D+
Massachusetts (MA) — Government Security
772
Government organizations
437
With tracked websites
57%
Website coverage
D+
Overall security grade
Security Report Card
Web Security
98%
Valid SSL/TLS
67%
HTTPS Redirect
20%
HSTS Enabled
89%
Certificate Valid
2%
CAA Record
22%
X-Frame-Options
59%
X-Content-Type
1%
security.txt
Email Security
62%
SPF Configured
49%
DKIM Signing
28%
DMARC Enforced
0%
MTA-STS
0%
TLS-RPT
DNS & Infrastructure
4%
DNSSEC
8%
IPv6 Support
61%
RPKI Valid
Governments in Massachusetts
| Name | Type | Primary Domain | Security Checks |
|---|---|---|---|
| County Of Norfolk | County | norfolkcounty.org | B-Web Security5/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✓ SPF ✗ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Boston | Municipal | boston.gov | B+Web Security6/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✗ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| County Of Bristol | County | countyofbristol.net | B-Web Security5/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✓ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| County Of Plymouth | County | — | — |
| County Of Barnstable | County | capecod.gov | D-Web Security2/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✓ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Worcester | Municipal | worcesterma.gov | B+Web Security6/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✗ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT B-DNS & Infrastructure2/3 DNS & Infrastructure ✗ DNSSEC ✓ IPv6 ✓ RPKI |
| City Of Springfield | Municipal | springfield-ma.gov | D-Web Security2/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✓ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Cambridge | Municipal | ci.cambridge.ma.us | — |
| City Of Lowell | Municipal | lowellma.gov | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✓ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Brockton | Municipal | brockton.ma.us | D+Web Security3/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt FEmail Security0/5 Email Security ✗ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Quincy | Municipal | ci.quincy.ma.us | — |
| City Of Lynn | Municipal | cityoflynn.net | D+Web Security3/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt FEmail Security0/5 Email Security ✗ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT B-DNS & Infrastructure2/3 DNS & Infrastructure ✗ DNSSEC ✓ IPv6 ✓ RPKI |
| City Of New Bedford | Municipal | newbedfordma.gov | — |
| City Of Fall River | Municipal | fall-river.org | — |
| City Of Newton | Municipal | — | — |
| City Of Lawrence | Municipal | ci.lawrence.ma.us | — |
| City Of Somerville | Municipal | somervillema.gov | B+Web Security6/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✗ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT B-DNS & Infrastructure2/3 DNS & Infrastructure ✗ DNSSEC ✓ IPv6 ✓ RPKI |
| City Of Framingham | Municipal | framinghamma.gov | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✓ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Haverhill | Municipal | haverhill.com | B+Web Security6/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✗ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| Town Of Plymouth | Township | plymouthma.gov | — |
| City Of Malden | Municipal | cityofmalden.org | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✓ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Waltham | Municipal | city.waltham.ma.us | — |
| Town Of Brookline | Township | brooklinema.gov | B-Web Security5/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✓ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Taunton | Municipal | ci.taunton.ma.us | — |
| City Of Weymouth Town | Municipal | weymouth.ma.us | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✓ SPF ✗ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Medford | Municipal | medford.org | D-Web Security2/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✓ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Revere | Municipal | revere.org | B-Web Security5/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✓ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Chicopee | Municipal | chicopeema.gov | D+Web Security3/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✓ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Peabody | Municipal | peabody-ma.gov | B-Web Security5/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✓ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Methuen | Municipal | ci.methuen.ma.us | — |
| City Of Everett | Municipal | ci.everett.ma.us | D+Web Security3/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Barnstable | Municipal | barnstable.gov | D-Web Security2/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Attleboro | Municipal | cityofattleboro.us | D+Web Security3/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt B-Email Security3/5 Email Security ✓ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| Town Of Arlington | Township | arlingtonma.gov | D-Web Security2/8 Web Security ✓ SSL/TLS ✗ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✗ sec.txt FEmail Security0/5 Email Security ✗ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Salem | Municipal | salemma.gov | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✓ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Leominster | Municipal | leominsterma.gov | — |
| City Of Pittsfield | Municipal | pittsfieldma.gov | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✗ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Beverly | Municipal | beverlyma.gov | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Woburn | Municipal | — | — |
| Town Of Billerica | Township | billerica.gov | B+Web Security6/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt B-Email Security3/5 Email Security ✓ SPF ✓ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| City Of Fitchburg | Municipal | fitchburgma.gov | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Marlborough | Municipal | — | — |
| City Of Westfield | Municipal | cityofwestfield.org | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✓ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Amherst Town | Municipal | amherstma.gov | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✓ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| Town Of Shrewsbury | Township | shrewsburyma.gov | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt D-Email Security1/5 Email Security ✗ SPF ✗ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✓ DNSSEC ✗ IPv6 ✗ RPKI |
| City Of Braintree Town | Municipal | townofbraintree.gov | — |
| City Of Chelsea | Municipal | chelseama.gov | B-Web Security5/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✓ X-Frame ✓ X-Content ✗ sec.txt FEmail Security0/5 Email Security ✗ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT B-DNS & Infrastructure2/3 DNS & Infrastructure ✗ DNSSEC ✓ IPv6 ✓ RPKI |
| City Of Holyoke | Municipal | holyoke.org | B-Web Security5/8 Web Security ✓ SSL/TLS ✓ HTTPS ✓ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✗ X-Content ✓ sec.txt D-Email Security1/5 Email Security ✗ SPF ✓ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT D+DNS & Infrastructure1/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✓ RPKI |
| Town Of Natick | Township | natickma.gov | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt FEmail Security0/5 Email Security ✗ SPF ✗ DKIM ✗ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
| Town Of Andover | Township | andoverma.gov | CWeb Security4/8 Web Security ✓ SSL/TLS ✓ HTTPS ✗ HSTS ✓ Cert ✗ CAA ✗ X-Frame ✓ X-Content ✗ sec.txt C-Email Security2/5 Email Security ✓ SPF ✗ DKIM ✓ DMARC ✗ MTA-STS ✗ TLS-RPT FDNS & Infrastructure0/3 DNS & Infrastructure ✗ DNSSEC ✗ IPv6 ✗ RPKI |
Massachusetts by the Numbers
Massachusetts has 772 government organizations, but only 437 (57%) have trackable websites. That means 335 government bodies have no online presence we can monitor for security.
Massachusetts earned an overall grade of D+ -- meaning most government websites and email systems lack basic security protections. Taxpayers in Massachusetts are at elevated risk for government data breaches, phishing attacks, and ransomware incidents.
Check a Massachusetts Government Website Help a Massachusetts Agency Improve
Share Massachusetts's Security Status
Think your neighbors should know how secure (or insecure) your local government websites are? Share this page in your community Facebook group, send it to your local newspaper, or tag your elected officials on social media. Sample post:
"Did you know Massachusetts government websites earned a D+ grade for online security? Only 57% of our 772 government organizations even have trackable websites. Check your local government: https://yesgov.com/open-data/states/ma"
Is your government missing or have incorrect information? Contact us or create an account to claim and manage your government profile.