{
 "metric": "security-headers",
 "segment": "global",
 "anchor": "domain",
 "label": "global domains",
 "population": "domains worldwide",
 "states": [
  "strong",
  "partial",
  "missing"
 ],
 "quiet_failure_states": [
  "partial",
  "missing"
 ],
 "measurement": "Tier 3a; check `Strict-Transport-Security`, `Content-Security-Policy`, `X-Frame-Options` on the homepage response. Denominator: `has_web`.",
 "why_it_matters": "HSTS is what stops the first, downgradeable request; CSP is what limits the damage of injected script. Both are one-line changes, and both are commonly switched off silently by a framework upgrade or a proxy change.",
 "limits": null,
 "data_tier": "http_3a",
 "population_predicate": "has_web",
 "entity_type": "domain",
 "kind": "failure",
 "latest": {
  "day": "2026-08-13",
  "n": 13742,
  "qf_pct": 86.62,
  "ci": [
   86.04,
   87.18
  ],
  "dist": {
   "strong": 13.38,
   "partial": 23.48,
   "missing": 63.14
  },
  "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
 },
 "series": [
  {
   "day": "2026-08-01",
   "n": 5527,
   "qf_pct": 86.77,
   "ci": [
    85.86,
    87.64
   ],
   "dist": {
    "partial": 19.79,
    "missing": 66.98,
    "strong": 13.23
   },
   "snapshot": "common-crawl-domain-stratified-c150-g2500-seed20260729"
  },
  {
   "day": "2026-08-03",
   "n": 5660,
   "qf_pct": 84.75,
   "ci": [
    83.79,
    85.67
   ],
   "dist": {
    "strong": 15.25,
    "partial": 19.65,
    "missing": 65.11
   },
   "snapshot": "common-crawl-domain-stratified-c150-g2500-seed20260729"
  },
  {
   "day": "2026-08-04",
   "n": 13786,
   "qf_pct": 86.75,
   "ci": [
    86.17,
    87.3
   ],
   "dist": {
    "strong": 13.25,
    "partial": 23.39,
    "missing": 63.35
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-08-05",
   "n": 13774,
   "qf_pct": 86.69,
   "ci": [
    86.11,
    87.24
   ],
   "dist": {
    "strong": 13.31,
    "partial": 23.34,
    "missing": 63.34
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-08-06",
   "n": 13781,
   "qf_pct": 85.54,
   "ci": [
    84.94,
    86.12
   ],
   "dist": {
    "strong": 14.46,
    "partial": 22.19,
    "missing": 63.35
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-08-13",
   "n": 13742,
   "qf_pct": 86.62,
   "ci": [
    86.04,
    87.18
   ],
   "dist": {
    "strong": 13.38,
    "partial": 23.48,
    "missing": 63.14
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  }
 ],
 "license": "CC BY 4.0",
 "source": "https://quietfailures.com/datasets/security-headers/global"
}