SaaS Ranking
Menu

HTTPS enforced with HSTS in CRM

We measure this ourselves on their own site. It is the cheapest security control there is.

64 of 115 companies we measured here publish it, that is 56%. Last checked 2026-10-16.

56% here against 62% across every category we measure. CRM sits below the overall share for this criterion.

This page counts companies, not product entries: a company with two products in this category is one company here and two rows below.

Back to HTTPS enforced with HSTS across all categories, or to CRM.

The evidence at a glance
  • Found64
  • Not found at checked addresses51
  • Not measured2

117 companies in total. Unmeasured companies are excluded from the published share.

Published

HTTP redirects to HTTPS and the HSTS header is set.

VendorWhat we found
ADITO https://adito.de/Checked
AssignSales https://akashicsoft.com/Checked
Attio https://attio.com/Checked
Breakcold https://breakcold.com/Checked
BSI Customer Suite https://bsi-software.com/Checked
Capsule https://capsulecrm.com/Checked
CAS genesisWorld https://cas.de/Checked
Clarify https://clarify.ai/Checked
Close https://close.com/Checked
Coevera https://coevera.com/Checked
Copper https://copper.com/Checked
Creatio https://creatio.com/Checked
CrmOne https://crmone.com/Checked
Efficy https://efficy.com/Checked
EngageBay https://engagebay.com/Checked
EspoCRM https://espocrm.com/Checked
eWay-CRM https://eway-crm.com/Checked
FibreCRM https://fibrecrm.com/Checked
Folk https://folk.app/Checked
Freshworks (Freshsales) https://freshworks.com/Checked
GroupTrack CRM https://grouptrackcrm.com/Checked
HubSpot https://hubspot.com/Checked
iDSS Cyclone https://idss.com/Checked
Kommo https://kommo.com/Checked
Kylas https://kylas.io/Checked
LeadDelta https://leaddelta.com/Checked
LeadMaster https://leadmaster.com/Checked
Less Annoying CRM https://lessannoyingcrm.com/Checked
Lightfield https://lightfield.app/Checked
Lime CRM https://lime-technologies.com/Checked
MarketSharp https://marketsharp.com/Checked
MDprospects https://mdprospects.com/Checked
Membrain https://membrain.com/Checked
Monica https://monicahq.com/Checked
Nutshell https://nutshell.com/Checked
OnePageCRM https://onepagecrm.com/Checked
OptifiNow https://optifinow.com/Checked
OutreachCRM https://outreachcrm.co.nz/Checked
Pipedrive https://pipedrive.com/Checked
pirAMide business manager https://piramide.de/Checked
Raynet https://raynetcrm.com/Checked
RightCom https://rightcom.com/Checked
Salesflare https://salesflare.com/Checked
Salesforce https://salesforce.com/Checked
Salesmate https://salesmate.io/Checked
Second CRM https://secondcrm.com/Checked
Sellsy https://sellsy.com/Checked
SendSquared https://sendsquared.com/Checked
SmartWe https://smartwe.de/Checked
SugarCRM https://sugarcrm.com/Checked
SuiteCRM https://suitecrm.com/Checked
SuiteDash https://suitedash.com/Checked
SuperOffice https://superoffice.com/Checked
TeamGram https://teamgram.com/Checked
Teamleader https://teamleader.eu/Checked
TecArt https://tecart.de/Checked
The Swarm https://theswarm.com/Checked
Twenty https://twenty.com/Checked
Valkre https://valkre.com/Checked
Vtiger https://vtiger.com/Checked
webCRM https://webcrm.com/Checked
Weclapp https://weclapp.com/Checked
Wice https://wice.de/Checked
Zoho CRM https://zoho.com/Checked
No enforced HTTPS with HSTS found.

We reached at least one address for each of these vendors and none of them carried it. That is what we found at the addresses we checked, on the date we checked them, and not a statement about what the vendor has.

VendorWhat we found
1CRM 2 addresses checkedChecked
ARC Software 2 addresses checkedChecked
Avid CRM 2 addresses checkedChecked
Axonaut 2 addresses checkedChecked
Big Purple Dot 2 addresses checkedChecked
BIGContacts 2 addresses checkedChecked
Bitrix24 2 addresses checkedChecked
BizzyPulse 2 addresses checkedChecked
Blitz 2 addresses checkedChecked
CentralStationCRM 2 addresses checkedChecked
Comma5 CRM 2 addresses checkedChecked
Cool Life 2 addresses checkedChecked
Cygnatica CRM 2 addresses checkedChecked
Dex 2 addresses checkedChecked
Eudonet 2 addresses checkedChecked
First Freight 2 addresses checkedChecked
Flash Lead 2 addresses checkedChecked
GoldMine 2 addresses checkedChecked
GrowthFactor CRM 2 addresses checkedChecked
IFS SCRM 2 addresses checkedChecked
Insightly 2 addresses checkedChecked
InStreamCRM 2 addresses checkedChecked
InTouch 2 addresses checkedChecked
Maple CRM 2 addresses checkedChecked
Maximizer 2 addresses checkedChecked
Minilytic 2 addresses checkedChecked
MTP Score CRM 2 addresses checkedChecked
NetHunt 2 addresses checkedChecked
Nimble 2 addresses checkedChecked
noCRM 2 addresses checkedChecked
Ontraport 2 addresses checkedChecked
Opt! CRM 2 addresses checkedChecked
OSL Software 2 addresses checkedChecked
Pipeline CRM 2 addresses checkedChecked
RabbitCRM 2 addresses checkedChecked
Salesboom 2 addresses checkedChecked
SalesNexus 2 addresses checkedChecked
SalesOptima 2 addresses checkedChecked
Satuit 2 addresses checkedChecked
snapAddy 2 addresses checkedChecked
Solid Performers CRM 2 addresses checkedChecked
SRLINES wCRM 2 addresses checkedChecked
Streak 2 addresses checkedChecked
Teamgate 2 addresses checkedChecked
TEB Apps 2 addresses checkedChecked
TeleCRM 2 addresses checkedChecked
Touchahead 2 addresses checkedChecked
Tubular 2 addresses checkedChecked
Upsales 2 addresses checkedChecked
WIZIO Verse 2 addresses checkedChecked
Zyprr 2 addresses checkedChecked
Not measured

We could not look at these, or their robots.txt asks us not to. That says something about our measurement, not about them, and they are left out of the percentage above.

VendorWhat we found
ClientRamp The plain HTTP endpoint could not be reached, so this was not measured.Checked
GreatSoft The plain HTTP endpoint could not be reached, so this was not measured.Checked

Other criteria in CRM

HTTPS enforced with HSTS in related categories

Found something we missed? Tell us. A correction moves that vendor into our next nightly run. That run reads the same fixed addresses we check for every vendor, not the address you send.