Visibility

Research

What Gibraltar business websites are built on

We read 148 Gibraltar business websites to find out which platforms they actually run on. The answer is not what most people assume.

53.38% are built directly

More Gibraltar business websites are bespoke builds than run on any content management system. WordPress, the platform usually assumed to dominate small business, accounts for 27.03%.

PlatformSitesShare
Custom-built7953.38%
WordPress4027.03%
Wix74.73%
Webflow64.05%
Joomla42.7%
Shopify42.7%
GoDaddy Website Builder32.03%
Squarespace32.03%
Weebly10.68%
One.com10.68%

Measured 21 August 2026 across 148 sites.

Reading this honestly

“Custom-built” is the largest bucket, and it is a residual one. A site built directly rather than on a mainstream content management system, bespoke code, or a framework that leaves no platform fingerprint. We class a site that way when we have read it and found no platform marker, which is strong evidence, but not proof, that it was built directly. Every time we add detection for another platform, this number gets a little smaller.

Sites we could not read at all are excluded from the totals entirely, rather than counted as anything. Including them would understate every platform's real share.

What we deliberately do not record

We record the platform and nothing further. No software versions, no plugin lists, no assessment of whether any site is out of date or exploitable. Identifying and cataloguing specific weaknesses across every business in a jurisdiction is a materially different act from noting which platform a site runs on, even though the method looks similar, and it would produce something that functions as a target list. We do not collect it, so we cannot publish it or lose it.

Common questions

How was this measured?
We read the homepage of every business we track and looked for the markers a platform leaves in its own markup, a generator tag, a distinctive asset path, a known CDN. This is the same passive observation any visitor's browser performs, and the same category of detection tools like Wappalyzer and BuiltWith do publicly.
What does 'custom-built' mean?
A site built directly rather than on a mainstream content management system, bespoke code, or a framework that leaves no platform fingerprint. It is a residual category: it means we looked and found no platform marker, which is not quite the same as proving a site was hand-written.
Do you record security information about these sites?
No. We record the platform only, never software versions, plugins, or anything about whether a site is vulnerable. Cataloguing weaknesses across the businesses of a whole jurisdiction is a different activity with different consequences, and we do not do it.
Can a business ask to be excluded?
Yes. This page publishes counts only and names no business, but a business that would rather not be counted can ask to be removed.

How Visibility's other numbers are produced

Most common platform: Custom-built at 53.38%.