The USDA Office of Inspector General (OIG) has released an inspection report (Report Number: 50801-0017-12) dated March 17, 2026, concerning the security of web applications within the U.S. Department of Agriculture. The inspection evaluated whether USDA mission areas are effectively identifying and mitigating security vulnerabilities on their publicly accessible web applications and websites. Due to concerns about the risk of circumvention of law, the report's content is withheld from public release.

While the report indicates that USDA is effectively managing these vulnerabilities, the sensitive nature of the findings necessitates a careful review by internal compliance and IT security teams. Although no open recommendations or questioned costs were identified, agencies should ensure their internal processes for identifying and mitigating web application security risks align with the OIG's findings and any unstated best practices derived from the inspection.