WSI.Public portal
Published snapshot
Web Security Index country profile
Moldova (MD)
wsi-2026-v2
Security scanned
Latest WSI
May 2026 · top 10k · 8,641 sites
53.00
of 150
Highlights · May 2026
- Weakest component: Cross-Origin Security at 11% of its maximum (5.6 / 50).
- Largest untapped gain: Content-Security-Policy — adopted by only 20.0% of sites; wider adoption is worth up to 16.0 extra points.
- Best-adopted practice: SSL_Valid passes on 98.5% of scored sites.
- Finance & Banking leads the categories (59.9); Healthcare & Medical trails (48.4).
Measurement coverage
May 2026 · only final HTTP 2xx pages are WSI-eligible
- Targets
- 9,998
- 2xx eligible
- 8,641
- HTTP 4xx
- 565
- HTTP 5xx
- 45
- Bot challenges
- 605
- Technical errors
- 140
Historical WSI
Select a measurement to inspect its WSI signals below. Values are comparable only within the same cohort and measurement basis; the chart marks the legacy-to-2xx methodology break.
Moldova
Limited comparability. Legacy measurements have no HTTP-status provenance, while the current methodology scores only final 2xx pages. The series is intentionally broken at the methodology change; values across that boundary are descriptive context, not a like-for-like delta.
May 2026
2xx eligibility
MD53.0(top 10k)
| Measurement | Comparison basis | Sample | MD |
|---|---|---|---|
| Legacy · HTTP status unknown | top 10k | 55.7 | |
| Legacy · HTTP status unknown | top 10k | 47.3 | |
| 2xx eligibility | top 10k | 53.0 |
WSI signal detail
May 2026 · top 10k · 8,641 scored sites
Selected from history
Content Security
Average 15.5 / 50 across 8,641 scored sites
Cookies_Secure32.6%(2.6 / 8p)
Referrer-Policy17.1%(0.9 / 5p)
SRI_Implemented20.6%(1.2 / 6p)
Cookies_HttpOnly38.9%(3.1 / 8p)
Cookies_SameSite27.5%(2.2 / 8p)
X-Content-Type-Options32.6%(1.6 / 5p)
Strict-Transport-Security38.7%(3.9 / 10p)
Cross-Origin Security
Average 5.6 / 50 across 8,641 scored sites
Content-Security-Policy20.0%(4.0 / 20p)
Cross-Origin-Opener-Policy3.5%(0.2 / 5p)
Access-Control-Allow-Origin10.1%(1.0 / 10p)
Access-Control-Allow-Methods6.3%(0.3 / 5p)
Cross-Origin-Embedder-Policy0.5%(0.0 / 5p)
Cross-Origin-Resource-Policy1.7%(0.1 / 5p)
Network & Protocol Security
Average 31.9 / 50 across 8,641 scored sites
SSL_Valid98.5%(14.8 / 15p)
HTTP Version82.3%(16.5 / 20p)
DNSSEC_Enabled4.3%(0.6 / 15p)
Category Breakdown
WSI by simplified page category; marker size is the site count · May 2026
Data table
| Category | Sites | CS | COS | NPS | WSI |
|---|---|---|---|---|---|
| Finance & Banking | 213 | 20.5 | 8.5 | 31.0 | 59.9 |
| Technology & IT Services | 644 | 19.2 | 7.8 | 32.3 | 59.3 |
| Government & Public Sector | 172 | 16.6 | 7.0 | 30.4 | 53.9 |
| Community & Consumer Services | 2,939 | 15.5 | 6.3 | 31.8 | 53.7 |
| Commercial & Business Services | 2,395 | 15.5 | 4.5 | 32.5 | 52.5 |
| Education & Research | 430 | 15.8 | 5.0 | 30.6 | 51.4 |
| Media, News & Communications | 1,603 | 13.6 | 4.9 | 31.6 | 50.1 |
| Healthcare & Medical | 245 | 13.1 | 4.6 | 30.8 | 48.4 |
| Weighted mean | 8,641 | 15.5 | 5.6 | 31.9 | 53.0 |
Performance context
Real-user field timings, outside the WSI score · May 2026
Country-origin cohort
9,998
May 2026
Validated CrUX contexts
2
separated by device form factor
Country-specific · BigQuery
Phone
8,776 measured originsMay 2026dataset 202605Mean origin LCP p75
1,912ms
primary contextual metric · lower is faster
Mean origin TTFB p75
757ms
secondary control metric · lower is faster
Country-specific · BigQuery
Desktop
6,207 measured originsMay 2026dataset 202605Mean origin LCP p75
1,651ms
primary contextual metric · lower is faster
Mean origin TTFB p75
680ms
secondary control metric · lower is faster