Blog

Security headers in 2026: we checked the 10,000 most popular websites

We checked the security headers of the 10,000 most popular websites. 59% force HTTPS with HSTS, 35% send a Content-Security-Policy, and only 4.8% have one that blocks inline scripts.

Who blocks AI crawlers? We read the robots.txt of the 10,000 most popular websites

We read the robots.txt and llms.txt of the 10,000 most popular domains. 1 in 7 robots.txt files blocks GPTBot, 1 in 8 sites that answered publishes an llms.txt, and some do both.

A year of SaaS status pages: what 47 services posted, and what they left out

We read a year of incidents from 47 SaaS status pages: how often they post, how long incidents last, and why most never publish a postmortem.

SSL certificates in 2026: what the 10,000 most popular websites use, and who is ready for 47 days

We read the TLS certificate of the 10,000 most popular domains. Google Trust Services now issues more than Let's Encrypt, and 18% still run a certificate longer than today's 200-day limit.

How to Check Uptime on Windows - and Why the Number Is Often Wrong

Five tested ways to read a Windows machine's uptime, the Fast Startup catch that makes most of them wrong on a PC, and how to see the real last boot.

Introducing the UpWatchr Blog

Why we're writing this, and what a local-first uptime monitor's blog is actually going to be about.