www.cdc.gov: Security & public interest — week 2026-W39
Security & public interest
Web-standards, metadata, and security checks in the spirit of ScanGov (methodology CC0), run across our scan rather than only the homepage.
Security & domain hygiene 4/8 on the origin
- ✓ Served over HTTPS https:: pass
- ✓ HTTP Strict Transport Security (HSTS): pass
- ✗ Content Security Policy (CSP): fail
- ✗ X-Content-Type-Options: nosniff: fail
- ✗ Clickjacking protection (X-Frame-Options or CSP frame-ancestors): fail
- ✓ Sponsored government TLD (.gov/.mil/.edu) gov: pass
- ✗ Published security.txt: fail
- ✓ Resolves with and without www cdc.gov: pass
Public interest & sustainability signals origin-level checks
Checks run once per week against the domain origin. ✓ = found/green · ✗ = not found · ~ = uncertain.
| Check | Result | URL | Checked |
|---|
| Accessibility statement |
✓ Found (medium confidence) |
www.cdc.gov/other/accessibility.html |
2026-09-22 |
| carbon.txt |
✓ Found · file may be malformed |
cdc.gov/carbon.txt |
2026-09-22 |
| Renewable hosting (Green Web Foundation) |
✗ Not green |
API response |
2026-09-22 |
| XML sitemap |
✗ Not found |
— |
2026-09-22 |
| Human-readable sitemap |
✗ Not found |
— |
2026-09-22 |