Open-Source 2026 Security Header, MTA-STS & Ed25519 /llms.txt Benchmark Kit

Citeable empirical telemetry across 919 B2B & Digital Agency domains audited 100% passively under TITAN Law #1.

1. Key Empirical Findings (Q4 2026 Cohort)

2. Reference Open-Source HSTS & MTA-STS Baseline

Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin

# /.well-known/mta-sts.txt
version: STSv1
mode: enforce
max_age: 604800
Download Full 919-Domain CSV + 50 Niche /llms.txt Templates ($20) Test Your Domain Live in /xray/
🛡️ ENGINE 1 (1-Click Order Bump — +$199/yr or +$29/mo): TITAN Posture DriftWatch & 1-Year Ed25519 Signed Evidence Archive

Continuous Semantic AST monitoring (zero false positives from nonces/timestamps) with Hex-Sharded 30TB Vault storage and cumulative SOC2-Artifact-Index.csv + Ed25519-signed PDF/JSON snapshots.

+ Add 1-Year DriftWatch & Signed SOC2 Archive (+$199/yr | +$29/mo) →
💳 ENGINE 2 (+$49/mo Agency Add-On): White-Label Client Vault & “Billable Drift Invoice Generator”

Row-Level Isolated 25-Domain Agency Vault. Automatically turns client security regressions into itemized client work orders (CSP_DOWNGRADE: $500 | HSTS_EXPIRY: $300 | DMARC_NONE: $250 | LLMS_TXT_MISSING: $150 = $1,200 Billable Client Invoice).

📊 ENGINE 3 ($79 Standard / $149 Quarterly Vault): 2,860-Company B2B Vulnerability & AI-Readiness Lead-Gen Dataset

Instant .csv, .parquet, and .sqlite export with Ready_Cold_Email_Icebreaker column, GDPR Role-Account-Only shield, and 50 Cryptographic Honey-Token Canaries.

Explore 2,860-Company Lead-Gen Vault ($79 / $149) →