Is gov.uk legit?
This site is highly trusted, demonstrating robust security, comprehensive legal compliance, and a strong digital infrastructure. The only minor point of improvement is the lack of public social media engagement, which is often not a priority for government entities.
Government average: 80/100 · based on 33 sites
Checked: April 21, 2026 at 11:50 AM UTC
Is gov.uk a scam? Here's what we found.
The site demonstrates excellent security practices with a valid SSL certificate, modern TLS 1.3, strong content security policies, and HSTS, ensuring user connections are encrypted and protected. Google Web Risk also confirms no threats.
The domain is well-established, registered before August 1996, and clearly owned by the UK Cabinet Office, establishing clear and reputable ownership for this government entity.
The site's clean bill of health on DNS blacklists and its long-standing domain age contribute to a strong and trusted reputation, as expected for a major government website.
Contact information is readily available, but the absence of social media links slightly reduces its overall public transparency, though this is not uncommon for government services to centralize official comms.
The presence of both privacy policy and terms of service pages indicates a commitment to legal compliance and user data protection, essential for a government website.
The site benefits from a robust DNS setup, efficient page load times, and good email authentication (SPF and DMARC), ensuring reliability and preventing spoofing attempts, although the absence of MX records suggests it doesn't host its own email.
Signals Detected
No structured data markup found
This site is not in the top 1 million most visited websites — this is normal for small or new businesses
This business has no Trustpilot presence — not unusual for smaller or newer companies
Valid certificate, expires in 251 days
Certificate issued by GlobalSign nv-sa
Connection uses TLS 1.3
Resolves to: 2a04:4e42::144, 2a04:4e42:e00::144, 2a04:4e42:400::144, 2a04:4e42:600::144, 2a04:4e42:c00::144, 2a04:4e42:a00::144, 2a04:4e42:800::144, 2a04:4e42:200::144, 151.101.0.144, 151.101.64.144, 151.101.192.144, 151.101.128.144
No MX records found — domain may not handle email
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: nsa.nic.uk., nsb.nic.uk., nsc.nic.uk., nsd.nic.uk., dns1.nic.uk., dns2.nic.uk., dns3.nic.uk., dns4.nic.uk.
robots.txt has 12 directives and references a sitemap
Site maintains a proper sitemap with 35 indexed pages
Site has custom branding and social media metadata
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
X-Frame-Options: SAMEORIGIN
Web server: nginx
No threats detected by Google Web Risk
Domain created before Aug-1996 (before Aug-1996 ago)
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
No social media links found on homepage
Not found on any DNS blacklists
Could not query Wayback Machine
Could not query certificate transparency logs
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.