Original research
Data we collect ourselves, with the method published next to it. Aggregates only: no store or business is ever named.
Cite it with a link. The data is also available to ChatGPT and Claude through the 7IT MCP server, so an assistant can answer from it directly.
- Monthly · November 2026November 2026first edition: method and sample
State of AI-Built App Security
Browser protections, HTTPS, files left open, secret keys in public code and the services behind them, counted every month from our own checks. CSV and embeddable charts.
- Monthly · November 202628.2%of tools that delete or erase are not marked destructive
MCP Tool Risk Labels
How often public MCP servers mark the tools that delete, move money, run code, send or write, set against what those tools say they do. From the 7Maps daily checks.
- Weekly · updated November 9, 202638median phone score this week
US Store Speed Index
A fixed panel of US online stores, measured every Monday from the US with Google PageSpeed Insights. History and CSV included.
- Study · September 30, 202681.2%of stores score under 50 on a phone
US Store Speed 2026
367 US stores tested on an emulated mid-range phone: scores, load times, page weight and the apps that cost the most.
- Per app34apps measured
What each store app costs in speed
How many stores in the sample load each third-party app, and how much it adds to the page.
- Accessibility · October 1, 202686.8%of stores fail an automated accessibility check
US Store Accessibility 2026
Automated WCAG checks on the same US stores. Failed checks are what accessibility lawsuits cite first.
- For AI shoppers · October 1, 202650.8%give a product page complete machine-readable data
AI Shopper Readiness 2026
What a shopping agent needs to recommend a product, and what stores tell the AI crawlers.
- Email · October 1, 202666.1%enforce DMARC
US Store Email Authentication 2026
SPF, DKIM and DMARC across US stores. Gmail and Yahoo now require them, or mail goes to spam.
- Security · October 1, 202693.6%ship with no Content Security Policy
AI-Built Apps Security Hygiene 2026
Baseline browser protections across apps built with AI app builders. Public headers only.