The Number
Turkey at 95%. Iran at 89%. Those were striking. Nigeria makes them look diverse. Out of 832 detected frameworks on .ng domains, 831 are WordPress. The remaining two — one SvelteKit, one Rails — are statistical noise. This is as close to total monoculture as our scanner has ever measured.
Why Nigeria Is Different From Turkey
Turkey's monoculture comes from a freelance ecosystem that defaults to WordPress. Iran's comes from sanctions blocking modern platforms. Nigeria's has a different driver: the intersection of a massive informal economy going digital and the dominance of WordPress tutorials in Nigerian developer education. Every Fiverr freelancer in Lagos learns WordPress. Every SMB that goes online gets WordPress. The pipeline is WordPress-only.
The Systemic Risk
832 sites is a sample, not a census. But the signal is clear: .ng has zero framework diversity in our detection data. Every WordPress CVE is relevant to every detected Nigerian website. There is no hedging, no alternative infrastructure, no fallback. The entire detectable .ng web shares one attack surface.
