City website security rankings
Project ScanGov security rankings for U.S. city websites, with the most common failures.
Page 3 of 3
About security
Secure your site and protect users with proper security practices.
Why it's important
Strong defenses prevent hackers from stealing personal information and other confidential data.
Risks
- Hackers can steal private information from your site.
Guidance
What we use to grade security:
- CISA Website Security
- 21st Century Integrated Digital Experience Act (IDEA)
- CISA Cybersecurity Performance Goals
- RFC 9116
- OWASP Top 10
- U.S. Federal Website Standards
Standards
- Content security policy (CSP)
- HTTP Strict Transport Security (HSTS)
- security.txt
- X-Content-Type-Options
- Errors in the console
- Clickjacking mitigation
- Paste preventing inputs
- Hypertext Transfer Protocol Secure (HTTPS)
- Sponsored top-level domain (sTLD)