Companies Using ASP.NET

We detect ASP.NET on 856,440 domains, including Amazon Literary Partnership, Accenture PLC, Cognizant Technology Solutions Corporation. A detection means the technology is present on that domain, which for large organisations is often a single storefront or subdomain rather than a company-wide deployment. Among domains we matched to a company with a resolved industry, the most common is IT Services and IT Consulting (4.65%).

We detect 856,440 domains running ASP.NET across our monthly crawl of live business domains. Company data could be matched for 485,963 of them (56.7%), and every company-size, industry and country breakdown on this page describes that matched subset rather than the full detected base. A further 26,424 domains carried a ASP.NET detection previously and no longer do.

ASP.NET holds 46.19% of the Web Frameworks category, ranking #1. This is a share of the domains we detect running a platform in this category — not a share of all websites, and not a share of spending — so it is not directly comparable to figures published on other denominators.

The top alternatives to ASP.NET include Ruby on Rails (10.96% market share), Nuxt.js (10.25% market share), Express (7.46% market share), Laravel (4.87% market share) — measured as a share of the domains we detect running a platform in this category.

United States leads with 169,608 matched ASP.NET domains, followed by India (38,598), United Kingdom (35,512), Italy (21,220), Turkey (18,072). These are counts within the 485,963 domains we could match to a company record, not the full detected base.

The most common company size is 1-10 employees, representing 58.49% of the ASP.NET domains we could match to a company record and size — a subset of 485,963 matched companies, not of all 856,440 detected domains. This is followed by 11-50 employees (23.07%) and 51-200 employees (9.85%).

Among the ASP.NET domains we could match to a company with a known founding date, most were founded in the 2010s (35.93%), followed by the 2000s (20.57%). That matched subset is drawn from 485,963 companies and is not representative of all 856,440 detected domains. This suggests ASP.NET is most popular among relatively young companies.

The ideal ASP.NET customer is: Company Size: Mostly 1-50 employees, Founded: 2010-2019, Industry: IT services, retail, software, Location: US, India, or the UK, Typical Stack: IIS behind Cloudflare — based on our analysis of 485,963 enriched companies at TechnologyChecker.io.

Yes. Our live crawl detects ASP.NET on 856,440 domains, a 46.19% share of the web frameworks category and the #1 position in it. It runs public sites, portals and line-of-business applications across IT services, retail, real estate and financial services. Microsoft's continued investment in ASP.NET Core and .NET 10 LTS (supported through November 2028) keeps modern features and cross-platform support on the roadmap.

Yes, and this matters. Two of the signals we match on are Microsoft server-side signals rather than ASP.NET-specific ones: ASPSESSION is the Classic ASP session cookie, and __VIEWSTATE is a Web Forms form field that modern ASP.NET Core does not emit. We hold no separate Classic ASP entry, so those sites are counted here. The accurate description of the 856,440 figure is sites running Microsoft's server-side web stack, ASP.NET or Classic ASP, spanning every generation of it rather than only the current framework.

Seven clauses across four kinds of signal: the ASP.NET_SessionId and ASPSESSION cookies, a .AspNetCore set-cookie, an input element whose name contains __VIEWSTATE, the X-AspNet-Version and X-Powered-By: ASP.NET response headers, and URLs ending in .aspx. The URL clause is the loosest of them, since it also matches a plain .asp extension, but it does no work in practice: across 1,266,683 detections in August the recorded detection URL is the site root and none end in .asp or .aspx. The count is driven by headers, cookies and the form field.

Companies we detect it on include Accenture, IBM, Cognizant, Tech Mahindra, Concentrix, TP group, Starbucks, Saudi Aramco, Reliance Industries and the United States Postal Service. Microsoft's own microsoft.com carries the detection too. We matched 485,963 of the 856,440 detected domains to a company record. A detection sits on a domain, so for an organisation this size it usually represents one public site or portal rather than a company-wide standard.

Only a minority say. About 94,600 of the 702,730 domains scanned in August, 13.5%, return an explicit X-AspNet-Version header. Within that group, 92,867 announce 4.0.30319 (.NET Framework 4.x), 1,736 announce 2.0.50727 (.NET Framework 2.0, out of support since 2016) and 20 announce 1.1.4322, which shipped in 2003. Treat that as a biased sample rather than a census: Microsoft advises removing the version header, so the sites still publishing it are the less hardened end of the base.

Yes, ASP.NET is free and open source. Microsoft licenses ASP.NET Core under the MIT license, with all source code available on GitHub. Developers can build, deploy and scale web applications without licensing fees. Hosting costs still apply (IIS on Windows Server, Azure App Service or a third-party provider), and enterprise support contracts are available but optional.

ASP.NET is the traditional Windows-only framework tied to .NET Framework 4.8, while ASP.NET Core is the modern cross-platform version. ASP.NET Core offers better performance, a modular architecture and Linux or macOS deployment. Our detection covers both, which is why the count on this page spans generations: the __VIEWSTATE signal is a Web Forms artifact, while the .AspNetCore cookie only appears on the modern stack.

Yes. .NET developers remain in demand for enterprise application development, cloud-native architecture and DevOps work, with employers looking for ASP.NET Core, Docker, Kubernetes and Azure skills. With 856,440 domains carrying an ASP.NET detection, the installed base alone sustains steady demand for maintenance and modernization projects. Turnover is modest by comparison: 26,424 domains dropped it since we began tracking in March 2026.

Enterprises choose it for Windows infrastructure integration, Active Directory authentication, SQL Server compatibility and long-term Microsoft support commitments. The customer profile fits: among matched domains with a founding year, 35.93% of companies were founded in the 2010s, 20.57% in the 2000s and 15.68% before 1980. That pre-1980 share is unusual for a web framework and points at organisations that value vendor accountability, compliance and compatibility with existing .NET investments over framework fashion.

Yes, but only ASP.NET Core. The traditional ASP.NET Framework requires Windows and IIS, while ASP.NET Core runs on Linux, macOS and Windows behind Nginx, Apache or Kestrel. Across sampled active ASP.NET domains we see IIS on 39.92%, Nginx on 3.3%, Apache on 1.81% and Kestrel on 0.58%. Those numbers understate the origin picture, because Cloudflare fronts 48.3% of these domains and a reverse proxy replaces the origin's server header.

It depends on the use case. ASP.NET suits enterprise applications that need Windows integration, static typing in C# and Microsoft platform compatibility. Express suits real-time and JavaScript-heavy stacks, while Ruby on Rails accelerates rapid prototyping. Movement between them is modest in both directions: 139 domains moved from ASP.NET to Express while 43 came back, and 226 moved to Ruby on Rails while 88 came back, against an installed base of 856,440 domains.

ASP.NET applications run on Windows Server with IIS, on Azure App Service, in Docker containers, or with third-party cloud providers. In our stack data IIS shows on 39.92% of sampled active ASP.NET domains, with Nginx at 3.3% and Kestrel at 0.58%. Read those as a floor rather than a full picture: 48.3% sit behind Cloudflare, and a proxy in front of the origin hides the server header we would otherwise use to identify it.

Yes. ASP.NET Core powers RESTful APIs and GraphQL backends for mobile applications, with built-in support for JWT authentication, CORS and JSON serialization. Teams pair those backends with native iOS and Android clients or with .NET MAUI. One detection note: an API endpoint returns no HTML, so the __VIEWSTATE signal never fires on one and identification falls back to the response headers and cookies alone. Pure API domains are therefore harder for us to see than public websites.

A developer with C# experience can pick up ASP.NET Core basics quickly, covering MVC structure, Entity Framework and API development. Reaching production competence with enterprise patterns such as dependency injection, authentication and deployment takes considerably longer. The learning curve is steeper than Express or Rails because of C# static typing and the breadth of the .NET ecosystem, though the type safety pays that back in fewer runtime errors.

ASP.NET ships with CSRF protection, parameterised data access and authentication middleware, and Microsoft releases regular security patches, so most incidents trace to configuration rather than framework flaws. Our data does surface one avoidable exposure: 1,736 domains advertise .NET Framework 2.0 and 20 advertise a 2003 runtime through the X-AspNet-Version response header. Microsoft's own guidance is to remove that header, since publishing a precise runtime version to anyone who asks is free reconnaissance for an attacker.

Among domains we matched to a company with a resolved industry, IT Services and IT Consulting leads at 4.65%, followed by Retail (4.14%), Software Development (3.94%), Real Estate (3.59%), Construction (3.08%), Advertising Services (2.65%) and Financial Services (2.4%). No single industry dominates, which is what horizontal infrastructure looks like. Companies in that data include Accenture, IBM, Cognizant, Starbucks and the United States Postal Service.

Yes, but it requires code changes. ASP.NET Core is not a drop-in replacement, because of architectural differences in dependency injection, the middleware pipeline and cross-platform support. Common strategies are incremental modernization, running both side by side behind one host, or a full rewrite for smaller applications. The __VIEWSTATE signal is a useful tell for scoping the work: where it appears, the application is Web Forms and the migration is a rewrite rather than a port.

Because rewriting a working line-of-business application is expensive and risky, and Web Forms applications tend to be the ones that are load-bearing. We can see them directly: the __VIEWSTATE form field is one of the signals in our ASP.NET rule, and it is emitted by Web Forms rather than by ASP.NET Core. The age profile explains the inertia, with 15.68% of matched companies founded before 1980. Organisations like that delay migration until the business case justifies the rewrite cost.

Partly deployment and partly detection surface. ASP.NET is matched on four kinds of signal, including response headers and session cookies that every page load reveals, while Express, ranked #4 with 138,238 domains, is matched on a single response header. A platform that announces itself in more places is easier to count, so the 46.19% share reflects visibility as well as installed base. The lead is real, but the size of the gap is not a like-for-like measure of engineering adoption.

26,424 domains dropped it since we began tracking in March 2026, against 856,440 that currently carry a detection. Very little of that is competitive loss. The largest single corridor away from ASP.NET is 343 domains moving to Nuxt.js, followed by 226 to Ruby on Rails and 139 to Express. Most domains that stop showing a detection were retired or rebuilt rather than replatformed onto a named rival.

Our usage series is only three months long, so it shows a level rather than a trend. Active ASP.NET domains stood at 636,259 in June 2026, 815,228 in July and 856,440 in August. June sits at the start of the series, where active domains and all domains ever recorded with a detection are still nearly identical (636,259 against 636,463), so the step into July reflects the series filling out as much as market movement. Treat the August figure as the current level and wait for more months before calling a direction.