Proton Flock Camera Map

What it is

Proton's Flock Camera Map is a ZIP-code search page for locating Flock Safety license plate readers. Proton does not host or distribute the underlying dataset. The locations come from independent research by Joshua Michael, who published the inventory and their own map in December 2025.

How it works

In November 2025, Michael found that Flock's servers publicly exposed an access token that anyone could obtain without logging in. Michael reported the issue to Flock, then published the findings. The page does not say how the token was used to build the inventory, or whether Flock has fixed the exposure.

The inventory lists more than 170,000 cameras and over 130,000 other Flock devices. Flock has publicly cited around 120,000 cameras, so Proton puts the true camera count about 40% higher.

What the cameras record

The summary does not cover these details from the page:

• Each passing vehicle is photographed, whether or not the driver is suspected of anything. The system logs plate, time and location.
• The Vehicle Fingerprint feature also records make, model and color, plus dents and bumper stickers. A car can therefore be found without a readable plate.
• Records go to Flock's cloud, where police can search them and share them with other agencies across city and state lines.
• Flock says its network processes more than 20 billion vehicle reads a month across 49 states.
• A Washington Post review found at least 50 officers accused or charged with misusing license plate readers, often to follow people in their personal lives. Flock's system was involved in 46 of those cases.

What to do

The page's only stated actions are to search the map by ZIP code, decide how to move through your area, and contact municipal leaders. It gives no technical mitigations.

Caveats

• The map depends on one researcher's dataset, and Proton does not verify it.
• The page lists a FAQ item, "Is this Flock camera map complete?", but the fetched text contains no answer.
• Proton says it asked Flock CEO Garrett Langley how the company responds to misuse and who controls the data. The fetched text shows no reply.