16.7% of the Top 10,000 Websites Block GPTBot by Name, but Only 4.1% Block ChatGPT Search
Do the busiest websites block GPTBot? Most do not: as of 11 November 2026, 1,407 of the 8,404 top Chrome origins we could read (16.7%) block GPTBot by name in robots.txt, while only 345 (4.1%) block OAI-SearchBot, the agent that decides inclusion in ChatGPT search. We fetched robots.txt for all 10,000 origins in Google’s CrUX top-10,000 list and parsed 25 user agents.
Key findings
- 16.7% of the 8,404 top origins we could read block GPTBot by name in robots.txt; in the top 1,000 the rate is 20.3%.
- Only 4.1% block OAI-SearchBot by name. Of the sites that block GPTBot, 25.9% also block ChatGPT search.
- 21.1% fully block at least one AI training agent, and 58.6% of those leave every AI search agent we tracked allowed.
- The most blocked AI tokens by name are GPTBot (16.7%), CCBot (16.6%) and Bytespider (15.8%).
- News publishers are the outlier: 34.8% block GPTBot by name, against 1.9% of government sites.
- 8.5% of checked top sites serve a valid /llms.txt file (671 sites); among sites that name AI agents without fully blocking any, the rate is 39.0%.
- 327 sites (3.9%) close robots.txt to every crawler, Googlebot included, so AI agents are blocked there without being named.
Agent by agent: who gets blocked, by rank and site type
Each cell is the share of sites whose robots.txt names that agent in its own group and disallows the whole site. Training crawlers sit at the top; the gap to the search and user-fetch rows is the main pattern. GPTBot is the most blocked token by name at 16.7%, followed by CCBot (16.6%) and Bytespider (15.8%); OpenAI’s search agent is blocked by 4.1%.
Percent of sites in each column that fully block the agent by name (wildcard-only blocks excluded). Darker is higher. Hover a cell for the exact value and sample size. Categories follow the rule in the methodology. Columns with fewer than 60 sites are indicative only.
Rank matters. In the top 1,000 band, 20.3% block GPTBot by name, against 15.4% of origins ranked 5,001 to 10,000. Category matters more: 34.8% of news publishers block GPTBot by name and 18.9% block OAI-SearchBot, while government sites sit at 1.9%.
Training versus search: the split most sites make
OpenAI, Anthropic, Meta and Amazon each document separate user agents for training, for AI search indexing and for fetches a user asks for; Google and Apple use a training control token next to their search crawler. The dot plot compares how often sites block each by name. Within a vendor, the training dot (red) sits far to the right of the search dot (blue) for OpenAI, Anthropic, Meta and Amazon.
training agentsearch agent (Googlebot and Applebot for Google and Apple)user-initiated fetch
Of the 1,407 sites that block GPTBot by name, 365 (25.9%) also block OAI-SearchBot and 537 (38.2%) also block ChatGPT-User. Across vendors, 1,774 sites (21.1%) fully block at least one training agent; 1,039 of them (58.6%) leave all six AI search agents in our list allowed. News publishers in the top 5,000 that block GPTBot but leave OAI-SearchBot allowed include abcnews.com, apnews.com, collider.com, crex.com, eiga.com, gamerant.com, gendai.media, iol.co.za, movieweb.com, news.ltn.com.tw. News publishers in the same range that block both include actu.fr, amp.elperiodico.com, amp.marca.com, amp.sport.es, cnnespanol.cnn.com, edition.cnn.com.
Policy mix by rank band and category
Blocks all crawlers, Googlebot includedBlocks AI training and AI searchBlocks AI training, allows AI searchBlocks only AI search or user agentsNames AI agents, no full blockNo AI-specific rules
Each site counted once. “Blocks all crawlers” means Googlebot is disallowed from the whole site too, usually a wildcard rule on an app, API or login origin rather than an AI decision.
Block rates by segment
A reporter can quote any row. Percentages use the number of sites in the row as the base; “training only” means the site blocks at least one training agent and no AI search agent.
| Segment | Sites | GPTBot | OAI-SearchBot | ClaudeBot | Google-Extended | Any training agent | Training only | llms.txt |
|---|---|---|---|---|---|---|---|---|
| All measured | 8,404 | 16.7% | 4.1% | 15.2% | 13.5% | 21.1% | 12.4% | 8.5% |
| Top 1,000 | 863 | 20.3% | 6.7% | 18.9% | 17.1% | 26.4% | 12.6% | 8.3% |
| 1,001 to 5,000 | 3,372 | 17.5% | 4.2% | 15.9% | 14.0% | 22.0% | 13.0% | 8.6% |
| 5,001 to 10,000 | 4,169 | 15.4% | 3.5% | 13.8% | 12.3% | 19.3% | 11.8% | 8.3% |
| News publishers | 768 | 34.8% | 18.9% | 32.0% | 26.7% | 47.7% | 16.0% | 13.2% |
| Retail and e-commerce | 604 | 17.9% | 4.5% | 15.9% | 13.2% | 22.5% | 12.6% | 23.8% |
| Government | 312 | 1.9% | 0.0% | 1.9% | 2.2% | 3.2% | 2.2% | 0.3% |
| Education | 76 | 3.9% | 0.0% | 2.6% | 3.9% | 3.9% | 2.6% | 0.0% |
| Everything else | 6,644 | 15.4% | 2.6% | 13.9% | 12.6% | 18.9% | 12.5% | 6.9% |
By top-level domain
Country-code domains show local habits. Every TLD with at least 60 measured origins in the top 10,000:
| TLD | Sites | GPTBot | OAI-SearchBot | ClaudeBot | Google-Extended | Any training agent | Training only | llms.txt |
|---|---|---|---|---|---|---|---|---|
| .com | 3,876 | 15.4% | 3.2% | 14.2% | 12.5% | 20.5% | 12.3% | 10.1% |
| .net | 400 | 17.2% | 1.2% | 16.2% | 14.0% | 22.2% | 16.5% | 7.3% |
| .jp | 331 | 10.3% | 5.7% | 9.1% | 8.5% | 14.2% | 6.3% | 4.3% |
| .in | 236 | 6.4% | 0.4% | 5.5% | 5.9% | 8.1% | 5.9% | 9.3% |
| .org | 213 | 19.2% | 1.9% | 17.8% | 16.0% | 22.5% | 15.0% | 4.4% |
| .br | 160 | 10.6% | 3.1% | 9.4% | 7.5% | 13.1% | 6.9% | 11.6% |
| .de | 144 | 34.7% | 8.3% | 31.9% | 27.1% | 44.4% | 18.8% | 12.0% |
| .ru | 143 | 7.0% | 0.0% | 4.2% | 2.1% | 9.1% | 6.3% | 5.2% |
| .fr | 139 | 25.9% | 10.8% | 23.0% | 23.0% | 36.0% | 14.4% | 5.4% |
| .it | 119 | 25.2% | 9.2% | 21.8% | 22.7% | 34.5% | 14.3% | 5.3% |
| .pl | 114 | 28.9% | 4.4% | 14.0% | 11.4% | 39.5% | 26.3% | 5.3% |
| .es | 89 | 28.1% | 14.6% | 23.6% | 14.6% | 31.5% | 12.4% | 8.1% |
| .tv | 79 | 6.3% | 1.3% | 6.3% | 6.3% | 7.6% | 6.3% | 3.8% |
| .id | 60 | 5.0% | 0.0% | 5.0% | 5.0% | 5.0% | 5.0% | 3.5% |
| .uk | 60 | 31.7% | 18.3% | 26.7% | 15.0% | 33.3% | 11.7% | 11.8% |
Every agent, with what its vendor says it does
Classes come from each vendor’s own crawler page, quoted below. Block shares are of all 8,404 measured sites. “By name” counts sites that list the token in a group that disallows the whole site; “any rule” adds sites that block it through a wildcard group.
| User agent | Vendor | Class | Sites blocking by name | By name | Any rule | Partly blocked |
|---|---|---|---|---|---|---|
GPTBot |
OpenAI | Training | 1,407 | 16.7% | 21.4% | 2.1% |
ClaudeBot |
Anthropic | Training | 1,275 | 15.2% | 20.0% | 1.8% |
Google-Extended |
Training | 1,133 | 13.5% | 18.2% | 1.5% | |
Applebot-Extended |
Apple | Training | 1,052 | 12.5% | 17.4% | 0.8% |
Meta-ExternalAgent |
Meta | Training | 1,079 | 12.8% | 17.8% | 1.1% |
Amazonbot |
Amazon | Training | 1,125 | 13.4% | 18.4% | 1.0% |
CCBot |
Common Crawl | Training | 1,399 | 16.6% | 21.6% | 1.0% |
OAI-SearchBot |
OpenAI | AI search | 345 | 4.1% | 8.9% | 2.2% |
Claude-SearchBot |
Anthropic | AI search | 271 | 3.2% | 8.2% | 1.3% |
Meta-WebIndexer |
Meta | AI search | 152 | 1.8% | 7.1% | 0.5% |
Amzn-SearchBot |
Amazon | AI search | 101 | 1.2% | 6.5% | 0.1% |
PerplexityBot |
Perplexity | AI search | 574 | 6.8% | 11.5% | 2.1% |
DuckAssistBot |
DuckDuckGo | AI search | 239 | 2.8% | 7.9% | 0.8% |
ChatGPT-User |
OpenAI | User fetch | 516 | 6.1% | 11.1% | 2.2% |
Claude-User |
Anthropic | User fetch | 290 | 3.5% | 8.5% | 1.2% |
Meta-ExternalFetcher |
Meta | User fetch | 283 | 3.4% | 8.6% | 0.5% |
Amzn-User |
Amazon | User fetch | 127 | 1.5% | 6.9% | 0.1% |
Perplexity-User |
Perplexity | User fetch | 297 | 3.5% | 8.7% | 1.1% |
MistralAI-User |
Mistral | User fetch | 209 | 2.5% | 7.8% | 0.3% |
anthropic-ai |
Anthropic | Legacy token | 1,090 | 13.0% | 18.1% | 0.8% |
Claude-Web |
Anthropic | Legacy token | 955 | 11.4% | 16.6% | 0.4% |
Bytespider |
ByteDance | Undocumented | 1,328 | 15.8% | 21.0% | 0.9% |
Googlebot |
Search engine | 23 | 0.3% | 3.9% | 5.0% | |
Bingbot |
Microsoft | Search engine | 85 | 1.0% | 5.2% | 3.9% |
Applebot |
Apple | Search engine | 118 | 1.4% | 6.0% | 1.5% |
| User agent | Vendor page | Class | Vendor’s own words (accessed 11 Nov 2026) |
|---|---|---|---|
GPTBot |
OpenAI | Training | “crawl content that may be used in training our generative AI foundation models” |
ClaudeBot |
Anthropic | Training | “collecting web content that could potentially contribute to their training” |
Google-Extended |
Training | “manage whether content Google crawls from their sites may be used for training future generations of Gemini models … and for grounding” | |
Applebot-Extended |
Apple | Training | “opt-out from having their content used to train generative foundation models by disallowing Applebot-Extended” |
Meta-ExternalAgent |
Meta | Training | “crawls the web for use cases such as training foundation AI models or improving products by indexing content directly” |
Amazonbot |
Amazon | Training | “may be used to train Amazon AI models” |
CCBot |
Common Crawl | Training | “an open repository of web crawl data that is universally accessible and analyzable by anyone” |
OAI-SearchBot |
OpenAI | AI search | “used to surface websites in search results in ChatGPT's search features” |
Claude-SearchBot |
Anthropic | AI search | “navigates the web to improve search result quality for users” |
Meta-WebIndexer |
Meta | AI search | “navigates the web to improve Meta AI search result quality for users” |
Amzn-SearchBot |
Amazon | AI search | “does not crawl content for generative AI model training” |
PerplexityBot |
Perplexity | AI search | “designed to surface and link websites in search results on Perplexity. It is not used to crawl content for AI foundation models” |
DuckAssistBot |
DuckDuckGo | AI search | “crawls pages in real-time for our AI-assisted answers … This data is not used in any way to train AI models” |
ChatGPT-User |
OpenAI | User fetch | “not used for crawling the web in an automatic fashion. Because these actions are initiated by a user, robots.txt rules may not apply” |
Claude-User |
Anthropic | User fetch | “When individuals ask questions to Claude, it may access websites using a Claude-User agent” |
Meta-ExternalFetcher |
Meta | User fetch | “fetches individual links at a user's request … may bypass robots.txt” |
Amzn-User |
Amazon | User fetch | “supports user actions, such as responding to Alexa queries … may not follow all robots.txt directives” |
Perplexity-User |
Perplexity | User fetch | “supports user actions within Perplexity … not used for web crawling or to collect content for training” |
MistralAI-User |
Mistral | User fetch | “for user actions in Vibe … not used for crawling the web in any automatic fashion, nor to crawl content for generative AI training” |
anthropic-ai |
Anthropic | Legacy token | “Not listed on Anthropic's current crawler page; an older token many robots.txt files still name” |
Claude-Web |
Anthropic | Legacy token | “Not listed on Anthropic's current crawler page; an older token many robots.txt files still name” |
Bytespider |
ByteDance | Undocumented | No vendor documentation page could be retrieved; classed separately |
Google-Extended and Applebot-Extended are control tokens, not separate crawlers: Google says Google-Extended “doesn’t have a separate HTTP request user agent string” and does not affect inclusion in Google Search. Google also says it intends to support the AIPREF training-preference signal (user-agent: __usage_ai-training) in early 2027.
Look up a top-1,000 site
All 248 origins in the CrUX top 1,000 band (adult sites left out) whose robots.txt names at least one AI agent. “Training blocked” counts the seven training agents fully blocked by any rule.
| Origin | Category | Training blocked (of 7) | GPTBot | OAI-SearchBot | ChatGPT-User | ClaudeBot | Claude-SearchBot | Google-Extended | PerplexityBot | llms.txt |
|---|
llms.txt adoption
llms.txt is a proposal, published by Jeremy Howard in September 2024, for a Markdown file at /llms.txt that helps AI agents use a site. We counted a file as valid only if /llms.txt returned HTTP 200 as non-HTML text at the same path and started with an H1 line, the one section the proposal requires. 671 of 7,932 checked sites (8.5%) qualified. The policy split is sharper than the rank split: sites that name AI agents in robots.txt without fully blocking any publish llms.txt at 39.0%, against 7.1% for sites with no AI-specific rules and 5.3% for sites that block GPTBot by name.
Base: sites where robots.txt allowed our crawler to request /llms.txt and we requested it.
A robots.txt that blocks GPTBot, explained
These two examples follow the vendors' documented tokens. They are not recommendations: which one fits depends on whether a site wants AI search referrals, and on its licensing position. Grouping several User-agent lines above one rule set is valid under RFC 9309, which says matching groups' rules "MUST be combined."
# Opt out of AI model training, stay visible in AI search and assistants User-agent: GPTBot User-agent: ClaudeBot User-agent: Google-Extended User-agent: Applebot-Extended User-agent: Meta-ExternalAgent User-agent: Amazonbot User-agent: CCBot Disallow: / User-agent: OAI-SearchBot User-agent: Claude-SearchBot User-agent: PerplexityBot Allow: /
The first file asks training agents to stay out while leaving the search agents of OpenAI, Anthropic and Perplexity allowed. Google-Extended blocks Gemini training and grounding without touching Googlebot, so Google Search inclusion is unchanged. 1,039 sites in our sample already run a policy of this shape.
# Opt out of AI training AND AI search answers (classic search unaffected) User-agent: GPTBot User-agent: OAI-SearchBot User-agent: ChatGPT-User User-agent: ClaudeBot User-agent: Claude-SearchBot User-agent: Claude-User User-agent: PerplexityBot User-agent: Perplexity-User User-agent: Google-Extended User-agent: Applebot-Extended User-agent: Meta-ExternalAgent User-agent: Amazonbot User-agent: CCBot Disallow: /
The second also removes the site from ChatGPT, Claude and Perplexity search answers. OpenAI notes that sites opted out of OAI-SearchBot "can still appear as navigational links." User-fetch agents are listed, but OpenAI, Meta and Amazon all say user-initiated fetchers may not follow robots.txt.
robots.txt is a request, not enforcement
RFC 9309, the IETF standard for robots.txt published in September 2022, says the rules "are not a form of access authorization," and its security section says the protocol "is not a substitute for valid content security measures." A Disallow line only works on crawlers that choose to honor it. Sites that need enforcement add user-agent and IP verification at a firewall or CDN, using the IP ranges OpenAI, Perplexity and Amazon publish, or Common Crawl's reverse DNS names. Our numbers measure stated policy, not what any crawler actually did.
What this means for MSPs and IT teams
For clients who publish content, the decision is now two decisions: training and search. Block lists copied between sites often put search agents such as OAI-SearchBot or PerplexityBot in the same group as GPTBot, which opts the site out of AI search as well; 25.9% of GPTBot blockers in the top 10,000 block OpenAI's search agent too. Check three things in a client's robots.txt: whether training and search tokens are in separate groups, whether a wildcard Disallow: / on a marketing origin blocks every agent by accident (3.9% of top origins block Googlebot as well), and whether legacy tokens such as anthropic-ai and Claude-Web are the only Anthropic entries, since Anthropic's current page lists ClaudeBot, Claude-SearchBot and Claude-User. Where clients need real enforcement, robots.txt has to be paired with bot rules at the edge. For context on how much traffic ChatGPT carries, see our ChatGPT market share data; for the state laws that now touch AI use, see the state AI laws tracker. The same passive method underpins our DMARC adoption statistics.
Frequently asked questions
How many websites block GPTBot?
In our November 2026 check of the 8,404 most visited origins in Chrome's CrUX list that returned a usable robots.txt answer, 1,407 (16.7%) fully block GPTBot by name. Counting sites whose robots.txt blocks every crawler with a wildcard rule, 1,802 (21.4%) are closed to GPTBot.
Do sites that block GPTBot also block ChatGPT search?
Mostly not. Of the 1,407 sites that block GPTBot by name, 365 (25.9%) also block OAI-SearchBot, the agent OpenAI says decides whether a site can appear in ChatGPT search answers. 537 (38.2%) also block ChatGPT-User.
Which AI crawler is blocked the most?
By name, GPTBot (16.7% of sites), CCBot (16.6%) and Bytespider (15.8%) lead. The search agents trail: PerplexityBot 6.8%, OAI-SearchBot 4.1%, Claude-SearchBot 3.2%.
How many websites have an llms.txt file?
671 of the 7,932 top sites we could check (8.5%) serve a valid /llms.txt that starts with a Markdown H1, as the llmstxt.org proposal requires. Among sites that block GPTBot by name the rate is 5.3%.
Does blocking GPTBot in robots.txt stop OpenAI?
robots.txt is a request, not access control: RFC 9309 says its rules "are not a form of access authorization." OpenAI says disallowing GPTBot signals content should not be used for training, while ChatGPT-User fetches, started by users, may not follow robots.txt rules.
How do I block GPTBot but stay in ChatGPT search?
Add a group with User-agent: GPTBot and Disallow: /, and leave OAI-SearchBot allowed (no group, or Allow: /). OpenAI documents the two settings as independent. The copyable example on this page shows the same split for Anthropic, Google, Apple, Meta and Amazon.
Free to cite and republish with a link to this page. The CSV holds the aggregate block rates for every agent by rank band, category and TLD; it contains no per-site rows.
Methodology
Site list. Chrome UX Report (CrUX) global popularity ranks for the October 2026 release (yyyymm 202610), all origins in the 1,000, 5,000 and 10,000 rank buckets: 10,000 origins. CrUX ranks origins by navigations on a log10 scale with half steps, and each bucket excludes the one above it, so the bands are top 1,000, 1,001 to 5,000 and 5,001 to 10,000; order within a bucket is not published. We used the monthly CSV export of the public BigQuery table published in the zakird/crux-top-lists repository on GitHub (data/global/202610.csv.gz, committed 10 November 2026), so no BigQuery account was needed. Google states that "CrUX datasets by Google are licensed under a Creative Commons Attribution 4.0 International License." Units are origins, so one company can appear several times (for example country versions of the same store).
Fetching. On 11 November 2026 we requested /robots.txt once for every origin, following up to five redirects as RFC 9309 asks, with the user agent "UptimeReportResearch/1.0 (+https://theuptimereport.com/about/)". Where that robots.txt allowed our own agent to fetch /llms.txt, we requested /llms.txt as a second check, at least 1.2 seconds later. Requests were paced to about 7 per second across all sites, at most two per site. No other paths were requested.
Coverage. 7,149 origins returned a robots.txt file, 1,255 had none (a 4xx response or an HTML page, which means all agents are allowed), 1,101 refused us (HTTP 401, 403, 429, a 5xx, or a bot-challenge page), and 495 failed at the network level. The 1,596 refused or failed origins are excluded, leaving 8,404 measured. Refusals were not worked around.
Parsing and classes. Our parser follows RFC 9309: user-agent groups matched case-insensitively on the product token, matching groups merged, fallback to the * group, longest matching rule wins with Allow winning ties, * and $ wildcards. An agent is "fully blocked" if three probe paths (a news-style article path, a product path and /about) are all disallowed, whether or not the homepage itself is left open with an Allow: /$ line; "by name" if the rule comes from a group naming that agent, "any rule" if it may come from the * group. "Partly blocked" means a named group disallows some paths but not all three. Training, search and user-fetch classes follow each vendor's documentation; CCBot is grouped with training agents because it builds a bulk open corpus rather than serving search or user requests, Bytespider has no retrievable vendor page and is shown separately, and anthropic-ai and Claude-Web are legacy tokens.
Category rule. Government: host ends in .gov or .mil, or a gov, gob, gouv, go, govt, gv, gub or mil label sits before a country code, or europa.eu, gov.uk, canada.ca, bund.de, admin.ch. Education: .edu, or edu or ac before a country code. News publishers: robots.txt lists a Sitemap URL containing "news" (the Google News sitemap convention). Retail and e-commerce: robots.txt disallows a path containing cart, checkout, basket or wishlist. Rules apply in that order; everything else is "Everything else". The rule is reproducible but approximate.
Limitations. robots.txt states a request; it does not show what crawlers do, and many sites block AI agents at the CDN instead, which this method cannot see. A site could serve a different robots.txt to a real AI crawler than to us. Origins that refused our agent may differ from those that answered. This is a single snapshot.
Not advice. This is a measurement of public robots.txt files, not legal or SEO advice for any site.
Cite as:The Uptime Report. "16.7% of the Top 10,000 Websites Block GPTBot by Name, but Only 4.1% Block ChatGPT Search." November 2026. https://theuptimereport.com/block-gptbot-top-websites-2026/
References
- Chrome UX Report methodology, including the CC BY 4.0 dataset licence. Accessed November 2026.
- CrUX metrics: popularity rank definition. Accessed November 2026.
- zakird/crux-top-lists, monthly CrUX top-origin exports (202610.csv.gz). Accessed November 2026.
- RFC 9309, Robots Exclusion Protocol. Accessed November 2026.
- OpenAI, Overview of OpenAI crawlers. Accessed November 2026.
- Anthropic, crawler and fetcher documentation. Accessed November 2026.
- Google, common crawlers and Google-Extended. Accessed November 2026.
- Apple, About Applebot. Accessed November 2026.
- Meta, web crawlers. Accessed November 2026.
- Amazon, Amazon web search crawlers. Accessed November 2026.
- Perplexity, crawlers. Accessed November 2026.
- Common Crawl, CCBot. Accessed November 2026.
- DuckDuckGo, DuckAssistBot. Accessed November 2026.
- Mistral AI, robots. Accessed November 2026.
- llmstxt.org, the /llms.txt proposal. Accessed November 2026.
Research library
More original data reports from The Uptime Report. Every report includes its methodology and a free CSV download. Browse all research
Threats and breaches
- AT&T Data Breach Settlement Payout Date
AT&T payout status, tiers, incident history - Microsoft Data Breach History
Microsoft incidents by type, 2020 to 2026 - IC3 Report 2025
IC3 losses, crime types, states per capita - AI Incidents Statistics 2026
AI incidents by year, harm type, company - Cyber Attacks 2026
Every 2026 cyber attack, primary-sourced - WordPress Vulnerabilities
WordPress plugin, theme and core CVEs - Hypervisor Vulnerabilities
Hypervisor CVEs vs exploitation - DMARC Adoption Statistics 2026
DMARC enforcement, 15,000 domains - RMM Vulnerabilities and Remote Access Flaws
RMM and remote access flaws in KEV - Identity Theft Statistics 2026
ID theft per 100K by state and type - Scam Statistics 2026
FTC fraud losses by channel and age - VPN Vulnerabilities by Vendor
VPN gateway KEV and CVEs by vendor - MFA Statistics 2026
MFA methods across 2,571 services - Password Statistics 2026
12,674 passwords tested against HIBP - Ransomware Groups 2026
Most active ransomware groups, ranked - Ransomware Statistics 2026
Leak-site victims by month since 2021 - Malicious npm Packages
Malicious npm packages, day by day - Cybersecurity Statistics 2026
70 sourced stats, every number traced - Zero-Day Statistics
Every tracked zero-day since 2014 - Phishing Statistics 2026
Four phishing measures, one evidence board - Patch Tuesday Statistics 2026
Every Microsoft CVE since 2021 - Disaster Declarations by State
FEMA data for continuity planning - Data Breach Statistics 2026
980 breaches in Have I Been Pwned - Ransomware Initial Access Vectors
CISA advisories coded by entry technique - CVE Statistics 2026
Vulnerabilities published per year, NIST NVD - How Long Do Companies Take to Report a Data Breach?
1,675 Washington notices - Known Exploited Vulnerabilities
The CISA KEV catalog analyzed - Healthcare Data Breach Report 2026
HHS OCR breach portal scorecard - Ransomware Reported to the FBI
Five-year IC3 trend - ConnectWise ScreenConnect Vulnerabilities
ScreenConnect CVEs dated, with version lookup - SonicWall Vulnerabilities 2026
SonicWall CVEs by product line and KEV year - Dental Practice Data Breaches 2026
Every 2026 dental breach on the HHS portal - Apple Zero Days 2026 List
Every Apple-flagged CVE, with KEV dates - Android Zero Days 2026
Android flags by layer, OEM patch lag - Auto Dealership Data Breach 2026 Tracker
Dealer and vendor breaches by state filing - Law Firm Data Breaches 2026
Every law firm AG notice, sized and dated - Accounting Firm Data Breach 2026
CPA breach notices against the tax calendar - Bank DMARC Adoption 2026
DMARC at 4,118 US banks, by size - MSP Email Security
MSP DMARC and SPF, 1,430 domains - Credit Union Cybersecurity Statistics 2026
55% of credit unions skip DMARC - Citrix NetScaler Vulnerabilities 2026
48 NetScaler CVEs, 6 exploited, build checker - Fortinet Vulnerabilities 2026
Every 2026 Fortinet CVE, by product - Okta Vulnerabilities
Okta CVEs and incidents, two ledgers - Veeam Vulnerabilities
Veeam CVEs, fixed builds, KEV flags - Atlassian Confluence Vulnerabilities
Confluence CVEs, KEV and LTS fixes - SolarWinds Vulnerabilities
338 SolarWinds CVEs, 11 exploited in KEV - SAP NetWeaver Vulnerabilities
Every SAP NetWeaver CVE, by Patch Day - N-able Vulnerabilities
N-able CVEs, fixed builds and KEV flags
Infrastructure and uptime
- Data Centers Using Nuclear Power
Every US nuclear deal, by NRC stage - Claude Outage History
934 Claude incidents by model and hour - AMD vs Nvidia Market Share Over Time
AMD vs Nvidia share: Steam and SEC filings - iPhone Market Share by Country 2026
iPhone share in every country - Android Market Share by Version 2026
Android versions and patch status - OpenAI Outage History
1,051 OpenAI incidents, causes coded - Data Center Construction Spending 2026
Data center build spending, Census monthly - Microsoft End of Support 2026
Every 2026 Microsoft support cutoff - Fiber Internet Availability by State 2026
Fiber by state, build pace, top providers - 5G Coverage Map 2026
5G by state and carrier, FCC data - Cell Phone Outage History
FCC outages, DIRS cell sites, 911 fines - Mac Market Share 2026
Mac desktop share by country and version - Browser Market Share 2026
Browser share since 2009, by platform - Microsoft 365 Market Share 2026
Who runs email: Microsoft vs Google - CrowdStrike Outage
July 19, 2024 outage, minute by minute - Data Center Electricity Prices 2026
Power prices vs data center load, by state - Average Internet Bill 2026
Home internet prices by speed and state - Search Engine Market Share 2026
Search share since 2009, by country - ChatGPT Market Share 2026
AI chatbot referral share, every tracker - Google Cloud Outage History
Google Cloud incidents by product, 2013 on - Azure Outage History
Every Azure PIR, coded by root cause - Data Center Water Usage 2026
Water by site, company and drought - AI Energy Consumption 2026
Big Tech electricity vs US demand - SSD Prices 2026
NAND price cycle from makers' filings - RAM Prices 2026
DRAM prices from producers' filings - Domain Name Statistics 2026
Domains by TLD, renewals, registrars - Linux Market Share 2026
Linux desktop share, every headline traced - GitHub Outages
GitHub incidents by month since 2020 - Cloudflare Outage History
Every Cloudflare outage post-mortem - Starlink Statistics 2026
Satellites, subscribers, coverage, outages - Internet Access Statistics 2026
Home internet gaps by state and group - SQL Server End of Life
SQL Server support countdown + CVEs - Windows 11 Market Share 2026
Windows 10 vs 11 share by country - Cloud Computing Statistics 2026
Hyperscaler revenue and capex, SEC data - AWS Outage History
Every AWS Post-Event Summary since 2011 - Data Centers by State 2026
Sites, jobs, power for every state - Data Center Statistics 2026
Data center power, spending, jobs - 99.9% Uptime
Uptime calculator and 35 real SLAs - Power Outage Statistics by State
Outage hours by state, EIA data - Cost of Downtime
Revenue per hour for 3,001 public companies - Windows Server End of Life
Support dates and CVEs per server version - SQL Server 2016 ESU Cost
ESU cost calculator, every formula - Slack Outage History
1,459 Slack entries, SLA history, ledger - Google Workspace vs Microsoft 365 in US Schools
Google vs Microsoft in 10,591 districts - security.txt Adoption 2026
Who publishes a valid security.txt - Government Email Security 2026
.gov DMARC: local 40% vs federal 88% - Government Website Security 2026
.gov web security scored by state - vSphere 8 End of Support
vSphere 8 dates, exploited flaws by version - Office 2019 End of Life
Office 2019 EOL: who still gets patches - Zoom Outage History
Every Zoom incident since 2015 - Office 2021 End of Life
177 flaws fixed a month after support ended - Exchange Server 2019 End of Life
Exchange 2019 EOL, ESU builds and CVEs - FortiOS 7.0 End of Life
FortiOS 7.0 dates, builds and unfixed flaws
Regulation and disclosure
- Are Ransomware Payments Illegal? Law by Jurisdiction
Who may pay a ransom, by jurisdiction - HIPAA Security Rule Changes 2026
Security Rule status: current vs proposed - FTC Safeguards Rule Breach Notification
500-consumer, 30-day FTC breach duty - Data Center Moratorium by State 2026
Moratoria and bans in every state - State Privacy Laws 2026
23 state privacy laws, compared - State AI Laws 2026
131 state AI laws, dates and penalties - FedRAMP Statistics 2026
FedRAMP authorizations, GSA data - Item 1C Cybersecurity Disclosures
What 600 10-Ks say in Item 1C - CMMC Certification Statistics 2026
CMMC demand vs assessor capacity - Data Brokers List 2026
728 brokers across three state registries - SEC Cybersecurity Incident Disclosures
Every 8-K Item 1.05 filing - HIPAA Enforcement Tracker
Every OCR penalty and settlement - CMMC Level 2 Assessment Cost
CMMC Level 2 cost estimator, DoD figures - Safe Harbor Cybersecurity Laws by State
10 states, 11 laws, framework grid
Workforce and pay
- Intel Layoff Tracker
Every Intel WARN notice, by site and date - Amazon Layoffs by State
Amazon WARN notices, state by state - Oracle Layoffs by State
Oracle WARN notices and restructuring cost - Cloud Architect vs Cloud Engineer Salary
Architect vs engineer pay, H-1B filings - Entry Level DevOps Engineer Salary
Entry level DevOps pay, H-1B filings - Microsoft Layoff History Timeline
Every round dated, 2009 to 2026 - Google Layoffs by Year
Notices, headcount, severance by year - AI Engineer vs ML Engineer Salary
AI vs ML engineer pay, from H-1B filings - Data Engineer Salary by Experience
Data engineer pay by DOL wage level - Most Popular Programming Languages 2026
Language ranks by country, GitHub data - Computer Science Graduates Per Year
CS degrees per year, IPEDS 2011 to 2024 - Data Scientist Salary 2026
Data scientist pay ladder and metros, BLS - Web Developer Salary 2026
Web dev vs software pay by state, BLS - AI at Work Statistics 2026
Worker AI use: ever, weekly, daily, by job - Network Engineer Salary 2026
Network engineer vs admin pay, BLS - IT Manager Salary 2026
IT manager pay by industry, BLS OEWS - Software Engineer Salary 2026
Developer pay by metro, BLS OEWS - H-1B Statistics 2026
H-1B lottery, employers, and wages - AI Layoffs 2026
AI-blamed job cuts, sourced to filings - Help Desk Salary 2026
Help desk hourly pay, BLS OEWS - Cybersecurity Salary 2026
Security pay percentiles, BLS OEWS - Women in Tech Statistics 2026
Women's share of tech jobs since 2011 - IT Unemployment Rate 2026
Tech vs national jobless rate, monthly - Tech Job Postings 2026
Tech postings vs 2020, by role and country - Tech Layoffs 2026
Tech layoffs from state WARN notices - Remote Work Statistics 2026
Telework by job, industry, and state - Highest Paying Cities for IT Jobs 2026
Metro pay by role, BLS OEWS - The Tech Job Market in 2026
Openings, quits, hires, layoffs - IT Salaries by State 2026
Pay matrix for four IT roles - IT and Cybersecurity Jobs Outlook 2026
BLS employment projections - Salesforce Layoffs by State
Salesforce WARN notices, state by state - Dell Layoffs by Year
Headcount, severance, notices by year - IBM Layoffs by Year
IBM workforce charges against headcount - Meta Layoffs by Year
Meta rounds, sites and headcount by year - IT Director vs IT Manager Salary
IT director vs manager pay, H-1B filings - Penetration Tester Salary Entry Level
Entry level pen test pay, H-1B filings - Site Reliability Engineer vs DevOps Salary
SRE vs DevOps pay, H-1B filings - Solutions Architect vs Software Engineer Salary
Architect vs engineer pay, Level I to IV - Data Engineer vs Data Analyst Salary
Data engineer vs analyst pay, H-1B ledger - Network Engineer vs System Administrator Salary
Network engineer vs sysadmin pay by state - Security Analyst vs Security Engineer Salary
Analyst vs engineer pay, step by step - Cloud Engineer vs DevOps Engineer Salary
Cloud vs DevOps pay by metro, H-1B - Cisco Layoffs by Year
Cisco cuts by year: charges vs staff - Database Administrator vs Data Engineer Salary
DBA vs data engineer pay, reconciled - Penetration Tester vs Security Engineer Salary
Pen tester vs engineer pay: near tie - Help Desk vs Desktop Support Salary
Help desk vs desktop pay, one BLS code
MSP market and spending
- AI Capex 2026
Big Tech capex vs cash flow, SEC data - Cybersecurity Budget 2027
Federal and CISA cyber budgets, benchmarks - Microsoft 365 Price Increase 2026
Every M365 price change, vs inflation - Computer Prices 2026
Computer price indexes and HS 8471 imports - MSP Market Size 2026
Managed services market, built from Census - Small Business AI Adoption 2026
AI use by firm size, sector, state, Census - Cyber Insurance Statistics
Cyber insurance market, NAIC 2015-2024 - IT Spending by Industry
IT investment by industry, BEA - IT Services Industry Growth 2026
Census revenue by service industry - IT Hourly Rates 2026
Hourly IT labor rates, GSA contracts - VoIP Statistics 2026
Business VoIP vs landlines, FCC - MSP Industry Statistics 2026
Jobs, wages, and firms, BLS QCEW - Federal IT Spending 2026
IT services contracts, USAspending - IT Services Firms by State
Census business patterns atlas - How Much Do MSPs Charge Per User?
Published MSP prices, 1,310 websites - VMware Price Increase Broadcom Timeline
Broadcom VMware changes and revenue, dated - Adobe Price Increase History
Every Adobe price change, vs inflation - Atlassian Price Increase History, 2019 to 2026
Every Atlassian price hike, dated - Zoom Price Increase 2026
Every Zoom price change since 2013
Leave a Reply