GRC Oversight
Public scan benchmark

What our free scanner sees, in aggregate

A nightly snapshot rolling up every completed public scan run through our free website scanner. Real numbers, computed from real scans, updated automatically as the sample grows.

Sample

Grade distribution

Across 10 scanned public sites, computed August 15, 2026.

Findings

Missing checks, across the sample

0%Missing HSTS
0%Missing CSP
0%Missing DMARC
0%Missing CAA
0%Missing DNSSEC
0%Exposed /.git directory
0Median TLS days-to-expiry
Methodology

How this report is built

  • Sample: self-selected public scans only: anyone who ran our free scanner without being signed into an organization (orgId: null). This is not a random or representative sample of the web.
  • Cadence: this snapshot is recomputed nightly from all completed public scans at that time; it does not update in real time.
  • What's checked: see the Scanner Policy for the exact passive, browser-equivalent checks the scanner performs and what it deliberately does not do.