AWS WAF on new websites

1. AWS WAF appeared on about 110 new sites in the last 30 days.^[1]
2. It is unusually common on .uk domains: 6.9% of the domains running it, against 2.9% of domains across new sites.

The line is the 7-day average share of new sites that use AWS WAF, since 10 September.

#	Movement	Tool	Share of all sites	Share of category	Bar
1	–	HSTS	47.4%	87.4%
2	–	Cloudflare Bot Management	13.7%	25.2%
3	–	Google reCAPTCHA	1.9%	3.5%
4	▲1	Anubis	0.1%	0.2%
5	▼2	DDoS-Guard	0.1%	0.2%
…
20	▲1	AWS WAF	<0.1%	<0.1%

All-time shares across the new sites we track: of all of them, and of the sites using any Security tool. AWS WAF is typically used alongside HSTS rather than instead of it. All 400 in Security

Tool	Sites with both	vs all new sites	Bar
AWS ALB	143	170x
Amazon Web Services	222	88x
AWS CloudFront	142	39x
AWS Route 53	89	27x
Google Analytics	112	3.2x

Tools that turn up far more often on AWS WAF sites than on new sites in general, and how many times as common each one is there.

41 of the 338 sites using AWS WAF are product launches we list individually. The other 297 are new business and personal sites: they count towards the figures above but are not listed here. A watch sends them to you.

• Bee Frontier and Bee Eclipse aboutamazon.com
• Amazon Alexa Tablets aboutamazon.com
• ROMBO AI for NMR Compound Identification wattpad.com

Site	Found	Also detected
Macro: Automatic Net Worth Tracking Dashboard hello-macro.com · Finance	Oct 19
Bee Frontier and Bee Eclipse aboutamazon.com	Oct 18
Any Day Out · Things to do near you, any day anydayout.com	Oct 12
Amazon Alexa Tablets aboutamazon.com	Oct 9
Work Order Software - NewWaySERVICE newwayservice.ca · Canada	Oct 8
Provenant — AI incident investigation platform | Roveldi roveldi.ai · Developer Tools · India	Oct 8
ROMBO AI for NMR Compound Identification wattpad.com · Canada	Oct 5
Threads of Mizan erivess.xyz · Games	Sep 25
Yardlane — Less admin. More progress. yardlane.io · Productivity	Sep 22
IndiaLookup - Logistics & Compliance Verification Tools indialookup.net	Sep 16
Firstplanit: Fast-track building product decisions firstplanit.dev	Sep 5
Scanara scanara.io	Sep 4

Showing the most recent 12 of 41.

Watches, exports and the API give you all 338 sites using AWS WAF, from £15 a month.

1. These figures cover websites that went live since April 2026, not the web as a whole.
2. Country comes from what each site says about itself, such as a company registration, legal terms or a phone number, not just its domain ending. Too few sites state their country plainly for the usual count, so this one also counts single signals: a country domain ending, a phone number (for North America, its area code), a location the site declares in its own page metadata, or a country-specific vendor stack and the page language where they agree and nothing contradicts them. Read these as likely rather than certain.
3. Green hosting is the share whose web host The Green Web Foundation lists as running on green energy, among sites checked since 1 April 2026, against the same share for every new site we checked over that time. Data from The Green Web Foundation.