Government Security Rankings
How well do state and local governments protect their digital infrastructure? Rankings based on 21,642 assessed government domains across 16 security controls.
Web Security
Email Security
DNS & Infrastructure
What These Numbers Mean for You
Only 26% of government domains enforce DMARC email authentication -- meaning attackers can impersonate most government agencies by email. Only 5% have DNSSEC enabled. When these failures overlap, the risk compounds exponentially.
Your tax dollars fund government IT. When basic security isn't implemented, taxpayers are on the hook for breach recovery, ransomware payments, and lost public trust.
State Rankings by Average Security Score
States ranked by the average security score of their tracked government domains. Click any state to see its full security report card.
| # | Grade | State | Domains | Avg Score | Web Security | Email Security | DNS & Infra |
|---|---|---|---|---|---|---|---|
| 1 | B- | District of Columbia | 3 | 10.3/16 | 79% | 33% | 78% |
| 2 | D+ | California | 1,485 | 6.4/16 | 51% | 31% | 34% |
| 3 | D+ | Colorado | 611 | 6.4/16 | 83% | 37% | 53% |
| 4 | D+ | Nebraska | 255 | 6.2/16 | 53% | 24% | 33% |
| 5 | D+ | Oregon | 411 | 6.2/16 | 49% | 28% | 34% |
| 6 | D+ | Arizona | 163 | 6.1/16 | 49% | 25% | 36% |
| 7 | D+ | Washington | 576 | 6.1/16 | 47% | 31% | 32% |
| 8 | D+ | Virginia | 286 | 6.1/16 | 50% | 31% | 33% |
| 9 | D+ | South Carolina | 214 | 6.1/16 | 51% | 26% | 32% |
| 10 | D+ | Maine | 245 | 6.0/16 | 50% | 24% | 36% |
| 11 | D+ | Maryland | 135 | 6.0/16 | 52% | 33% | 32% |
| 12 | D+ | Nevada | 59 | 6.0/16 | 49% | 28% | 37% |
| 13 | D+ | Alaska | 54 | 6.0/16 | 44% | 31% | 36% |
| 14 | D+ | North Carolina | 449 | 5.9/16 | 49% | 29% | 34% |
| 15 | D+ | New Jersey | 463 | 5.9/16 | 44% | 29% | 33% |
| 16 | D+ | Ohio | 906 | 5.9/16 | 46% | 28% | 33% |
| 17 | D+ | Utah | 233 | 5.9/16 | 47% | 29% | 37% |
| 18 | D+ | Massachusetts | 327 | 5.9/16 | 46% | 29% | 35% |
| 19 | D+ | Missouri | 500 | 5.9/16 | 47% | 26% | 33% |
| 20 | D+ | Kansas | 318 | 5.9/16 | 50% | 27% | 39% |
| 21 | D+ | Connecticut | 225 | 5.8/16 | 48% | 28% | 36% |
| 22 | D+ | Rhode Island | 64 | 5.8/16 | 43% | 29% | 30% |
| 23 | D+ | Oklahoma | 162 | 5.8/16 | 49% | 24% | 34% |
| 24 | D+ | New Mexico | 97 | 5.8/16 | 45% | 26% | 35% |
| 25 | D+ | New Hampshire | 181 | 5.8/16 | 43% | 29% | 33% |
| 26 | D+ | Idaho | 190 | 5.7/16 | 44% | 24% | 34% |
| 27 | D+ | Texas | 1,110 | 5.7/16 | 45% | 29% | 30% |
| 28 | D+ | North Dakota | 125 | 5.7/16 | 55% | 19% | 34% |
| 29 | D+ | New York | 1,091 | 5.7/16 | 44% | 27% | 37% |
| 30 | D+ | Illinois | 1,211 | 5.7/16 | 46% | 27% | 32% |
| 31 | D+ | Louisiana | 173 | 5.7/16 | 45% | 22% | 32% |
| 32 | D+ | Montana | 110 | 5.7/16 | 50% | 25% | 35% |
| 33 | D+ | Kentucky | 273 | 5.7/16 | 45% | 23% | 38% |
| 34 | D+ | Iowa | 404 | 5.6/16 | 47% | 23% | 34% |
| 35 | D+ | Michigan | 1,025 | 5.6/16 | 46% | 25% | 30% |
| 36 | D+ | South Dakota | 107 | 5.6/16 | 51% | 24% | 38% |
| 37 | D+ | Florida | 930 | 5.6/16 | 45% | 22% | 40% |
| 38 | D+ | Minnesota | 751 | 5.6/16 | 47% | 26% | 32% |
| 39 | D+ | Georgia | 418 | 5.6/16 | 43% | 27% | 32% |
| 40 | D+ | Mississippi | 134 | 5.6/16 | 44% | 28% | 32% |
| 41 | D+ | Wisconsin | 700 | 5.6/16 | 45% | 25% | 43% |
| 42 | D+ | Pennsylvania | 1,111 | 5.5/16 | 49% | 28% | 32% |
| 43 | D+ | Tennessee | 287 | 5.5/16 | 44% | 26% | 31% |
| 44 | D+ | Alabama | 304 | 5.5/16 | 56% | 25% | 42% |
| 45 | D+ | West Virginia | 109 | 5.5/16 | 45% | 24% | 34% |
| 46 | D+ | Vermont | 138 | 5.5/16 | 45% | 25% | 35% |
| 47 | D | Wyoming | 122 | 5.4/16 | 53% | 23% | 39% |
| 48 | D | Delaware | 40 | 5.4/16 | 48% | 22% | 30% |
| 49 | D | Arkansas | 169 | 5.2/16 | 45% | 23% | 33% |
| 50 | D | Indiana | 443 | 5.1/16 | 46% | 21% | 35% |
| 51 | D | Hawaii | 6 | 4.8/16 | 31% | 37% | 17% |
Share Your State's Security Status
Found your state ranking embarrassing? Share it. Post it in your local Facebook group, tag your mayor or county commissioner on X, or forward this page to your local newspaper. Public pressure is the single most effective way to get government IT departments to act.
The only thing that consistently gets government workers and elected officials moving is public awareness and accountability. Help us make government security everyone's concern.