WordPress maintenance or security needs? Reach out!
TLDWP

WordPress Domains by Web Server Software

Explore the web server software powering the WordPress domains in our database, alongside how each server group scores across our infrastructure security checks. This dataset updates continuously as our scanner re-indexes global domains.

Security Exposures by Top 30 Web Servers

Coloured against the all-WordPress average — green beats it, red is worse. Site counts use TLDWP's canonical detected population; percentages use the corresponding cached security sample. Click a column to sort.

# Server Sites Fail headers Leak usernames Exposed files HTTPS
1 nginx 1,778,202 87.1% 44% 1.4% 97.6%
2 Apache 1,726,902 92.2% 56.7% 2.6% 97%
3 cloudflare 1,307,825 76.1% 39.5% 1.3% 98.5%
4 LiteSpeed 290,156 89.8% 55.2% 2.6% 98.3%
5 hcdn 67,817 75.3% 53.8% 0.3% 99.5%
6 openresty 57,887 81.4% 48.5% 1.8% 97.2%
7 Flywheel 46,649 0.1% 34.6% 0% 98.4%
8 o2switch-PowerBoost-v3 32,301 87.1% 52% 1.7% 98.6%
9 IONOS 30,661 95.7% 1.7% 0.3% 98.3%
10 aruba-proxy 19,106 97.7% 1.7% 0.1% 97.9%
11 Microsoft-IIS 18,237 92.6% 33.4% 4.3% 92.8%
12 nginx-reuseport 16,754 96.2% 75.8% 2% 98.3%
13 nginx-rc 10,857 5.3% 31.5% 0.7% 98%
14 WPX 9,908 87.5% 0.4% 2.2% 98.5%
15 Vercel 9,232 75.8% 0.5% 0.2% 99.8%
16 Simply.com 9,060 68.9% 52% 1.4% 98.9%
17 HTTP 9,007 90.5% 58.6% 1.4% 98.5%
18 Prometheus 5,342 0% 24.2% 0.3% 99.3%
19 HTTPd 5,201 83.8% 57.2% 1.6% 98.1%
20 IdeaWebServer 5,085 96% 63.2% 5.7% 97.3%
21 Netlify 4,618 70.8% 0.4% 0.1% 99.8%
22 AmazonS3 4,373 82.9% 0.5% 0% 96.2%
23 ATS 3,811 93.5% 15.5% 11.5% 99%
24 APISIX 3,592 85.9% 63.1% 2.1% 97%
25 Squarespace 3,431 0.9% 0% 0% 99.4%
26 GitHub.com 3,079 99.8% 0.1% 0% 99.2%
27 GSE 3,048 86.6% 0% 0% 75.4%
28 ArvanCloud 2,799 81.2% 29.4% 4.7% 97.7%
29 BunnyCDN-AMS1-1444 2,046 74.8% 27.8% 2.9% 98.6%
30 BitNinja 1,964 0% 0% 0% 0%

All web servers 1,766 total

Web serverDomains
nginx 1,778,202
Apache 1,726,902
cloudflare 1,307,825
LiteSpeed 290,156
hcdn 67,817
openresty 57,887
Flywheel 46,649
o2switch-PowerBoost-v3 32,301
IONOS 30,661
aruba-proxy 19,106
Microsoft-IIS 18,237
nginx-reuseport 16,754
nginx-rc 10,857
WPX 9,908
Vercel 9,232
Simply.com 9,060
HTTP 9,007
Prometheus 5,342
HTTPd 5,201
IdeaWebServer 5,085
Netlify 4,618
AmazonS3 4,373
ATS 3,811
APISIX 3,592
Squarespace 3,431
GitHub.com 3,079
GSE 3,048
ArvanCloud 2,799
BunnyCDN-AMS1-1444 2,046
BitNinja 1,964
BunnyCDN-AMS1-1445 1,919
Pagely-ARES 1,665
Carrot 1,568
Caddy 1,521
BigScoots 1,434
Pepyaka 1,428
Portail 1,423
ddos-guard 1,398
Web 1,243
ELIN.hu 1,208
istio-envoy 1,096
DPS 1,038
Google 1,035
hws 878
sh-cache 845
DomenaWebServer 804
CM4all 800
WCDN 757
Tengine 756
Pressidium 754
fastpath-nginx 691
nestify-cdn-gw 674
CloudFront 656
CLB 634
Fly 593
Tadu 581
LTC-h3 565
wts 565
fastestcache 453
Angie 387
ESF 379
UploadServer 374
webserver 367
gtranslate 344
ESA 303
gamma 290
Propeller 261
RHProxy 237
Framer 235
Aws 228
Heroku 214
volt-adc 206
xneelo 200
envoy 194
Webservert 192
BitNinja-WafPro 191
HOSTVN.NET 191
uPressPowerEdge 184
atw-proxy 183
peqi 169
pxshield 166
noc.org 160
lighttpd 157
Sucuri 151
Kestrel 150
railway-hikari 149
Velozes 148
FrankenPHP 147
Server 146
gws 139
Nginx_Rc-Cr 138
MizbanCloud 135
QRATOR 135
UD 135
hidden 134
DOSarrest 131
NuCDN 130
dis-waf 124
Juist 118
RANDOM 110