--- title: "Insecure HTTP Link Statistics: 37% of HTTPS Sites Still Link" url: https://www.suffdigital.com/resources/data-studies/http-links-on-https-sites description: "Insecure HTTP link statistics from 5,040 small business sites on HTTPS: 37.1% still link to an http:// address, led by churches at 63%. See the data." lang: en --- Share Share on X: https://twitter.com/intent/tweet?url=https%3A%2F%2Fwww.suffdigital.com%2Fresources%2Fdata-studies%2Fhttp-links-on-https-sites&text=37%25%20of%20Small%20Business%20Websites%20on%20HTTPS%20Still%20Link%20to%20Insecure%20HTTP%20Addresses Share on Facebook: https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.suffdigital.com%2Fresources%2Fdata-studies%2Fhttp-links-on-https-sites Share on LinkedIn: https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.suffdigital.com%2Fresources%2Fdata-studies%2Fhttp-links-on-https-sites Share on Reddit: https://www.reddit.com/submit?url=https%3A%2F%2Fwww.suffdigital.com%2Fresources%2Fdata-studies%2Fhttp-links-on-https-sites&title=37%25%20of%20Small%20Business%20Websites%20on%20HTTPS%20Still%20Link%20to%20Insecure%20HTTP%20Addresses **37.1%** of small business websites that run on secure HTTPS still link to at least one old, insecure http:// address, and 23.5% of their pages carry such a link. Church websites have the highest rate at 63%. Analysis of 5,040 small business websites on HTTPS · websites of US businesses listed on Google, September 2026 ## Key Findings 1. 1. **37.1%** of small business websites that use HTTPS still link to at least one insecure http:// address. Copy stat 2. 2. **23.5%** of pages on small business websites that use HTTPS contain a link to an insecure http:// address. Copy stat 3. 3. **63%** of church websites link to insecure http:// addresses, the highest rate of any industry and four times the 15.5% of nail salon websites. Copy stat 4. 4. **58%** of optometrist websites link to insecure http:// addresses, followed by funeral home, nonprofit and veterinarian websites at 55% each. Copy stat 5. 5. **1.8%** of small business web pages are still served over plain, unencrypted HTTP instead of HTTPS. Copy stat ## Summary A veterinary clinic moved its website to HTTPS years ago and the padlock shows in every visitor's browser. Scroll to the footer, though, and the link to its pet insurance partner still starts with http://, and so does the link in an old blog post to its own adoption page. Each of those links sends visitors either through an extra redirect or to a page with no encryption at all. HTTPS is the secure version of the web's basic protocol: it encrypts everything sent between the browser and the website, and browsers mark sites without it as "Not secure". Switching a website to HTTPS happens on the server, but the links written into its pages stay exactly as they were typed. Each leftover http:// link is a small crack in an otherwise secure site. More than a third of small business websites have at least one. **37.1%** of small business websites on HTTPS still link to an insecure http:// address, and 23.5% of their pages carry one. The move to HTTPS was finished at the server and never finished in the content. ## What we measured On September 23 and 24, 2026 we visited 5,040 small business websites served over HTTPS, taken from Google business listings in 56 US industries, and read the links on up to 20 pages of each site. We flagged every link to an address that starts with http:// instead of https://, whether it points to the website's own pages or to another website. A website counts when any of its pages has one. An http:// link is a link to the unencrypted version of a web address. If the destination has moved to HTTPS, the visitor goes through a redirect first; if it has not, the visitor leaves a secure page for an insecure one. An industry's rate is the share of its websites with at least one such link. ## More than a third of secure websites still link to insecure addresses 37.1% of small business websites on HTTPS link to at least one insecure http:// address. The leftovers are spread through the content, not tucked on one page. 23.5% of all pages on these websites contain at least one http:// link, almost one page in four. They sit in footers, old blog posts, embedded widgets and links to partner organizations, directories and resources that were copied in before the website moved to HTTPS. A smaller group has a deeper problem. 1.8% of small business web pages are served over plain HTTP themselves, which usually means the website never forced HTTPS for every visitor. For everyone else, the leftover links are a content problem rather than a server problem, and they stay until someone edits them. ## Church, optometrist and funeral home websites have the highest rates 63% of church websites link to at least one insecure http:// address, followed by optometrists at 58% and funeral homes, nonprofits and veterinarians at 55% each. These are websites that stay live for years with light edits and link out often, to parent organizations, suppliers, directories and community resources, many of which were written years ago. Websites linking to http:// addresses by industry Church 63% Optometrist 58% Funeral home 55% Nonprofit 55% Veterinarian 55% Financial advisor 53% Massage therapist 52% Wedding venue 52% Hotel 51% Yoga studio 49% Source: Suff Digital analysis of 5,040 small business websites on HTTPS · websites of US businesses listed on Google, September 2026 For a financial advisor (53%) or a hotel (51%), the stakes are higher than the numbers suggest, because their visitors are often about to share personal or payment details. A browser warning or an insecure destination at that moment costs trust the website otherwise earned. ## Nail salon and spa websites have the lowest rates At the other end, 15.5% of nail salon websites and 16.7% of spa websites link to an http:// address, about a quarter of the church rate. Barber shops (22.4%) and jewelry stores (22.9%) follow, with HVAC contractors at 24.1% and SaaS companies at 25.3%. Nail salon 15.5% Spa 16.7% Barber shop 22.4% Jewelry store 22.9% HVAC 24.1% SaaS 25.3% These industries tend to have newer websites, often built on hosted platforms that write https:// into every link by default, and they link out less. Their lower rates show the problem is not inevitable: a website built after the move to HTTPS rarely has it. ## What this means for small business owners Search your website's content for "http://" followed by your own domain and switch each one to https://. On WordPress a search-and-replace plugin or a single database query does it in one pass. Then check menus, footers and theme settings, which are stored separately and are often missed. For links to other websites, test whether the https:// version works and update the link if it does. If the other website has no HTTPS at all, decide whether the link is still worth keeping. Our technical seo services (https://www.suffdigital.com/seo/technical-seo-services) include a full check for these leftovers, along with the redirects and certificates behind them. ## Embed this research Paste this on your site to embed the charts. It links back to the source automatically.

Source: 37% of Small Business Websites on HTTPS Still Link to Insecure HTTP Addresses - Suff Digital

## Cite this study APA Suff Digital. (2026). 37% of Small Business Websites on HTTPS Still Link to Insecure HTTP Addresses. https://www.suffdigital.com/resources/data-studies/http-links-on-https-sites Plain link 37% of Small Business Websites on HTTPS Still Link to Insecure HTTP Addresses - Suff Digital - https://www.suffdigital.com/resources/data-studies/http-links-on-https-sites ## Frequently asked questions ### How many websites still link to insecure http pages? ### Which industries have the most http links? ### Which industries have the fewest http links? ### Is linking to http:// addresses a security risk? ## Related studies - Website Migration 659,120 Secure Homepages Still Load Files Over Insecure HTTP: https://www.suffdigital.com/resources/data-studies/mixed-content-https-websites - SEO 26.9% of Small Business Websites Link to Their Own Redirects vs 0.9% With Redirect Chains: https://www.suffdigital.com/resources/data-studies/small-business-technical-seo-housekeeping - Website Migration 20.8% of Real Estate Websites Still Load Without HTTPS vs 9.5% of Small Business Websites: https://www.suffdigital.com/resources/data-studies/small-business-https-redirect - SEO Followed Backlinks to Small Business Websites Vanish Five Times as Often as Nofollow Links: https://www.suffdigital.com/resources/data-studies/backlink-link-rot-rate ## Structured data ```json [ { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://www.suffdigital.com/#organization", "name": "Suff Digital", "alternateName": "Suff Digital Marketing", "url": "https://www.suffdigital.com/", "logo": { "@type": "ImageObject", "@id": "https://www.suffdigital.com/#logo", "url": "https://www.suffdigital.com/logo.png", "contentUrl": "https://www.suffdigital.com/logo.png", "caption": "Suff Digital" }, "image": { "@id": "https://www.suffdigital.com/#logo" }, "description": "Suff Digital is a full-stack digital marketing agency that turns websites into predictable revenue engines, SEO, paid media, content, CRO, and web design built around revenue, not vanity metrics.", "slogan": "Digital marketing built for what's next.", "email": "hello@suffdigital.com", "telephone": "+1-629-236-0099", "foundingDate": "2022", "founder": { "@type": "Person", "name": "Matt Suffoletto", "jobTitle": "Founder & CEO" }, "contactPoint": [ { "@type": "ContactPoint", "telephone": "+1-629-236-0099", "email": "hello@suffdigital.com", "contactType": "sales", "areaServed": "US", "availableLanguage": [ "en" ] } ], "address": { "@type": "PostalAddress", "addressLocality": "Nashville", "addressRegion": "TN", "postalCode": "37219", "addressCountry": "US" }, "areaServed": { "@type": "Country", "name": "United States" }, "sameAs": [ "https://www.linkedin.com/company/suff-digital/", "https://www.instagram.com/suffdigital/", "https://www.youtube.com/@suffdigitalmarketing", "https://www.tiktok.com/@suffdigital" ], "knowsAbout": [ "Search Engine Optimization", "Pay-Per-Click Advertising", "Paid Social Advertising", "Conversion Rate Optimization", "Web Design", "Digital PR", "Link Building", "Website Migration", "Website Maintenance and Support", "Technical SEO", "Local SEO", "AI Search Optimization" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Suff Digital Services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Search Engine Optimization (SEO)", "url": "https://www.suffdigital.com/" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Pay-Per-Click (PPC) Advertising", "url": "https://www.suffdigital.com/services/ppc" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Paid Social Advertising", "url": "https://www.suffdigital.com/services/paid-social" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Conversion Rate Optimization (CRO)", "url": "https://www.suffdigital.com/services/cro" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Web Design", "url": "https://www.suffdigital.com/services/web-design" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Digital PR & Link Building", "url": "https://www.suffdigital.com/services/digital-pr" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Website Migration", "url": "https://www.suffdigital.com/services/website-migration" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Website Maintenance & Support", "url": "https://www.suffdigital.com/services/website-maintenance" } } ] } }, { "@type": "WebSite", "@id": "https://www.suffdigital.com/#website", "url": "https://www.suffdigital.com/", "name": "Suff Digital", "inLanguage": "en-US", "publisher": { "@id": "https://www.suffdigital.com/#organization" } } ] }, { "@context": "https://schema.org", "@graph": [ { "@type": "Article", "@id": "https://www.suffdigital.com/resources/data-studies/http-links-on-https-sites#article", "headline": "37% of Small Business Websites on HTTPS Still Link to Insecure HTTP Addresses", "description": "37.1% of small business websites that run on secure HTTPS still link to at least one old, insecure http:// address, and 23.5% of their pages carry such a link. Church websites have the highest rate at 63%.", "image": [ "https://www.suffdigital.com/images/suff-digital-share-16x9.jpg" ], "url": "https://www.suffdigital.com/resources/data-studies/http-links-on-https-sites", "datePublished": "2026-09-24", "dateModified": "2026-09-24", "author": { "@type": "Person", "name": "Matt Suffoletto", "jobTitle": "Founder & CEO", "url": "https://www.suffdigital.com/who-we-are" }, "publisher": { "@id": "https://www.suffdigital.com/#organization" }, "mainEntityOfPage": { "@id": "https://www.suffdigital.com/resources/data-studies/http-links-on-https-sites", "@type": "WebPage" }, "isPartOf": { "@id": "https://www.suffdigital.com/#website" } }, { "@type": "BreadcrumbList", "@id": "https://www.suffdigital.com/resources/data-studies/http-links-on-https-sites#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://www.suffdigital.com/" }, { "@type": "ListItem", "position": 2, "name": "Resources", "item": "https://www.suffdigital.com/resources" }, { "@type": "ListItem", "position": 3, "name": "Data Studies", "item": "https://www.suffdigital.com/resources/data-studies" }, { "@type": "ListItem", "position": 4, "name": "37% of Small Business Websites on HTTPS Still Link to Insecure HTTP Addresses" } ] }, { "@type": "Dataset", "@id": "https://www.suffdigital.com/resources/data-studies/http-links-on-https-sites#dataset", "name": "37% of Small Business Websites on HTTPS Still Link to Insecure HTTP Addresses", "description": "37.1% of small business websites that run on secure HTTPS still link to at least one old, insecure http:// address, and 23.5% of their pages carry such a link. Church websites have the highest rate at 63%.", "url": "https://www.suffdigital.com/resources/data-studies/http-links-on-https-sites", "creator": { "@id": "https://www.suffdigital.com/#organization" }, "datePublished": "2026-09-24", "dateModified": "2026-09-24", "license": "https://creativecommons.org/licenses/by/4.0/", "isAccessibleForFree": true, "measurementTechnique": "Websites of US businesses listed on Google, in 56 industries" }, { "@type": "FAQPage", "@id": "https://www.suffdigital.com/resources/data-studies/http-links-on-https-sites#faq", "mainEntity": [ { "@type": "Question", "name": "How many websites still link to insecure http pages?", "acceptedAnswer": { "@type": "Answer", "text": "37.1% of US small business websites that use HTTPS still link to at least one insecure http:// address, and 23.5% of their pages contain such a link (September 2026)." } }, { "@type": "Question", "name": "Which industries have the most http links?", "acceptedAnswer": { "@type": "Answer", "text": "Church websites have the highest rate, at 63%, followed by optometrists at 58% and funeral homes, nonprofits and veterinarians at 55% each." } }, { "@type": "Question", "name": "Which industries have the fewest http links?", "acceptedAnswer": { "@type": "Answer", "text": "Nail salon websites, at 15.5%, followed by spa websites at 16.7% and barber shop websites at 22.4%." } }, { "@type": "Question", "name": "Is linking to http:// addresses a security risk?", "acceptedAnswer": { "@type": "Answer", "text": "It weakens the site's security. Each http:// link either adds a redirect or sends visitors from an encrypted page to an unencrypted one, and 37.1% of small business websites on HTTPS still have at least one." } } ] } ] } ] ```