{
 "metric": "security-headers",
 "segment": "us",
 "anchor": "domain",
 "label": "the US (domains)",
 "population": "domains in the US",
 "states": [
  "strong",
  "partial",
  "missing"
 ],
 "quiet_failure_states": [
  "partial",
  "missing"
 ],
 "measurement": "Tier 3a; check `Strict-Transport-Security`, `Content-Security-Policy`, `X-Frame-Options` on the homepage response. Denominator: `has_web`.",
 "why_it_matters": "HSTS is what stops the first, downgradeable request; CSP is what limits the damage of injected script. Both are one-line changes, and both are commonly switched off silently by a framework upgrade or a proxy change.",
 "limits": null,
 "data_tier": "http_3a",
 "population_predicate": "has_web",
 "entity_type": "domain",
 "kind": "failure",
 "latest": {
  "day": "2026-08-13",
  "n": 101,
  "qf_pct": 77.23,
  "ci": [
   68.14,
   84.32
  ],
  "dist": {
   "strong": 22.77,
   "partial": 23.76,
   "missing": 53.47
  },
  "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
 },
 "series": [
  {
   "day": "2026-08-01",
   "n": 40,
   "qf_pct": 85,
   "ci": [
    70.93,
    92.94
   ],
   "dist": {
    "strong": 15,
    "partial": 27.5,
    "missing": 57.5
   },
   "snapshot": "common-crawl-domain-stratified-c150-g2500-seed20260729"
  },
  {
   "day": "2026-08-03",
   "n": 42,
   "qf_pct": 76.19,
   "ci": [
    61.47,
    86.52
   ],
   "dist": {
    "strong": 23.81,
    "partial": 26.19,
    "missing": 50
   },
   "snapshot": "common-crawl-domain-stratified-c150-g2500-seed20260729"
  },
  {
   "day": "2026-08-04",
   "n": 103,
   "qf_pct": 77.67,
   "ci": [
    68.72,
    84.63
   ],
   "dist": {
    "strong": 22.33,
    "partial": 24.27,
    "missing": 53.4
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-08-05",
   "n": 102,
   "qf_pct": 77.45,
   "ci": [
    68.43,
    84.48
   ],
   "dist": {
    "strong": 22.55,
    "partial": 24.51,
    "missing": 52.94
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-08-06",
   "n": 102,
   "qf_pct": 77.45,
   "ci": [
    68.43,
    84.48
   ],
   "dist": {
    "strong": 22.55,
    "partial": 24.51,
    "missing": 52.94
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-08-13",
   "n": 101,
   "qf_pct": 77.23,
   "ci": [
    68.14,
    84.32
   ],
   "dist": {
    "strong": 22.77,
    "partial": 23.76,
    "missing": 53.47
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  }
 ],
 "license": "CC BY 4.0",
 "source": "https://quietfailures.com/datasets/security-headers/us"
}