The numbers behind the work

“In order for your site to work properly, it needs to be hosted and operated on Wix's servers. … The reason you can't use another host for your Wix site is that the SaaS architecture does not support external hosting. … Since Wix is a SaaS solution, your site must run on Wix's servers.”

Where: Body text, first section (undated page, fetched 2026-10-16)

Confidence: Verified verbatim

“You can, however, connect a domain to your Wix site, and purchase and manage the domain with another provider. … the content you build on Wix belongs to you.”

Where: Body text (undated page, fetched 2026-10-16)

Confidence: Verified verbatim

“Layout pages; One blog page, including its posts and up to 1,000 comments per post; Text and image blocks”

Where: "What exports" list (undated page, fetched 2026-10-16)

Confidence: Verified verbatim (list items)

“Most other page types, including album, cover, index, info, calendar, portfolio, and store pages; Content in page-specific headers, footers, and sidebars; More than one blog page; Dropdowns; Audio, video, and product blocks; Drafts; Style settings; Custom CSS”

Where: "What doesn't export" list (undated page, fetched 2026-10-16)

Confidence: Verified verbatim

“CMS content and functionality (including Collection items and Collection lists) … site search and forms (including file upload and reCAPTCHA) will not work on exported sites”

Where: "What's not exported" section (undated page, fetched 2026-10-16)

Confidence: Verified verbatim; the plan-level statement is a minor paraphrase

“Available on Agency plan and higher.”

Where: Top of article and "What is not exported" (undated page, fetched 2026-10-16)

Confidence: Plan quote verbatim; the exclusions are a minor paraphrase of the fetched list

“WordPress is used by 39.7% of all the websites, that is a content management system market share of 58.4%.”

Where: Headline sentence and usage table, report dated 16 October 2026

Confidence: Verified verbatim (headline); table figures verified as listed

“As of June 2024, 51% of the websites in the Web Almanac's desktop dataset were powered by a CMS”

Where: "CMS Adoption" section, Figure 12.1 (published 2024-11-11; data June 2024)

Confidence: Verified verbatim

“WordPress had a 28% pass rate in 2023 and 40% in 2024”

Where: "Core Web Vitals" section, Figure 12.7 caption (data June 2024)

Confidence: The sheet marks this row partial: the WordPress figure is verified verbatim from the caption; the other builders' pass rates were read from a figure description, not prose, and are left out of this record

“For reference, the global CWV pass rate for all origins as of June 2024 is 51%.”

Where: "Core Web Vitals" section

Confidence: Verified verbatim

“WordPress has a median of 2,252 KB on desktop and 2,047 KB on mobile; Squarespace continues to deliver the heaviest median page weight of ~3 MB compared to ~3.5MB in 2022.”

Where: "Resource weights" section, Figures 12.19–12.20

Confidence: WordPress and Squarespace quotes verbatim; the sheet's Wix, Joomla and Drupal figures (from a caption) are left out of this record

“the median page weight for a desktop page was 2,652 KB … the median page weight for a mobile page was 2,311 KB”

Where: Figures 16.15 and 16.37

Confidence: Verified verbatim

“Core Web Vitals are used by our ranking systems. … We highly recommend site owners achieve good Core Web Vitals for success with Search.”

Where: Intro and FAQ of each document (last updated 2025-12-10); the second document is https://developers.google.com/search/docs/appearance/core-web-vitals

Confidence: Verified verbatim

“There is no single signal. Our core ranking systems look at a variety of signals that align with overall page experience. … doesn't guarantee that your pages will rank at the top of Google Search results.”

Where: FAQ section (last updated 2025-12-10)

Confidence: Verified verbatim

“Business Email Compromise $3,046,598,558”

Where: p. 8, losses by crime type; the three-year table on p. 26

Confidence: Verified verbatim

“Business Email Compromise 24,768”

Where: p. 7, complaints by crime type; p. 25 for 2024

Confidence: Verified verbatim

“Phishing/Spoofing 191,561 … Phishing/Spoofing $215,843,126”

Where: pp. 7–8; the three-year tables on pp. 25–26

Confidence: Verified verbatim

“1,008,597 complaints; $20.877 billion in losses; 26% increase in losses from 2024”

Where: p. 6 (and the chart labels on p. 4)

Confidence: Verified verbatim

“Fortra observed that 69 percent of BEC attacks in Q4 2025 were launched using a free webmail domain … The remaining 31 percent of BEC attacks in Q4 2025 utilized nonwebmail domains.”

Where: p. 13 (Fortra data)

Confidence: Verified verbatim; APWG is an industry association reporting its members' (Fortra's) observed attacks — not a vendor's own data about its product

“the average amount requested in wire transfer BEC attacks in Q4 2025 was $50,297”

Where: p. 11

Confidence: Verified verbatim; APWG is an industry association reporting its members' (Fortra's) observed attacks — not a vendor's own data about its product

“During 2025, APWG observed 3.8 million phishing attacks, which was up slightly from 3.76 million in 2024. … In the fourth quarter of 2025, APWG observed 853,244 phishing attacks.”

Where: p. 3

Confidence: Verified verbatim; APWG is an industry association reporting its members' (Fortra's) observed attacks — not a vendor's own data about its product

“Human element was present in 62% of breaches, a slight increase from the previous year's 60%.”

Where: Key findings; the dataset covers October 2024 through November 2025

Confidence: Verified verbatim

“Phishing remained at 16% like the previous year. … Social Engineering was our third most common breach pattern, representing 16% of all breaches.”

Where: Key findings / patterns section

Confidence: Verified verbatim (the first quote is clipped from a longer sentence about pretexting at 6%)

“In extreme cases (top 2.5%), financial loss due to a data breach accounted for more than 7% of SMBs' revenue.”

Where: Single-page infographic

Confidence: Verified verbatim; the infographic states no data period

“While business email compromise (BEC) represented just 2% of total threats observed over the past year, its impact is disproportionately high... … In fact, BEC was a more frequent outcome in attacks (21%) than ransomware (16%)”

Where: p. 38 (data July 2024 – June 2025)

Confidence: Verified verbatim

“28% of breaches were initiated through phishing or social engineering”

Where: p. 9

Confidence: Verified verbatim

“Almost half (48%) of organizations whose size is known had an annual revenue of USD 50 million or less.”

Where: p. 28

Confidence: Verified verbatim

“Phishing attacks remained the most prevalent type of breach or attack by far (experienced by 38% of businesses and 25% of charities) … continued to be ascribed as the most disruptive type of breach or attack (69% of businesses and charities that experienced a breach or attack) … Impersonation breaches or attacks have decreased to 12% this year, down from 17% in 2023.”

Where: Summary, "Identification of cyber security breaches and attacks" (fieldwork August–December 2025)

Confidence: Verified verbatim

“Just over four in ten businesses (43%)... equates to approximately 612,000 UK (United Kingdom) businesses … micro (42%) and small (46%) businesses”

Where: Summary

Confidence: Verified with minor paraphrase (stitched from two adjacent sentences); UK data

“over 93% of messages passed SPF authentication, while just 2.7% failed. … An average of 88.5% of messages passed DKIM evaluation in February, while just 2.1% failed. … For DMARC, 86.5% of messages passed authentication, while 4.2% failed”

Where: SPF/DKIM/DMARC section (published 2024-03-08; data February 2024)

Confidence: Verified verbatim; message-level, not domain-level, and 2024 data

“block nearly 15 billion unwanted emails … stop more than 99.9% of spam, phishing and malware … the number of unauthenticated messages Gmail users receive plummet by 75%”

Where: Body text (published 2023-10-03)

Confidence: Verified verbatim; older (2023)

“In 2023, 39.1% of all Content Management System (CMS) applications were outdated at the time of infection.”

Where: Section "Outdated CMS Detection"

Confidence: Verified verbatim; Sucuri's own cleanup data

“In 2023, 49.21% of compromised websites were discovered to contain at least one backdoor at the time of infection.”

Where: Section "Backdoors"

Confidence: Verified verbatim; Sucuri's own cleanup data

“20.30% of all remediated sites were affected by some form of SEO spam.”

Where: Section "SEO Spam"

Confidence: Verified verbatim; Sucuri's own cleanup data

“Overall 11,334 new vulnerabilities were found in the WordPress ecosystem in 2025”

Where: Whitepaper body, vulnerability totals section

Confidence: Verified verbatim (the +42% is the page's own framing, confirmed in the fetch); Patchstack's own database

“91% of new vulnerabilities were found in plugins, and 9% were found in themes. … There were only 6 vulnerabilities reported in the WordPress core, but these were low priority issues.”

Where: Whitepaper body, vulnerability totals section

Confidence: Verified verbatim; Patchstack's own database

“46% of vulnerabilities did not receive a fix from the developer in time for public disclosure.”

Where: Whitepaper body, vulnerability totals section

Confidence: Verified verbatim; Patchstack's own database

“approximately half of high impact vulnerabilities get exploited within 24 hours … the weighted median time to first exploit is 5 hours.”

Where: Exploitation timing section

Confidence: Verified verbatim; Patchstack's own telemetry

“In 2024, 7,966 new vulnerabilities were found in the WordPress ecosystem, primarily in third-party plugins. … 96% of the vulnerabilities were uncovered in plugins, and 4% were found in themes. … 43% of new vulnerabilities found in 2024 did not require any authentication to be exploited.”

Where: Whitepaper body

Confidence: Verified verbatim; Patchstack's own database

“Out of those, Wordfence blocked over 48 billion requests targeting WordPress vulnerabilities, … Wordfence also blocked over 55 billion password-hacking attempts,”

Where: pp. 48 and 50

Confidence: Verified verbatim; Wordfence's own customer telemetry, not web-wide

“3,049 incidents, 2,842 with confirmed data disclosure … there are almost four times the number of SMB victims than there are large organizations.”

Where: Table 1 and the accompanying text (data November 2023 – October 2024)

Confidence: Verified verbatim

“SMBs experienced Ransomware-related breaches to the tune of 88% overall.”

Where: Body text

Confidence: Verified verbatim

“External (98%), Internal (2%), Partner (1%) … Financial (99%) … the primary hacking variety for both is the Use of stolen credentials, at 32% in large organizations and 33% in SMBs.”

Where: Table 1 (SMB row) and text

Confidence: Verified verbatim

“exploitation of vulnerabilities (20%) … This initial attack vector saw a 34% increase”

Where: Press release body (data November 2023 – October 2024)

Confidence: Verified verbatim (press release, not the full PDF)

“In 2024, complaints totaled 859,532 … losses of $16.6 billion … representing a 33 percent increase from 2023”

Where: p. 4; BEC $2,770,151,146 on p. 11

Confidence: Verified verbatim

“micro businesses now 41%, down from 47% in 2024 and small businesses now 50% down from 58% in 2024 … Just over four in ten businesses (43%)”

Where: Chapter 4, Figure 4.1 discussion; Summary (fieldwork late 2024)

Confidence: Verified verbatim (UK data, not US)

“the average cost of the most disruptive breach for each business in the last 12 months was £1,600 for businesses … the average cost of the most disruptive breach was £3,550 for businesses”

Where: Summary, identification of breaches

Confidence: Verified verbatim; UK data

“This number rises from 95.6% to 97.3% on mobile.”

Where: Section "Transport security" (published January 2026; crawl 2025)

Confidence: Verified verbatim

“The adoption of CSP continued increasing from 18.5% last year to 21.9% this year, an increase of close to 20%.”

Where: Section "Content Security Policy"

Confidence: Verified verbatim

“showing steady increases to approximately 35 percent of sites. … up to 36% of all pages visited on mobile.”

Where: Figure 9.27 description; HSTS section

Confidence: Verified with minor paraphrase (the Figure 9.27 caption groups X-Frame-Options and HSTS at about 35%)

“with `X-Content-Type-Options` leading the group at nearly 50 percent adoption by 2025.”

Where: Figure 9.27 description

Confidence: Verified verbatim

“the percentage of consumers 'always' or 'regularly' reading online reviews has held fast (75% in 2024 against 76% in 2023)”

Where: "Reading reviews" section (published 2024-03-06; panel of 1,141 US consumers; fieldwork likely late 2023)

Confidence: Verified verbatim; a vendor survey with its sample and method published

“just 4% of consumers say they 'never' read online business reviews.”

Where: Review-reading frequency (published 2025-01-29; 1,026 US adults; fieldwork likely late 2024)

Confidence: Verified verbatim; a vendor survey with its sample and method published

“88% of consumers would use a business that replies to all of its reviews … compared to just 47% who would use a business that doesn't respond to reviews at all”

Where: Review-response section

Confidence: Verified verbatim; a vendor survey with its sample and method published

“71% of consumers would not consider using a business with an average rating below three stars”

Where: Star-rating section

Confidence: Verified verbatim; a vendor survey with its sample and method published

“20% of consumers feel that reviews as recent as two weeks old are impactful to their decisions.”

Where: Review recency

Confidence: Verified verbatim; a vendor survey with its sample and method published

“50% of consumers trust reviews as much as personal recommendations from friends and family. … 79% … this now sits at 42% in 2025.”

Where: Trust section of each edition; the 2024 edition is https://www.brightlocal.com/research/local-consumer-review-survey-2024/

Confidence: Verified verbatim; cite with the year, the drop is sharp; a vendor survey with its sample and method published

“62% of consumers would avoid using a business if they found incorrect information online.”

Where: Reactions to incorrect information (survey September 2023, 1,138 US consumers)

Confidence: Minor paraphrase; a vendor survey with its sample and method published

“85% of consumers consider the presence of contact information and opening hours an important factor…”

Where: Decision factors (April 2025, 1,000 US adults)

Confidence: Verified verbatim; a vendor survey with its sample and method published

“of people who search on their smartphones for something nearby visit a business within a day … of those searches … result in a purchase.”

Where: Stat callouts, footnote 7 (data May 2016)

Confidence: Verified verbatim; data 2016; Google's own search data

“30% of all mobile searches are related to location.”

Where: Footnote 4 (data April 2016); also https://www.thinkwithgoogle.com/_qs/documents/2272/1057-Insights-Right-Here-Download.pdf, footnote 1

Confidence: Verified verbatim; data 2016; Google's own search data

“Yet 53% of mobile site visitors leave a page that takes longer than three seconds to load.”

Where: Intro, footnote 2 (published February 2017; Google internal data, March 2016)

Confidence: Verified verbatim; Google's own data, 2016

“as page load time goes from one second to seven seconds, the probability of a mobile site visitor bouncing increases 113%”

Where: Body, footnote 6 (Google/SOASTA data 2017)

Confidence: Verified verbatim; Google's own data

“Based on a 0.1s natural mobile site speed improvement… … Retail conversions increased by 8.4% and average order value increased by 9.2%.”

Where: Key findings (37 sites, 30M+ sessions, late 2019); also https://web.dev/case-studies/milliseconds-make-millions

Confidence: Verified verbatim (HTML; the PDF fetch failed)

“…2,684 people evaluated the credibility of two live Web sites… … design look … present in 46.1 percent of the comments.”

Where: Summary page (published 2002-10-29)

Confidence: Verified verbatim; data 2002, a landmark study; it is about design quality in general, not templates

“Customers are 2.7 times more likely to consider a business reputable if they find a complete Business Profile… … 70% more likely to visit and 50% more likely to consider purchasing…”

Where: Top of page (undated, current 2026)

Confidence: Verbatim, but no study or date is given — Google's own statement

“The average local business receives 1,260 views each month … 33 clicks each month from their GMB listing”

Where: Key findings (July 2019; data September 2017 – December 2018, 45,264 listings)

Confidence: Views and clicks verbatim; the sheet's direction-request figure (partial) is left out; a dated benchmark; a vendor's own data

“Fully 82% of U.S. adults say they at least sometimes read online customer ratings or reviews before purchasing items for the first time, including 40% who say they always or almost always do so.”

Where: Chapter "Online reviews and ratings" (survey November–December 2015, 4,787 adults)

Confidence: Verified verbatim; data 2015, general purchases

“About nine-in-ten (91%) own a smartphone … 16% of U.S. adults are 'smartphone-only' internet users.”

Where: Top of the fact sheet (November 2025; survey February–June 2025)

Confidence: Verified verbatim

“a one-star increase in Yelp rating leads to a 5-9 percent increase in revenue”

Where: Abstract (SSRN 2011, revised 2016; Seattle restaurants 2003–2009)

Confidence: Verified verbatim; independent restaurants only

“The odds of contacting a lead if called in 5 minutes versus 30 minutes drop 100 times.”

Where: Key findings slides, contact results (presented 2007-10-16; 3 years, 6 companies, 15,000+ leads, 100,000+ call attempts)

Confidence: Verified in the original deck; hosted by a third party (Mortech), not insidesales.com; old, but the primary everyone quotes; an academic co-authored study over 6 client companies, not a vendor's own product data

“The odds of qualifying a lead if called in 5 minutes versus 30 minutes drop 21 times. … drop by over 10 times in the first hour”

Where: Key findings slides, qualify and first-hour results

Confidence: Verified (minor paraphrase from slide text); old, but the primary; an academic co-authored study over 6 client companies, not a vendor's own product data

“99% use at least one technology platform (up from 93% in 2022) … 58% use four or more platforms”

Where: Technology platform use section; methodology page (3,870 small businesses under 250 employees, June 6–26, 2025)

Confidence: Verified (some wording lightly paraphrased by the fetch)

“86% say technology helped them communicate more with customers … 85% say technology helped them find new customers … 83% say technology helped them compete with larger companies (up from 70% in 2024)”

Where: Customer and competition findings

Confidence: Verified (minor paraphrase)

“75% say they would struggle to survive without technology platforms”

Where: Dependence finding

Confidence: Verified (minor paraphrase)

“About half of U.S. adults now use AI chatbots, up from a third in 2024 … 42% of U.S. adults say they use chatbots 'To search for information' … We surveyed 5,119 U.S. adults from Feb. 17 to 23, 2026”

Where: Headline chart and "how people use chatbots" section (published 2026-06-17; American Trends Panel)

Confidence: Verified verbatim; the 2024 base was only people who had heard of chatbots

“70.22% – average documented online shopping cart abandonment rate … calculated based on 50 different studies”

Where: Page title and first paragraph (continuously updated; fetched 2026-10-16)

Confidence: Verified verbatim

“Too long / complicated checkout process … The site wanted me to create an account”

Where: "Reasons for abandonments during checkout" chart (excluding "just browsing")

Confidence: Verified verbatim for the figures; the survey size and year are not stated on the page

“the average US checkout flow contains 23.48 form elements displayed to users by default … as short as 12-14 form elements … the average large-sized ecommerce site can gain a 35.26% increase in conversion rate though better checkout design”

Where: Lower section on checkout usability and conversion

Confidence: Verified verbatim (the typo "though" is in the source)

“Forty-eight per cent of appointments made through Square Appointments are booked during off hours … 78 percent of online bookings come through mobile devices”

Where: Body of article (Square Appointments platform data; no date, period or sample stated beyond "thousands of businesses"; fetched 2026-10-16)

Confidence: The sheet marks this row PARTIAL: the figures are verbatim, but the page states no methodology, time period or geography — in as Square's own statement, not as a study

“Photos of products and real people (as opposed to stock photos of models) … big feel-good images that are purely decorative … jazzed-up = ignored”

Where: Opening section and the "Images That Are Ignored / Images That Are Looked At" examples (published 2010-10-31; eyetracking data ~2006–2010; page last reviewed 2026-08-13)

Confidence: Verified verbatim for the quoted phrases; the popular "big fluffy filler" wording does not appear on the page

“Portrait photos of FreshBooks staff drew 10% more viewing time than the bios, even though the bios took up 316% more space”

Where: FreshBooks team-page example, mid-article

Confidence: Minor paraphrase (the fetch restated the numbers; 10% and 316% confirmed on the page)

“photos received 18% of viewing time and text received 82%”

Where: Amazon product-page example

Confidence: Minor paraphrase (numbers confirmed)

“At this point, I'd just Google it. … the word reviews was used over 40 times”

Where: Methodology paragraph; "Users Are More Skeptical" section; the guidelines list (published 2019-05-26)

Confidence: Verified verbatim for the quotes; the counts are a minor paraphrase

“95.9% of home pages had detected WCAG 2 failures ... 56.1 per page (56,114,377 total), up 10.1% from 51 per page in 2025”

Where: "Detected Errors" and "WCAG Conformance" sections (8th annual report; data February 2026; page updated 2026-03-30)

Confidence: Verified verbatim

“96% of all errors detected fall into these six categories”

Where: "WCAG Conformance" table of the most common failure types; "Low Contrast Text" section

Confidence: Verified verbatim (the 96% quote); the per-category percentages confirmed from the page table

“more than 1 in 4 ... over 70 million”

Where: Lead paragraph (published 2024-07-16; data from the 2022 BRFSS)

Confidence: Verified verbatim; the oft-quoted 28.7% is not on this page

“Web Content Accessibility Guidelines (WCAG) Version 2.1, Level AA is the technical standard ... within three or four years of when the rule was published on April 24, 2024”

Where: "What is the technical standard" and "When do governments have to comply" sections (page dated 2024-04-08; final rule published 2024-04-24; the deadlines reflect an interim final rule of 2026-04-20)

Confidence: Verified verbatim; the page addresses private companies only when they build content on a government's behalf

“are not included in our federal lawsuit numbers”

Where: Opening paragraph and the bar graph (April 2025)

Confidence: Verified (counts on the page); the 2023 figure is internally inconsistent on the page (2,794 in the graph, 2,749 in the text); the publication date is inferred from the URL

“adults scoring Level 1 or below”

Where: Literacy results paragraph (published 2024-12-10; data from the 2023 PIAAC)

Confidence: Verified (figures on the page); the companion NCES report page does not display the percentages itself

“Show that honest and trustworthy people stand behind your site. … Update your site's content often (at least show it's been reviewed recently). … Avoid errors of all types, no matter how small they seem.”

Where: Guidelines 2, 4, 5, 8 and 10 (updated June 2002; research 1999–2002)

Confidence: Verified verbatim

“overall outage frequency and the general level of reported severity continue to decline ... Power issues remain the most common cause of serious and severe data center outages.”

Where: Public summary and key findings (published 2025-05-02; the full report is paywalled)

Confidence: Minor paraphrase for the cost figures (seen in the summary); the quotes verbatim