Dashboard
Web Security Index country profile

Georgia (GE)

wsi-2026-v2
Security scanned

Latest WSI

May 2026 · top 10k · 8,232 sites

53.28
of 150

Highlights · May 2026

  • Weakest component: Cross-Origin Security at 12% of its maximum (6.2 / 50).
  • Largest untapped gain: Content-Security-Policy — adopted by only 21.8% of sites; wider adoption is worth up to 15.6 extra points.
  • Best-adopted practice: SSL_Valid passes on 98.5% of scored sites.
  • Technology & IT Services leads the categories (61.2); Government & Public Sector trails (48.1).

Measurement coverage

May 2026 · only final HTTP 2xx pages are WSI-eligible

Targets
9,999
2xx eligible
8,232
HTTP 4xx
667
HTTP 5xx
40
Bot challenges
734
Technical errors
325

Historical WSI

Select a measurement to inspect its WSI signals below. Values are comparable only within the same cohort and measurement basis; the chart marks the legacy-to-2xx methodology break.

Georgia
45505560May 2026GE 53.3
May 2026
2xx eligibility
GE53.3(top 10k)
MeasurementComparison basisSampleGE
2xx eligibilitytop 10k53.3

WSI signal detail

May 2026 · top 10k · 8,232 scored sites

Selected from history

Content Security

Average 15.6 / 50 across 8,232 scored sites

Cookies_Secure31.8%(2.5 / 8p)
Referrer-Policy17.2%(0.9 / 5p)
SRI_Implemented24.0%(1.4 / 6p)
Cookies_HttpOnly36.2%(2.9 / 8p)
Cookies_SameSite29.7%(2.4 / 8p)
X-Content-Type-Options31.8%(1.6 / 5p)
Strict-Transport-Security38.7%(3.9 / 10p)

Cross-Origin Security

Average 6.2 / 50 across 8,232 scored sites

Content-Security-Policy21.8%(4.4 / 20p)
Cross-Origin-Opener-Policy3.5%(0.2 / 5p)
Access-Control-Allow-Origin11.6%(1.2 / 10p)
Access-Control-Allow-Methods7.3%(0.4 / 5p)
Cross-Origin-Embedder-Policy0.5%(0.0 / 5p)
Cross-Origin-Resource-Policy1.8%(0.1 / 5p)

Network & Protocol Security

Average 31.5 / 50 across 8,232 scored sites

SSL_Valid98.5%(14.8 / 15p)
HTTP Version81.5%(16.3 / 20p)
DNSSEC_Enabled3.1%(0.5 / 15p)

Category Breakdown

WSI by simplified page category; marker size is the site count · May 2026

46485052545658606264WSI — Web Security Indexweighted mean 53.3Technology & IT Services669 originsFinance & Banking181 originsCommercial & Business Services1,582 originsCommunity & Consumer Services3,589 originsEducation & Research410 originsMedia, News & Communications1,551 originsHealthcare & Medical164 originsGovernment & Public Sector86 origins
Data table
CategorySitesCSCOSNPSWSI
Technology & IT Services66919.98.732.661.2
Finance & Banking18118.86.530.756.1
Commercial & Business Services1,58216.96.131.854.9
Community & Consumer Services3,58914.76.131.452.2
Education & Research41016.76.029.452.0
Media, News & Communications1,55114.05.232.151.3
Healthcare & Medical16413.75.831.851.2
Government & Public Sector8616.17.024.948.1
Weighted mean8,23215.66.231.553.3

Performance context

Real-user field timings, outside the WSI score · May 2026

Country-origin cohort
9,999
May 2026
Validated CrUX contexts
2
separated by device form factor
Country-specific · BigQuery
Phone
8,860 measured originsMay 2026dataset 202605
Mean origin LCP p75
2,094ms
primary contextual metric · lower is faster
Mean origin TTFB p75
795ms
secondary control metric · lower is faster
Country-specific · BigQuery
Desktop
6,432 measured originsMay 2026dataset 202605
Mean origin LCP p75
1,897ms
primary contextual metric · lower is faster
Mean origin TTFB p75
717ms
secondary control metric · lower is faster