Companies Using Apache HTTP Server

I've spent most of my career building crawlers, and the Server header is the first thing every one of them reads. A domain counts on this page when its web server answers with Apache, sometimes followed by a version number. As of our October 2026 crawl that's 5,365,858 domains, 1st of the 70 web servers we track, and 3,510,996 of them match a company. The number is large and easy to misread, so most of this analysis is about what it measures.

What the header can and can't tell you

Apache always names itself. Even at its tersest ServerTokens setting the header still reads "Apache", so it's a reliable signal where it appears. It disappears when something sits in front: a CDN, a load balancer or a proxy sends its own name. When I re-checked our top company rows in October, PwC, Medtronic and U.S. Bank answered through Akamai and Boeing through an AWS load balancer, though our crawler had seen Apache on each. The header also names whoever runs the machine. For most of these domains that's a shared host, and the title census shows it: in a one-in-50 sample of 108,557 Apache domains, 449 were bare "Index of /" directory listings, 130 "Account Suspended" pages and 105 Strato "Domain reserved" placeholders, under 2% between them and the other error pages.

Sales signal: an Apache detection tells you about the hosting, not a buying decision. Use it to find small sites on shared plans, and use the subdomain to find the team at a large account.

Growth trajectory

The chart reads 4,496,478 in June 2026, then 5,139,298, 5,144,649, 5,311,129 and 5,365,858 in October. The June to July step of 642,820 came from our side. The domain set we crawl turns over every month, with dead sites dropping out and new ones added, and our detection signals widen over time; both moved that month. Since then the line has crept up by 226,560 in three months. Since March 2026, 563,297 domains have dropped Apache on at least one hostname, and about one in 13 of those still shows it on another, so real exits are fewer.

"Apache still answers for more domains than any other server we track, but only by 264,451 domains over Nginx. One large host moving its fleet could change the order." - David Thomson, CTO at TechnologyChecker.io

Sales signal: this is a mature installed base of about 5.4 million domains, moving with the hosting market rather than with fashion. Time outreach to hosting migrations, not to Apache's own releases.

Who runs Apache

69.2% of matched companies have 1 to 10 employees and 89.36% have 50 or fewer, more small-business-heavy than IIS (79.59% at 50 or fewer on its profile). Only 0.94% have more than 1,000 staff, but on a base this size that's still 28,316 companies. FedEx, Shell, AstraZeneca, HP and H&M Group answer from Apache on their main sites. More often, a large company's Apache is one property run by a vendor or a team: Volvo Group's job site loads SAP SuccessFactors assets, Cisco runs its Trust Portal on it, Starbucks its alumni community. Ages are spread out: 37.65% were founded in the 2010s and 26.4% before 2000.

Sales signal: at enterprises, the Apache owner is usually whoever runs careers, investor relations or a customer portal. Find the subdomain first, then its owner.

Germany and the United States, almost level

The United States has 615,721 matched companies and Germany 605,706. Nginx's figures are 283,329 German companies to 621,312 American, and on IIS it's 10th with 6,390. France (237,605), the United Kingdom (226,354), Brazil (204,363), the Netherlands (152,125) and Spain (150,316) follow. The nine European countries in the top 15 add up to 1,623,521 matched companies, 2.6 times the American count. German shared hosting is the likely reason: IONOS name servers sit on 7.08% of Apache domains. Industry is flat by comparison. Construction leads at 4.88%, and the ten charted industries add up to only 30.56%.

Sales signal: for hosting, WordPress care or security services, Germany is close to the size of the US market on this list. Localise for German first.

Two servers, not a migration

We test every server pair for switching, and none of Apache's passed. The header is per hostname, so one domain can legitimately show two servers: 79,453 domains show Apache and Nginx today, 13,872 Apache and IIS, 13,018 Apache and LiteSpeed and 11,812 Apache and OpenResty. The flips we do see come from hosts and proxies. LiteSpeed's product page calls it a drop-in replacement that reads Apache's configuration files directly, so a host can move a whole shared fleet at once, and every site on it changes header without the owner doing anything. OpenResty usually arrives as a proxy or parking edge in front of the origin.

"When a domain's header changes from Apache to LiteSpeed, ask the host, not the site owner. The owner usually didn't notice." - David Thomson, CTO at TechnologyChecker.io

Sales signal: don't build a "leaving Apache" list from header changes. A host that changed servers is a better prospect for infrastructure vendors than any of its customers.

The stack: WordPress and PHP

Of the 5,400,540 live Apache domains left after we removed for-sale and gambling pages, 53.26% run WordPress, 16.45% Elementor and 4.98% Divi. PHP is detected on 32.19% and Java on 0.42%. DNS records point to GoDaddy on 10.49%, IONOS on 7.08%, OVHcloud on 4.73% and HostGator on 3.51%. Google Analytics is on 37.35%, cdnjs on 8.28% and jsDelivr on 6.18%.

Sales signal: the typical Apache domain is a WordPress site on a shared plan. WordPress plugin makers, managed WordPress hosts and site-maintenance agencies will find more fit here than enterprise software sellers.

Versions: the 2.2 tail

In the 45 days to mid-October 2026 we recorded an Apache header on 5,185,166 domains. 780,351 of them carried a version. 606,675 named a full 2.4 release, led by 2.4.68 on 243,016; the project released 2.4.69 on 1 October 2026. 154,528 sent only "Apache/2", ServerTokens' Major setting. 12,319 still announce 2.2, which the project says reached end of life with 2.2.34 in July 2017, and 264 announce 2.0 or 1.x. Two caveats. Sites that announce a version kept a more talkative ServerTokens setting, so they aren't a random sample of Apache servers. And Linux distributions patch old 2.4 releases without changing the number, so an old 2.4 string doesn't prove a vulnerable server. 2.2 is different: the project stopped all fixes in 2017.

Sales signal: the 12,319 domains on 2.2 are the cleanest upgrade or security list in this data. Lead with the end-of-life notice on the project's own home page.

Key takeaways

1. 5,365,858 domains, 1st of 70 web servers, 264,451 ahead of Nginx.

2. A shared-hosting base: 69.2% of matched companies have 10 or fewer staff and 53.26% of domains run WordPress.

3. Germany (605,706) is almost level with the United States (615,721).

4. No published switching: Apache and Nginx sit side by side on 79,453 domains.

5. 12,319 domains still announce Apache 2.2, end of life since July 2017.

How to use this list

Filter by country and company size, then by subdomain to separate main sites from vendor-run properties. Our technology detection methods post explains how header signals are matched. For the full list of 5,365,858 Apache domains with company, size and stack data, explore TechnologyChecker.io.