Category benchmark · Snapshot 23 October 2026

Banking & Finance: website readiness

31 configuration checks across 549 Banking & Finance sites from the SID website catalog, with 322 individual profiles for sites in the Chrome UX Report top 50K.

Sites measured: 549
Median readiness index: 66/100
Profiles: 322
Weakest lane: Recover

Readiness by lane

Enable

78/100

All sites 77

Harden

64/100

All sites 56

Accelerate

55/100

All sites 64

Recover

21/100

All sites 10

Biggest gaps for Banking & Finance sites

The checks with the most room to improve, weighted by impact.

Modern image formats in use
37% observed · all sites 40%
Serve WebP or AVIF with a JPEG or PNG fallback, either through an image CDN or by generating both formats at build time.
Guide: AVIF, WebP, JPEG, and PNG: Choose the Right Image Format
security.txt published
9.4% observed · all sites 7.1%
Publish /.well-known/security.txt with at least Contact and Expires fields, as RFC 9116 requires, and review it before it expires.
Guide: A Practical Website Health Check for Owners
Static files cached for 30 days or more
43% observed · all sites 51%
Give versioned (fingerprinted) CSS, JavaScript, fonts and images Cache-Control: public, max-age=31536000, immutable, and change the file name whenever the content changes.
Guide: Browser Caching Guide for Website Owners
CAA records limit who can issue certificates
20% observed · all sites 13%
Publish CAA records naming every CA you actually use, including the CAs your CDN uses for managed certificates. Add an iodef contact if you want reports.
Guide: HTTPS and TLS Guide for Website Owners
No render-blocking scripts in <head>
36% observed · all sites 48%
Add defer to scripts that need the DOM, async to independent ones such as analytics, or move them to the end of the body.
Guide: Control Third-Party Scripts Before They Control Your Page
HTTP/3 advertised
22% observed · all sites 37%
Turn on HTTP/3 at your CDN. Browsers fall back to HTTP/2 automatically, so the risk is low.
Guide: CDN Guide for Website Owners

Where Banking & Finance sites lead

DMARC policy enforces quarantine or reject70% observedall sites 39%
HSTS kept for at least a year62% observedall sites 34%
Content Security Policy present51% observedall sites 32%
Framing restricted69% observedall sites 51%

Stack mix

CDN and edge

Platform or framework

DNS operator

Certificate authority

Readiness leaders

Banking & Finance sites in the top 50K with the highest share of observed practices (at least 26 of 31 checks measured). This lists only what we observed on 23 October 2026; owners can request a correction.

All 31 checks for Banking & Finance

Check	Lane	Observed	All sites	Measured
HTTP requests move to HTTPS	Harden	94%	91%	484
HSTS kept for at least a year	Harden	62%	34%	543
TLS 1.3 negotiated	Harden	86%	91%	540
Certificate has more than 14 days left	Harden	97%	99%	540
Certificate lifetime of 100 days or less	Harden	31%	67%	540
CAA records limit who can issue certificates	Harden	20%	13%	548
DNSSEC signed	Harden	12%	8%	549
security.txt published	Harden	9.4%	7.1%	532
DMARC policy enforces quarantine or reject	Harden	70%	39%	548
X-Content-Type-Options: nosniff	Harden	65%	48%	543
Framing restricted	Harden	69%	51%	543
Content Security Policy present	Harden	51%	32%	543
Referrer-Policy set	Harden	36%	24%	543
HTTP/2 negotiated	Accelerate	73%	90%	540
HTTP/3 advertised	Accelerate	22%	37%	543
HTML compressed	Accelerate	89%	93%	535
Static files cached for 30 days or more	Accelerate	43%	51%	489
Modern image formats in use	Accelerate	37%	40%	460
Offscreen images lazy-loaded	Accelerate	56%	62%	433
No render-blocking scripts in <head>	Accelerate	36%	48%	543
robots.txt published	Enable	86%	76%	530
XML sitemap discoverable	Enable	76%	70%	536
Reachable over IPv6	Enable	26%	48%	546
Canonical URL declared	Enable	72%	68%	543
Meta description written	Enable	88%	84%	543
Mobile viewport configured	Enable	95%	94%	543
Structured data present	Enable	49%	51%	543
Social preview image set	Enable	59%	57%	543
Page language declared	Enable	90%	90%	543
At most one redirect to the homepage	Enable	97%	98%	544
Nameservers spread across providers	Recover	21%	10%	549

Banking & Finance profiles

Readiness index shown next to each site.

Banking & Finance: website readiness

Readiness by lane

Biggest gaps for Banking & Finance sites

Modern image formats in use

security.txt published

Static files cached for 30 days or more

CAA records limit who can issue certificates

No render-blocking scripts in <head>

HTTP/3 advertised