The Post-Quantum Web Index
How much of the web has upgraded its key exchange?
We probe a curated set of public sites per sector and record whether each one's TLS edge negotiates a post-quantum (ML-KEM) key exchange. Below is the share that does — by sector.
Method
One TLS handshake per site, offering a modern browser's group list. A site counts as post-quantum ready if its edge negotiates a hybrid ML-KEM group (e.g. X25519MLKEM768). Rates are over sites we could measure; unreachable sites are excluded, not counted against. We measure the public web edge only — whatever terminates TLS (often a CDN) — not any organization's backbone or internal key exchange. Figures are aggregate by sector; we don't publish individual companies' results.