The Banyumas Regency government website is based on information on the development of the era in which people need information about matters relating to the Banyumas government or general information in Banyumas Regency. The purpose of this study is to analyze the security holes of the website to be used as a reference for security evaluation on the website. The research methodology used in this web security vulnerability analysis is a qualitative research method consisting of research analysis using the port scan method for port and brute force investigation and SQL Injection for penetration testing. The software for analysis is nmap and hydra. The results of this study indicate the level of security of the Banyumas Regency government website against penetration testing with brute force and SQL Injection. The Final Results of this study provides a review and evaluation of the Banyumas Regency government website, so that it can be used as a reference for adding Banyumas district government website.