UK public sector / Hosting and suppliers

Who runs UK government's websites, from DNS alone.

Who actually runs UK government's websites. Every fact on this page comes from a DNS record the operator published — the CNAME naming a supplier, the addresses a domain resolves to, and the network announcing them. Nothing here connected to a server, requested a path or tested a configuration.

The estate

7,238
domains resolving
of 7,913 probed
6,054
are parish or town councils
77% of the estate
188
distinct networks
5,743 distinct addresses
36%
of identified sites behind a CDN
what is behind them is not visible

Before any of the numbers

77% of the .gov.uk estate is parish, town and community councils.

6,054 of 7,913 domains. They are the reason every naive count on this page would be wrong: there are thousands of them, they are the smallest tier of local government, most have no IT department and several have no staff at all. What they buy is shared hosting, and left in the same pot they outvote every department in the country. Every chart below is split accordingly.

Suppliers: departments, agencies and principal councils

1,859 domains — everything that is not a parish, town or community council.

Domains by identifiable supplier

From the CNAME where there is one - a department's own DNS naming its supplier - and from the announcing network otherwise. Orange bars are CDNs and proxies: they answer for the domain without revealing what is behind it, so those counts are a floor.

CloudflareCloudflare: 272272AWSAWS: 270270FastlyFastly: 11711720i20i: 6060BTBT: 5959CSCCSC: 5656Microsoft AzureMicrosoft Azure: 5555Google CloudGoogle Cloud: 4343Janet / UK academicJanet / UK academic: 3636IONOSIONOS: 3636KrystalKrystal: 3030Virgin MediaVirgin Media: 2929AWS CloudFrontAWS CloudFront: 2727Azure Front DoorAzure Front Door: 2525AkamaiAkamai: 2525Zengenti (Contensis)Zengenti (Contensis): 2525

Suppliers: parish, town and community councils

6,054 domains, and a different market entirely.

Domains by identifiable supplier, smallest tier only

Commodity shared hosting, website builders and one very large CDN. This is what the .gov.uk estate looks like by volume, and almost none of it is what people mean when they say 'government hosting'.

CloudflareCloudflare: 1.9k1.9k20i20i: 1.2k1.2kKrystalKrystal: 673673IONOSIONOS: 221221Google CloudGoogle Cloud: 215215WHG HostingWHG Hosting: 128128Freethought InternetFreethought Internet: 125125CWCSCWCS: 122122WixWix: 121121RackspaceRackspace: 9797OVHOVH: 9292iomartiomart: 7878AWSAWS: 5151DigitalOceanDigitalOcean: 4141Heart InternetHeart Internet: 2727M247M247: 2020

Networks

Domains by announcing network, parish tier excluded

Autonomous system numbers, mapped through Team Cymru's public DNS interface. Colour is where the AS is registered, which is not where the servers are.

AS16509 AMAZON-02AS16509 AMAZON-02: 332332AS13335 CLOUDFLARENETAS13335 CLOUDFLARENET: 231231AS54113 FASTLYAS54113 FASTLY: 109109AS8075 MICROSOFT-CORP-MSN-AS-BLOCAS8075 MICROSOFT-CORP-MSN-AS-BLOC: 100100AS2856 BT-UK-ASAS2856 BT-UK-AS: 6161AS48254 TWENTYIAS48254 TWENTYI: 6060AS19574 CSCAS19574 CSC: 5656AS786 JANETAS786 JANET: 3737AS8560 IONOS-ASAS8560 IONOS-AS: 3636AS5089 NTLAS5089 NTL: 3131AS12488 KRYSTALAS12488 KRYSTAL: 3131AS396982 GOOGLE-CLOUD-PLATFORMAS396982 GOOGLE-CLOUD-PLATFORM: 2828AS60885 zengentiAS60885 zengenti: 2525AS209242 CLOUDFLARESPECTRUMAS209242 CLOUDFLARESPECTRUM: 2121AS15169 GOOGLEAS15169 GOOGLE: 1818AS63949 AKAMAI-LINODE-APAS63949 AKAMAI-LINODE-AP: 1616AS55532 SQUIZ-AS-APAS55532 SQUIZ-AS-AP: 1515AS14061 DIGITALOCEAN-ASNAS14061 DIGITALOCEAN-ASN: 1515
  • UK-registered network
  • registered elsewhere
65% of placed domains sit on five networks.

The top five account for 4,645 of 7,199, and the top twenty for 6,197. Concentration is not automatically a problem — a small number of large, well-run platforms is usually better than three hundred small ones — but it is a fact worth knowing before an outage makes it obvious. Nothing here says whether any two of these networks share a physical dependency.

839 repositories point at a github.io address.

Documentation sites, design systems and prototypes, published on GitHub Pages under 166 distinct subdomains rather than on a service.gov.uk address. They are real government-facing sites, they are outside the .gov.uk estate this page probes, and they are therefore outside whatever monitoring covers it.

The sites government publishes about itself

Separate measurement, separate source: these are the homepages set by hand on 2,572 of 25,626 harvested repositories. Nobody sets that field by accident, so every entry is a site somebody wanted people to find.

Most-referenced websites, by repositories pointing at them

Purple bars are GitHub Pages subdomains.

mrc-ide.github.iomrc-ide.github.io: 124124github.comgithub.com: 9696docs.publishing.service.gov.ukdocs.publishing.service.gov.uk: 7373opendev.orgopendev.org: 5353ministryofjustice.github.ioministryofjustice.github.io: 4848alphagov.github.ioalphagov.github.io: 4141user-guide.analytical-platform.serviceuser-guide.analytical-platform.service: 4141digital-land.github.iodigital-land.github.io: 3636coursesandconferences.wellcomeconnecticoursesandconferences.wellcomeconnecti: 3535bbc.github.iobbc.github.io: 3535nhsengland.github.ionhsengland.github.io: 3434nationalarchives.gov.uknationalarchives.gov.uk: 2929nhsx.github.ionhsx.github.io: 2929onsdigital.github.ioonsdigital.github.io: 2626metoffice.github.iometoffice.github.io: 2323connect.strategyunitwm.nhs.ukconnect.strategyunitwm.nhs.uk: 2323gov.ukgov.uk: 2121npmjs.comnpmjs.com: 2020

GitHub Pages subdomains

839 repositories point at a github.io address.

Documentation sites, design systems and prototypes, published on GitHub Pages under 166 distinct subdomains rather than on a service.gov.uk address. They are real government-facing sites, they are outside the .gov.uk estate this page probes, and they are therefore outside whatever monitoring covers it.

Method: CNAME, A and AS lookups over the same 7,913 .gov.uk domains as the domain security page, run 2026-08-28 in 306s. 6 of those records were carried forward from an earlier sweep, because this run learned nothing about them: two full sweeps close together get throttled, and a throttled lookup is indistinguishable from a domain that does not resolve. A run that loses domains and gains none is being refused, not observing a change, so it is never allowed to overwrite a better answer. Names beginning with an underscore are excluded — _dmarc, _acme-challenge and the hashed names certificate authorities ask for are DNS plumbing rather than websites. AS mapping by Team Cymru, used through its public DNS interface and gratefully. Supplier classification is a rule list over CNAME suffixes and AS names: it identifies what it recognises and says nothing about the rest, which is why "90% on an identifiable supplier" is a statement about the rule list as much as about the estate. See Method.