Strict-Transport-Security

HTTP response header

Policy informing a client how long to cache the HTTPS policy and whether this applies to subdomains.

Header usage statistics

Strict-Transport-Security response header information and usage statistics.
Websites using header Strict-Transport-Security12,644,621
Percentage of websites that use Strict-Transport-Security header21.85%
Total discovered header values5,766
Header uses directivesYes
Header values are unique or randomNo
Most popular in the country United States

Strict-Transport-Security directives (3 total)

  • includesubdomains
  • max-age
  • preload

Strict-Transport-Security Directives

Strict-Transport-Security directives value information and usage statistics
DirectiveShareWebsites countUnique Values
max-age99.92%12,634,187463
includesubdomains36.39%4,601,804314
preload22.69%2,869,200204

Websites utilizing Strict-Transport-Security

List of websites that use Strict-Transport-Security header
DomainCountryRankContacts
facebook.com United States2
google.com United States3
wordpress.org United States4
youtube.com United States6
twitter.com United States7
instagram.com United States9
See full domain list

Common header values

List of top common Strict-Transport-Security header values
Header valueValue prevalence
max-age=3153600018%
max-age=3155695212%
max-age=31536000; includeSubDomains9%
max-age=31536000; includeSubdomains; preload8%
max-age=63072000; includeSubdomains; preload6%
max-age=05%
max-age=78892384%
max-age=155520004%
max-age=630720003%
max-age=63072000; includeSubDomains2%
max-age=31536000; preload2%
max-age=31536000;2%
max-age=157680001%
max-age=15768000; includeSubDomains1%
max-age=25920001%
max-age=0; includeSubDomains; preload0%
max-age=160000000%
max-age=15552000; includeSubDomains0%
max-age=6048000%
max-age=15552000; includeSubdomains; preload0%