2,245,592 sites scanned. Two very different webs.
Tranco top-100K (the elite). Common Crawl (the broad web). The picture changes completely depending on where you look.
For the first time, more than half of detected frameworks on the world's top websites are modern. The tipping point has arrived.
What the world's top websites run
At the top 100: 79% modern. At the top 10,000: the split is nearly even. Across the full web: legacy still leads.
The top and the broad web are two different planets.
Tranco top-100K shows the elite. Common Crawl shows the rest. The gap is the finding.
The tipping point exists — but only at the top. Next.js leads. Venture-funded, engineering-led companies migrated.
WordPress at 62.5%. The web that most businesses actually run is overwhelmingly legacy.
What the real web runs
Source: WebPulse Common Crawl WARC scan. 2,144,827 framework detections. Among detected frameworks only.
CISA Known Exploited Vulnerabilities by framework
Vulnerabilities confirmed to be actively exploited in the wild. Federal agencies are required to remediate these. 1642 total entries in the catalog.
Source: CISA Known Exploited Vulnerabilities catalog. Updated 2026-07-15. Count reflects entries where the framework or its ecosystem is the affected product.
How we did this
Domain list: Research-grade domain rankings used in academic security papers, aggregating multiple ranking sources and filtering for manipulation.
Detection: Our open-source framework detector analyzes HTML content, HTTP headers, cookies, JavaScript references, and meta tags. 25 framework signatures with multi-signal confidence scoring.
Detection rate: 31.1% — many top sites use custom frameworks, heavy CDN obfuscation, or server-side rendering that strips framework signatures. Our detection is conservative by design: we'd rather miss a framework than misidentify one.
Generation classification: "Modern" = frameworks designed for static generation, edge rendering, or API-first architecture (post-2016). "Legacy" = traditional server-rendered CMS and monolithic frameworks.