Stack census— back to the censusSurvey 017 · 08.10.2026

Security

HSTS

603 of 1,193

Found in survey 017. Each line gives the string in that product’s response that put it here — go and look, the response is public.

Abyssaleabyssale.com
  • header — strict-transport-security: max-age=31536000
Arcarc.net
  • header — strict-transport-security: max-age=63072000; includeSubDomains; preload
Bannerbearbannerbear.com
  • header — strict-transport-security: max-age=31536000
beehiivbeehiiv.com
  • header — strict-transport-security: max-age=63072000
Buttondownbuttondown.com
  • header — strict-transport-security: max-age=63072000
Cal.comcal.com
  • header — strict-transport-security: max-age=31536000
Calendlycalendly.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
CleanShot Xcleanshot.com
  • header — strict-transport-security: max-age=63072000; includeSubDomains
Clerkclerk.com
  • header — strict-transport-security: max-age=63072000
Croncron.com
  • header — strict-transport-security: max-age=63072000
Fathomfathomanalytics.com
  • header — strict-transport-security: max-age=63072000
Filloutfillout.com
  • header — strict-transport-security: max-age=63072000
Ghostghost.org
  • header — strict-transport-security: max-age=31536000
Lemon Squeezylemonsqueezy.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains
Linearlinear.app
  • header — strict-transport-security: max-age=63072000; includeSubDomains
Loopsloops.so
  • header — strict-transport-security: max-age=31536000
Acquire.commicroacquire.com
  • header — strict-transport-security: max-age=63072000
Neonneon.tech
  • header — strict-transport-security: max-age=63072000
Netlifynetlify.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Nomad Listnomadlist.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Paddlepaddle.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains
Photo AIphotoai.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Polarpolar.sh
  • header — strict-transport-security: max-age=63072000
PostHogposthog.com
  • header — strict-transport-security: max-age=63072000
Postmarkpostmarkapp.com
  • header — strict-transport-security: max-age=2592000
Raycastraycast.com
  • header — strict-transport-security: max-age=63072000; includeSubDomains; preload
Renderrender.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Resendresend.com
  • header — strict-transport-security: max-age=63072000
SavvyCalsavvycal.com
  • header — strict-transport-security: max-age=31536000
Screen Studioscreenstudio.com
  • header — strict-transport-security: max-age=63072000
Simple Analyticssimpleanalytics.com
  • header — strict-transport-security: max-age=15552000; includeSubDomains
Stytchstytch.com
  • header — strict-transport-security: max-age=63072000; includeSubdomains; preload
Substacksubstack.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Supabasesupabase.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Tursoturso.tech
  • header — strict-transport-security: max-age=63072000
Umamiumami.is
  • header — strict-transport-security: max-age=63072000
Vercelvercel.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Xataxata.io
  • header — strict-transport-security: max-age=63072000
Backupninja0xacab.org
  • header — strict-transport-security: max-age=15768000;includeSubdomains;preload
1time1time.io
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
ACP Adminacp-admin.ch
  • header — strict-transport-security: max-age=31556952
ActiveMQactivemq.apache.org
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Activepiecesactivepieces.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Actualactualbudget.org
  • header — strict-transport-security: max-age=31536000
Admineradminer.org
  • header — strict-transport-security: max-age=604800
AdventureLogadventurelog.app
  • header — strict-transport-security: max-age=63072000
AFFiNE Community Editionaffine.pro
  • header — strict-transport-security: max-age=15552000; includeSubDomains; preload
Apache Airflowairflow.apache.org
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Ajentiajenti.org
  • header — strict-transport-security: max-age=31536000; includeSubdomains; preload
Alephaleph.occrp.org
  • header — strict-transport-security: max-age=15552000; includeSubDomains
Alf.ioalf.io
  • header — strict-transport-security: max-age=31536000
AliasVaultaliasvault.net
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
AlternativeToalternativeto.net
  • header — strict-transport-security: max-age=63072000; includeSubDomains; preload
Anchranchr.io
  • header — strict-transport-security: max-age=63072000; includeSubDomains; preload
AnonAddyanonaddy.com
  • header — strict-transport-security: max-age=63072000; includeSubDomains; preload
Ansibleansible.com
  • header — strict-transport-security: max-age=31536000, max-age=31536000
Answeranswer.apache.org
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Apache Antant.apache.org
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Antvilleantville.org
  • header — strict-transport-security: max-age=15552000; includeSubDomains
Anubisanubis.techaro.lol
  • header — strict-transport-security: max-age=31536000; includeSubDomains
Apostropheapostrophecms.com
  • header — strict-transport-security: max-age=15552000;
Diagrams.netapp.diagrams.net
  • header — strict-transport-security: max-age=31536000; includeSubDomains
Sunshineapp.lizardbyte.dev
  • url — https://app.lizardbyte.dev/
Appsmithappsmith.com
  • header — strict-transport-security: max-age=63072000; includeSubDomains; preload
Aptabaseaptabase.com
  • header — strict-transport-security: max-age=63072000
ArsTechnica OpenForumarstechnica.com
  • header — strict-transport-security: max-age=2592000
Artalkartalk.js.org
  • header — strict-transport-security: max-age=31536000
asciinemaasciinema.org
  • header — strict-transport-security: max-age=31536000; includeSubDomains
Audiobookshelfaudiobookshelf.org
  • header — strict-transport-security: max-age=31536000
Autheliaauthelia.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
auto-mcsauto-mcs.com
  • header — strict-transport-security: max-age=15552000
AWStatsawstats.org
  • header — strict-transport-security: max-age=31536000
b1gMailb1gmail.eu
  • header — strict-transport-security: max-age=15768000; includeSubDomains
SiYuanb3log.org
  • header — strict-transport-security: max-age=15552000; includeSubDomains; preload
Backdrop CMSbackdropcms.org
  • header — strict-transport-security: max-age=300
Bareosbareos.org
  • header — strict-transport-security: max-age=31536000
Bazelbazel.io
  • header — strict-transport-security: max-age=63072000
Bencherbencher.dev
  • url — https://bencher.dev/
BentoPDFbentopdf.com
  • header — strict-transport-security: max-age=63072000
Request Trackerbestpractical.com
  • header — strict-transport-security: max-age=31536000
Beszelbeszel.dev
  • url — https://beszel.dev/
Engity's Bifröstbifroest.engity.org
  • header — strict-transport-security: max-age=31536000
Bigcapitalbigcapital.app
  • header — strict-transport-security: max-age=63072000
Bitcartbitcart.ai
  • header — strict-transport-security: max-age=31536000
bitmagnetbitmagnet.io
  • header — strict-transport-security: max-age=31556952
Bitwardenbitwarden.com
  • header — strict-transport-security: max-age=31557600
Blinkoblinko.space
  • header — strict-transport-security: max-age=63072000
chasquidblitiri.com.ar
  • header — strict-transport-security: max-age=63072000;
Bluditbludit.com
  • header — strict-transport-security: max-age=31557600; includeSubDomains
AsmBBboard.asm32.info
  • header — strict-transport-security: max-age=31536000; includeSubDomains
BookStackbookstackapp.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains
BounCAbounca.org
  • header — strict-transport-security: max-age=31536000
BTCPay Serverbtcpayserver.org
  • header — strict-transport-security: max-age=31556952
Buildbotbuildbot.net
  • header — strict-transport-security: max-age=31536000
BunkerWebbunkerweb.io
  • header — strict-transport-security: max-age=63072000; includeSubDomains; preload
MiroTalk C2Cc2c.mirotalk.com
  • header — strict-transport-security: max-age=63072000; includeSubDomains; preload
Cal.diycal.diy
  • header — strict-transport-security: max-age=63072000
Calagopuscalagopus.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Centrifugocentrifugal.dev
  • url — https://centrifugal.dev/
Cephceph.com
  • header — strict-transport-security: max-age=31536000
CFEnginecfengine.com
  • header — strict-transport-security: max-age=31536000;
changedetection.iochangedetection.io
  • header — strict-transport-security: max-age=63072000
Chartbrewchartbrew.com
  • header — strict-transport-security: max-age=63072000
ChartDBchartdb.io
  • header — strict-transport-security: max-age=31536000
checkmkcheckmk.com
  • header — strict-transport-security: max-age=31536000; includeSubdomains; preload
Chocolateychocolatey.org
  • header — strict-transport-security: max-age=12960000
ChronoFramechronoframe.bh8.ga
  • header — strict-transport-security: max-age=63072000
Chyrp Litechyrplite.net
  • header — strict-transport-security: max-age=31536000
Claperclaper.co
  • header — strict-transport-security: max-age=31536000
Claws Mailclaws-mail.org
  • header — strict-transport-security: max-age=63072000
ClipBucketclipbucket.fr
  • header — strict-transport-security: includeSubDomains; preload; max-age=63072000
Cloudrevecloudreve.org
  • header — strict-transport-security: max-age=10886400; includeSubDomains; preload
CloudSlangcloudslang.io
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
CloudStackcloudstack.apache.org
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
CMS Made Simplecmsmadesimple.org
  • header — strict-transport-security: max-age=31536000; includeSubDomains
Codercoder.com
  • header — strict-transport-security: max-age=63072000
Collabora Online Development Editioncollaboraoffice.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains
Opikcomet.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains
OpenVPNcommunity.openvpn.net
  • header — strict-transport-security: max-age=31536000; preload
Spiceworks Communitycommunity.spiceworks.com
  • header — strict-transport-security: max-age=31536000
Concrete 5 CMSconcretecms.com
  • header — strict-transport-security: max-age=31536000
Consulconsul.io
  • header — strict-transport-security: max-age=63072000
Contaocontao.org
  • header — strict-transport-security: max-age=31536000; includeSubDomains
Converse.jsconversejs.org
  • header — strict-transport-security: max-age=15768000; includeSubDomains
CoreDNScoredns.io
  • header — strict-transport-security: max-age=31536000
CoreShopcoreshop.org
  • header — strict-transport-security: max-age=15724800; includeSubDomains
Countly Community Editioncount.ly
  • header — strict-transport-security: max-age=31536000
CryptPadcryptpad.org
  • header — strict-transport-security: max-age=63072000; includeSubDomains; preload
Cyphtcypht.org
  • header — strict-transport-security: max-age=15768000; includeSubDomains
d8a.techd8a.tech
  • header — strict-transport-security: max-age=31536000; includeSubDomains
Dashydashy.to
  • header — strict-transport-security: max-age=31536000
dayGLANCEdayglance.app
  • header — strict-transport-security: max-age=63072000
DD-WRTdd-wrt.com
  • header — strict-transport-security: max-age=16000000; includeSubDomains; preload;
DDraceNetworkddnet.org
  • header — strict-transport-security: max-age=15768000
DePaydepay.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Funkwhaledev.funkwhale.audio
  • header — strict-transport-security: max-age=63072000; preload
DietPidietpi.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Digiboarddigiboard.app
  • header — strict-transport-security: max-age=15768000
Digipaddigipad.app
  • header — strict-transport-security: max-age=15768000
Digistormdigistorm.app
  • header — strict-transport-security: max-age=31536000; includeSubDomains, max-age=15768000
Digiwalldigiwall.app
  • header — strict-transport-security: max-age=15768000
Pangolindigpangolin.com
  • header — strict-transport-security: max-age=63072000
Apache Directory Serverdirectory.apache.org
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Discount Banditdiscount-bandit.cybrarist.com
  • header — strict-transport-security: max-age=63072000
Discoursediscourse.org
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Dittofeeddittofeed.com
  • header — strict-transport-security: max-age=31536000
parse-dmarcdmarcguard.io
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
Dockerdocker.com
  • header — strict-transport-security: max-age=31622400
DockSTARTerdockstarter.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
docmost Community Editiondocmost.com
  • header — strict-transport-security: max-age=15552000
CheckCledocs.checkcle.io
  • header — strict-transport-security: max-age=31536000
Cortezadocs.cortezaproject.org
  • header — strict-transport-security: max-age=31536000
Dagudocs.dagu.cloud
  • header — strict-transport-security: max-age=31536000
Docker Composedocs.docker.com
  • header — strict-transport-security: max-age=31536000
Fluidddocs.fluidd.xyz
  • header — strict-transport-security: max-age=31556952
Docsdocs.numerique.gouv.fr
  • header — strict-transport-security: max-age=31536000; includeSubDomains
RSSHubdocs.rsshub.app
  • header — strict-transport-security: max-age=31536000
Speedtest Trackerdocs.speedtest-tracker.dev
  • header — strict-transport-security: max-age=31536000
  • url — https://docs.speedtest-tracker.dev/
Standard Notesdocs.standardnotes.com
  • header — strict-transport-security: max-age=31536000; includeSubDomains; preload
RELATEdocumen.tician.de
  • header — strict-transport-security: max-age=15768000; includeSubDomains; preload

443 more products carried it. This page lists the first 160: a page of a thousand evidence lines is not a page, and the tally above is the whole count.

Back to the census, or read what this cannot see.