About the resiliency-mapping fleet

This dashboard reads the shared database of three systems that together map the online resiliency of US health-care facilities. All three run unattended on a recurring schedule; the timestamps in the strip at the top of every page show when each last produced data.

1. Facility registry

A permanent registry of US health-care facilities — hospitals, clinics, dialysis centers, nursing homes, pharmacies, and more — built from public federal datasets (such as NPPES and CMS listings), de-duplicated into one record per real-world facility, geocoded, and enriched with census geography, rurality flags, and HHS regions. Facilities carry a tier (0–4) reflecting the criticality of the facility class; a facility that disappears from its sources is deactivated, never deleted.

2. Website discovery (FACURL)

For each active facility, an automated pipeline searches for the facility's real website, scores every candidate against the registry record (name, address, and phone agreement, reachability), and records one outcome per facility:accepted (a confident match), rejected, blocked, orsoft failure. Confidence is a 0–100 score; only accepted websites feed the next stage.

3. DNS delegation health (del-checker)

For every accepted website's DNS zone, a checker audits the delegation chain — nameserver counts and agreement, DNSSEC, SOA consistency, lame delegations, and related failure modes — and produces a 0–100 health score per zone over time. A companion monitor tracks each registrable domain's registration status and expiry date via RDAP/WHOIS (registrar organization only; no personal registrant data is stored). See the aggregate domain-registration posture.

Reading the numbers

Everything on the public pages is an aggregate computed from the systems above and refreshed as each of those systems publishes new data: counts, shares, and distributions — never individual facilities, websites, or zones. "No data yet" means a pipeline has not produced that dataset yet, not an error. Percentages are computed against the population shown next to them (active facilities, or zones with a scored check).

Data access

Facility-level and zone-level detail is restricted by design. A finding like "this specific hospital's zone has no DNSSEC and a lame delegation" is useful to defenders — and equally useful as a targeting aid, so element-level data is available only to approved accounts (health-facility operators and vetted researchers), even though the underlying registry sources are public records. Access requests: sign-in and account approval arrive with the private view of this dashboard.