Government Email Security: Only 40% of City and County .gov Domains Block Spoofed Mail; Federal Is at 88%
Government email security looks very different outside Washington. As of November 11, 2026, we checked public DNS for all 15,485 live city, county, state, tribal and federal .gov domains in CISA’s registry: only 39.6% of the 10,736 city and county domains that receive email enforce DMARC, the setting that stops impostors sending mail in their name. Federal: 87.7%.
- 39.6% of city and county .gov domains that receive email (4,255 of 10,736) tell receiving servers to quarantine or reject mail that fails authentication. Federal domains, where executive-branch agencies have been bound by CISA’s Binding Operational Directive 18-01 since October 2017, are at 87.7%.
- 14.9% of local mail domains use the strictest policy, p=reject, against 83.5% of federal mail domains.
- 6,481 city and county mail domains have no enforcing policy: 33.6% of local mail domains publish no valid DMARC record and 26.8% publish p=none, which only monitors.
- State and territory government domains are about level with the local rate: 42.3% of 697 state mail domains enforce DMARC.
- DNSSEC shows the widest gap: 84.5% of federal .gov domains are signed, against 6.6% of city and county domains.
- Among states with at least 20 local mail domains, enforcement is highest in Florida (61%), Idaho (58%), Oregon (52%) and lowest in Michigan (26%), Alaska (26%), Mississippi (27%).
- 2,066 of 3,144 US counties have a county .gov domain in use that we could match; 32.8% of Americans live in a county where every such domain enforces DMARC.
Federal vs local: where the funnel narrows
Each bar is a share of domains that receive email (have an MX record). Hover for counts. Scan of November 11, 2026.
The gap is 27 points at the first step and widens to 48 points at enforcement. 93% of federal and 66% of city and county mail domains publish some DMARC record, but a record set to p=none changes nothing for the recipient. Federal agencies were ordered by BOD 18-01 to reach p=reject on every second-level domain by October 2018 and to send aggregate reports to CISA; 457 of 587 federal mail domains still list CISA’s reporting address. No such order covers cities and counties, and 15% of their mail domains reach p=reject.
Government email security by state
Share of City and County .gov domains that receive email and publish DMARC p=quarantine or p=reject, by state. Hover a tile for the count.
Among the 48 states with at least 20 local mail domains, the enforcement rate runs from 26% in Michigan to 61% in Florida. The table gives every state and DC, with the counts behind each percentage so a reader can see how many domains a figure rests on.
| State | Local .gov domains | Receive mail | DMARC record | Enforcing | p=reject | Reports (rua) | SPF -all | DNSSEC | State agency domains enforcing |
|---|---|---|---|---|---|---|---|---|---|
| Alabama | 209 | 180 | 54% | 36% | 7% | 36% | 57% | 9% | 43% of 23 |
| Alaska | 35 | 34 | 50% | 26% | 15% | 38% | 65% | 14% | 25% of 4 |
| Arizona | 114 | 97 | 72% | 41% | 19% | 61% | 45% | 6% | 29% of 83 |
| Arkansas | 388 | 356 | 63% | 37% | 12% | 44% | 60% | 14% | 42% of 26 |
| California | 560 | 439 | 72% | 46% | 20% | 60% | 62% | 7% | 0% of 4 |
| Colorado | 171 | 128 | 77% | 45% | 20% | 55% | 55% | 14% | 29% of 24 |
| Connecticut | 166 | 151 | 68% | 44% | 12% | 50% | 55% | 5% | 50% of 4 |
| Delaware | 19 | 14 | 79% | 29% | 0% | 50% | 64% | 0% | 33% of 3 |
| District of Columbia | 0 | 0 | n/a | n/a | n/a | n/a | n/a | n/a | 8% of 13 |
| Florida | 409 | 357 | 78% | 61% | 31% | 62% | 64% | 11% | 66% of 64 |
| Georgia | 334 | 296 | 65% | 36% | 16% | 51% | 60% | 7% | 22% of 9 |
| Hawaii | 9 | 6 | 83% | 67% | 33% | 83% | 50% | 0% | 50% of 2 |
| Idaho | 79 | 62 | 81% | 58% | 21% | 63% | 68% | 8% | 43% of 7 |
| Illinois | 396 | 324 | 69% | 42% | 13% | 52% | 52% | 6% | 62% of 16 |
| Indiana | 128 | 114 | 60% | 28% | 9% | 46% | 65% | 5% | 50% of 4 |
| Iowa | 158 | 135 | 74% | 47% | 16% | 58% | 69% | 8% | 40% of 10 |
| Kansas | 181 | 156 | 59% | 38% | 21% | 41% | 71% | 11% | 24% of 21 |
| Kentucky | 216 | 196 | 55% | 28% | 9% | 33% | 58% | 2% | 25% of 4 |
| Louisiana | 94 | 76 | 57% | 37% | 18% | 39% | 62% | 10% | 40% of 10 |
| Maine | 129 | 115 | 81% | 38% | 11% | 52% | 44% | 4% | 50% of 2 |
| Maryland | 108 | 93 | 67% | 33% | 13% | 42% | 65% | 5% | 47% of 15 |
| Massachusetts | 323 | 300 | 72% | 42% | 15% | 54% | 58% | 4% | 27% of 15 |
| Michigan | 589 | 525 | 62% | 26% | 9% | 35% | 48% | 5% | 67% of 12 |
| Minnesota | 581 | 433 | 70% | 38% | 11% | 38% | 58% | 6% | 71% of 7 |
| Mississippi | 126 | 112 | 44% | 27% | 9% | 30% | 65% | 3% | 0% of 1 |
| Missouri | 334 | 298 | 64% | 38% | 10% | 47% | 63% | 6% | 0% of 2 |
| Montana | 99 | 85 | 55% | 39% | 15% | 44% | 72% | 4% | 30% of 10 |
| Nebraska | 139 | 125 | 65% | 46% | 17% | 34% | 76% | 4% | 71% of 7 |
| Nevada | 32 | 27 | 78% | 37% | 22% | 67% | 56% | 16% | 80% of 5 |
| New Hampshire | 202 | 194 | 76% | 51% | 21% | 37% | 74% | 4% | 0% of 2 |
| New Jersey | 240 | 206 | 66% | 33% | 13% | 47% | 61% | 5% | 60% of 30 |
| New Mexico | 79 | 74 | 73% | 41% | 15% | 59% | 66% | 5% | 36% of 11 |
| New York | 1,305 | 1,078 | 64% | 39% | 15% | 41% | 60% | 4% | 44% of 9 |
| North Carolina | 305 | 274 | 73% | 41% | 19% | 56% | 62% | 8% | 71% of 35 |
| North Dakota | 43 | 27 | 70% | 33% | 19% | 56% | 63% | 7% | 0% of 7 |
| Ohio | 587 | 496 | 68% | 38% | 14% | 49% | 56% | 10% | 76% of 29 |
| Oklahoma | 213 | 201 | 68% | 39% | 8% | 57% | 63% | 23% | 30% of 10 |
| Oregon | 176 | 155 | 75% | 52% | 20% | 57% | 68% | 6% | 44% of 9 |
| Pennsylvania | 345 | 310 | 60% | 29% | 11% | 34% | 62% | 3% | 30% of 10 |
| Rhode Island | 49 | 44 | 66% | 43% | 18% | 50% | 70% | 6% | 25% of 8 |
| South Carolina | 120 | 102 | 57% | 29% | 12% | 45% | 61% | 1% | 41% of 17 |
| South Dakota | 51 | 43 | 74% | 44% | 9% | 65% | 79% | 10% | 33% of 3 |
| Tennessee | 282 | 254 | 61% | 31% | 13% | 42% | 57% | 5% | 25% of 12 |
| Texas | 644 | 530 | 70% | 48% | 18% | 56% | 69% | 6% | 37% of 19 |
| Utah | 249 | 223 | 63% | 39% | 15% | 48% | 51% | 4% | 67% of 6 |
| Vermont | 90 | 78 | 68% | 37% | 12% | 42% | 74% | 4% | 20% of 5 |
| Virginia | 211 | 168 | 72% | 42% | 23% | 52% | 66% | 9% | 33% of 6 |
| Washington | 193 | 170 | 76% | 42% | 16% | 58% | 65% | 7% | 0% of 2 |
| West Virginia | 115 | 99 | 59% | 29% | 12% | 33% | 69% | 3% | 48% of 21 |
| Wisconsin | 778 | 717 | 63% | 44% | 14% | 48% | 64% | 5% | 23% of 13 |
| Wyoming | 56 | 54 | 61% | 43% | 17% | 59% | 52% | 11% | 0% of 11 |
Local means City and County domains in CISA’s registry with live DNS. DMARC, enforcement, p=reject, reports and SPF are shares of the domains that receive mail; DNSSEC is a share of all live local domains. The last column covers State or territory domains that receive mail. Click a header to sort. States with fewer than 20 local mail domains: DC, DE, HI; read their percentages with care.
Seven controls by type of government
DMARC, enforcement, p=reject, reports and SPF are shares of mail domains; DNSSEC and security contact are shares of all live domains in each group. Security contact means the registry lists a public security email for the domain.
| Government type | Live domains | Receive mail | DMARC record | Enforcing | p=reject | Reports (rua) | SPF -all | DNSSEC | Enforcing, all live domains |
|---|---|---|---|---|---|---|---|---|---|
| Federal | 1,295 | 587 | 93.4% | 87.7% | 83.5% | 89.4% | 70.2% | 84.5% | 85.2% |
| State or territory | 1,444 | 697 | 71.2% | 42.3% | 22.4% | 59.5% | 45.2% | 14.2% | 24.0% |
| County | 3,019 | 2,507 | 72.2% | 46.0% | 19.3% | 56.8% | 62.1% | 9.2% | 40.7% |
| City | 9,445 | 8,229 | 64.7% | 37.7% | 13.5% | 44.2% | 60.5% | 5.7% | 35.0% |
| Tribal | 282 | 253 | 71.1% | 43.1% | 19.8% | 59.3% | 62.5% | 3.2% | 40.4% |
| City and county combined | 12,464 | 10,736 | 66.4% | 39.6% | 14.9% | 47.2% | 60.9% | 6.6% | 36.4% |
Federal domains fall under two rules that local ones do not. BOD 18-01 covers DMARC and SPF, and OMB memo M-08-23 (August 22, 2008) told agencies to sign all their .gov domains with DNSSEC by December 2009. That shows in the DNSSEC column: 84% of federal domains are signed, against 14% of state and 7% of city and county domains. SPF is closer: 70% of federal and 61% of local mail domains end their SPF record in a hard fail (-all).
Does the mail provider matter?
City and County .gov domains that receive mail, grouped by the provider in the lowest-preference MX record. A gateway is a filtering service (for example Proofpoint, Mimecast or Barracuda) in front of a mailbox platform; Microsoft 365 behind a gateway is inferred from SPF includes.
Microsoft 365 runs mail for 70% of local .gov mail domains when gateways in front of it are counted, and Google Workspace for 9%. Microsoft 365 domains enforce DMARC at 41%, Google Workspace at 31% and self-hosted or government-run mail servers at 22%. The Microsoft 365 market share census found the same Microsoft lead across all .gov domains. The provider does not set the policy; the domain owner, or the IT contractor who manages its DNS, does.
How many residents are covered: a county view
Each of the 3,144 counties and county equivalents in the Census Bureau’s Vintage 2025 estimates, weighted by population and grouped by the DMARC status of the County .gov domains we could match to it.
We matched 2,978 of 3,064 County-type .gov domains to 2,066 of the 3,144 Census counties and county equivalents (66%). The other 1,078 counties, home to 20.5% of residents, have no live county .gov domain we could match (another 86 County-type domains could not be tied to a single county); they use .us, .org, .com or .net addresses, or none. 32.8% of US residents live in a county where every county .gov domain that receives mail enforces DMARC, 14.9% where some do and 31.8% where none do.
| County population (2025) | Counties | With a county .gov domain | Their mail domains | DMARC record | Enforcing | DNSSEC |
|---|---|---|---|---|---|---|
| 1,000,000+ | 50 | 43 (86%) | 88 | 82% | 55% | 9% |
| 250,000 to 999,999 | 244 | 198 (81%) | 304 | 82% | 61% | 10% |
| 50,000 to 249,999 | 720 | 547 (76%) | 653 | 79% | 51% | 11% |
| 10,000 to 49,999 | 1,393 | 900 (65%) | 1,009 | 69% | 42% | 9% |
| Under 10,000 | 737 | 378 (51%) | 385 | 61% | 37% | 5% |
The smallest counties lag: 43 of the 50 counties with a million or more residents have a county .gov domain in use, and 55% of their mail domains enforce DMARC; among counties under 10,000 people it is 378 of 737 and 37%.
Check your own domain
Type any domain to see what a receiving mail server sees. The lookup runs in your browser against Google Public DNS; nothing is stored.
Or from a terminal (macOS, Linux):
dig +short TXT _dmarc.yourtown.govdig +short TXT yourtown.gov | grep spf1dig +short DS yourtown.gov
On Windows: nslookup -type=TXT _dmarc.yourtown.gov Look for p=reject or p=quarantine plus a rua= address. Domains that never send mail should publish v=DMARC1; p=reject; and an SPF record of v=spf1 -all.
What this means for MSPs and government IT teams
- Start with reporting, then enforce. Publish
p=nonewith arua=address, read two to four weeks of aggregate reports to find every service that sends as the domain (utility billing, permit portals, agenda software, newsletters), fix SPF and DKIM for each, then move to quarantine and reject. 47% of local mail domains request reports today, against 89% of federal ones. - Lock down domains that never send mail. Parked, vanity and election-information domains should carry
v=spf1 -allandp=reject. That is what BOD 18-01 requires of federal second-level domains, and it takes two DNS records. - Treat SPF as a supporting control. 61% of local mail domains use a hard fail; SPF alone does not protect the visible From address, which is why DMARC alignment matters.
- Sign the zone. With 7% of local .gov domains signed, DNSSEC is the largest gap against federal practice. Most managed DNS hosts can sign a zone and publish the DS record through the .gov registrar.
- List a security contact. 56% of local .gov domains list a public security email in the registry, against 90% of federal domains. get.gov asks every domain to add one.
Spoofed government email is a fraud tool: our phishing statistics report tracks the losses, and the DMARC adoption statistics scan shows the same gap between large and small private organizations.
Frequently asked questions
Can .gov emails be spoofed?
Yes, unless the domain enforces DMARC. A sender can put any address in the From line; DMARC lets the domain owner tell receiving servers to quarantine or reject mail that fails SPF and DKIM checks. In our November 11, 2026 scan, 60% of city and county .gov mail domains (6,481) had no enforcing policy, against 12% of federal mail domains.
Is DMARC mandatory for government?
For federal executive agencies, yes: BOD 18-01 (October 16, 2017) required p=reject on all second-level domains within one year. No federal rule requires it for cities, counties or states; the .gov registrar (get.gov) recommends it. 88% of federal and 40% of city and county mail domains enforce it today.
What percentage of government domains use DMARC?
Counting any DMARC record, 93.4% of federal, 71.2% of state, 72.2% of county, 64.7% of city and 71.1% of tribal .gov mail domains publish one. Enforcement (quarantine or reject) is lower: 87.7%, 42.3%, 46.0%, 37.7% and 43.1%.
Why is p=none not enough?
p=none asks receivers to report failures but deliver the mail anyway, so spoofed messages still reach inboxes. 26.8% of local .gov mail domains stop at p=none. CISA’s BOD 18-01 guidance calls it a temporary setting on the way to quarantine or reject.
Does using Microsoft 365 or Google make a government domain safer?
Not by itself. Among city and county mail domains, 41% of those on Microsoft 365 and 31% of those on Google Workspace enforce DMARC; 22% of self-hosted ones do. DMARC is a DNS record the government sets, not a feature the provider switches on.
What does DMARC stand for?
Domain-based Message Authentication, Reporting and Conformance, defined in RFC 7489. It is a TXT record at _dmarc.
Free to cite and republish with a link. The CSV holds aggregates by government type, state, mail provider and county size. It does not list individual domains, and this report names no government that lacks DMARC.
Methodology
Domains. CISA’s .gov registry file current-full.csv (github.com/cisagov/dotgov-data, CC0), retrieved November 11, 2026: 15,786 domains of type City, County, State or territory, Tribal and Federal (Executive, Legislative, Judicial). Special district, school district and interstate domains were not scanned. A domain counts as live if it has name servers or an MX record; 299 were not live or could not be resolved and are excluded, leaving 15,485.
Lookups. Between November 11 and November 11, 2026 (UTC) we queried MX, the apex TXT record (SPF), the TXT record at _dmarc.<domain> and the DS record at the parent zone through Google Public DNS over HTTPS, at most 5 queries at a time, with failed lookups repeated through Quad9. Where the validating resolver returned SERVFAIL, one checking-disabled query read the records anyway (a DNSSEC validation failure). These are passive, public lookups only: no mail was sent, and no server was probed or contacted directly.
Definitions. Receives mail: at least one MX host that is not null. DMARC record: exactly one valid v=DMARC1 record with p=none, quarantine or reject; two or more records count as invalid. Enforcing: p=quarantine or p=reject (any pct value; 141 local mail domains use pct below 100). SPF hard fail: a single SPF record ending in -all. DNSSEC signed: a DS record exists in .gov for the domain. Provider: the lowest-preference MX host, matched to known suffixes; filtering gateways are attributed to Microsoft 365 or Google only when the SPF record or its includes name that platform.
Counties. County-type domains were matched to Census counties by the county name in the registry’s organization field, then by a unique county name inside the domain name, within the same state. Towns, townships and boroughs filed under County were left unmatched. Populations are Vintage 2025 July 1 estimates.
Limitations. DNS records can change daily. Domain counts are not government counts: one city can hold several .gov domains, and most local governments do not use .gov. DMARC enforcement shows the published policy, not whether every receiver applies it. Not advice.
Cite as:The Uptime Report. "Government Email Security: Only 40% of City and County .gov Domains Block Spoofed Mail; Federal Is at 88%." November 2026. https://theuptimereport.com/government-email-security-dmarc-by-state/
References
- CISA, dotgov-data: current-full.csv. Accessed November 2026.
- CISA, Binding Operational Directive 18-01: Enhance Email and Web Security. Accessed November 2026.
- OMB Memorandum M-08-23, Securing the Federal Government’s Domain Name System Infrastructure (PDF). Accessed November 2026.
- get.gov, Domain security best practices. Accessed November 2026.
- US Census Bureau, County Population Totals, Vintage 2025 (co-est2025-alldata.csv). Accessed November 2026.
- California Government Code section 50034. Accessed November 2026.
- RFC 7489, Domain-based Message Authentication, Reporting, and Conformance (DMARC). Accessed November 2026.
- Google Public DNS, JSON API for DNS over HTTPS. Accessed November 2026.
Research library
More original data reports from The Uptime Report. Every report includes its methodology and a free CSV download. Browse all research
Threats and breaches
- AT&T Data Breach Settlement Payout Date
AT&T payout status, tiers, incident history - Microsoft Data Breach History
Microsoft incidents by type, 2020 to 2026 - IC3 Report 2025
IC3 losses, crime types, states per capita - AI Incidents Statistics 2026
AI incidents by year, harm type, company - Cyber Attacks 2026
Every 2026 cyber attack, primary-sourced - WordPress Vulnerabilities
WordPress plugin, theme and core CVEs - Hypervisor Vulnerabilities
Hypervisor CVEs vs exploitation - DMARC Adoption Statistics 2026
DMARC enforcement, 15,000 domains - RMM Vulnerabilities and Remote Access Flaws
RMM and remote access flaws in KEV - Identity Theft Statistics 2026
ID theft per 100K by state and type - Scam Statistics 2026
FTC fraud losses by channel and age - VPN Vulnerabilities by Vendor
VPN gateway KEV and CVEs by vendor - MFA Statistics 2026
MFA methods across 2,571 services - Password Statistics 2026
12,674 passwords tested against HIBP - Ransomware Groups 2026
Most active ransomware groups, ranked - Ransomware Statistics 2026
Leak-site victims by month since 2021 - Malicious npm Packages
Malicious npm packages, day by day - Cybersecurity Statistics 2026
70 sourced stats, every number traced - Zero-Day Statistics
Every tracked zero-day since 2014 - Phishing Statistics 2026
Four phishing measures, one evidence board - Patch Tuesday Statistics 2026
Every Microsoft CVE since 2021 - Disaster Declarations by State
FEMA data for continuity planning - Data Breach Statistics 2026
980 breaches in Have I Been Pwned - Ransomware Initial Access Vectors
CISA advisories coded by entry technique - CVE Statistics 2026
Vulnerabilities published per year, NIST NVD - How Long Do Companies Take to Report a Data Breach?
1,675 Washington notices - Known Exploited Vulnerabilities
The CISA KEV catalog analyzed - Healthcare Data Breach Report 2026
HHS OCR breach portal scorecard - Ransomware Reported to the FBI
Five-year IC3 trend - ConnectWise ScreenConnect Vulnerabilities
ScreenConnect CVEs dated, with version lookup - SonicWall Vulnerabilities 2026
SonicWall CVEs by product line and KEV year - Dental Practice Data Breaches 2026
Every 2026 dental breach on the HHS portal - Apple Zero Days 2026 List
Every Apple-flagged CVE, with KEV dates - Android Zero Days 2026
Android flags by layer, OEM patch lag - Auto Dealership Data Breach 2026 Tracker
Dealer and vendor breaches by state filing - Law Firm Data Breaches 2026
Every law firm AG notice, sized and dated - Accounting Firm Data Breach 2026
CPA breach notices against the tax calendar - Bank DMARC Adoption 2026
DMARC at 4,118 US banks, by size - MSP Email Security
MSP DMARC and SPF, 1,430 domains - Credit Union Cybersecurity Statistics 2026
55% of credit unions skip DMARC - Citrix NetScaler Vulnerabilities 2026
48 NetScaler CVEs, 6 exploited, build checker - Fortinet Vulnerabilities 2026
Every 2026 Fortinet CVE, by product - Okta Vulnerabilities
Okta CVEs and incidents, two ledgers - Veeam Vulnerabilities
Veeam CVEs, fixed builds, KEV flags - Atlassian Confluence Vulnerabilities
Confluence CVEs, KEV and LTS fixes - SolarWinds Vulnerabilities
338 SolarWinds CVEs, 11 exploited in KEV - SAP NetWeaver Vulnerabilities
Every SAP NetWeaver CVE, by Patch Day - N-able Vulnerabilities
N-able CVEs, fixed builds and KEV flags
Infrastructure and uptime
- Data Centers Using Nuclear Power
Every US nuclear deal, by NRC stage - Claude Outage History
934 Claude incidents by model and hour - AMD vs Nvidia Market Share Over Time
AMD vs Nvidia share: Steam and SEC filings - iPhone Market Share by Country 2026
iPhone share in every country - Android Market Share by Version 2026
Android versions and patch status - OpenAI Outage History
1,051 OpenAI incidents, causes coded - Data Center Construction Spending 2026
Data center build spending, Census monthly - Microsoft End of Support 2026
Every 2026 Microsoft support cutoff - Fiber Internet Availability by State 2026
Fiber by state, build pace, top providers - 5G Coverage Map 2026
5G by state and carrier, FCC data - Cell Phone Outage History
FCC outages, DIRS cell sites, 911 fines - Mac Market Share 2026
Mac desktop share by country and version - Browser Market Share 2026
Browser share since 2009, by platform - Microsoft 365 Market Share 2026
Who runs email: Microsoft vs Google - CrowdStrike Outage
July 19, 2024 outage, minute by minute - Data Center Electricity Prices 2026
Power prices vs data center load, by state - Average Internet Bill 2026
Home internet prices by speed and state - Search Engine Market Share 2026
Search share since 2009, by country - ChatGPT Market Share 2026
AI chatbot referral share, every tracker - Google Cloud Outage History
Google Cloud incidents by product, 2013 on - Azure Outage History
Every Azure PIR, coded by root cause - Data Center Water Usage 2026
Water by site, company and drought - AI Energy Consumption 2026
Big Tech electricity vs US demand - SSD Prices 2026
NAND price cycle from makers’ filings - RAM Prices 2026
DRAM prices from producers’ filings - Domain Name Statistics 2026
Domains by TLD, renewals, registrars - Linux Market Share 2026
Linux desktop share, every headline traced - GitHub Outages
GitHub incidents by month since 2020 - Cloudflare Outage History
Every Cloudflare outage post-mortem - Starlink Statistics 2026
Satellites, subscribers, coverage, outages - Internet Access Statistics 2026
Home internet gaps by state and group - SQL Server End of Life
SQL Server support countdown + CVEs - Windows 11 Market Share 2026
Windows 10 vs 11 share by country - Cloud Computing Statistics 2026
Hyperscaler revenue and capex, SEC data - AWS Outage History
Every AWS Post-Event Summary since 2011 - Data Centers by State 2026
Sites, jobs, power for every state - Data Center Statistics 2026
Data center power, spending, jobs - 99.9% Uptime
Uptime calculator and 35 real SLAs - Power Outage Statistics by State
Outage hours by state, EIA data - Cost of Downtime
Revenue per hour for 3,001 public companies - Windows Server End of Life
Support dates and CVEs per server version - SQL Server 2016 ESU Cost
ESU cost calculator, every formula - Slack Outage History
1,459 Slack entries, SLA history, ledger - Google Workspace vs Microsoft 365 in US Schools
Google vs Microsoft in 10,591 districts - Block GPTBot
AI crawler blocks across top 10k sites - security.txt Adoption 2026
Who publishes a valid security.txt - Government Website Security 2026
.gov web security scored by state - vSphere 8 End of Support
vSphere 8 dates, exploited flaws by version - Office 2019 End of Life
Office 2019 EOL: who still gets patches - Zoom Outage History
Every Zoom incident since 2015 - Office 2021 End of Life
177 flaws fixed a month after support ended - Exchange Server 2019 End of Life
Exchange 2019 EOL, ESU builds and CVEs - FortiOS 7.0 End of Life
FortiOS 7.0 dates, builds and unfixed flaws
Regulation and disclosure
- Are Ransomware Payments Illegal? Law by Jurisdiction
Who may pay a ransom, by jurisdiction - HIPAA Security Rule Changes 2026
Security Rule status: current vs proposed - FTC Safeguards Rule Breach Notification
500-consumer, 30-day FTC breach duty - Data Center Moratorium by State 2026
Moratoria and bans in every state - State Privacy Laws 2026
23 state privacy laws, compared - State AI Laws 2026
131 state AI laws, dates and penalties - FedRAMP Statistics 2026
FedRAMP authorizations, GSA data - Item 1C Cybersecurity Disclosures
What 600 10-Ks say in Item 1C - CMMC Certification Statistics 2026
CMMC demand vs assessor capacity - Data Brokers List 2026
728 brokers across three state registries - SEC Cybersecurity Incident Disclosures
Every 8-K Item 1.05 filing - HIPAA Enforcement Tracker
Every OCR penalty and settlement - CMMC Level 2 Assessment Cost
CMMC Level 2 cost estimator, DoD figures - Safe Harbor Cybersecurity Laws by State
10 states, 11 laws, framework grid
Workforce and pay
- Intel Layoff Tracker
Every Intel WARN notice, by site and date - Amazon Layoffs by State
Amazon WARN notices, state by state - Oracle Layoffs by State
Oracle WARN notices and restructuring cost - Cloud Architect vs Cloud Engineer Salary
Architect vs engineer pay, H-1B filings - Entry Level DevOps Engineer Salary
Entry level DevOps pay, H-1B filings - Microsoft Layoff History Timeline
Every round dated, 2009 to 2026 - Google Layoffs by Year
Notices, headcount, severance by year - AI Engineer vs ML Engineer Salary
AI vs ML engineer pay, from H-1B filings - Data Engineer Salary by Experience
Data engineer pay by DOL wage level - Most Popular Programming Languages 2026
Language ranks by country, GitHub data - Computer Science Graduates Per Year
CS degrees per year, IPEDS 2011 to 2024 - Data Scientist Salary 2026
Data scientist pay ladder and metros, BLS - Web Developer Salary 2026
Web dev vs software pay by state, BLS - AI at Work Statistics 2026
Worker AI use: ever, weekly, daily, by job - Network Engineer Salary 2026
Network engineer vs admin pay, BLS - IT Manager Salary 2026
IT manager pay by industry, BLS OEWS - Software Engineer Salary 2026
Developer pay by metro, BLS OEWS - H-1B Statistics 2026
H-1B lottery, employers, and wages - AI Layoffs 2026
AI-blamed job cuts, sourced to filings - Help Desk Salary 2026
Help desk hourly pay, BLS OEWS - Cybersecurity Salary 2026
Security pay percentiles, BLS OEWS - Women in Tech Statistics 2026
Women’s share of tech jobs since 2011 - IT Unemployment Rate 2026
Tech vs national jobless rate, monthly - Tech Job Postings 2026
Tech postings vs 2020, by role and country - Tech Layoffs 2026
Tech layoffs from state WARN notices - Remote Work Statistics 2026
Telework by job, industry, and state - Highest Paying Cities for IT Jobs 2026
Metro pay by role, BLS OEWS - The Tech Job Market in 2026
Openings, quits, hires, layoffs - IT Salaries by State 2026
Pay matrix for four IT roles - IT and Cybersecurity Jobs Outlook 2026
BLS employment projections - Salesforce Layoffs by State
Salesforce WARN notices, state by state - Dell Layoffs by Year
Headcount, severance, notices by year - IBM Layoffs by Year
IBM workforce charges against headcount - Meta Layoffs by Year
Meta rounds, sites and headcount by year - IT Director vs IT Manager Salary
IT director vs manager pay, H-1B filings - Penetration Tester Salary Entry Level
Entry level pen test pay, H-1B filings - Site Reliability Engineer vs DevOps Salary
SRE vs DevOps pay, H-1B filings - Solutions Architect vs Software Engineer Salary
Architect vs engineer pay, Level I to IV - Data Engineer vs Data Analyst Salary
Data engineer vs analyst pay, H-1B ledger - Network Engineer vs System Administrator Salary
Network engineer vs sysadmin pay by state - Security Analyst vs Security Engineer Salary
Analyst vs engineer pay, step by step - Cloud Engineer vs DevOps Engineer Salary
Cloud vs DevOps pay by metro, H-1B - Cisco Layoffs by Year
Cisco cuts by year: charges vs staff - Database Administrator vs Data Engineer Salary
DBA vs data engineer pay, reconciled - Penetration Tester vs Security Engineer Salary
Pen tester vs engineer pay: near tie - Help Desk vs Desktop Support Salary
Help desk vs desktop pay, one BLS code
MSP market and spending
- AI Capex 2026
Big Tech capex vs cash flow, SEC data - Cybersecurity Budget 2027
Federal and CISA cyber budgets, benchmarks - Microsoft 365 Price Increase 2026
Every M365 price change, vs inflation - Computer Prices 2026
Computer price indexes and HS 8471 imports - MSP Market Size 2026
Managed services market, built from Census - Small Business AI Adoption 2026
AI use by firm size, sector, state, Census - Cyber Insurance Statistics
Cyber insurance market, NAIC 2015-2024 - IT Spending by Industry
IT investment by industry, BEA - IT Services Industry Growth 2026
Census revenue by service industry - IT Hourly Rates 2026
Hourly IT labor rates, GSA contracts - VoIP Statistics 2026
Business VoIP vs landlines, FCC - MSP Industry Statistics 2026
Jobs, wages, and firms, BLS QCEW - Federal IT Spending 2026
IT services contracts, USAspending - IT Services Firms by State
Census business patterns atlas - How Much Do MSPs Charge Per User?
Published MSP prices, 1,310 websites - VMware Price Increase Broadcom Timeline
Broadcom VMware changes and revenue, dated - Adobe Price Increase History
Every Adobe price change, vs inflation - Atlassian Price Increase History, 2019 to 2026
Every Atlassian price hike, dated - Zoom Price Increase 2026
Every Zoom price change since 2013
Leave a Reply