WSI.Public portal
Published snapshot
Web Security Index country profile
Ukraine (UA)
wsi-2026-v2
Security scanned
Latest WSI
May 2026 · top 10k · 8,412 sites
53.15
of 150
Highlights · May 2026
- Weakest component: Cross-Origin Security at 9% of its maximum (4.4 / 50).
- Largest untapped gain: Content-Security-Policy — adopted by only 14.9% of sites; wider adoption is worth up to 17.0 extra points.
- Best-adopted practice: SSL_Valid passes on 98.5% of scored sites.
- Government & Public Sector leads the categories (61.4); Education & Research trails (47.9).
Measurement coverage
May 2026 · only final HTTP 2xx pages are WSI-eligible
- Targets
- 9,998
- 2xx eligible
- 8,412
- HTTP 4xx
- 530
- HTTP 5xx
- 32
- Bot challenges
- 852
- Technical errors
- 172
Historical WSI
Select a measurement to inspect its WSI signals below. Values are comparable only within the same cohort and measurement basis; the chart marks the legacy-to-2xx methodology break.
Ukraine
May 2026
2xx eligibility
UA53.1(top 10k)
| Measurement | Comparison basis | Sample | UA |
|---|---|---|---|
| 2xx eligibility | top 10k | 53.1 |
WSI signal detail
May 2026 · top 10k · 8,412 scored sites
Selected from history
Content Security
Average 16.7 / 50 across 8,412 scored sites
Cookies_Secure30.4%(2.4 / 8p)
Referrer-Policy14.6%(0.7 / 5p)
SRI_Implemented25.2%(1.5 / 6p)
Cookies_HttpOnly43.6%(3.5 / 8p)
Cookies_SameSite32.0%(2.6 / 8p)
X-Content-Type-Options32.9%(1.6 / 5p)
Strict-Transport-Security43.7%(4.4 / 10p)
Cross-Origin Security
Average 4.4 / 50 across 8,412 scored sites
Content-Security-Policy14.9%(3.0 / 20p)
Cross-Origin-Opener-Policy3.1%(0.2 / 5p)
Access-Control-Allow-Origin9.0%(0.9 / 10p)
Access-Control-Allow-Methods5.8%(0.3 / 5p)
Cross-Origin-Embedder-Policy0.4%(0.0 / 5p)
Cross-Origin-Resource-Policy1.5%(0.1 / 5p)
Network & Protocol Security
Average 32.0 / 50 across 8,412 scored sites
SSL_Valid98.5%(14.8 / 15p)
HTTP Version84.0%(16.8 / 20p)
DNSSEC_Enabled2.7%(0.4 / 15p)
Category Breakdown
WSI by simplified page category; marker size is the site count · May 2026
Data table
| Category | Sites | CS | COS | NPS | WSI |
|---|---|---|---|---|---|
| Government & Public Sector | 105 | 21.9 | 8.8 | 30.7 | 61.4 |
| Technology & IT Services | 588 | 20.3 | 7.3 | 32.2 | 59.7 |
| Finance & Banking | 221 | 18.3 | 8.2 | 32.3 | 58.8 |
| Healthcare & Medical | 222 | 18.0 | 4.2 | 32.7 | 54.9 |
| Community & Consumer Services | 3,011 | 17.4 | 4.6 | 31.9 | 53.9 |
| Commercial & Business Services | 2,447 | 16.1 | 3.5 | 32.7 | 52.4 |
| Media, News & Communications | 1,278 | 14.3 | 3.8 | 31.9 | 50.0 |
| Education & Research | 540 | 15.5 | 3.2 | 29.2 | 47.9 |
| Weighted mean | 8,412 | 16.7 | 4.4 | 32.0 | 53.1 |
Performance context
Real-user field timings, outside the WSI score · May 2026
Country-origin cohort
9,998
May 2026
Validated CrUX contexts
2
separated by device form factor
Country-specific · BigQuery
Phone
9,645 measured originsMay 2026dataset 202605Mean origin LCP p75
1,885ms
primary contextual metric · lower is faster
Mean origin TTFB p75
774ms
secondary control metric · lower is faster
Country-specific · BigQuery
Desktop
9,264 measured originsMay 2026dataset 202605Mean origin LCP p75
1,540ms
primary contextual metric · lower is faster
Mean origin TTFB p75
649ms
secondary control metric · lower is faster