By vendor · Agenda / livestream / municipal web
Granicus — agenda management, public records, web
Granicus runs council agendas, livestreams, and many municipal websites. A Granicus incident is almost always public-facing — and so is the failure mode.
Reporting path
- Open a P1 Support case at the Granicus support portal and explicitly flag Security.
- Phone the Granicus 24/7 support line — listed in your customer welcome packet.
- Email Granicus's trust & safety inbox in writing.
- If a livestream or council page has been altered, notify residents through a clean, off-Granicus channel before anything else.
Contract clauses to read first
- Confirm the SLA includes a security incident notification window (not just uptime).
- Confirm the data-portability clause — agendas, minutes, video archives must be exportable.
- Confirm WCAG / Section 508 / AODA conformance language — Granicus's products are required to meet this in most municipal contracts.
Known incident pattern
Granicus has been targeted by credential-stuffing attacks against customer admin portals. The largest individual customer impacts have been from compromised customer credentials, not Granicus itself.
Descriptive reference only. Granicus is a trademark of its owner. No affiliation or endorsement is implied.