HSTS tracking and usage
Websites using HSTS by countrymarket share
12%
🇺🇸US22%
🇩🇪DE6.1%
🇮🇳IN4.5%
🇬🇧GB2.2%
🇦🇺AU1.7%
🇨🇦CA1.1%
🇳🇱NL1.1%
🇫🇷FRWebsites using HSTS by industrymarket share · top 6 industries
Shopping
Technology & Computing
Software Development
SaaS & Cloud
Fashion & Beauty
Education
0%13%25%38%50%
Download report
We track 26,539 websites using HSTS, along with their country, traffic, industry and platforms. There are 3,189 websites using HSTS in United States.
Filter by country
🇺🇸 United States3,189 sites
🇩🇪 Germany5,943 sites
🇮🇳 India1,632 sites
🇬🇧 United Kingdom1,191 sites
🇦🇺 Australia581 sites
🇨🇦 Canada460 sites
🇳🇱 Netherlands297 sites
🇫🇷 France290 sites
🇮🇩 Indonesia248 sites
🇦🇪 United Arab Emirates196 sites
🇨🇭 Switzerland193 sites
🇮🇹 Italy147 sites
🇪🇸 Spain132 sites
🇦🇹 Austria126 sites
🇧🇷 Brazil122 sites
🇸🇪 Sweden121 sites
🇸🇦 Saudi Arabia111 sites
🇸🇬 Singapore106 sites
🇩🇰 Denmark105 sites
🇵🇰 Pakistan103 sites
🇧🇪 Belgium99 sites
🇵🇱 Poland97 sites
🇷🇴 Romania96 sites
🇿🇦 South Africa91 sites
🇳🇿 New Zealand85 sites
🇳🇴 Norway79 sites
🇧🇩 Bangladesh76 sites
🇹🇷 Turkey74 sites
🇲🇾 Malaysia67 sites
🇮🇷 Iran, Islamic Republic of63 sites
🇵🇹 Portugal61 sites
🇨🇿 Czechia59 sites
🇮🇪 Ireland58 sites
🇪🇬 Egypt55 sites
🇫🇮 Finland55 sites
🇬🇷 Greece49 sites
🇻🇳 Viet Nam49 sites
🇮🇱 Israel46 sites
🇷🇺 Russian Federation46 sites
🇲🇽 Mexico44 sites
🇭🇰 Hong Kong43 sites
🇵🇭 Philippines40 sites
🇨🇳 China38 sites
🇲🇦 Morocco38 sites
🇯🇵 Japan37 sites
🇱🇹 Lithuania36 sites
🇳🇬 Nigeria34 sites
🇭🇺 Hungary31 sites
🇺🇦 Ukraine30 sites
🇱🇰 Sri Lanka29 sites
🇸🇴 Somalia26 sites
🇭🇷 Croatia25 sites
🇹🇭 Thailand25 sites
🇧🇬 Bulgaria24 sites
🇱🇻 Latvia23 sites
🇰🇪 Kenya22 sites
🇪🇪 Estonia20 sites
🇳🇵 Nepal19 sites
🇦🇬 Antigua and Barbuda18 sites
🇷🇸 Serbia17 sites
🇨🇱 Chile15 sites
🇸🇮 Slovenia14 sites
🇦🇷 Argentina13 sites
🇰🇷 Korea, Republic of13 sites
🇨🇾 Cyprus12 sites
🇯🇴 Jordan12 sites
🇮🇸 Iceland11 sites
🇸🇰 Slovakia11 sites
🇹🇳 Tunisia11 sites
🇧🇦 Bosnia and Herzegovina10 sites
🇲🇰 North Macedonia10 sites
🇶🇦 Qatar10 sites
🇹🇿 Tanzania, United Republic of10 sites
🇩🇴 Dominican Republic9 sites
🇬🇭 Ghana9 sites
🇹🇼 Taiwan, Province of China9 sites
🇲🇩 Moldova, Republic of9 sites
🇻🇨 Saint Vincent and the Grenadines9 sites
🇨🇴 Colombia8 sites
🇲🇹 Malta8 sites
🇦🇱 Albania8 sites
🇱🇧 Lebanon7 sites
🇱🇺 Luxembourg7 sites
🇴🇲 Oman7 sites
🇦🇿 Azerbaijan7 sites
🇰🇿 Kazakhstan7 sites
🇩🇿 Algeria7 sites
🇱🇮 Liechtenstein6 sites
🇨🇷 Costa Rica6 sites
🇲🇳 Mongolia6 sites
🇮🇲 Isle of Man6 sites
🇺🇬 Uganda6 sites
🇵🇦 Panama5 sites
🇧🇲 Bermuda5 sites
🇰🇼 Kuwait5 sites
🇪🇹 Ethiopia5 sites
🇰🇬 Kyrgyzstan5 sites
🇵🇪 Peru5 sites
🇯🇲 Jamaica5 sites
🇰🇭 Cambodia4 sites
🇲🇺 Mauritius4 sites
🇲🇸 Montserrat4 sites
🇬🇹 Guatemala4 sites
🇬🇪 Georgia4 sites
🇲🇲 Myanmar4 sites
🇵🇸 Palestine, State of4 sites
🇧🇯 Benin4 sites
🇵🇾 Paraguay4 sites
🇲🇻 Maldives4 sites
🇦🇲 Armenia3 sites
🇳🇦 Namibia3 sites
🇺🇿 Uzbekistan3 sites
🇵🇷 Puerto Rico3 sites
🇹🇹 Trinidad and Tobago3 sites
🇧🇹 Bhutan3 sites
🇺🇾 Uruguay3 sites
🇷🇼 Rwanda3 sites
🇽🇰 Kosovo3 sites
🇧🇭 Bahrain3 sites
🇸🇳 Senegal3 sites
🇦🇴 Angola3 sites
🇨🇲 Cameroon3 sites
🇿🇲 Zambia3 sites
🇸🇻 El Salvador3 sites
🇧🇾 Belarus2 sites
🇲🇼 Malawi2 sites
🇷🇪 Réunion2 sites
🇿🇼 Zimbabwe2 sites
🇸🇨 Seychelles2 sites
🇦🇫 Afghanistan2 sites
🇮🇶 Iraq2 sites
🇬🇮 Gibraltar2 sites
🇫🇯 Fiji2 sites
🇨🇼 Curaçao2 sites
🇸🇾 Syrian Arab Republic2 sites
🇱🇾 Libya2 sites
🇧🇿 Belize2 sites
🇻🇮 Virgin Islands, U.S.1 sites
🇲🇿 Mozambique1 sites
🇬🇦 Gabon1 sites
🇧🇼 Botswana1 sites
🇹🇨 Turks and Caicos Islands1 sites
🇸🇿 Eswatini1 sites
🇧🇸 Bahamas1 sites
🇻🇪 Venezuela, Bolivarian Republic of1 sites
🇸🇽 Sint Maarten (Dutch part)1 sites
🇸🇹 Sao Tome and Principe1 sites
🇭🇹 Haiti1 sites
🇬🇳 Guinea1 sites
🇨🇺 Cuba1 sites
🇯🇪 Jersey1 sites
🇸🇷 Suriname1 sites
🇰🇾 Cayman Islands1 sites
🇹🇬 Togo1 sites
🇦🇩 Andorra1 sites
🇨🇽 Christmas Island1 sites
🇹🇲 Turkmenistan1 sites
🇬🇫 French Guiana1 sites
🇾🇪 Yemen1 sites
🇸🇩 Sudan1 sites
About HSTS
HSTS (HTTP Strict Transport Security) is a security policy mechanism that protects websites against protocol downgrade attacks and cookie hijacking. Implemented by web servers, HSTS enforces communication via HTTPS, ensuring encrypted and secure data transmission. Browsers store HSTS settings for a specified duration, preventing users from inadvertently accessing unsecured versions of a website. HSTS also prevents man-in-the-middle attacks, ensuring users aren't deceived by forged certificates. Overall, HSTS improves web security by enforcing strict HTTPS usage and avoiding insecure HTTP connections.
Category
Official website
www.rfc-editor.org/rfc/rfc6797#section-6.1↗
Websites using HSTS
showing 25 of 26,539| Website | Country | Traffic | Industry |
|---|---|---|---|
| 🇺🇸US | Top 500 | Technology & Computing | |
| 🇺🇸US | Top 500 | Law & Government | |
| 🇺🇸US | Top 500 | Business & Finance | |
| 🇿🇦ZA | Top 500 | Shopping | |
 wordpress.com | 🇺🇸US | Top 500 | Technology & Computing |
| 🇩🇰DK | Top 500 | Technology & Computing | |
| 🇺🇸US | Top 500 | Print & Publishing | |
| 🇺🇸US | Top 500 | Entertainment | |
| 🇺🇸US | Top 500 | Software Development | |
 amazon.de | 🇩🇪DE | Top 500 | Logistics & Shipping |
| 🇺🇸US | Top 500 | Entertainment | |
| 🇺🇸US | Top 500 | Software Development | |
| 🇬🇧GB | Top 500 | News & Weather | |
| 🇬🇧GB | Top 500 | Print & Publishing | |
| 🇺🇸US | Top 500 | Software Development | |
| 🇺🇸US | Top 500 | Technology & Computing | |
| 🇦🇪AE | Top 500 | Technology & Computing | |
| 🇺🇸US | Top 500 | Software Development | |
| 🇺🇸US | Top 500 | SaaS & Cloud | |
| 🇩🇪DE | Top 500 | Technology & Computing | |
| 🇷🇺RU | Top 500 | Technology & Computing | |
| 🇺🇸US | Top 500 | Law & Government | |
| 🇺🇸US | Top 500 | Technology & Computing | |
| - | Top 500 | Technology & Computing | |
| 🇺🇸US | Top 500 | Education |
Showing 25 of 26,539 websitesView detailed list →
Frequently asked
What is HSTS?›
HSTS (HTTP Strict Transport Security) is a web security policy mechanism that helps protect websites against protocol downgrade attacks and cookie hijacking. It ensures that web browsers communicate only through HTTPS with a website, thereby increasing the website's overall security.
How does HSTS work?›
HSTS works by adding a response header to the web server's response. This header, called "Strict-Transport-Security," is recognized by compatible web browsers, which then ensure that all future requests to the website use HTTPS instead of HTTP, and if the HTTPS connection was not successful, the user would not be allowed to access the site.
What are the benefits of using HSTS?›
Using HSTS provides several benefits, such as securing data communication between the browser and server, preventing protocol downgrade attacks, protecting against hijacking of cookies, and ensuring users access the secure version of a site.
How do I enable HSTS on my website?›
Enabling HSTS on your website involves adding the "Strict-Transport-Security" header in your web server's configuration file. This process might differ slightly depending on the web server software you are using (e.g., Apache, Nginx, or others).
Are there any risks associated with HSTS?›
While HSTS enhances a website's security, it's essential to keep in mind that once enabled, disabling it can be difficult. Users who have already interacted with your site will have their browsers enforce HTTPS connections until the HSTS expiry period lapses. Additionally, improper implementation or website misconfiguration can lead to SSL errors, affecting site usability.
