Original data on how the production web actually ships. Reproducible methods, open source, free to republish.
Scanned 100 Y Combinator companies across W25, S24, and W24 (91 reachable). 94% of reachable sites ship with critical security headers missing. Full dataset and methodology.