Every week, our robot checks the websites of a panel of organisations from the outside, like any visitor would. Three scores out of 100 — the higher, the better: compliance with security good practice, resistance to known vulnerabilities, and speed.
Measurements made by our robot on the date shown, following our published method. Our method · Ask for an explanation or contest a result · Ask for a re-test
This week’s update is in progress: the figures below are those of the last edition.
Method updated on October 11, 2026: published administration consoles and remote access, and DNS servers that no longer answer, now count. Part of the change since last week comes from the method, not from the websites, so this edition shows no week-on-week arrows. Our method
The website whose lowest of the three scores is the highest, with at least 80 in each: it is its balance that wins.
Measured from the outside, at a given time, following our published method — neither an audit nor a certification. Our method
It is striking to see one of the smaller organisations lead this ranking, ahead of far larger players. A solid, well-balanced result across the three axes. It finishes 23 points above the average of the websites measured.
Average of the others 69.8
Average of the others 64.7
A website is named only for a good result: at least 80 out of 100 on that score, measured this week. A podium can therefore have fewer than three names.
Is your website among the best of its sector? Check where it stands — then aim higher: Europe, the world. Check your website
Want to climb? Our report tells you what to fix, and our experts can do it for you. Get a report · Have it fixed
Compliance score of each website of the selection, by level:
Free to quote, with the source and a link: Source: Top-Secured security barometer, top-secured.com/barometer (2026-W42).
One e-mail a week: the new barometer and our analyses of the attacks and flaws that matter. Free, one-click unsubscribe.
The barometer is calculated on Wednesday evening and published on Thursday morning. A group is shown only from 20 websites measured, and no website is ever named for a weakness. Every organisation can contest a result or ask to be removed from the panel.