Hacker News Reader

I've noticed a number of security-related companies opting against HTTPS for their website.

Does anyone have any idea why that might be the case?

They are lazy and human and try to prioritize effort. Same reason some security guards forgot to lock the door to their house at night.