Where the WordPress sites we've scanned are actually hosted, resolved from each site's IP address, with how each provider's sites score on our security checks. This fills in as sites are rescanned, so coverage grows over the cycle. Note: sites proxied through a CDN show the CDN (e.g. Cloudflare) rather than the origin host, since the origin is hidden by design.
Hosting data is still being collected — it will appear here as sites get rescanned.