Let's apply the C.A.A.R.P. test to a government site first.
Currency: Many government sites are routinely reviewed. This information is often found at the top or very bottom of a page. Please review the screenshot below. The website was created back in 2016, but it was reviewed and updated on March 26, 2025.
Authority: Who is behind this website? We know from the URL that it is verified as a government website, and we see in the screenshot above that it comes from the National Institute of Standards and Technology under the U.S. Department of Commerce. We can consider this as an authoritative source. Government websites employ experts in the field, are supposed to present information free from bias, and exist to provide needed information to taxpayers and organizations.
Accuracy: Who reviewed the site and how? At the very bottom of the page on the right, there is a link to Scientific Integrity. When you click on that link, it takes you to a page that thoroughly describes the information creation and evaluation process in NIST.
Relevancy: This is unique to your information needs. A resource that is relevant to you may not work for one of your classmates. A relevant website should answer your unique questions.
Purpose: All government websites have the purpose of informing citizens and should be unbiased. All websites are different, but some features that make this page particularly credible include
Next, we'll apply the C.A.A.R.P. test to a company website. We'll use DigitalOcean as an example site, but this guidance applies to virtually all company websites.
Currency: Many company websites do not identify when they were last updated. There is a copyright notice for the current year, but that's it. In the absence of this type of information, check the company's social media accounts and blog to see if there are recent updates. Another option is to look for a news section and check the dates. The blog and several social media sites have recent activity, so we can assume DigitalOcean's main site is current. A website that is obviously out of date is a red flag.
Authority: You must evaluate the company as a whole. The first step is to look for who is behind the company. On this site, a Leadership link at the bottom of the page takes you to bios of the executive management team and the board of directors. They have relevant educational degrees and tech industry work histories. The next step is to look at the authority of the company itself. What do reviews of the company's products generally say? Would you feel comfortable trusting this company with your data? Remember to search for reviews on other sites rather than using the testimonials on the company's own website.
Accuracy: Because this is a for-profit company, you will have to evaluate the information presented on their website yourself. It is in a company's best interest to present its products in a positive light. Read the site and look at independent reviews of specific products. Is the customer experience matching what the company says? Can you find any industry information, e.g., security standards, that you can review against the products?
Relevance: Will the company's products work with your needs? Are its systems compatible with yours? Does it work on the right scale for what you need? Remember that a perfect solution for another company may be a disaster for your company if you have different needs.
Purpose: All companies want to sell you their products, so you can assume there is some bias in the way they present information. How much jargon is being used? Can you test the website's claims, or is the language positive but vague? A website that uses a lot of emotional language is often a red flag.