🔧 We measured the public security posture of 6,289 launched web apps. 76% ship without a Content-Security-Policy.

We run a directory of launched software (web apps, SaaS, AI tools) and every listing gets the same deterministic 7-frame benchmark. No LLM in the scoring path, public surface only: the headers and policies a browser sees before you ever sign in.

Across 6,289 launched products, here is the security baseline as measured on August 4, 2026:



76%...