The state of American government security — one row per agency.
Every U.S. county, municipality, school district, and special-purpose district. 78,906 entities continuously scanned for the controls CISA, NIST, and your insurance carrier care about. Search any name. The data is free, open, and updated nightly.
National security posture
Web Security
Email Security
DNS & Infrastructure
Top states by website coverage
| State | Governments | With websites | Coverage |
|---|---|---|---|
| California | 3,518 | 1,825 | 52% |
| Illinois | 6,043 | 1,621 | 27% |
| Pennsylvania | 4,311 | 1,579 | 37% |
| Texas | 4,575 | 1,431 | 31% |
| New York | 2,775 | 1,386 | 50% |
| Michigan | 2,293 | 1,300 | 57% |
| Colorado | 3,875 | 1,291 | 33% |
| Ohio | 3,300 | 1,174 | 36% |
| Florida | 2,072 | 1,113 | 54% |
| Minnesota | 3,310 | 1,047 | 32% |
| Wisconsin | 2,598 | 1,017 | 39% |
| Washington | 1,583 | 753 | 48% |
The numbers tell a troubling story
Only 26% of government domains enforce DMARC — meaning attackers can impersonate 74% of government agencies via email. Only 5% use DNSSEC. Only 28% enforce HSTS. When these gaps overlap, the risk compounds into real-world attacks that cost taxpayers millions.
Check your local government Get professional help — from $250 / year
Make your voice heard
Your tax dollars fund government IT. When basic security isn’t implemented, you pay for the breach recovery, ransomware payments, and legal settlements. Share your local government’s security grade with your community — post it on Facebook, tag your representatives on X, or bring it up at your next city council meeting.
Public awareness is the single most effective way to drive change in government cybersecurity.