How we found your website

We reviewed the public homepages of about 30,000 government, school, college and transit websites, using public lists of .gov domains and public school and college directories. For each site we looked only at what any web browser sees, including the software version a page announces about itself.

We didn't log in, test, scan for vulnerabilities, or try to access anything that isn't public.

We email each organization once, with up to two short follow-ups. Reply "no thanks" and we'll never contact you again.

Found a security issue on our own site? See Security.