---
title: "HTTPS Adoption Statistics: 20.8% of Real Estate Sites Lag"
url: https://www.suffdigital.com/resources/data-studies/small-business-https-redirect
description: "HTTPS adoption statistics: 9.5% of small business websites still load without redirecting to HTTPS, and 20.8% of real estate sites do. See the data."
lang: en
---
Share
Share on X: https://twitter.com/intent/tweet?url=https%3A%2F%2Fwww.suffdigital.com%2Fresources%2Fdata-studies%2Fsmall-business-https-redirect&text=20.8%25%20of%20Real%20Estate%20Websites%20Still%20Load%20Without%20HTTPS%20vs%209.5%25%20of%20Small%20Business%20Websites
Share on Facebook: https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.suffdigital.com%2Fresources%2Fdata-studies%2Fsmall-business-https-redirect
Share on LinkedIn: https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.suffdigital.com%2Fresources%2Fdata-studies%2Fsmall-business-https-redirect
Share on Reddit: https://www.reddit.com/submit?url=https%3A%2F%2Fwww.suffdigital.com%2Fresources%2Fdata-studies%2Fsmall-business-https-redirect&title=20.8%25%20of%20Real%20Estate%20Websites%20Still%20Load%20Without%20HTTPS%20vs%209.5%25%20of%20Small%20Business%20Websites
**9.5%** of small business websites still load their insecure http:// version without sending visitors to the secure https:// one, and real estate websites do it at more than twice that rate, 20.8%. Another 3.8% show a security certificate that browsers reject.
Analysis of 5,120 small business websites · websites of US businesses listed on Google, September 2026
## Key Findings
1. 1. **9.5%** of small business websites still load their insecure http:// version without redirecting visitors to secure HTTPS. Copy stat
2. 2. **20.8%** of real estate websites load without redirecting to HTTPS, the highest rate of any industry and more than twice the small business average. Copy stat
3. 3. **1.7%** of funeral home websites load without redirecting to HTTPS, the lowest rate of any industry. Copy stat
4. 4. **3.8%** of small business websites show a security certificate that browsers reject as expired or invalid, which puts a full-page warning in front of visitors. Copy stat
5. 5. **1.5%** of small business websites have no security certificate at all, so they cannot offer HTTPS. Copy stat
## Summary
A home buyer clicks an old link to a real estate agent's listings page. The page loads, but the address bar says "Not secure", and it says the same on the contact form where the buyer is about to type a phone number and email address. The agent has a security certificate; the website just never sends visitors to the secure version.
HTTPS is the encrypted version of a website: data sent between the visitor and the site cannot be read or changed in transit. Browsers label pages without it "Not secure". A website that has HTTPS but does not redirect to it still lets visitors land on the insecure version through old links, bookmarks and typed addresses, which is where trust is lost.
**9.5%** of small business websites load without redirecting to HTTPS, almost one in ten. Most of them do have a certificate; they are missing a single redirect setting that most hosts offer as one switch. Real estate websites lead at 20.8%, and funeral homes trail at 1.7%.
## What we measured
On September 23 and 24, 2026 we visited 5,120 small business websites, taken from Google business listings in 56 US industries. For each website we requested the http:// address and checked whether it redirected to https://, recorded whether the website had a security certificate and whether browsers would accept it, and looked at up to 20 pages to see how many were served over plain HTTP.
A security certificate, often called an SSL certificate, is what lets a website offer HTTPS. A redirect sends visitors from one address to another automatically. A certificate is rejected when it has expired, was issued for a different address or was signed by the website itself rather than a trusted authority.
## One in ten small business websites still loads without HTTPS
9.5%
of small business websites load their http:// version without redirecting to HTTPS.
The gap shows up inside websites too. 1.8% of small business web pages are served over plain HTTP. That happens when a website links to its own http:// addresses and the server does not redirect them, so visitors reach the insecure version just by clicking around.
Chrome shows "Not secure" in the address bar on every one of those pages, including contact and booking forms, which is where it does the most harm. A visitor about to type a phone number or card details sees a warning from their own browser at exactly the wrong moment.
## Real estate, accounting and electrician websites lag the most
20.8%
of real estate websites load without redirecting to HTTPS.
Real estate agents lead at 20.8%, followed by accountants at 18.4% and electricians at 17.6%, all nearly twice the small business average. Many of these websites are older builds or run on templates from industry vendors that never forced HTTPS on the server. For accountants, whose clients send financial documents, a "Not secure" label is a particularly poor first impression.
Websites not redirecting to HTTPS by industry
Real estate
20.8%
Accountant
18.4%
Electrician
17.6%
Tattoo shop
17.4%
Jewelry store
17.3%
Fashion store
15.7%
Nail salon
15.5%
Massage therapist
15%
Auto dealer
14.6%
Pest control
14.3%
Source: Suff Digital analysis of 5,120 small business websites · websites of US businesses listed on Google, September 2026
## Funeral home, cleaning and church websites have nearly finished the move
At the other end, 1.7% of funeral home websites, 2.9% of cleaning company websites and 3.9% of church websites load without redirecting. Med spas (4.3%), garage door companies (4.5%) and orthodontists (4.8%) follow. Med spas and orthodontists often run on healthcare marketing platforms that force HTTPS by default.
Funeral home
1.7%
Cleaning
2.9%
Church
3.9%
Med spa
4.3%
Garage door
4.5%
Orthodontist
4.8%
The spread between the top and bottom of the list, 20.8% against 1.7%, shows the problem is a setting, not a cost.
## Broken certificates are a separate problem
3.8%
of small business websites show a security certificate that browsers reject.
A rejected certificate is worse than a missing redirect. Visitors see a full-page security warning before the website loads. The usual causes are a certificate that expired and did not renew, one issued for a different address, or one the website signed itself.
A further 1.5% of small business websites have no certificate at all, so they cannot offer HTTPS even if the owner wanted to. Free certificates that renew automatically are standard on most hosts, which makes both problems among the cheapest a small business can fix.
## What this means for small business owners
Type http:// followed by your domain into a browser. If the address bar does not switch to https://, ask your host or developer to add a permanent (301) redirect for the whole website; most hosts have a one-click "force HTTPS" setting. Then click the padlock and check the certificate's expiry date and the address it covers.
Free certificates renew on their own, but only while the domain settings stay correct, which is why they lapse after a host or domain change. A website management (https://www.suffdigital.com/services/website-maintenance/website-management) plan checks the redirect and certificate every month, so a lapse is fixed before visitors see a warning.
## Embed this research
Paste this on your site to embed the charts. It links back to the source automatically.
Source: 20.8% of Real Estate Websites Still Load Without HTTPS vs 9.5% of Small Business Websites - Suff Digital
## Cite this study
APA
Suff Digital. (2026). 20.8% of Real Estate Websites Still Load Without HTTPS vs 9.5% of Small Business Websites. https://www.suffdigital.com/resources/data-studies/small-business-https-redirect
Plain link
20.8% of Real Estate Websites Still Load Without HTTPS vs 9.5% of Small Business Websites - Suff Digital - https://www.suffdigital.com/resources/data-studies/small-business-https-redirect
## Frequently asked questions
### How many small business websites still load without HTTPS?
### Which industries are slowest to force HTTPS?
### Which industries have almost all moved to HTTPS?
### How many small business websites have a broken security certificate?
### How do I force HTTPS on my website?
## Related studies
- Website Migration 37% of Small Business Websites on HTTPS Still Link to Insecure HTTP Addresses: https://www.suffdigital.com/resources/data-studies/http-links-on-https-sites
- Website Migration 659,120 Secure Homepages Still Load Files Over Insecure HTTP: https://www.suffdigital.com/resources/data-studies/mixed-content-https-websites
- SEO 26.9% of Small Business Websites Link to Their Own Redirects vs 0.9% With Redirect Chains: https://www.suffdigital.com/resources/data-studies/small-business-technical-seo-housekeeping
- Website Migration 37% of Small Business Backlinks Depend on a Redirect vs 15% for Established Brands: https://www.suffdigital.com/resources/data-studies/backlinks-through-redirects
## Structured data
```json
[
{
"@context": "https://schema.org",
"@graph": [
{
"@type": "Organization",
"@id": "https://www.suffdigital.com/#organization",
"name": "Suff Digital",
"alternateName": "Suff Digital Marketing",
"url": "https://www.suffdigital.com/",
"logo": {
"@type": "ImageObject",
"@id": "https://www.suffdigital.com/#logo",
"url": "https://www.suffdigital.com/logo.png",
"contentUrl": "https://www.suffdigital.com/logo.png",
"caption": "Suff Digital"
},
"image": {
"@id": "https://www.suffdigital.com/#logo"
},
"description": "Suff Digital is a full-stack digital marketing agency that turns websites into predictable revenue engines, SEO, paid media, content, CRO, and web design built around revenue, not vanity metrics.",
"slogan": "Digital marketing built for what's next.",
"email": "hello@suffdigital.com",
"telephone": "+1-629-236-0099",
"foundingDate": "2022",
"founder": {
"@type": "Person",
"name": "Matt Suffoletto",
"jobTitle": "Founder & CEO"
},
"contactPoint": [
{
"@type": "ContactPoint",
"telephone": "+1-629-236-0099",
"email": "hello@suffdigital.com",
"contactType": "sales",
"areaServed": "US",
"availableLanguage": [
"en"
]
}
],
"address": {
"@type": "PostalAddress",
"addressLocality": "Nashville",
"addressRegion": "TN",
"postalCode": "37219",
"addressCountry": "US"
},
"areaServed": {
"@type": "Country",
"name": "United States"
},
"sameAs": [
"https://www.linkedin.com/company/suff-digital/",
"https://www.instagram.com/suffdigital/",
"https://www.youtube.com/@suffdigitalmarketing",
"https://www.tiktok.com/@suffdigital"
],
"knowsAbout": [
"Search Engine Optimization",
"Pay-Per-Click Advertising",
"Paid Social Advertising",
"Conversion Rate Optimization",
"Web Design",
"Digital PR",
"Link Building",
"Website Migration",
"Website Maintenance and Support",
"Technical SEO",
"Local SEO",
"AI Search Optimization"
],
"hasOfferCatalog": {
"@type": "OfferCatalog",
"name": "Suff Digital Services",
"itemListElement": [
{
"@type": "Offer",
"itemOffered": {
"@type": "Service",
"name": "Search Engine Optimization (SEO)",
"url": "https://www.suffdigital.com/"
}
},
{
"@type": "Offer",
"itemOffered": {
"@type": "Service",
"name": "Pay-Per-Click (PPC) Advertising",
"url": "https://www.suffdigital.com/services/ppc"
}
},
{
"@type": "Offer",
"itemOffered": {
"@type": "Service",
"name": "Paid Social Advertising",
"url": "https://www.suffdigital.com/services/paid-social"
}
},
{
"@type": "Offer",
"itemOffered": {
"@type": "Service",
"name": "Conversion Rate Optimization (CRO)",
"url": "https://www.suffdigital.com/services/cro"
}
},
{
"@type": "Offer",
"itemOffered": {
"@type": "Service",
"name": "Web Design",
"url": "https://www.suffdigital.com/services/web-design"
}
},
{
"@type": "Offer",
"itemOffered": {
"@type": "Service",
"name": "Digital PR & Link Building",
"url": "https://www.suffdigital.com/services/digital-pr"
}
},
{
"@type": "Offer",
"itemOffered": {
"@type": "Service",
"name": "Website Migration",
"url": "https://www.suffdigital.com/services/website-migration"
}
},
{
"@type": "Offer",
"itemOffered": {
"@type": "Service",
"name": "Website Maintenance & Support",
"url": "https://www.suffdigital.com/services/website-maintenance"
}
}
]
}
},
{
"@type": "WebSite",
"@id": "https://www.suffdigital.com/#website",
"url": "https://www.suffdigital.com/",
"name": "Suff Digital",
"inLanguage": "en-US",
"publisher": {
"@id": "https://www.suffdigital.com/#organization"
}
}
]
},
{
"@context": "https://schema.org",
"@graph": [
{
"@type": "Article",
"@id": "https://www.suffdigital.com/resources/data-studies/small-business-https-redirect#article",
"headline": "20.8% of Real Estate Websites Still Load Without HTTPS vs 9.5% of Small Business Websites",
"description": "9.5% of small business websites still load their insecure http:// version without sending visitors to the secure https:// one, and real estate websites do it at more than twice that rate, 20.8%. Another 3.8% show a security certificate that browsers reject.",
"image": [
"https://www.suffdigital.com/images/suff-digital-share-16x9.jpg"
],
"url": "https://www.suffdigital.com/resources/data-studies/small-business-https-redirect",
"datePublished": "2026-09-24",
"dateModified": "2026-09-24",
"author": {
"@type": "Person",
"name": "Matt Suffoletto",
"jobTitle": "Founder & CEO",
"url": "https://www.suffdigital.com/who-we-are"
},
"publisher": {
"@id": "https://www.suffdigital.com/#organization"
},
"mainEntityOfPage": {
"@id": "https://www.suffdigital.com/resources/data-studies/small-business-https-redirect",
"@type": "WebPage"
},
"isPartOf": {
"@id": "https://www.suffdigital.com/#website"
}
},
{
"@type": "BreadcrumbList",
"@id": "https://www.suffdigital.com/resources/data-studies/small-business-https-redirect#breadcrumb",
"itemListElement": [
{
"@type": "ListItem",
"position": 1,
"name": "Home",
"item": "https://www.suffdigital.com/"
},
{
"@type": "ListItem",
"position": 2,
"name": "Resources",
"item": "https://www.suffdigital.com/resources"
},
{
"@type": "ListItem",
"position": 3,
"name": "Data Studies",
"item": "https://www.suffdigital.com/resources/data-studies"
},
{
"@type": "ListItem",
"position": 4,
"name": "20.8% of Real Estate Websites Still Load Without HTTPS vs 9.5% of Small Business Websites"
}
]
},
{
"@type": "Dataset",
"@id": "https://www.suffdigital.com/resources/data-studies/small-business-https-redirect#dataset",
"name": "20.8% of Real Estate Websites Still Load Without HTTPS vs 9.5% of Small Business Websites",
"description": "9.5% of small business websites still load their insecure http:// version without sending visitors to the secure https:// one, and real estate websites do it at more than twice that rate, 20.8%. Another 3.8% show a security certificate that browsers reject.",
"url": "https://www.suffdigital.com/resources/data-studies/small-business-https-redirect",
"creator": {
"@id": "https://www.suffdigital.com/#organization"
},
"datePublished": "2026-09-24",
"dateModified": "2026-09-24",
"license": "https://creativecommons.org/licenses/by/4.0/",
"isAccessibleForFree": true,
"measurementTechnique": "Websites of US businesses listed on Google, in 56 industries"
},
{
"@type": "FAQPage",
"@id": "https://www.suffdigital.com/resources/data-studies/small-business-https-redirect#faq",
"mainEntity": [
{
"@type": "Question",
"name": "How many small business websites still load without HTTPS?",
"acceptedAnswer": {
"@type": "Answer",
"text": "9.5% of US small business websites load their http:// version without redirecting visitors to HTTPS, and 1.5% have no security certificate at all (September 2026)."
}
},
{
"@type": "Question",
"name": "Which industries are slowest to force HTTPS?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Real estate websites, at 20.8%, followed by accountants at 18.4% and electricians at 17.6%."
}
},
{
"@type": "Question",
"name": "Which industries have almost all moved to HTTPS?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Funeral homes, where 1.7% of websites load without redirecting to HTTPS, followed by cleaning companies at 2.9% and churches at 3.9%."
}
},
{
"@type": "Question",
"name": "How many small business websites have a broken security certificate?",
"acceptedAnswer": {
"@type": "Answer",
"text": "3.8% of small business websites show a certificate that browsers reject as expired or invalid, and 1.5% have none."
}
},
{
"@type": "Question",
"name": "How do I force HTTPS on my website?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Add a site-wide 301 redirect from http:// to https://; most hosts offer it as a single setting. 9.5% of small business websites have not done it."
}
}
]
}
]
}
]
```