Public Benefit Corporation · Government-only Free 30‑day trial · No payment, no credit card · Start today →

Open Data · CA · Municipal

City Of Costa Mesa

cityofcostamesa.com

Population108,354

TypeMunicipal

ClassGeneral Purpose

CountyOrange

StateCA

Last scanMar 24, 2026 1:29 AM UTC

F

Overall posture

Critical — 2 of 16 controls passing

Generated from the latest scan of cityofcostamesa.com. Detailed findings are listed below.

Web Security · F · 1 of 8 passing cityofcostamesa.com

✓

SSL/TLS

Implemented and verified.

PASS

—

×

HTTPS

Not implemented — review the linked guide for fix steps.

CHECK

×

HSTS

Not implemented — review the linked guide for fix steps.

CHECK

×

Cert

Not implemented — review the linked guide for fix steps.

CHECK

×

CAA

Not implemented — review the linked guide for fix steps.

CHECK

×

X-Frame

Not implemented — review the linked guide for fix steps.

CHECK

×

X-Content

Not implemented — review the linked guide for fix steps.

CHECK

×

sec.txt

Not implemented — review the linked guide for fix steps.

CHECK

Email Security · F · 0 of 5 passing cityofcostamesa.com

×

SPF

Not implemented — review the linked guide for fix steps.

CHECK

×

DKIM

Not implemented — review the linked guide for fix steps.

CHECK

×

DMARC

Not implemented — review the linked guide for fix steps.

CHECK

×

MTA-STS

Not implemented — review the linked guide for fix steps.

CHECK

×

TLS-RPT

Not implemented — review the linked guide for fix steps.

CHECK

DNS & Infrastructure · D+ · 1 of 3 passing cityofcostamesa.com

×

DNSSEC

Not implemented — review the linked guide for fix steps.

CHECK

×

IPv6

Not implemented — review the linked guide for fix steps.

CHECK

✓

RPKI

Implemented and verified.

PASS

—

Share City Of Costa Mesa’s security grade

City Of Costa Mesa earned a F security grade. Significant gaps put residents’ data and the agency’s budget at risk.

Help this agency improve Why security grades matter

Methodology

Each control is checked against published CISA, NIST, and DHS guidance. No authentication, no scraping — only what any internet host can observe.

Read the full methodology →

Scan details

Scan ID71ef7c97-d06

Last scanMar 24, 2026 1:29 AM UTC

Checks run16

Cadence~24h

Download this record

Full report/check/… Re-scan nowdomain-checker

Are you with City Of Costa Mesa?

Every issue above is fixable in a 4–8 week migration. We file the .gov, rebuild on hardened hosting, and hand you a binder for the next audit.

Start migration →

Manage this profile

If you work at City Of Costa Mesa, claim this profile to manage tracked domains, ask security questions, and receive scan alerts.

Claim this profile →

Already a member? Sign in