At 35.9%, the share of websites using a known CMS has inched up to the highest level in the last year, while the tools that track and manage those sites are becoming nearly as universal. At the same time, 54% of breaches still trace back to known vulnerabilities with patches available and 34% of visits get abandoned when pages drag past 3 seconds. The result is a set of Site statistics that forces one uncomfortable question: are we speeding up experiences and tightening security as fast as we are deploying the stack behind them?
Key Takeaways
- 35.9% of all websites use a known CMS (up from 34.8% in 2023), according to BuiltWith’s web technology survey
- 43.6% of all websites run on WordPress, according to BuiltWith’s latest web technology trends
- 7.0% of all websites use Shopify, according to BuiltWith’s web technology survey
- 21.4% of all websites use Google Analytics (UA/GA4), according to BuiltWith’s analytics adoption trends
- 16.9% of all websites use Google Tag Manager, according to BuiltWith’s tag management adoption trends
- 54% of breaches involve the exploitation of a vulnerability with known patch information (2023), per Verizon’s 2024 Data Breach Investigations Report
- 1,000+ vulnerable third-party scripts were detected on 79% of websites in a study of web ecosystems published by Sucuri in 2024 (sample-based findings)
- 93% of online experiences begin with a search engine, per Similarweb’s industry research summary citing multiple sources (commonly reported in Similarweb’s marketing/SEO materials for 2024)
- 34% of website visits are abandoned if pages take longer than 3 seconds to load, per a Google/industry performance research compilation from Think with Google (citing industry studies)
- The median page weight was 2,350 KB in 2024 (HTTP Archive Page Weight report, measured from Alexa/HTTP Archive crawl samples)
- About 1.2% of pages in Chrome User Experience data have CLS (Cumulative Layout Shift) issues exceeding recommended thresholds (reported in Google CrUX guidance and aggregated dashboards for 2024)
- Organizations that fully deployed security automation and orchestration had a 6% lower breach cost in 2023 (IBM Security Cost of a Data Breach Report 2023)
- Google found that when DNS lookup time increases, overall page load impacts conversion; internal testing shows a 500 ms delay can reduce conversions by 20% (Google study published in Think with Google materials)
- The average cost per hour of website downtime is estimated at $5,600 in 2024 (Gartner/industry downtime cost surveys summarized in industry press; cited by Uptime Institute and other sources)
- 33% of websites are detected to have at least one outdated dependency vulnerable to known CVEs (2024 dependency scanning report with measured vulnerable component prevalence).
More websites rely on popular tools like WordPress and Google Analytics, yet security risks from vulnerable code and downtime costs grow.
Related reading
01 · Category
Market Size12 stats
01
35.9% of all websites use a known CMS (up from 34.8% in 2023), according to BuiltWith’s web technology survey
02
43.6% of all websites run on WordPress, according to BuiltWith’s latest web technology trends
03
7.0% of all websites use Shopify, according to BuiltWith’s web technology survey
04
The global website optimization software market was valued at $10.0 billion in 2023 and is forecast to reach $26.1 billion by 2030 (Multi-function report; value figure used from credible market research publication)
05
The global web application firewall (WAF) market size was $8.1 billion in 2023 (IMARC market research)
06
The global Content Delivery Network (CDN) market was $6.0 billion in 2023 and is projected to grow to $37.6 billion by 2030 (IMARC CDN market report)
07
The global site reliability engineering (SRE) market is forecast to reach $12.7 billion by 2030 (2024–2030 forecast from a market research report)
08
The global web hosting services market size was $91.6 billion in 2022 and is expected to reach $167.1 billion by 2030 (marketsandmarkets web hosting report excerpt)
09
The global managed hosting market was $57.2 billion in 2023 and is projected to reach $123.0 billion by 2032 (Grand View Research, managed hosting report)
10
The global website analytics market size was $5.8 billion in 2023 and projected to grow to $16.6 billion by 2032 (MarketsandMarkets / industry analysis summary)
11
The global customer data platform (CDP) market size was $4.7 billion in 2023 and forecast to reach $12.1 billion by 2030 (Fortune Business Insights, CDP market report)
12
The global identity and access management (IAM) market was $18.1 billion in 2023 and projected to grow to $49.1 billion by 2032 (Fortune Business Insights IAM report)
Interpretation
Market Size Interpretation
For the Market Size category, the web infrastructure and tooling landscape is scaling fast, with the CDN market jumping from $6.0 billion in 2023 to a projected $37.6 billion by 2030 alongside other growing segments like web hosting at $91.6 billion in 2022 reaching $167.1 billion by 2030.
02 · Category
User Adoption2 stats
01
21.4% of all websites use Google Analytics (UA/GA4), according to BuiltWith’s analytics adoption trends
02
16.9% of all websites use Google Tag Manager, according to BuiltWith’s tag management adoption trends
Interpretation
User Adoption Interpretation
For the User Adoption category, 21.4% of websites use Google Analytics while 16.9% use Google Tag Manager, suggesting that only a minority is actively measuring user behavior and managing adoption data through common tracking tools.
03 · Category
Risk & Security2 stats
01
54% of breaches involve the exploitation of a vulnerability with known patch information (2023), per Verizon’s 2024 Data Breach Investigations Report
02
1,000+ vulnerable third-party scripts were detected on 79% of websites in a study of web ecosystems published by Sucuri in 2024 (sample-based findings)
Interpretation
Risk & Security Interpretation
For Risk & Security, the data points to a clear problem of preventable exposure, since 54% of breaches in 2023 involved exploiting a vulnerability with known patch information and 79% of websites had 1,000+ vulnerable third party scripts detected in 2024.
04 · Category
Industry Trends1 stats
01
93% of online experiences begin with a search engine, per Similarweb’s industry research summary citing multiple sources (commonly reported in Similarweb’s marketing/SEO materials for 2024)
Interpretation
Industry Trends Interpretation
Within Industry Trends, the fact that 93% of online experiences start with a search engine signals that discovery and visibility are becoming the first battleground for sites rather than an afterthought.
More related reading
05 · Category
Performance Metrics3 stats
01
34% of website visits are abandoned if pages take longer than 3 seconds to load, per a Google/industry performance research compilation from Think with Google (citing industry studies)
02
The median page weight was 2,350 KB in 2024 (HTTP Archive Page Weight report, measured from Alexa/HTTP Archive crawl samples)
03
About 1.2% of pages in Chrome User Experience data have CLS (Cumulative Layout Shift) issues exceeding recommended thresholds (reported in Google CrUX guidance and aggregated dashboards for 2024)
Interpretation
Performance Metrics Interpretation
Under the Performance Metrics lens, the biggest takeaway is that even modest delays matter since 34% of visits are abandoned when pages load slower than 3 seconds, while the 2024 median page weight of 2,350 KB and the 1.2% of pages with CLS issues signal that both speed and stability are still key performance levers.
06 · Category
Cost Analysis4 stats
01
Organizations that fully deployed security automation and orchestration had a 6% lower breach cost in 2023 (IBM Security Cost of a Data Breach Report 2023)
02
Google found that when DNS lookup time increases, overall page load impacts conversion; internal testing shows a 500 ms delay can reduce conversions by 20% (Google study published in Think with Google materials)
03
The average cost per hour of website downtime is estimated at $5,600in 2024 (Gartner/industry downtime cost surveys summarized in industry press; cited by Uptime Institute and other sources)
04
Uptime Institute’s “Data Center Outage Costs” research estimates downtime cost ranging up to $740,000per hour depending on industry (industry analysis published by Uptime Institute)
Interpretation
Cost Analysis Interpretation
From a cost analysis perspective, even small operational slowdowns and outages quickly become expensive, with a 500 ms DNS delay potentially cutting conversions by 20% while downtime can cost about $5,600 per hour on average or as much as $740,000 per hour for some industries, meaning that fully deploying security automation and orchestration to reduce breach costs by 6% in 2023 is a direct lever for protecting revenue and minimizing total downtime and incident expenses.
07 · Category
Security Trends1 stats
01
33% of websites are detected to have at least one outdated dependency vulnerable to known CVEs (2024 dependency scanning report with measured vulnerable component prevalence).
Interpretation
Security Trends Interpretation
In Security Trends, 33% of websites have at least one outdated dependency with known CVEs, signaling that vulnerable software components remain a common and persistent exposure point.
08 · Category
Cyber Risk1 stats
01
9.5% of domains were flagged as having exposed admin panels or panels with default paths (2024 web surface exposure report with measured prevalence).
Interpretation
Cyber Risk Interpretation
Within the Cyber Risk category, 9.5% of domains were found to have exposed admin panels or default panel paths, signaling a meaningful level of preventable security exposure in the web surface.
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Daniel Varga. (2026, February 13). Sites Statistics. Gitnux. https://gitnux.org/sites-statistics
MLA
Daniel Varga. "Sites Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/sites-statistics.
Chicago
Daniel Varga. 2026. "Sites Statistics." Gitnux. https://gitnux.org/sites-statistics.
Sources & references
26 datasets cited across this report · attribution is report-level
+11 additional datasets cited (not shown individually)