Showing Oregon county sites. All U.S. county sites
A 90
Average security score of 31 fully scanned Oregon county sites
7th
of 48 states, ranked by average security score
31 of 36
Sites fully scanned. We couldn't fully scan 5, so they're listed without grades
B 88
U.S. county average security score, 2435 fully scanned sites
Oregon's state site, oregon.gov, ranks 14th of 51 state sites with a B. State rankings.
How Oregon county security scores are distributed
Smoothed distribution of the 31 fully scanned Oregon county sites, score 0 to 100. Height shows how many sites score near each value.
Distribution of 31 scores. The data table lists counts by score range.
- Oregon average
- U.S. county average
View the data table
| Score range | Sites |
|---|---|
| 0 to 9 | 0 |
| 10 to 19 | 0 |
| 20 to 29 | 0 |
| 30 to 39 | 0 |
| 40 to 49 | 0 |
| 50 to 59 | 0 |
| 60 to 69 | 1 |
| 70 to 79 | 3 |
| 80 to 89 | 14 |
| 90 to 100 | 13 |
Oregon counties by security grade
Each county with a site on our list is colored by that site's grade. Select a county to open its report. The table lists every site.
- A (90 to 100)
- B to C (70 to 89)
- D to F (below 70)
- Not fully scanned
Oregon counties by security grade, compared with all U.S. counties
Share of fully scanned sites in each grade band. Oregon: 31 sites. U.S.: 2435 sites.
- A (90 to 100)
- B to C (70 to 89)
- D to F (below 70)
View the data table
| Group | A (90 to 100) | B to C (70 to 89) | D to F (below 70) |
|---|---|---|---|
| Oregon | 42% (13) | 55% (17) | 3% (1) |
| All U.S. counties | 34% (823) | 65% (1,574) | 2% (38) |
Top 3 Oregon county sites by security score
#1 in Oregon · U.S. rank 1
Benton County, OR
A 100 security
- Accessibility C
- Botability B
- Security A
- Usability C
#1 in Oregon · U.S. rank 1
Clatsop County, OR
A 100 security
- Accessibility B
- Botability D
- Security A
- Usability F
#1 in Oregon · U.S. rank 1
Columbia County, OR
A 100 security
- Accessibility C
- Botability D
- Security A
- Usability F
What each check means
- Sponsored top-level domain (sTLD). The site uses a government-issued domain (.gov, .edu, or .mil). People cannot tell if your site is real government.
- Errors in the console. The page loads without JavaScript or network errors. Site may have hidden bugs that break features.
- X-Content-Type-Options. The site tells browsers not to guess the type of files it serves. Browsers might run dangerous files by mistake.
All Oregon county sites by security score
| Rank | Site | Checks passed | Grade |
|---|---|---|---|
| 1 |
bentoncountyor.gov
Benton County, OR U.S. rank 1 |
7 of 7 checks pass | A |
| 1 |
clatsopcounty.gov
Clatsop County, OR U.S. rank 1 |
8 of 8 checks pass | A |
| 1 |
columbiacountyor.gov
Columbia County, OR U.S. rank 1 |
7 of 7 checks pass | A |
| 1 |
crookcountyor.gov
Crook County, OR U.S. rank 1 |
8 of 8 checks pass | A |
| 1 |
deschutescounty.gov
Deschutes County, OR U.S. rank 1 |
8 of 8 checks pass | A |
| 1 |
lanecountyor.gov
Lane County, OR U.S. rank 1 |
8 of 8 checks pass | A |
| 1 |
morrowcountyor.gov
Morrow County, OR U.S. rank 1 |
7 of 7 checks pass | A |
| 1 |
polkcountyor.gov
Polk County, OR U.S. rank 1 |
8 of 8 checks pass | A |
| 1 |
shermancountyor.gov
Sherman County, OR U.S. rank 1 |
8 of 8 checks pass | A |
| 1 |
tillamookcounty.gov
Tillamook County, OR U.S. rank 1 |
7 of 7 checks pass | A |
| 1 |
unioncountyor.gov
Union County, OR U.S. rank 1 |
9 of 9 checks pass | A |
| 1 |
washingtoncountyor.gov
Washington County, OR U.S. rank 1 |
8 of 8 checks pass | A |
| 1 |
yamhillcounty.gov
Yamhill County, OR U.S. rank 1 |
8 of 8 checks pass | A |
| 2 |
douglascountyor.gov
Douglas County, OR U.S. rank 2 |
8 of 9 checks pass | B |
| 3 |
grantcountyoregon.net
Grant County, OR U.S. rank 3 |
7 of 8 checks pass | B |
| 3 |
klamathcounty.org
Klamath County, OR U.S. rank 3 |
7 of 8 checks pass | B |
| 3 |
co.lincoln.or.us
Lincoln County, OR U.S. rank 3 |
7 of 8 checks pass | B |
| 3 |
linncountyor.gov
Linn County, OR U.S. rank 3 |
7 of 8 checks pass | B |
| 3 |
co.umatilla.or.us
Umatilla County, OR U.S. rank 3 |
7 of 8 checks pass | B |
| 3 |
co.wallowa.or.us
Wallowa County, OR U.S. rank 3 |
7 of 8 checks pass | B |
| 3 |
wheelercountyoregon.com
Wheeler County, OR U.S. rank 3 |
7 of 8 checks pass | B |
| 4 |
bakercountyor.gov
Baker County, OR U.S. rank 4 |
6 of 7 checks pass | B |
| 4 |
currycountyor.gov
Curry County, OR U.S. rank 4 |
6 of 7 checks pass | B |
| 4 |
gilliamcountyor.gov
Gilliam County, OR U.S. rank 4 |
6 of 7 checks pass | B |
| 4 |
jacksoncountyor.gov
Jackson County, OR U.S. rank 4 |
6 of 7 checks pass | B |
| 4 |
multco.us
Multnomah County, OR U.S. rank 4 |
6 of 7 checks pass | B |
| 4 |
wascocountyor.gov
Wasco County, OR U.S. rank 4 |
6 of 7 checks pass | B |
| 5 |
clackamas.us
Clackamas County, OR U.S. rank 6 |
7 of 9 checks pass | C |
| 6 |
co.coos.or.us
Coos County, OR U.S. rank 7 |
6 of 8 checks pass | C |
| 6 |
malheurco.org
Malheur County, OR U.S. rank 7 |
6 of 8 checks pass | C |
| 7 |
co.marion.or.us
Marion County, OR U.S. rank 10 |
5 of 8 checks pass | D |
|
harneycountyor.gov
Harney County, OR |
Not fully scanned, so not graded. We couldn't fully scan your site because it responded without any page content. Status 995 | - | |
|
hoodrivercounty.gov
Hood River County, OR |
Not fully scanned, so not graded. We didn't scan your site because its robots.txt asked us not to. Status 998 | - | |
|
jeffco.net
Jefferson County, OR |
Not fully scanned, so not graded. We couldn't fully scan your site because it responded without any page content. Status 995 | - | |
|
josephinecounty.gov
Josephine County, OR |
Not fully scanned, so not graded. We didn't scan your site because its robots.txt asked us not to. Status 998 | - | |
|
lakecountyor.org
Lake County, OR |
Not fully scanned, so not graded. We didn't scan your site because its robots.txt asked us not to. Status 998 | - |
About security
Secure your site and protect users with proper security practices.
Why it's important
Strong defenses prevent hackers from stealing personal information and other confidential data.
Risks
- Hackers can steal private information from your site.
Guidance
What we use to grade security:
- CISA Website Security
- 21st Century Integrated Digital Experience Act (IDEA)
- CISA Cybersecurity Performance Goals
- RFC 9116
- OWASP Top 10
- U.S. Federal Website Standards
Standards
- Content security policy (CSP)
- HTTP Strict Transport Security (HSTS)
- security.txt
- X-Content-Type-Options
- Errors in the console
- Clickjacking mitigation
- Paste preventing inputs
- Hypertext Transfer Protocol Secure (HTTPS)
- Sponsored top-level domain (sTLD)
Grades/scores
ScanGov
About this data
ScanGov scans the homepage of each county government site on our county list in Oregon. Scores come from the checks listed on standards.scangov.org. Sites were scanned between 7/19/2026 and 9/18/2026; each site's report shows its own scan date. A site counts as fully scanned when its homepage returned successfully and sent the scanner its page content. Averages, grade shares, failure rates, and ranks use fully scanned sites only. We weren't able to fully scan 5 sites because they did not respond, blocked the scanner, or returned no page content. They appear in the table without grades, each with its scan status, and are left out of every figure. Grades follow the ScanGov grade scale, and rank follows the ScanGov ranking method. The full dataset, including every county's raw results, is published in the ScanGov data repository.