Skip to content
State of the Swamp

State of the Swamp

The state of vibe-coded security — every number here is real, first-party, and zero-PII, pulled live from the 268 scans we've run across 153 domains. No survey, no estimates. Just what the swamp actually looks like.

domains scanned
153
scans run
268
high-severity found
37
critical found
15

What we found

43%28%24%93issues flagged
  • DNSSEC off40 · 43%
  • Spoofable email26 · 28%
  • Weak headers22 · 24%
  • Exposed secrets5 · 5%

Top 3 most common issues

  1. 1DNSSEC off40
  2. 2Spoofable email26
  3. 3Weak headers22

Does fixing it actually work?

Of the 43domains that came back for a second look, comparing each one's first scan to its latest:

19%
average reduction in issues
22%
of domains cut issues by 50%+
40%
of domains are now clean
0
silver bullets — just sweat & iteration

The swamp is real. The data is real. The work is worth it.

Scan your domain free

See where you land on this page.