GSA Site Scanning
DeveloperUSapi.gsa.gov
Technology and accessibility scans of every public US federal government website.
Capabilities (3)
GET /v1/data/gsa-site-scanning/analysis1 creditReturns aggregate counts over the same filters the websites capability accepts, without the records: total matching sites, how many distinct final base domains they span, how many distinct agencies, and the scanning engine's own queue depths (waiting, active, delayed, failed). A four-key object of about 130 bytes, whatever the filter matches.
GET /v1/data/gsa-site-scanning/website1 creditReturns the single most recent scan record for one seeded target URL, as a bare object with no pagination envelope: owning agency, bureau and branch, final resolved URL and status code, DAP detection with pageview and visit counts, detected CMS, login provider, tooling and third-party service domains, USWDS class usage, robots.txt and sitemap.xml results, HTTPS enforcement and HSTS, accessibility violations, Core Web Vitals, and the status of every sub-scan. An unmatched hostname returns HTTP 404 with a JSON body, not an empty object.
GET /v1/data/gsa-site-scanning/websites1 creditReturns one page of scanned US federal government websites as {items, meta, links}, where meta carries totalItems/itemCount/itemsPerPage/totalPages/currentPage and links carries ready-made first/previous/next/last URLs. Each item is the site's full 105-field scan record: seeded and final URL, owning agency, bureau and branch, liveness, redirect and HTTP status, DAP analytics detection with pageview and visit counts, detected CMS, login provider, tooling and third-party service domains, USWDS design-system usage, robots.txt and sitemap.xml findings, HTTPS enforcement and HSTS, accessibility violations, Core Web Vitals, and the status of every sub-scan.
Licence
Work of the United States federal government, not subject to copyright in the US (17 U.S.C. 105). Free to use, including commercially, with the agency named as the source.
https://open.gsa.gov/api/site-scanning-api/Attribution
Display this wherever you show the data. It arrives on every response as provenance.attribution_text.
Source: US General Services Administration
Cache: up to 86400s
