/research

Original research

Data we collect ourselves, with the method published next to it. Aggregates only: no store or business is ever named.

Monthly · October 2026 · first edition

State of AI-Built App Security

93.4%
of AI-built apps ship with no Content Security Policy

Browser protections, HTTPS, files left open, secret keys in public code and the services behind them, counted every month from our own checks. CSV and embeddable charts.

Read ›
Monthly · October 2026 · first edition

MCP Tool Risk Labels

36%
of tools that delete or erase are not marked destructive

How often public MCP servers mark the tools that delete, move money, run code, send or write, set against what those tools say they do. From the 7Maps daily checks.

Read ›
Weekly · updated October 19, 2026

US Store Speed Index

37
median phone score this week

A fixed panel of US online stores, measured every Monday from the US with Google PageSpeed Insights. History and CSV included.

Read ›
Study · September 30, 2026

US Store Speed 2026

81.2%
of stores score under 50 on a phone

367 US stores tested on an emulated mid-range phone: scores, load times, page weight and the apps that cost the most.

Read ›
Per app

What each store app costs in speed

34
apps measured

How many stores in the sample load each third-party app, and how much it adds to the page.

Read ›
Accessibility · October 1, 2026

US Store Accessibility 2026

86.8%
of stores fail an automated accessibility check

Automated WCAG checks on the same US stores. Failed checks are what accessibility lawsuits cite first.

Read ›
For AI shoppers · October 1, 2026

AI Shopper Readiness 2026

50.8%
give a product page complete machine-readable data

What a shopping agent needs to recommend a product, and what stores tell the AI crawlers.

Read ›
Email · October 1, 2026

US Store Email Authentication 2026

66.1%
enforce DMARC

SPF, DKIM and DMARC across US stores. Gmail and Yahoo now require them, or mail goes to spam.

Read ›
Security · October 1, 2026

AI-Built Apps Security Hygiene 2026

93.6%
ship with no Content Security Policy

Baseline browser protections across apps built with AI app builders. Public headers only.

Read ›

Cite it with a link. The data is also available to ChatGPT and Claude through the 7IT MCP server, so an assistant can answer from it directly.