Gitnux/Report 2026

View Website Statistics

See exactly what’s costing sites attention right now, with 53.3% of worldwide traffic on mobile and warnings that performance slips can trigger abandonment when pages take longer than 3 seconds. View Website packs Core Web Vitals into one place so you can spot the tradeoffs between load time, layout stability, and interaction delays while also getting practical checks like image optimization, HTTP/2 and compression, plus the security and compliance signals that quietly impact uptime.
58Statistics
58Sources
5Sections
1Visuals
8mRead
July 9, 2026Updated
View Website Statistics
Marcus AfolabiWritten by Marcus Afolabi·Edited by Yumi Nakamura·Fact-checked by Nicholas Chambers
Published ·Updated
How this report is researched
01Editorial Scope

An editor sets the topic, the inclusion criteria, and the evaluation framework before research starts.

02Source Research

AI search agents locate sources and extract each figure together with the document it came from.

Read our full methodology →

Search agents attach provenance to every extracted figure.

Next review: within 35 days
Mobile devices account for 53.3% of global website traffic, and 53% of mobile visits are abandoned when a page takes more than 3 seconds to load. This article brings together the key benchmarks behind traffic, speed, security, and operating costs. It covers Core Web Vitals, Lighthouse guidance, OWASP and GDPR requirements, and the infrastructure pricing that shapes site performance at scale.

Key Takeaways

  • 53.3% of all website traffic worldwide comes from mobile devices
  • 36.0% of global web traffic originated from North America in 2023
  • 44.4% of web users are more likely to abandon sites that take longer than 3 seconds to load
  • Google’s Lighthouse recommends image optimization as a best practice to reduce load time
  • Google reports that 53% of mobile site visits are abandoned if pages take longer than 3 seconds to load
  • Web Vitals guidance defines three core metrics for performance: LCP, CLS, INP
  • The HTTP Archive report “State of the Web” is updated regularly and provides annual medians and distributions for web features
  • Google Lighthouse defines 6 performance categories including Accessibility, Best Practices, SEO, PWA, and so on
  • TLS 1.3 is defined in RFC 8446 and supports modern cipher suites
  • OWASP Top 10: Insufficient Logging and Monitoring is included among top risks
  • The NIST Cybersecurity Framework (CSF) was released in 2018 as version 1.1 for improving security posture
  • S3 transfer pricing can materially affect web cost at scale; typical pricing is $0.023 per GB-month (region varies)
  • CloudFront data transfer pricing varies by region; typical US price tiers apply to GB
  • Fastly charges per request and data transfer; request pricing tiers apply at scale

Improving Core Web Vitals with faster, optimized loading can reduce abandonment and boost engagement.

Related reading

01 · Category

Web Traffic Sources2 stats

01
53.3% of all website traffic worldwide comes from mobile deviceshttps://gs.statcounter.com/platform-market-share/mobile/worldwide
02
36.0% of global web traffic originated from North America in 2023https://gs.statcounter.com/browser-market-share/desktop/worldwide/
Interpretation

Web Traffic Sources Interpretation

For web traffic sources, mobile devices drive the majority with 53.3% of worldwide site traffic, so optimizing for mobile is likely the biggest lever given the way these audiences are distributed.

02 · Category

Web Performance Benchmarks12 stats

01
44.4% of web users are more likely to abandon sites that take longer than 3 seconds to loadhttps://www.thinkwithgoogle.com/intl/en-150/insights/fast-load-times-study/
02
Google’s Lighthouse recommends image optimization as a best practice to reduce load timehttps://developer.chrome.com/docs/lighthouse/performance/
03
Google reports that 53% of mobile site visits are abandoned if pages take longer than 3 seconds to loadhttps://www.thinkwithgoogle.com/intl/en-150/insights/mobile-speed-study/
04
An HTTP/2 enabled site can reduce page load times by 11% on average versus HTTP/1.1 (industrial tests)https://www.cloudflare.com/learning/performance/http2-vs-http1.1/
05
Gzip compression can reduce HTML/CSS/JS payload sizes by 60–70% (common web performance engineering results)https://developers.google.com/web/fundamentals/performance/optimizing-content-efficiency/
06
Core Web Vitals were rolled into Page Experience in Google Search (mobile and desktop) starting 2021https://developers.google.com/search/blog/2020/05/evaluating-page-experience
07
HTTP/2 is widely adopted; Statcounter reports HTTP/2 usage increasing steadily (platform stats)https://w3techs.com/technologies/details/ce-http2
08
The average time spent on-site increases when bounce rate decreases; benchmarks tie lower bounce to longer sessionshttps://www.optimizesmart.com/bounce-rate-statistics/
09
Largest Contentful Paint is measured as the render time of the largest visible content elementhttps://web.dev/lcp/
10
CLS measures the sum of all unexpected layout shift scores during the entire lifespan of the pagehttps://web.dev/cls/
11
INP measures the latency of page interaction responses, considering the interaction timelinehttps://web.dev/inp/
12
Preconnect reduces latency by establishing early connections; web.dev documents this optimizationhttps://web.dev/uses-rel-preconnect/
Interpretation

Web Performance Benchmarks Interpretation

Across these Web Performance Benchmarks, the key takeaway is that loading speed is directly linked to user abandonment, with 44.4% of users more likely to leave and 53% of mobile visits abandoned when pages take longer than 3 seconds, making performance optimization the most critical lever for Page Experience and search outcomes.

More related reading

04 · Category

Security & Compliance19 stats

01
TLS 1.3 is defined in RFC 8446 and supports modern cipher suiteshttps://www.rfc-editor.org/rfc/rfc8446
02
OWASP Top 10: Insufficient Logging and Monitoring is included among top riskshttps://owasp.org/Top10/
03
The NIST Cybersecurity Framework (CSF) was released in 2018 as version 1.1 for improving security posturehttps://www.nist.gov/cyberframework
04
NIST SP 800-53 Rev. 5 contains 20 security control families and 18? (families) total; the document enumerates controlshttps://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
05
GDPR sets a maximum administrative fine of up to €20 million or 4% of annual global turnover, whichever is higherhttps://eur-lex.europa.eu/eli/reg/2016/679/oj
06
US SEC Regulation S-P requires safeguarding customer information and sets incident response ruleshttps://www.ecfr.gov/current/title-17/part-248/section-248.30
07
The Digital Services Act (DSA) applies to very large online platforms and imposes compliance obligations; fines can reach 6% of annual turnoverhttps://eur-lex.europa.eu/eli/reg/2022/2065/oj
08
CISA’s Binding Operational Directive (BOD) for certain agencies requires timely patching; known timelines vary by directivehttps://www.cisa.gov/news-events/news/
09
OWASP ASVS defines verification requirements and uses a level structure (L1-L3)https://owasp.org/www-project-application-security-verification-standard/
10
The CVE program recorded over 200k distinct CVE identifiers since inception (historical totals)https://cve.mitre.org/cve/
11
NIST SP 800-63B defines authentication assurance levels with numeric levels 1–3 for some contextshttps://pages.nist.gov/800-63-3/sp800-63b.html
12
FIDO2 is based on WebAuthn; WebAuthn standard supports multi-factor without shared secretshttps://www.w3.org/TR/webauthn/
13
CSP report-only mode allows monitoring violations without enforcement; W3C spec includes directiveshttps://www.w3.org/TR/CSP3/
14
HSTS (HTTP Strict Transport Security) is specified with a max-age directive; recommended max-age values are often 1 year or morehttps://www.rfc-editor.org/rfc/rfc6797
15
SameSite cookie attribute supports Strict and Lax to mitigate CSRF; defined by RFC 6265bishttps://datatracker.ietf.org/doc/html/rfc6265
16
ModSecurity Core Rule Set (CRS) includes 400+ rules (public project)https://github.com/coreruleset/coreruleset
17
OWASP recommends secure session management; session timeout policies are included in OWASP Cheat Sheet series (e.g., Session Management)https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html
18
W3C Web Performance Working Group defines loading performance metrics underpinning web vitals measurementshttps://www.w3.org/TR/navigation-timing/
19
The W3C recommends using Subresource Integrity (SRI) to ensure third-party scripts aren’t tampered withhttps://www.w3.org/TR/SRI/
Interpretation

Security & Compliance Interpretation

Security and Compliance efforts are increasingly guided by modern standards and stricter governance, as shown by TLS 1.3 defined in RFC 8446 and by regulations like GDPR that can impose fines up to €20 million or 4% of global turnover, whichever is higher.

05 · Category

Cost Analysis12 stats

01
S3 transfer pricing can materially affect web cost at scale; typical pricing is $0.023per GB-month (region varies)https://aws.amazon.com/s3/pricing/
02
CloudFront data transfer pricing varies by region; typical US price tiers apply to GBhttps://aws.amazon.com/cloudfront/pricing/
03
Fastly charges per request and data transfer; request pricing tiers apply at scalehttps://www.fastly.com/pricing
04
Google Cloud Load Balancing egress costs apply per GB delivered (network pricing)https://cloud.google.com/load-balancing/pricing
05
Azure CDN pricing is metered by bandwidth (GB) and requestshttps://azure.microsoft.com/en-us/pricing/details/cdn/
06
Web application firewall (WAF) services commonly price per request; AWS WAF charges per web ACL rule and per request (depending on model)https://aws.amazon.com/waf/pricing/
07
DDoS protection often priced by protected bandwidth; AWS Shield Standard has no additional charge (baseline)https://aws.amazon.com/shield/pricing/
08
If 10% of traffic is redirected to higher cache hit, bandwidth charges can drop proportionally (CDN billing proportional to egress)https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/price-changes.html
09
Using HTTP keep-alive reduces connection overhead; can reduce CPU and cost on busy servershttps://www.rfc-editor.org/rfc/rfc2616
10
CDN and edge compute can offload origin work, reducing origin compute spendhttps://www.cloudflare.com/learning/edge-computing/what-is-edge-compute/
11
Content compression reduces egress charges by reducing transferred bytes (cloud networking pricing is per GB)https://www.cloudflare.com/learning/performance/compression/
12
Reducing page weight by 100 KB can save megabytes at scale; savings scale linearly with page views (CDN egress is per GB)https://developers.google.com/web/fundamentals/performance/optimizing-content-efficiency
Interpretation

Cost Analysis Interpretation

In the cost analysis view of web spend, data transfer and request based pricing dominate because S3 transfer pricing alone can run about $0.023 per GB-month at scale while CDNs and WAF services add further per GB or per request charges from providers like CloudFront, Fastly, and AWS WAF.
report visual · Comparison

Why website performance matters: user abandonment and mobile impact

Mobile users are much more likely to abandon slow pages—highlighting how critical sub-3-second performance is.

Google reports that 53% of mobile site visits are abandoned if pages take longer than 3 seconds to load53%
44.4% of web users are more likely to abandon sites that take longer than 3 seconds to load
44.4%
An HTTP/2 enabled site can reduce page load times by 11% on average versus HTTP/1.1 (industrial tests)
11%
source-verifiedthinkwithgoogle.com · cloudflare.com
Reference

Cite This Report

This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.

APA
Marcus Afolabi. (2026, February 13). View Website Statistics. Gitnux. https://gitnux.org/view-website-statistics
MLA
Marcus Afolabi. "View Website Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/view-website-statistics.
Chicago
Marcus Afolabi. 2026. "View Website Statistics." Gitnux. https://gitnux.org/view-website-statistics.

Sources & references

58 datasets cited across this report

gs.statcounter.comthinkwithgoogle.comdeveloper.chrome.comweb.devcloudflare.comrfc-editor.orgdevelopers.google.comw3techs.comoptimizesmart.comhttparchive.orgaws.amazon.comfastly.comcloud.google.comazure.microsoft.comdocs.aws.amazon.comowasp.orgnist.govcsrc.nist.goveur-lex.europa.euecfr.govcisa.govcve.mitre.orgpages.nist.govw3.orgdatatracker.ietf.orggithub.comcheatsheetseries.owasp.orggartner.comtc39.es

+29 additional datasets cited (not shown individually)