STATUS IS UPWEBSITE READINESS
Owner workspace
Explore SIU

Category benchmark · Snapshot 23 October 2026

E-Commerce & Marketplaces: website readiness

31 configuration checks across 5,718 E-Commerce & Marketplaces sites from the SID website catalog, with 2,480 individual profiles for sites in the Chrome UX Report top 50K.

Sites measured
5,718

all popularity bands

Median readiness index
71/100

all sites: 64

Profiles
2,480

top-50K sites

Weakest lane
Recover

lowest weighted score

Readiness by lane

Enable

86/100

All sites 77

Harden

60/100

All sites 56

Accelerate

69/100

All sites 64

Recover

11/100

All sites 10

Biggest gaps for E-Commerce & Marketplaces sites

The checks with the most room to improve, weighted by impact.

  1. HSTS kept for at least a year

    32% observed · all sites 34%

    Send Strict-Transport-Security on HTTPS responses. Start with a short max-age (for example 300 seconds), confirm every subdomain works over HTTPS, then raise it in steps to 31536000. Add includeSubDomains only when all subdomains are HTTPS. HSTS preload is optional and hard to undo; hstspreload.org itself does not recommend it by default.

    Guide: HTTPS and TLS Guide for Website Owners

  2. security.txt published

    7.6% observed · all sites 7.1%

    Publish /.well-known/security.txt with at least Contact and Expires fields, as RFC 9116 requires, and review it before it expires.

    Guide: A Practical Website Health Check for Owners

  3. DMARC policy enforces quarantine or reject

    39% observed · all sites 39%

    Publish DMARC with p=none and a reporting address first, fix any legitimate senders that fail SPF or DKIM alignment, then move to quarantine and finally reject.

    Guide: A Practical Website Health Check for Owners

  4. CAA records limit who can issue certificates

    16% observed · all sites 13%

    Publish CAA records naming every CA you actually use, including the CAs your CDN uses for managed certificates. Add an iodef contact if you want reports.

    Guide: HTTPS and TLS Guide for Website Owners

  5. Modern image formats in use

    47% observed · all sites 40%

    Serve WebP or AVIF with a JPEG or PNG fallback, either through an image CDN or by generating both formats at build time.

    Guide: AVIF, WebP, JPEG, and PNG: Choose the Right Image Format

  6. No render-blocking scripts in <head>

    44% observed · all sites 48%

    Add defer to scripts that need the DOM, async to independent ones such as analytics, or move them to the end of the body.

    Guide: Control Third-Party Scripts Before They Control Your Page

Where E-Commerce & Marketplaces sites lead

  • Framing restricted70% observedall sites 51%
  • robots.txt published95% observedall sites 76%
  • Structured data present70% observedall sites 51%
  • XML sitemap discoverable87% observedall sites 70%

Stack mix

CDN and edge

Platform or framework

DNS operator

Certificate authority

Readiness leaders

E-Commerce & Marketplaces sites in the top 50K with the highest share of observed practices (at least 26 of 31 checks measured). This lists only what we observed on 23 October 2026; owners can request a correction.

  1. verkkokauppa.com95/100
  2. foxtrot.com.ua94/100
  3. caretobeauty.com94/100
  4. vcgamers.com94/100
  5. hotukdeals.com93/100
  6. apollo.de92/100
  7. noelleeming.co.nz92/100
  8. mydealz.de90/100
  9. cecil.de90/100
  10. cultbeauty.com90/100

All 31 checks for E-Commerce & Marketplaces

CheckLaneObservedAll sitesMeasured
HTTP requests move to HTTPSHarden96%91%5,319
HSTS kept for at least a yearHarden32%34%5,619
TLS 1.3 negotiatedHarden93%91%5,700
Certificate has more than 14 days leftHarden>99%99%5,700
Certificate lifetime of 100 days or lessHarden70%67%5,700
CAA records limit who can issue certificatesHarden16%13%5,714
DNSSEC signedHarden7.7%8%5,715
security.txt publishedHarden7.6%7.1%5,542
DMARC policy enforces quarantine or rejectHarden39%39%5,715
X-Content-Type-Options: nosniffHarden64%48%5,619
Framing restrictedHarden70%51%5,619
Content Security Policy presentHarden48%32%5,619
Referrer-Policy setHarden20%24%5,619
HTTP/2 negotiatedAccelerate94%90%5,700
HTTP/3 advertisedAccelerate47%37%5,619
HTML compressedAccelerate97%93%5,614
Static files cached for 30 days or moreAccelerate60%51%5,003
Modern image formats in useAccelerate47%40%5,357
Offscreen images lazy-loadedAccelerate72%62%5,279
No render-blocking scripts in <head>Accelerate44%48%5,619
robots.txt publishedEnable95%76%5,574
XML sitemap discoverableEnable87%70%5,613
Reachable over IPv6Enable40%48%5,715
Canonical URL declaredEnable85%68%5,619
Meta description writtenEnable95%84%5,619
Mobile viewport configuredEnable98%94%5,619
Structured data presentEnable70%51%5,619
Social preview image setEnable60%57%5,619
Page language declaredEnable96%90%5,619
At most one redirect to the homepageEnable98%98%5,648
Nameservers spread across providersRecover11%10%5,705

E-Commerce & Marketplaces profiles (1–500 of 2,480)

Readiness index shown next to each site.