Skip to main content
Public Security Posture Benchmarks

Web Security Leaderboard

Real-world cryptographic posture assessments across leading banks, e-commerce retailers, SaaS infrastructure, and public institutions. Evaluated passively against TLS 1.3, HSTS, CSP, and DMARC enforcement.

Where does your organization rank?
Run an instant, passive cryptographic audit and claim your official Verified Security Badge.
Run Free Domain Audit
# Domain & Sector Grade Score Key Hardening Features Action
1
gov.uk
Public Infrastructure · UK Government
A+ 98 / 100 Strict HSTS Preload · DMARC p=reject · DNSSEC · Strict CSP Audit
2
cloudflare.com
Cloud & Security Infrastructure
A+ 98 / 100 HTTP/3 Alt-Svc · TLS 1.3 · Strict CSP · DNSSEC · Zero Open Ports Audit
3
stripe.com
Financial Technology · Payment Processing
A+ 98 / 100 256-bit ECDSA · HSTS Preload · COOP/CSP · DMARC Enforced Audit
4
github.com
Cloud Development & Version Control
A+ 97 / 100 HSTS 31536000 · Subresource Integrity · Strict Referrer · CAA Audit
5
revolut.com
Digital Banking & Financial Services
A+ 96 / 100 TLS 1.3 · HSTS Preload · DMARC p=reject · CAA Enforced Audit
6
shopify.com
Global E-Commerce Platform
A+ 95 / 100 TLS 1.3 · Strict CSP · HSTS includeSubDomains · CAA Audit
7
kapitalbank.az
Commercial Banking · Azerbaijan
A 92 / 100 Valid TLS Certificate · Strict HSTS · SPF / DMARC Enforced Audit
8
pashabank.az
Corporate & Investment Banking · Azerbaijan
A 90 / 100 TLS 1.3 · Strict Transport Security · CAA Authorizations Audit
9
abb-bank.az
Universal Banking · Azerbaijan
A 90 / 100 TLS 1.3 · HSTS Active · DMARC Policy Active Audit
10
amazon.com
Global Retail & Cloud Marketplace
A 90 / 100 TLS 1.3 · HSTS Active · Strict SPF Email Hardening Audit
11
umico.az
E-Commerce Marketplace · Azerbaijan
B+ 85 / 100 TLS 1.3 · HSTS Active · Clean Reputation Audit
12
edu.az
Education Portal · Ministry of Science & Education
B+ 86 / 100 Valid TLS · HSTS Enabled · SPF Record Active Audit