Security

Security resources and support.

21st Century Integrated Digital Experience Act (IDEA)

Modernizes government websites and digital services.

CISA Cybersecurity Performance Goals

Voluntary, high-impact security practices.

CISA Web Security

Protect websites from cyber threats.

Content security policy (CSP)

Controls which sites can load content.

GSA Site Scanning

Checks and tracks federal .gov websites.

Google Search Central

Resources to improve site search rankings.

HTTP Strict Transport Security (HSTS)

Privacy and integrity protection.

Hypertext Transfer Protocol Secure (HTTPS)

Privacy and integrity protection.

Memorandum (M-23-22)

Delivering a digital-first public experience.

OWASP Top 10

Helps make websites and apps safer.

RFC 9116

A file format to aid in security vulnerability disclosure.

X-Content-Type-Options

Stops browsers from guessing content types.

security.txt

File with website security contact info.

We can help

ScanGov offers government digital experience training and support.

Learn more

Supporters

Thank you to these organizations for supporting Project ScanGov:

ScanGov

Government. Digital. Experience.

Get ScanGov