Skip to main content

Public scan trends

Live Website Security Statistics

See real security trends from websites scanned by ZeriFlow.

Updated Sep 11, 2026. Data is cached and shown as aggregate, privacy-safe statistics.

Completed scans

1,118

Completed website scans included in the public aggregate view.

Average score

69/100

Average security score across completed scans available to the public aggregate.

Average duration

31.3s

Average scan runtime calculated from completed scan timestamps.

Failed scans

80

Scans that failed before completion, shown only as a count.

Security benchmarks

What stronger websites score

These thresholds are calculated from completed ZeriFlow scans only. They are anonymous aggregate benchmarks, not a public leaderboard.

Top 10%

91+

Websites at or above this score are in the strongest benchmark group.

Top 25%

86+

A practical target for teams fixing high-impact configuration gaps.

Top 50%

68+

The approximate median score among completed scans in the benchmark set.

Bottom 25%

58+

Scores at or below this range usually indicate multiple fixable issues.

Score distribution

How scanned websites score

Critical

0-39

32

3.2%

Needs work

40-59

282

28.2%

Good

60-79

348

34.8%

Strong

80-100

338

33.8%

Common issues

Top security checks that fail

These are aggregate failure patterns only. ZeriFlow does not expose individual scan reports, user identities, or private findings on this page.

Check nameCategoryFailure countFailure rateFix guide
No public aggregate failure data is available yet.

Recent public scores

Recently scanned website scores

Recent rows show sanitized hostnames only. Private-looking, staging, preview, localhost, IP, admin, dashboard, auth, and internal domains are excluded.

DomainScoreLabelDate
reports.aviar.nl71/100GoodSep 11, 2026
fadhliakbar.com89/100StrongSep 11, 2026
partsstore.nfi.parts90/100StrongSep 10, 2026
abduahadov.wwwi.uz91/100StrongSep 10, 2026
vms.edl.com.la85/100StrongSep 10, 2026
bismaps.com93/100StrongSep 10, 2026
arkheossacoustics.com87/100StrongSep 10, 2026
glamon.com.br89/100StrongSep 9, 2026
gonative.eg87/100StrongSep 9, 2026
bartenberger.de89/100StrongSep 9, 2026
app.bimjar.com92/100StrongSep 9, 2026
earlybirdiesberlin.de92/100StrongSep 9, 2026
mowatib.com91/100StrongSep 8, 2026
xxi-banorte.com92/100StrongSep 8, 2026
mowatib.com89/100StrongSep 8, 2026
creatorclub.art92/100StrongSep 8, 2026
webcityproperties.com89/100StrongSep 8, 2026
pfadichopfholz.ch89/100StrongSep 8, 2026
fadhliakbar.com89/100StrongSep 7, 2026
instagram.com92/100StrongSep 7, 2026

What these statistics mean

ZeriFlow website scans use a deterministic security engine to check public website configuration, including security headers, TLS/SSL, DNS, cookies, email security, SEO, accessibility, performance, and information disclosure signals.

The statistics on this page are aggregated and sanitized. They are useful for understanding common website security trends, but they do not reveal who ran a scan, expose private scan reports, or publish full findings for any individual user.

A low score does not mean a website has been exploited, and a high score does not replace manual security testing. Use ZeriFlow to catch common misconfigurations and recurring regressions, then pair it with expert review for high-risk systems.

Want to see your score?

Run a free ZeriFlow scan to get your website security score, prioritized findings, and practical remediation guidance.

FAQ

Are these statistics live?

They are refreshed on a cache interval, currently every 20 minutes, to keep the page useful without adding unnecessary database load.

Is user data exposed?

No. The page does not show emails, user IDs, private report IDs, dashboard data, or individual scan report links.

Why are some recent scans hidden?

ZeriFlow excludes private-looking, internal, staging, preview, localhost, IP, admin, dashboard, and auth-related hostnames from the public recent scores table.

Can I improve my website score?

Yes. Run a free scan, review prioritized findings, apply the suggested fixes, and rescan after deploying changes.