ALL POSTS

September 2025 Web Server Survey

Survey

September 30, 2025

In the September 2025 survey we received responses from 1,337,528,194 sites across 285,209,235 domains and 13,806,606 web-facing computers. This reflects an increase of 37.5 million sites, 3.7 million domains, and 9,298 web-facing computers.

nginx experienced the largest gain of 22.8 million sites (+7.34%) this month, and now accounts for 24.9% (+1.04pp) of sites seen by Netcraft. Cloudflare made the next largest gain of 4.4 million sites (+2.25%).

OpenResty experienced the largest loss of 779,258 sites (-0.94%) this month, reducing its market share to 6.15% (-0.24pp). Apache suffered the next largest loss, down by 558,541 sites (-0.32%).

Vendor news

lighttpd version 1.4.82 was released on September 12th. It now ignores HTTP trailers unless the field name is added explicitly to an allowlist.
njs version 0.9.2 was released on September 23rd, containing a range of bug fixes and improvements - including HTTP keepalive support in the ngx.fetch() API.

graph01_202509_00: Total number of websites

graph02_202509_00: Web server market share

Developer	August 2025	Percent	September 2025	Percent	Change
nginx	310,681,847	23.90%	333,494,884	24.93%	1.04
Cloudflare	194,986,099	15.00%	199,371,471	14.91%	-0.09
Apache	176,208,901	13.55%	175,650,360	13.13%	-0.42
OpenResty	83,032,636	6.39%	82,253,378	6.15%	-0.24

graph03_202509_00: Web server market share for active sites

Developer	August 2025	Percent	September 2025	Percent	Change
Cloudflare	38,603,781	19.04%	38,984,570	19.41%	0.38
nginx	38,196,378	18.83%	35,285,153	17.57%	-1.26
Apache	29,430,639	14.51%	29,018,024	14.45%	-0.06
Google	21,733,247	10.72%	21,327,396	10.62%	-0.10

For more information see Active Sites.

graph04_202509_00: Web server market share for top million busiest sites

Developer	August 2025	Percent	September 2025	Percent	Change
Cloudflare	228,429	22.84%	234,114	23.41%	0.57
nginx	202,671	20.27%	202,038	20.20%	-0.06
Apache	175,115	17.51%	175,173	17.52%	0.01
LiteSpeed	41,753	4.18%	43,182	4.32%	0.14

graph05_202509_00: Web server market share for computers

Developer	August 2025	Percent	September 2025	Percent	Change
nginx	5,697,303	41.29%	5,755,310	41.69%	0.39
Apache	3,021,171	21.90%	3,014,016	21.83%	-0.07
Microsoft	1,075,597	7.80%	1,035,669	7.50%	-0.29

graph06_202509_00: Web server market share for domains

Developer	August 2025	Percent	September 2025	Percent	Change
nginx	54,240,738	19.27%	56,530,822	19.82%	0.55
Apache	48,206,189	17.12%	47,966,550	16.82%	-0.31
OpenResty	39,723,573	14.11%	39,734,186	13.93%	-0.18
Cloudflare	32,526,429	11.55%	33,210,847	11.64%	0.09

Don’t leave your security up to chance

Work with Netcraft today

Get demo

Don’t leave your security up to chance

Work with Netcraft today

Get demo

Don’t leave your security up to chance

Work with Netcraft today

Get demo

Don’t leave your security up to chance

Work with Netcraft today

Get demo

For Education Purposes Only? When Web Design Lessons Teach Phishing

Don't want to miss out on updates?

Join our mailing list for regular blog posts and case studies from Netcraft.

Up next

For Education Purposes Only? When Web Design Lessons Teach Phishing

Netcraft research reveals how online coding tutorials and student “website clone” projects can unintentionally create fully functional phishing kits mimicking brands like Amazon and Instagram. Learn how innocent exercises become cybercrime tools—and what educators can do to prevent it.

For Education Purposes Only? When Web Design Lessons Teach Phishing