County websites: security rankings
Project ScanGov security rankings for U.S. county government websites, with the most common failures and a page for every state.
B 88
Average security score of 2,421 fully scanned U.S. county sites
2,421 of 2,842
County sites fully scanned. We couldn't fully scan 421, so they're listed without grades
48
States with county sites on our list, each with its own page
33%
Fully scanned county sites earning an A for security (811 sites)
How U.S. county security scores are distributed
Smoothed distribution of the 2,421 fully scanned U.S. county sites, score 0 to 100. Height shows how many sites score near each value.
Distribution of 2421 scores. The data table lists counts by score range.
- Average
View the data table
| Score range | Sites |
|---|---|
| 0 to 9 | 0 |
| 10 to 19 | 0 |
| 20 to 29 | 0 |
| 30 to 39 | 0 |
| 40 to 49 | 0 |
| 50 to 59 | 8 |
| 60 to 69 | 39 |
| 70 to 79 | 464 |
| 80 to 89 | 1,099 |
| 90 to 100 | 811 |
County sites by state
Average security score of the fully scanned county sites in each state, darker for higher. Select a state on the map or in the table for its county rankings.
Legend: 84100 Average score, lighter is lower No data
U.S. county sites by security grade
Share of the 2,421 fully scanned U.S. county sites in each grade band
- A (90 to 100)
- B to C (70 to 89)
- D to F (below 70)
View the data table
| Group | A (90 to 100) | B to C (70 to 89) | D to F (below 70) |
|---|---|---|---|
| All U.S. county sites | 33% (811) | 65% (1,563) | 2% (47) |
| State | Sites | Overall | Accessibility | Botability | Security | Usability | Readability |
|---|---|---|---|---|---|---|---|
| Alaska | 15 of 19 | C 76 | B 86 | C 76 | B 85 | F 50 | D 60 |
| Arizona | 10 of 14 | C 78 | B 89 | B 81 | A 91 | F 45 | F 56 |
| Arkansas | 41 of 55 | C 76 | B 86 | C 78 | B 87 | F 50 | C 70 |
| California | 39 of 57 | C 77 | A 90 | C 78 | B 88 | F 42 | D 65 |
| Colorado | 33 of 63 | C 77 | B 89 | C 78 | B 87 | F 45 | C 70 |
| Connecticut | 9 of 9 | C 78 | B 88 | C 79 | B 86 | F 58 | F 0 |
| Delaware | 3 of 3 | C 79 | A 93 | C 78 | A 96 | F 41 | D 67 |
| Florida | 51 of 65 | C 79 | A 90 | C 77 | B 87 | F 52 | F 48 |
| Georgia | 132 of 155 | C 75 | B 87 | C 78 | B 86 | F 44 | D 60 |
| Hawaii | 1 of 2 | B 89 | A 97 | A 90 | B 87 | D 68 | A 100 |
| Idaho | 37 of 43 | C 75 | B 87 | C 78 | B 86 | F 42 | D 62 |
| Illinois | 86 of 96 | C 78 | B 87 | C 78 | A 90 | F 53 | D 66 |
| Indiana | 49 of 76 | C 77 | B 86 | C 78 | A 90 | F 49 | D 65 |
| Iowa | 77 of 99 | C 76 | B 81 | C 72 | A 94 | F 58 | C 79 |
| Kansas | 85 of 101 | C 75 | B 88 | C 77 | B 85 | F 44 | C 79 |
| Kentucky | 95 of 115 | C 73 | B 87 | C 74 | B 86 | F 41 | F 46 |
| Louisiana | 41 of 50 | C 76 | B 86 | C 76 | B 84 | F 53 | C 76 |
| Maine | 13 of 16 | C 78 | A 91 | C 76 | B 88 | F 46 | F 50 |
| Maryland | 19 of 24 | C 76 | B 89 | C 78 | A 90 | F 41 | F 33 |
| Massachusetts | 7 of 8 | C 75 | B 86 | C 75 | B 87 | F 43 | C 71 |
| Michigan | 68 of 81 | C 75 | B 87 | C 75 | B 85 | F 46 | D 62 |
| Minnesota | 73 of 87 | C 77 | B 89 | C 75 | A 92 | F 44 | D 66 |
| Mississippi | 68 of 74 | C 76 | B 87 | C 76 | B 84 | F 53 | F 48 |
| Missouri | 87 of 97 | C 78 | B 88 | B 80 | B 85 | F 55 | D 61 |
| Montana | 49 of 54 | C 79 | B 88 | B 81 | A 90 | F 53 | C 74 |
| Nebraska | 92 of 93 | B 80 | A 95 | B 82 | A 98 | F 39 | B 82 |
| Nevada | 14 of 17 | C 75 | B 86 | C 74 | B 88 | F 42 | D 64 |
| New Hampshire | 10 of 10 | C 75 | B 88 | C 78 | B 85 | F 43 | F 40 |
| New Jersey | 13 of 20 | C 76 | B 87 | C 78 | B 86 | F 48 | D 62 |
| New Mexico | 26 of 33 | C 74 | B 87 | C 77 | B 84 | F 41 | C 76 |
| New York | 52 of 55 | C 77 | A 90 | C 75 | A 95 | F 44 | D 60 |
| North Carolina | 85 of 100 | C 75 | B 86 | C 77 | B 89 | F 43 | F 52 |
| North Dakota | 44 of 51 | C 79 | A 91 | C 74 | B 85 | F 57 | D 68 |
| Ohio | 80 of 88 | C 76 | B 89 | C 76 | B 87 | F 48 | D 67 |
| Oklahoma | 51 of 55 | C 74 | B 89 | D 69 | B 87 | F 41 | F 43 |
| Oregon | 29 of 35 | C 77 | A 90 | C 77 | A 90 | F 46 | F 36 |
| Pennsylvania | 55 of 60 | C 77 | A 90 | C 76 | B 88 | F 46 | F 53 |
| South Carolina | 41 of 46 | C 77 | B 87 | C 72 | A 90 | F 50 | D 63 |
| South Dakota | 51 of 54 | C 78 | B 87 | B 81 | B 85 | F 57 | F 52 |
| Tennessee | 84 of 94 | C 77 | B 86 | C 76 | B 89 | F 53 | F 56 |
| Texas | 237 of 255 | C 75 | A 91 | D 69 | B 84 | F 38 | F 56 |
| Utah | 28 of 30 | C 79 | A 91 | B 80 | A 96 | F 46 | C 75 |
| Vermont | 1 of 1 | B 82 | B 81 | B 81 | A 100 | C 75 | A 100 |
| Virginia | 81 of 96 | C 76 | B 87 | C 78 | A 90 | F 40 | D 61 |
| Washington | 35 of 39 | C 76 | B 89 | C 76 | A 91 | F 40 | F 58 |
| West Virginia | 50 of 52 | C 77 | B 85 | C 75 | B 87 | F 57 | F 57 |
| Wisconsin | 52 of 72 | C 77 | B 89 | C 77 | B 89 | F 47 | D 68 |
| Wyoming | 22 of 23 | C 74 | B 84 | C 76 | A 90 | F 40 | D 64 |
No county sites on our list yet for Alabama, Rhode Island. Connecticut and Rhode Island have no county governments; Connecticut's planning regions stand in for its counties.
What each check means
- Sponsored top-level domain (sTLD). The site uses a government-issued domain (.gov, .edu, or .mil). People cannot tell if your site is real government.
- Errors in the console. The page loads without JavaScript or network errors. Site may have hidden bugs that break features.
- Security.txt. The site has a security.txt file so researchers know how to report issues. Security researchers cannot report problems to you.
- X-Content-Type-Options. The site tells browsers not to guess the type of files it serves. Browsers might run dangerous files by mistake.
- Hypertext Transfer Protocol Secure (HTTPS). The site uses HTTPS to encrypt data between the server and users. Hackers can see and steal personal information.
Every site with one problem
- County websites not on a .gov domain: 1,090 of 2,421 fully scanned sites (45%), with a county map, the share in each state, and every site listed.
All U.S. county sites by security score
Page 1 of 25
About security
Secure your site and protect users with proper security practices.
Why it's important
Strong defenses prevent hackers from stealing personal information and other confidential data.
Risks
- Hackers can steal private information from your site.
Guidance
What we use to grade security:
- CISA Website Security
- 21st Century Integrated Digital Experience Act (IDEA)
- CISA Cybersecurity Performance Goals
- RFC 9116
- OWASP Top 10
- U.S. Federal Website Standards
Standards
- Content security policy (CSP)
- HTTP Strict Transport Security (HSTS)
- security.txt
- X-Content-Type-Options
- Errors in the console
- Clickjacking mitigation
- Paste preventing inputs
- Hypertext Transfer Protocol Secure (HTTPS)
- Sponsored top-level domain (sTLD)
Grades/scores
ScanGov
About this data
ScanGov scans the homepage of each county government site on our county list. Scores come from the checks listed on standards.scangov.org. Sites were scanned between 7/18/2026 and 10/3/2026; each site's report shows its own scan date. A site counts as fully scanned when its homepage returned successfully and sent the scanner its page content. Averages, grade shares, failure rates, and ranks use fully scanned sites only. We weren't able to fully scan 421 sites because they did not respond, blocked the scanner, or returned no page content. They appear in the table without grades, each with its scan status, and are left out of every figure. Grades follow the ScanGov grade scale, and rank follows the ScanGov ranking method. The full dataset, including every county's raw results, is published in the ScanGov data repository.