/llms.txt) & Edge Security Headers Empirical Benchmark (2026)Passive edge telemetry conducted by TITAN Capital Forensics LLP across N = 2,860 production B2B domains spanning FinTech & Legal (774), Healthcare (190), B2B SaaS & E-Commerce (809), Digital Marketing Agencies (570), and Technical Consultancies (517).
/llms.txt AI-Search Citation Manifest (HTTP 404 / Soft-404)Content-Security-Policy (or Permitting unsafe-inline)p=reject Enforcement on Corporate MX GatewaysUse the interactive sector filter below to isolate specific B2B industry cohorts across both the aggregate posture matrix and individual telemetry records:
| B2B Industry Vertical | Audited Sample (N) | /llms.txt Present |
Strict-Transport-Security |
Content-Security-Policy |
X-Content-Type-Options |
Permissions-Policy |
DMARC p=reject |
Mean Posture Score |
|---|---|---|---|---|---|---|---|---|
| FinTech, Financial Services & Legal Enterprises Industrial, Financial Services & Legal Enterprises |
774 | 1.4% | 64.2% | 18.6% | 71.8% | 11.2% | 42.5% | 41.2 / 100 |
| Healthcare, Clinical AI & Healthtech Enterprises Healthcare & Clinical Enterprises |
190 | 0.5% | 58.9% | 14.2% | 66.3% | 8.9% | 38.4% | 36.8 / 100 |
| B2B SaaS, Cloud Infrastructure & E-Commerce B2B SaaS, E-Commerce & EU Regulated Hospitality |
809 | 3.8% | 72.4% | 24.1% | 76.5% | 15.7% | 46.1% | 46.5 / 100 |
| Digital Marketing, Growth & Enterprise SEO Agencies Digital Marketing & Enterprise SEO Agencies |
570 | 2.1% | 51.4% | 9.8% | 59.1% | 6.5% | 29.3% | 31.4 / 100 |
| Web Development Studios & DevSecOps Consultancies Web Development Studios & Technical Consultancies |
517 | 2.9% | 61.7% | 16.4% | 68.9% | 12.0% | 35.8% | 38.9 / 100 |
| Total / Weighted Fleet Aggregate | 2,860 | 2.4% | 63.5% | 18.1% | 69.8% | 11.5% | 38.8% | 40.0 / 100 |
Remediate missing /llms.txt manifests, edge security headers, and statutory compliance gaps immediately via our self-serve or institutional procurement tiers:
Run a live HTTP header, WCAG, JSON-LD, and /llms.txt inspection or calculate GDPR/HIPAA/AI-Act exposure.
Includes 4-file edge remediation drop-in (_headers, llms.txt, robots.txt, JSON-LD) + 919-domain CSV.
Tailored production package for Cloudflare, Nginx, Vercel, or Apache backed by our 30-Day Non-Breaking Config Guarantee.
Unbranded client audit dossiers, Scope-Guard SOW shields, and 6-database Notion v2.0 CISO/GDPR operating systems.
| Benchmark ID | Industry Vertical | Posture Score | /llms.txt |
HSTS | CSP | X-Content-Type | Permissions-Policy | DMARC |
|---|---|---|---|---|---|---|---|---|
| TCF-2026-0001 | Industrial, Financial Services & Legal Enterprises | 12/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
NOSNIFF_ENFORCED |
RESTRICTED_SCOPES |
p=reject |
| TCF-2026-0003 | Industrial, Financial Services & Legal Enterprises | 23/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
MISSING_HEADER |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0004 | Industrial, Financial Services & Legal Enterprises | 15/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
NOSNIFF_ENFORCED |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0009 | Industrial, Financial Services & Legal Enterprises | 24/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
NOSNIFF_ENFORCED |
MISSING_HEADER |
p=reject |
| TCF-2026-0010 | Industrial, Financial Services & Legal Enterprises | 25/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
NOSNIFF_ENFORCED |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0002 | Healthcare & Clinical Enterprises | 11/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
NOSNIFF_ENFORCED |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0017 | Healthcare & Clinical Enterprises | 28/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
MISSING_HEADER |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0021 | Healthcare & Clinical Enterprises | 30/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
MISSING_HEADER |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0415 | Healthcare & Clinical Enterprises | 32/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
NOSNIFF_ENFORCED |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0416 | Healthcare & Clinical Enterprises | 32/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
NOSNIFF_ENFORCED |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0005 | B2B SaaS, E-Commerce & EU Regulated Hospitality | 27/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
MISSING_HEADER |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0011 | B2B SaaS, E-Commerce & EU Regulated Hospitality | 25/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
MISSING_HEADER |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0016 | B2B SaaS, E-Commerce & EU Regulated Hospitality | 28/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
MISSING_HEADER |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0020 | B2B SaaS, E-Commerce & EU Regulated Hospitality | 30/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
NOSNIFF_ENFORCED |
RESTRICTED_SCOPES |
p=reject |
| TCF-2026-0303 | B2B SaaS, E-Commerce & EU Regulated Hospitality | 74/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
NOSNIFF_ENFORCED |
MISSING_HEADER |
p=reject |
| TCF-2026-0006 | Web Development Studios & Technical Consultancies | 20/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
MISSING_HEADER |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0007 | Web Development Studios & Technical Consultancies | 20/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
MISSING_HEADER |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0008 | Web Development Studios & Technical Consultancies | 31/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
NOSNIFF_ENFORCED |
MISSING_HEADER |
p=reject |
| TCF-2026-0013 | Web Development Studios & Technical Consultancies | 28/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
MISSING_HEADER |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0025 | Web Development Studios & Technical Consultancies | 32/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
MISSING_HEADER |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0014 | Digital Marketing & Enterprise SEO Agencies | 28/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
MISSING_HEADER |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0024 | Digital Marketing & Enterprise SEO Agencies | 31/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
MISSING_HEADER |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0026 | Digital Marketing & Enterprise SEO Agencies | 32/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
MISSING_HEADER |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0028 | Digital Marketing & Enterprise SEO Agencies | 32/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
MISSING_HEADER |
MISSING_HEADER |
p=none_or_missing |
| TCF-2026-0030 | Digital Marketing & Enterprise SEO Agencies | 32/100 | MISSING_HTTP_404 |
MISSING_OR_WEAK |
MISSING_OR_UNSAFE_INLINE |
NOSNIFF_ENFORCED |
RESTRICTED_SCOPES |
p=reject |