observable.com — Traffic, Worth & Safety

Observable launched in 2018 by Mike Bostock, the creator of D3.js (the most popular data visualization library on the web). The platform provides reactive JavaScript notebooks for data exploration and visualization. Think Jupyter notebooks but for JavaScript, with reactivity built in — change one cell and downstream cells update automatically.

Based on our analysis, observable.com does not appear to use HTTPS and scores 0% on security headers. There is room for improvement in security configuration.

observable.com is missing 5 of 5 recommended security headers (Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, X-XSS-Protection). This leaves visitors more exposed to browser-based attacks.

Notebooks execute JavaScript in the browser with a custom runtime that provides reactivity. Server-side execution available for private data connections. The platform handles API keys and database credentials for data connections — these are encrypted and scoped per notebook. Standard web security with OAuth authentication.

All values are estimates based on publicly available traffic data.

Niche but influential — the go-to platform for JavaScript-based data visualization. Competes with Jupyter in data science but targets a different audience (web developers and data journalists vs. Python scientists). The free tier is generous for public notebooks. Enterprise tier targets teams building internal dashboards and data apps.

Created by the person behind D3.js, which powers visualizations at the New York Times, Washington Post, and thousands of other publications. Observable notebooks are used by data journalists, researchers, and companies for interactive data stories. The platform introduced Observable Plot, a simpler charting library that's gaining adoption as a D3 alternative for common charts.