Skip to main content

Public scan trends

Live Website Security Statistics

See real security trends from websites scanned by ZeriFlow.

Updated Oct 18, 2026. Data is cached and shown as aggregate, privacy-safe statistics.

Completed scans

1,221

Completed website scans included in the public aggregate view.

Average score

71.7/100

Average security score across completed scans available to the public aggregate.

Average duration

28.3s

Average scan runtime calculated from completed scan timestamps.

Failed scans

81

Scans that failed before completion, shown only as a count.

Security benchmarks

What stronger websites score

These thresholds are calculated from completed ZeriFlow scans only. They are anonymous aggregate benchmarks, not a public leaderboard.

Top 10%

92+

Websites at or above this score are in the strongest benchmark group.

Top 25%

89+

A practical target for teams fixing high-impact configuration gaps.

Top 50%

74+

The approximate median score among completed scans in the benchmark set.

Bottom 25%

59+

Scores at or below this range usually indicate multiple fixable issues.

Score distribution

How scanned websites score

Critical

0-39

30

3%

Needs work

40-59

240

24%

Good

60-79

307

30.7%

Strong

80-100

423

42.3%

Common issues

Top security checks that fail

These are aggregate failure patterns only. ZeriFlow does not expose individual scan reports, user identities, or private findings on this page.

Check nameCategoryFailure countFailure rateFix guide
No public aggregate failure data is available yet.

Recent public scores

Recently scanned website scores

Recent rows show sanitized hostnames only. Private-looking, staging, preview, localhost, IP, admin, dashboard, auth, and internal domains are excluded.

DomainScoreLabelDate
ddfire.gov.uk92/100StrongOct 17, 2026
white-water-044ad5803.6.azurestaticapps.net94/100StrongOct 16, 2026
plex.themasternet.eu76/100GoodOct 15, 2026
derivo.club86/100StrongOct 15, 2026
aesirx.io92/100StrongOct 14, 2026
sweepers.com86/100StrongOct 13, 2026
esd.wsd.gov.hk72/100GoodOct 13, 2026
logicianpos.base44.app92/100StrongOct 12, 2026
media.tanggle.io91/100StrongOct 12, 2026
evantics.in92/100StrongOct 11, 2026
nav.xcvtc.edu.cn72/100GoodOct 11, 2026
isacai.co.uk82/100StrongOct 10, 2026
app.plakat-kompass.de92/100StrongOct 10, 2026
central.ecinc.us91/100StrongOct 10, 2026
businesshub.maxis.com.my73/100GoodOct 9, 2026
wio.io92/100StrongOct 9, 2026
cyberchecknow.com92/100StrongOct 9, 2026
online.hartlepool.gov.uk87/100StrongOct 8, 2026
tremontelo.pt89/100StrongOct 8, 2026
trial.ircep.gov.in74/100GoodOct 8, 2026

What these statistics mean

ZeriFlow website scans use a deterministic security engine to check public website configuration, including security headers, TLS/SSL, DNS, cookies, email security, SEO, accessibility, performance, and information disclosure signals.

The statistics on this page are aggregated and sanitized. They are useful for understanding common website security trends, but they do not reveal who ran a scan, expose private scan reports, or publish full findings for any individual user.

A low score does not mean a website has been exploited, and a high score does not replace manual security testing. Use ZeriFlow to catch common misconfigurations and recurring regressions, then pair it with expert review for high-risk systems.

Want to see your score?

Run a free ZeriFlow scan to get your website security score, prioritized findings, and practical remediation guidance.

FAQ

Are these statistics live?

They are refreshed on a cache interval, currently every 20 minutes, to keep the page useful without adding unnecessary database load.

Is user data exposed?

No. The page does not show emails, user IDs, private report IDs, dashboard data, or individual scan report links.

Why are some recent scans hidden?

ZeriFlow excludes private-looking, internal, staging, preview, localhost, IP, admin, dashboard, and auth-related hostnames from the public recent scores table.

Can I improve my website score?

Yes. Run a free scan, review prioritized findings, apply the suggested fixes, and rescan after deploying changes.