D+
California (CA) — Government Security
3,518
Government organizations
1,825
With tracked websites
52%
Website coverage
D+
Overall security grade
Security Report Card
Web Security
96%
Valid SSL/TLS
74%
HTTPS Redirect
37%
HSTS Enabled
94%
Certificate Valid
2%
CAA Record
38%
X-Frame-Options
54%
X-Content-Type
1%
security.txt
Email Security
56%
SPF Configured
55%
DKIM Signing
33%
DMARC Enforced
1%
MTA-STS
2%
TLS-RPT
DNS & Infrastructure
5%
DNSSEC
11%
IPv6 Support
74%
RPKI Valid
Governments in California
| Name | Type | Primary Domain | Security Checks |
|---|---|---|---|
| County Of Los Angeles | County | lacounty.gov | D+Web Security3/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✓ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Los Angeles | Municipal | ci.la.ca.us | — |
| County Of San Diego | County | sandiegocounty.gov | B+Web Security6/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt FEmail Security0/5 Email Security ✗ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| County Of Orange | County | ocgov.com | B-Web Security5/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| County Of Riverside | County | rivco.gov | B+Web Security6/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✓ SPF ✗ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| County Of San Bernardino | County | main.sbcounty.gov | — |
| County Of Santa Clara | County | sccgov.org | FWeb Security0/8 Web Security ✗ SSL/TLS ✗ HTTPS ✗ HSTS ✗ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| County Of Alameda | County | co.alameda.ca.us | D-Web Security2/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✗ Cert ✓ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt FEmail Security0/5 Email Security ✗ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| County Of Sacramento | County | saccounty.gov | B-Web Security5/8 Web Security ✓ SSL/TLS ✗ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt B-Email Security3/5 Email Security ✓ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of San Diego | Municipal | sandiego.gov | B+Web Security6/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT B-DNS & Infrastructure2/3 DNS & Infrastructure ✗ DNSSEC ✓ IPv6 ✓ RPKI |
| County Of Contra Costa | County | co.contracosta.ca.us | — |
| County Of Fresno | County | co.fresno.ca.us | FWeb Security0/8 Web Security ✗ SSL/TLS ✗ HTTPS ✗ HSTS ✗ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt B-Email Security3/5 Email Security ✓ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of San Jose | Municipal | sanjoseca.gov | D-Web Security2/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt A-Email Security4/5 Email Security ✓ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✓ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| County Of Kern | County | co.kern.ca.us | FWeb Security0/8 Web Security ✗ SSL/TLS ✗ HTTPS ✗ HSTS ✗ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✓ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| County Of Ventura | County | venturacounty.gov | D+Web Security3/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✗ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City And County Of San Francisco | Municipal | sf.gov | D+Web Security3/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt B-Email Security3/5 Email Security ✓ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| County Of San Joaquin | County | sjgov.org | B+Web Security6/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| County Of San Mateo | County | smcgov.org | B+Web Security6/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✗ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT B-DNS & Infrastructure2/3 DNS & Infrastructure ✗ DNSSEC ✓ IPv6 ✓ RPKI |
| County Of Stanislaus | County | stancounty.com | D+Web Security3/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt B-Email Security3/5 Email Security ✓ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Fresno | Municipal | fresno.gov | FWeb Security1/8 Web Security ✗ SSL/TLS ✗ HTTPS ✗ HSTS ✗ Cert ✓ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt B-Email Security3/5 Email Security ✓ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Sacramento | Municipal | cityofsacramento.gov | B+Web Security6/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✓ SPF ✗ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| County Of Sonoma | County | sonomacounty.org | FWeb Security1/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✗ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt FEmail Security0/5 Email Security ✗ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| County Of Tulare | County | co.tulare.ca.us | — |
| City Of Long Beach | Municipal | longbeach.gov | D+Web Security3/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✗ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| County Of Solano | County | co.solano.ca.us | — |
| County Of Santa Barbara | County | countyofsb.org | B+Web Security6/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Oakland | Municipal | oaklandnet.com | FWeb Security0/8 Web Security ✗ SSL/TLS ✗ HTTPS ✗ HSTS ✗ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| County Of Monterey | County | countyofmonterey.gov | D-Web Security2/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| County Of Placer | County | placer.ca.gov | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Bakersfield | Municipal | bakersfieldcity.us | B+Web Security6/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt B-Email Security3/5 Email Security ✓ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT B-DNS & Infrastructure2/3 DNS & Infrastructure ✓ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Anaheim | Municipal | anaheim.net | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✗ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Stockton | Municipal | ci.stockton.ca.us | FWeb Security0/8 Web Security ✗ SSL/TLS ✗ HTTPS ✗ HSTS ✗ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt B-Email Security3/5 Email Security ✓ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Riverside | Municipal | riversideca.gov | B+Web Security6/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT B-DNS & Infrastructure2/3 DNS & Infrastructure ✗ DNSSEC ✓ IPv6 ✓ RPKI |
| City Of Irvine | Municipal | cityofirvine.org | CWeb Security4/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Santa Ana | Municipal | — | — |
| County Of Merced | County | co.merced.ca.us | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| County Of San Luis Obispo | County | co.slo.ca.us | FWeb Security0/8 Web Security ✗ SSL/TLS ✗ HTTPS ✗ HSTS ✗ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt B-Email Security3/5 Email Security ✓ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Chula Vista | Municipal | chulavistaca.gov | D-Web Security2/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt B-Email Security3/5 Email Security ✓ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| County Of Santa Cruz | County | co.santa-cruz.ca.us | FWeb Security0/8 Web Security ✗ SSL/TLS ✗ HTTPS ✗ HSTS ✗ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✓ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| County Of Marin | County | co.marin.ca.us | FWeb Security0/8 Web Security ✗ SSL/TLS ✗ HTTPS ✗ HSTS ✗ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✓ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Fremont | Municipal | fremont.gov | D-Web Security2/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt A-Email Security4/5 Email Security ✗ SPF ✓ DKIM ✓ DMARC ✓ MTA-STS ✓ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Santa Clarita | Municipal | santaclarita.com | B-Web Security5/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt FEmail Security0/5 Email Security ✗ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of San Bernardino | Municipal | sanbernardino.gov | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✓ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| County Of Yolo | County | yolocounty.gov | D-Web Security2/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✓ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Modesto | Municipal | modestogov.com | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt FEmail Security0/5 Email Security ✗ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Fontana | Municipal | fontanaca.gov | D-Web Security2/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt FEmail Security0/5 Email Security ✗ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Moreno Valley | Municipal | ci.moreno-valley.ca.us | D-Web Security2/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt FEmail Security0/5 Email Security ✗ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| County Of Butte | County | buttecounty.net | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt B-Email Security3/5 Email Security ✓ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Oxnard | Municipal | oxnard.gov | B-Web Security5/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt FEmail Security0/5 Email Security ✗ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT A+DNS & Infrastructure3/3 DNS & Infrastructure ✓ DNSSEC ✓ IPv6 ✓ RPKI |
| County Of El Dorado | County | co.eldorado.ca.us | — |
California by the Numbers
California has 3,518 government organizations, but only 1,825 (52%) have trackable websites. That means 1,693 government bodies have no online presence we can monitor for security.
California earned an overall grade of D+ -- meaning most government websites and email systems lack basic security protections. Taxpayers in California are at elevated risk for government data breaches, phishing attacks, and ransomware incidents.
Check a California Government Website Help a California Agency Improve
Share California's Security Status
Think your neighbors should know how secure (or insecure) your local government websites are? Share this page in your community Facebook group, send it to your local newspaper, or tag your elected officials on social media. Sample post:
"Did you know California government websites earned a D+ grade for online security? Only 52% of our 3,518 government organizations even have trackable websites. Check your local government: https://yesgov.com/open-data/states/ca"
Is your government missing or have incorrect information? Contact us or create an account to claim and manage your government profile.