Is cisa.gov safe to use as a vendor?

cisa.gov scored 80/100 on LynxRadar's security posture assessment. The domain meets baseline security requirements. 8 checks passed, 0 warnings, 0 critical issues across 10 passive checks including TLS, DMARC, security headers, breaches, and CVEs.

What TLS version does cisa.gov use?

cisa.gov uses TLSv1.3 with TLS_AES_256_GCM_SHA384. TLSv1.3 negotiated with TLS_AES_256_GCM_SHA384 (256-bit). Strong configuration with no deprecated protocols or weak ciphers detected.

Does cisa.gov have DMARC configured?

Yes. cisa.gov's DMARC policy is set to 'reject'. SPF record: yes. Strengths: DMARC policy set to reject (strongest); SPF record present with hard-fail (-all); DKIM configured (selectors: selector1).

Does cisa.gov have SPF configured?

Yes. SPF record found: v=spf1 include:spf.dhs.gov include:spf.protection.outlook.com include:spf-003767...

Does cisa.gov have security headers configured?

cisa.gov has 0 of 0 recommended security headers. All recommended headers present.

Does cisa.gov use HSTS?

No. Could not fetch https://cisa.gov — connection failed or timed out.

Has cisa.gov been involved in a data breach?

No known breaches found. No known breaches found in public disclosure databases.

Does cisa.gov have known CVE vulnerabilities?

No server software versions detected in HTTP response headers. This is good practice (version hiding) but means CVE exposure cannot be assessed from external signals alone.

Is cisa.gov's SSL certificate valid?

Yes. Strengths: Certificate valid, 219 days remaining; Issued by DigiCert Inc.

Does cisa.gov have DNSSEC enabled?

Yes. Strengths: 3 nameservers configured (blue.foundationdns.org., blue.foundationdns.com., blue.foundationdns.net.); 2 MX records present; DNSSEC enabled; Zone transfers properly restricted.

cisa.gov Security Report — Grade B- (80/100)

B-

Pass · 80/100

Demonstrates a strong security posture. Positive signals: TLS Configuration, Known Breaches, and DMARC / Email Security all passed. No remediation needed — maintain current configuration.

Trust Score Trend

→ No change 1 scan · Last scanned February 15, 2026

Your rating Industry average

Score

100 75 50 25 0

B-

cisa.gov

80/100

Compliance & Certifications

Not yet verified

FedRAMP

ATO not on file

3rd party · 3PAO

Pro subscribers only

NIST 800-53

Not on file

Federal control baseline

Pro subscribers only

Incident History

None in 12 months

March 2026

ChatGPT data exposure

1 source

Resolved

Pro subscribers only

April 2023 – Feb 2026

ChatGPT data exposure

1 source

Resolved

Pro subscribers only

Security Posture

8 passed

No issues found — great work!

View all 8 passed checks

TLS Configuration

Known Breaches

DMARC / Email Security

MX Records & Mail Provider

DNS Configuration

Certificate Hygiene

CVE Exposure

Subprocessors & Tech Stack

Company Signals

Claim profile →

Operational risk

Low

11 yrs operating. Well-funded

Lynxradar · Composite signal

Last funding

$40B

Series F · Mar 2025 · SoftBank-led

Crunchbase ↗

Employees

~3,000

+40% YoY growth

LinkedIn ↗

Trust Resources

Claim profile →

Trust Center

trust.cisa.gov ↗

Security page

cisa.gov/security ↗

cisa.gov/privacy ↗

DPA (Data Processing Agreement)

cisa.gov/dpa ↗

Updated recently

Subprocessors List

cisa.gov/policies/subprocessors ↗

Similar companies in Government / Public Sector

Appears in

Claim profile →

SOC 2 Type II certified vendors

847 companies · Updated weekly by LynxRadar

Track

ISO 27001 certified SaaS

312 companies · Updated weekly by LynxRadar

Track

Top AI vendors by trust score

94 companies · LynxRadar ranking

Track

Enterprise-ready SaaS · Trust score A or above

203 companies · LynxRadar ranking

Track