73% WordPress on .us, 61% on .ca. North America's Government Web Runs Legacy.
.us sites: 7,240 detected, 73% WordPress. Canadian .ca sites: 39,161 detected, 61% WordPress. Silicon Valley runs modern. Government and SMB America runs WordPress and Drupal.
US .gov sites are 53%+ Drupal — the largest confirmed Drupal deployment in the world. Government Drupal adoption was a deliberate security posture choice, but the framework's declining community raises maintenance questions.
Canada at 13.3% Drupal and 18.5% Shopify shows a market splitting between government CMS (Drupal) and commercial ecommerce (Shopify), with WordPress holding the middle at 61%.
The American healthcare-on-WordPress problem is a HIPAA compliance conversation waiting to happen. The OCR is increasing enforcement of 'reasonable safeguards.'
Stripe, Netflix, Airbnb, Notion — American tech companies drove the migration to modern frameworks. But they represent an island. The broader .us web is 73% WordPress.
Same region. Different digital realities.
2 countries analyzed from our scan data. The gap within regions is wider than the gap between them.
Health information protection. Running patient services on 18,005 CVEs challenges the 'reasonable safeguards' requirement.
Payment card security. Plugin-based payment paths on WordPress expand PCI scope dramatically.
California privacy. Data subject requests on legacy CMS platforms are operationally difficult.
Federal cloud authorization. Legacy infrastructure makes authorization challenging.