State website security rankings

Project ScanGov security rankings for U.S. state websites, with the most common failures.

  • Sites: 51
  • Last scan: 10/26/2026

A 92

Average security score of 43 fully scanned state sites

43 of 51

State sites fully scanned. We couldn't fully scan 8, so they're listed without grades

51%

Fully scanned state sites earning an A for security (22 sites)

0%

Fully scanned state sites earning a D or F for security (0 sites)

How U.S. state security scores are distributed

Smoothed distribution of the 43 fully scanned U.S. state sites, score 0 to 100. Height shows how many sites score near each value.

  • Average
View the data table
Score rangeSites
0 to 90
10 to 190
20 to 290
30 to 390
40 to 490
50 to 590
60 to 690
70 to 794
80 to 8917
90 to 10022

Security grade by state

Each state is colored by its main site's security grade. Select a state for its report.

maryland.gov / Grade: A / Score: 100% nh.gov / Not fully scanned (995) georgia.gov / Grade: A / Score: 100% ri.gov / Grade: A / Score: 100% sc.gov / Grade: A / Score: 100% iowa.gov / Grade: A / Score: 100% kentucky.gov / Grade: A / Score: 100% portal.arkansas.gov / Grade: A / Score: 100% nc.gov / Grade: B / Score: 87% nm.gov / Grade: A / Score: 100% hawaii.gov / Grade: A / Score: 100% kansas.gov / Grade: A / Score: 100% dc.gov / Grade: B / Score: 88% ny.gov / Grade: A / Score: 100% nj.gov / Grade: C / Score: 75% nd.gov / Grade: A / Score: 100% hbex.coveredca.com / Grade: B / Score: 85% dnrec.delaware.gov / Grade: A / Score: 100% wyo.gov / Grade: C / Score: 75% oklahoma.gov / Grade: B / Score: 87% idaho.gov / Grade: B / Score: 85% ct.gov / Grade: A / Score: 100% vermont.gov / Grade: A / Score: 100% louisiana.gov / Grade: A / Score: 100% tn.gov / Grade: B / Score: 87% pa.gov / Grade: A / Score: 100% virginia.gov / Grade: B / Score: 87% mo.gov / Grade: B / Score: 87% wv.gov / Grade: B / Score: 87% mt.gov / Grade: A / Score: 100% mississippi.gov / Grade: B / Score: 87% maine.gov / Grade: C / Score: 75% alaska.gov / Grade: B / Score: 87% mn.gov / Grade: B / Score: 85% wisconsin.gov / Grade: A / Score: 100% nebraska.gov / Grade: A / Score: 100% utah.gov / Grade: B / Score: 87% oregon.gov / Grade: A / Score: 100% sd.gov / Grade: B / Score: 87% myflorida.gov / Grade: C / Score: 75% illinois.gov / Grade: A / Score: 100% texas.gov / Grade: B / Score: 87% in.gov / Grade: B / Score: 87% alabama.gov / Grade: B / Score: 87% nv.gov / Not fully scanned (998) wa.gov / Not fully scanned (998) ohio.gov / Not fully scanned (404) michigan.gov / Not fully scanned (403) mass.gov / Not fully scanned (403) colorado.gov / Not fully scanned (403) az.gov / Not fully scanned (996)

Legend: 　 A 　 B-C 　 D-F 　 Not fully scanned / no data

U.S. state sites by security grade

Share of the 43 fully scanned U.S. state sites in each grade band

  1. All U.S. state sites
  • A (90 to 100)
  • B to C (70 to 89)
  • D to F (below 70)
View the data table
GroupA (90 to 100)B to C (70 to 89)D to F (below 70)
All U.S. state sites51% (22)49% (21)0% (0)

Most common security failures among U.S. state sites

Share of the 43 fully scanned U.S. state sites failing each check. A site can fail more than one check. Each check links to its standard and how to fix it.

  1. Errors in the console40%
  2. X-Content-Type-Options14%
  3. Content security policy (CSP)2%
  4. Security.txt2%
View the data table
CheckShare failingSites failing
Errors in the console40%17
X-Content-Type-Options14%6
Content security policy (CSP)2%1
Security.txt2%1

What each check means

  • Errors in the console. The page loads without JavaScript or network errors. Site may have hidden bugs that break features.
  • X-Content-Type-Options. The site tells browsers not to guess the type of files it serves. Browsers might run dangerous files by mistake.
  • Content security policy (CSP). The site has a policy that limits what external content can load on its pages. Hackers can inject bad code into your site.
  • Security.txt. The site has a security.txt file so researchers know how to report issues. Security researchers cannot report problems to you.

All state sites by security score

Rank Site Checks passed Grade
1 maryland.gov
State of Maryland 		8 of 8 checks pass A
1 georgia.gov
State of Georgia 		9 of 9 checks pass A
1 ri.gov
State of Rhode Island 		7 of 7 checks pass A
1 sc.gov
State of South Carolina 		8 of 8 checks pass A
1 iowa.gov
State of Iowa 		9 of 9 checks pass A
1 kentucky.gov
State of Kentucky 		8 of 8 checks pass A
1 nm.gov
State of New Mexico 		8 of 8 checks pass A
1 hawaii.gov
State of Hawaii 		7 of 7 checks pass A
1 kansas.gov
State of Kansas 		8 of 8 checks pass A
1 ny.gov
State of New York 		8 of 8 checks pass A
1 nd.gov
State of North Dakota 		8 of 8 checks pass A
1 ct.gov
State of Connecticut 		8 of 8 checks pass A
1 vermont.gov
State of Vermont 		8 of 8 checks pass A
1 louisiana.gov
State of Louisiana 		7 of 7 checks pass A
1 pa.gov
State of Pennsylvania 		8 of 8 checks pass A
1 mt.gov
State of Montana 		7 of 7 checks pass A
1 arkansas.gov
State of Arkansas 		7 of 7 checks pass A
1 wisconsin.gov
State of Wisconsin 		8 of 8 checks pass A
1 nebraska.gov
State of Nebraska 		7 of 7 checks pass A
1 oregon.gov
State of Oregon 		8 of 8 checks pass A
1 illinois.gov
State of Illinois 		8 of 8 checks pass A
1 ca.gov
State of California 		9 of 9 checks pass A
2 dc.gov
District of Columbia 		8 of 9 checks pass B
3 nc.gov
State of North Carolina 		7 of 8 checks pass B
3 oklahoma.gov
State of Oklahoma 		7 of 8 checks pass B
3 tn.gov
State of Tennessee 		7 of 8 checks pass B
3 virginia.gov
State of Virginia 		7 of 8 checks pass B
3 mo.gov
State of Missouri 		7 of 8 checks pass B
3 wv.gov
State of West Virginia 		7 of 8 checks pass B
3 de.gov
State of Delaware 		7 of 8 checks pass B
3 mississippi.gov
State of Mississippi 		7 of 8 checks pass B
3 alaska.gov
State of Alaska 		7 of 8 checks pass B
3 utah.gov
State of Utah 		7 of 8 checks pass B
3 sd.gov
State of South Dakota 		7 of 8 checks pass B
3 texas.gov
State of Texas 		7 of 8 checks pass B
3 in.gov
State of Indiana 		7 of 8 checks pass B
3 alabama.gov
State of Alabama 		7 of 8 checks pass B
4 idaho.gov
State of Idaho 		6 of 7 checks pass B
4 mn.gov
State of Minnesota 		6 of 7 checks pass B
5 nj.gov
State of New Jersey 		6 of 8 checks pass C
5 wyo.gov
State of Wyoming 		6 of 8 checks pass C
5 maine.gov
State of Maine 		6 of 8 checks pass C
5 myflorida.gov
State of Florida 		6 of 8 checks pass C

About this data

ScanGov scans the homepage of the main website of each U.S. state government and the District of Columbia. Scores come from the checks in the ScanGov standards. Sites were scanned between 7/27/2026 and 10/25/2026. Each site's report shows its own scan date. A site counts as fully scanned when its homepage loaded and sent us its page content. Averages, grade shares, failure rates, and ranks use fully scanned sites only. We could not fully scan 8 sites. They did not respond, blocked the scanner, or sent no page content. They appear in the table without grades, with their scan status, and are left out of every figure. Grades follow the ScanGov grade scale. Rank follows the ScanGov ranking method. The full dataset, with every county's raw results, is in the ScanGov data repository.

Plans Demo