Site Health Report Card

duckduckgo.com

  • DuckDuckGo
  • Search · Private
  • Online since 2008
  • Checked Sep 30, 2026

“Quiet, quick, and not taking notes.”

Pica's take. DuckDuckGo is light, fast, and does not invite a single outside script to the party. It is the rare search engine that minds its own business. I respect that. Professionally.

A+99 / 100

Overall health

#2 of 100 sites graded

  • Largest paint

    1.2s

  • Page weight

    900 KB

  • Requests

    28

  • Third-party scripts

    0

  • Domain age

    18 yrs

  • Blocklists

    0 / 60

Timed by our own browser

Site Speed

A+
100

In excellent shape.

Largest paint (LCP)
1.2s
First paint (FCP)
0.6s
Server response (TTFB)
150 ms
Layout shift (CLS)
0.01
Page weight
900 KB
Requests
28

Pica: Nine hundred kilobytes. Light as a duck. A small duck.

Run the Speed Test on duckduckgo.com

A look from the outside

Security Check

A+
100

In excellent shape.

HTTPS everywhere
Yes
HSTS
Preloaded
TLS
1.3
Content Security Policy
Strict
Mixed content
None
Third-party scripts
0

Pica: Zero outside scripts. It walks the walk.

Run the Hack Check on duckduckgo.com

What the internet says about it

Reputation Check

A
95

In excellent shape.

Domain age
18 years
Blocklists
0 of 60
Malware reports
None
Email authentication
DMARC reject
Certificate
Valid · 65 days
Lookalike domains
Some

Pica: Eighteen years old and still does not know your name.

Run the Tracker Check on duckduckgo.com

Is it in a good neighborhood?

Hosting Check

A+
100

In excellent shape.

Network
Microsoft · AS8075
Content delivery
Azure + own
IPv6
Yes
HTTP/3
Yes
Shared-IP neighbors
Shared cloud, well kept
Flagged neighbors
0

Pica: Rents a quiet flat on a big cloud. Keeps the curtains shut.

Run the TTFB Check on duckduckgo.com

Want a report card for your site?

Pica runs these checks on your site every day, and only writes when a grade slips. $11.11 a month for 50 sites.

Watch my website

More report cards

Browse all 100

How we grade. Four checks, weighted equally: speed timed by our own browser, a security look from the outside, public reputation signals, and the network the site lives on. A look from the outside is not a server audit.