Before you file a public records request or email a city council member, there is a five-minute first step: type a postal code into a search box and count the pins. A publicly available map now shows the installed positions of Flock automated plate readers, which lets residents in the US see which intersections, parking-lot entrances and school zones near them may already hold a device. Two caveats come with those pins — the underlying list was compiled by an outsider rather than the company, and it reflects one moment in time, not a live registry.
The most common misunderstanding is that these cameras wait for a suspect. They do not. A Flock unit photographs each vehicle that drives past it, regardless of whether anyone in the car is suspected of anything, and the record is created whether or not the plate is readable.
A single pass can generate:
Those entries are uploaded to Flock's cloud, where police departments can query them and pass results to other agencies across city and state lines. The scale is easy to understate: the company says its network handles more than 20 billion vehicle reads a month across 49 states.
Access that broad creates room for abuse that is anything but technical. A Washington Post review found at least 50 officers accused or charged with misusing license plate readers, frequently to follow people connected to their personal lives, and Flock's system was involved in 46 of those cases. MyTechDailyNews put two questions directly to Flock's chief executive, Garrett Langley: how the company responds when misuse surfaces, and who actually controls the data its devices collect.
The locations plotted on the map trace back to independent research by cybersecurity researcher Joshua Michael. The map itself does not host or distribute that dataset; it displays what the research recovered.
The sequence matters. In November 2025, Michael found that Flock's servers had left an access token publicly exposed — one that anyone could obtain without logging in. He reported the problem to Flock, then published his findings along with his own map in December. The inventory he assembled lists more than 170,000 cameras and over 130,000 other Flock devices.
| Figure | Where it comes from | What it represents |
|---|---|---|
| around 120,000 cameras | Flock's own public statements | the number most reporting repeats |
| more than 170,000 cameras | Michael's inventory | camera positions pulled from Flock's own systems through the exposed token |
| over 130,000 other Flock devices | the same inventory | non-camera hardware logged alongside the cameras |
| about 40% higher | comparison of the two camera counts | the gap between the figure in circulation and the retrieved list |
It is an automated license plate reader made by Flock Safety. It photographs passing vehicles, reads their plates, and files where and when each car was seen. Police departments and other customers can then search those stored records.
Enter a ZIP code in the search bar above the map. The view jumps to that area and displays every camera in the dataset there. If you prefer to browse, zoom and drag across any neighborhood in the US.
Joshua Michael, a security researcher, retrieved the inventory from Flock's systems using an access token the company had left exposed. Flock was told about the issue before the findings and the map were released.
Yes. Vehicle Fingerprint records make, model, color and distinctive surface details, which is what allows a car to be located without a clean plate image.
Use it as a starting point, not a final answer. It captures a single December 2025 moment, and a missing pin does not prove no device is operating nearby.
For everyday readers, the value of this tool is simple: it turns an invisible network into something you can look up in seconds and then question with specifics. The map will not tell you how long a record is stored or who in your police department can read it, and that is exactly the kind of follow-up it is best suited to start.