The Scan
We scanned 10 major US fintech and government websites using the WebPulse framework detection engine. The results split perfectly along sectoral lines. Here is every site we scanned.
US Fintech — Full Scan Data
| Site | Framework | Generation | Confidence |
|---|---|---|---|
| stripe.com | Next.js | modern | 95% |
| plaid.com | Next.js | modern | 95% |
| robinhood.com | Next.js | modern | 95% |
| brex.com | Next.js | modern | 95% |
| mercury.com | Next.js | modern | 95% |
Source: WebPulse scanner detection, May 2026. All sites confirmed via __NEXT_DATA__ and _next/static signatures.
Five for five. Every US fintech runs Next.js. Not React, not Vue, not Angular — specifically Next.js. The convergence is total.
US Government — Full Scan Data
| Site | Framework | Generation | CVEs (NVD) |
|---|---|---|---|
| whitehouse.gov | WordPress | legacy | 18,005 |
| nasa.gov | WordPress | legacy | 18,005 |
| usa.gov | Drupal | legacy | 1,374 |
| irs.gov | Drupal | legacy | 1,374 |
| epa.gov | Drupal | legacy | 1,374 |
Source: WebPulse scanner detection, May 2026. CVE counts from NIST NVD keyword search for each framework.
Five for five. Every US government site runs legacy CMS. The White House. NASA. The IRS. The EPA. All on frameworks with thousands of known vulnerabilities.
The Full US Scan — 31 Sites Across 11 Industries
| Site | Sector | Framework | Generation |
|---|---|---|---|
| stripe.com | Fintech | Next.js | modern |
| plaid.com | Fintech | Next.js | modern |
| robinhood.com | Fintech | Next.js | modern |
| brex.com | Fintech | Next.js | modern |
| mercury.com | Fintech | Next.js | modern |
| target.com | Retail | Next.js | modern |
| homedepot.com | Retail | Spring | modern |
| nike.com | Retail | React | modern |
| hilton.com | Travel | Next.js | modern |
| airbnb.com | Travel | React | modern |
| statefarm.com | Insurance | Next.js | modern |
| allstate.com | Insurance | React | modern |
| starbucks.com | Food | Next.js | modern |
| webmd.com | Healthcare | Rails | modern |
| workday.com | Enterprise | React | modern |
| time.com | Media | Next.js | modern |
| clevelandclinic.org | Healthcare | Drupal | legacy |
| healthline.com | Healthcare | WordPress | legacy |
| whitehouse.gov | Government | WordPress | legacy |
| usa.gov | Government | Drupal | legacy |
| nasa.gov | Government | WordPress | legacy |
| irs.gov | Government | Drupal | legacy |
| epa.gov | Government | Drupal | legacy |
| stanford.edu | Education | WordPress | legacy |
| harvard.edu | Education | WordPress | legacy |
| nytimes.com | Media | WordPress | legacy |
| techcrunch.com | Media | WordPress | legacy |
| salesforce.com | Enterprise | WordPress | legacy |
| progressive.com | Insurance | Drupal | legacy |
| aclu.org | Nonprofit | WordPress | legacy |
| eff.org | Nonprofit | Drupal | legacy |
Source: WebPulse US regional scan, May 2026. 66 sites scanned, 31 frameworks detected. Sorted modern-first.
By Industry — 56 Sites Across 11 Sectors
| Industry | Sites | Modern | Legacy | Modern % | Confidence |
|---|---|---|---|---|---|
| Fintech | 5 | 5 | 0 | 100% | Strong |
| Retail | 6 | 5 | 1 | 83% | Strong |
| Insurance | 5 | 3 | 2 | 60% | Strong |
| Healthcare | 5 | 2 | 3 | 40% | Strong |
| Media | 8 | 3 | 5 | 38% | Strong |
| Education | 6 | 0 | 6 | 0% | Strong |
| Government | 7 | 0 | 7 | 0% | Strong |
| Enterprise | 4 | 3 | 1 | 75% | Directional |
| Travel | 3 | 3 | 0 | 100% | Directional |
| Food | 3 | 2 | 1 | 67% | Directional |
| Nonprofit | 4 | 0 | 4 | 0% | Directional |
Source: WebPulse US regional scan, May 2026. 130 sites scanned, 56 detected. 'Strong' = 5+ sites detected. 'Directional' = fewer than 5, pattern indicative but sample too small to generalize.
The Numbers
What This Tells Us
The most polarized finding in our entire dataset. Same country, same talent pool, same hosting infrastructure — and two sectors made completely opposite framework choices.
Fintech companies are founded by engineers who evaluate frameworks on merit. Government websites are procured through contracting processes that favor incumbents. The framework choice reflects the decision-making process, not the available technology.
When Stripe's engineering team chose Next.js, they measured performance, security, and developer velocity. When a government contractor chose WordPress for whitehouse.gov, they chose what the procurement catalog offered. Same country. Different decision architectures. Opposite outcomes.
