Site Health Report Card

irs.gov

  • IRS
  • Services · Government
  • Online since 1996
  • Checked Sep 30, 2026

“Surprisingly quick. Unsurprisingly serious.”

Pica's take. The IRS site is lighter and tidier than you would expect, with four outside scripts and proper locks. It loads fine. What you find inside is a separate matter, and Pica does not do taxes.

A93 / 100

Overall health

#39 of 100 sites graded

  • Largest paint

    3.2s

  • Page weight

    3.2 MB

  • Requests

    90

  • Third-party scripts

    4

  • Domain age

    30 yrs

  • Blocklists

    0 / 60

Timed by our own browser

Site Speed

B-
81

Solid, with a quibble or two.

Largest paint (LCP)
3.2s
First paint (FCP)
1.5s
Server response (TTFB)
450 ms
Layout shift (CLS)
0.05
Page weight
3.2 MB
Requests
90

Pica: Three megabytes. Filed on time.

Run the Speed Test on irs.gov

A look from the outside

Security Check

A
95

In excellent shape.

HTTPS everywhere
Yes
HSTS
Preloaded
TLS
1.3
Content Security Policy
Partial
Mixed content
None
Third-party scripts
4

Pica: Four outside scripts. Audited, presumably.

Run the Hack Check on irs.gov

What the internet says about it

Reputation Check

A
95

In excellent shape.

Domain age
30 years
Blocklists
0 of 60
Malware reports
None
Email authentication
DMARC reject
Certificate
Valid · 100 days
Lookalike domains
Plenty

Pica: Thirty years online. Lookalikes multiply every April. Stay alert.

Run the Tracker Check on irs.gov

Is it in a good neighborhood?

Hosting Check

A+
100

In excellent shape.

Network
Akamai · AS20940
Content delivery
Akamai
IPv6
Yes
HTTP/3
Yes
Shared-IP neighbors
Shared CDN, well kept
Flagged neighbors
0

Pica: Akamai. Government-grade parking.

Run the TTFB Check on irs.gov

Want a report card for your site?

Pica runs these checks on your site every day, and only writes when a grade slips. $11.11 a month for 50 sites.

Watch my website

More report cards

Browse all 100

How we grade. Four checks, weighted equally: speed timed by our own browser, a security look from the outside, public reputation signals, and the network the site lives on. A look from the outside is not a server audit.