websites we scan (64.1%) — and those sites load in 4.3 s, about the same as every other site (4.3 s). Installing it does not make a site noticeably slower.

60.81% of all websites we track run HSTS

At a glance

UptimeCard's own scans and tests of 2,555 websites · refreshed weekly

How HSTS sites scoreout of 100 · hover or tap a score for details

49PerformancePooraverage site: 5090AccessibilityGoodaverage site: 8993Best practicesGoodaverage site: 9392SEOGoodaverage site: 92

Page load time

Loads about as fast as the average site

HSTS sites
4.3 s
All sites
4.3 s

Most HSTS sites load in 3.1–6.5 s. Home page weight: 3.3 MB vs 3.3 MB for all sites. 591 public sites measured.

Where are they hosted?

Mostly Amazon Web Services and Cloudflare

  • Amazon Web Services32%
  • Cloudflare28%
  • Fastly6%
  • Google Cloud4%
  • Other29%
United States 58%Canada 22%Germany 3%

Who uses it?

Technology and Software is the biggest group

Technology and Software60%
Business Services12%
Software as a Service (SaaS)6%
Educational Resources4%

Share of 670 classified public sites. “× average” compares with all 961 public sites.

Browser-security check

36% of graded sites pass

63of 176 score B or better

Rates each site’s own security settings, not HSTS. 176 public sites graded so far.

Usually installed alongside

The bigger the bubble, the more of the 1,637 HSTS sites also run the tool. Colour shows what the tool does. Hover or tap a bubble for details.

Google Tag Manager58%Google Analytics52%Linkedin Insight Tag21%Facebook Pixel19%OneTrust20%Microsoft Advertising15%DoubleClick Floodlight12%HubSpot12%
Tag managerAnalyticsCookie consentAdvertisingMarketing

Similar tools in its category

Security: 116 tools known, 29 seen in our scans

reCAPTCHA509 sitesAlternativeCloudflare Bot Management381 sitesAlternativeAkamai Bot Manager152 sitesAlternativeCloudflare Turnstile87 sitesAlternativeImperva46 sitesAlternativeClickCease22 sitesAlternativePerimeterX18 sitesAlternativehCaptcha16 sitesAlternativeDataGrail8 sitesUsed togetherForter5 sitesUsed together

How websites combine HSTS with other tools

Relationships found on the websites that use it, from the same map status pages show.

Complements another tool 169Integrates with another 82Needs another tool 53Built on a platform 37

Questions about HSTS

How many websites use HSTS?
We found HSTS on 1,637 of the 2,555 websites we scanned in the last 12 months (64.1%). 671 of them have a public status page.
What are the alternatives to HSTS?
Other security tools we recognize include reCAPTCHA, Cloudflare Bot Management, Akamai Bot Manager, Cloudflare Turnstile.

Is your website built with HSTS?

UptimeCard checks it around the clock, tells you the minute it stops answering, and gives your visitors a status page.

Monitor my site freeCreate a status page