Is gebiz.gov.sg safe to use as a vendor?

gebiz.gov.sg scored 80/100 on LynxRadar's security posture assessment. The domain meets baseline security requirements. 5 checks passed, 5 warnings, 0 critical issues across 10 passive checks including TLS, DMARC, security headers, breaches, and CVEs.

What TLS version does gebiz.gov.sg use?

gebiz.gov.sg uses TLSv1.3 with TLS_AES_128_GCM_SHA256. TLSv1.3 negotiated with TLS_AES_128_GCM_SHA256 (128-bit). Strong configuration with no deprecated protocols or weak ciphers detected.

Does gebiz.gov.sg have SPF configured?

Yes. SPF record: v=spf1 include:support.gov.sg -all

Does gebiz.gov.sg have security headers configured?

gebiz.gov.sg has 3 of 5 recommended security headers. Present: X-Content-Type-Options, X-Frame-Options, Referrer-Policy. Missing: CSP, Permissions-Policy.

Does gebiz.gov.sg use HSTS?

Yes. HSTS enabled: max-age=31536000 with includeSubDomains and preload. Meets best-practice configuration.

Has gebiz.gov.sg been involved in a data breach?

No known breaches found. No known breaches found in public disclosure databases.

Does gebiz.gov.sg have known CVE vulnerabilities?

No server software versions detected in HTTP response headers. This is good practice (version hiding) but means CVE exposure cannot be assessed from external signals alone.

gebiz.gov.sg Security Report — Grade B- (80/100)

Q: Does gebiz.gov.sg have DMARC configured?

Yes. gebiz.gov.sg's DMARC policy is set to 'reject'. SPF record: yes. Strengths: DMARC policy set to reject (strongest); SPF record present with hard-fail (-all). Issues: No DKIM records found for common selectors (may use non-standard selectors).

Q: Is gebiz.gov.sg's SSL certificate valid?

Issues detected. Strengths: Certificate valid, 150 days remaining; Issued by GlobalSign nv-sa. Issues: Wildcard certificate in use — broader attack surface if compromised.

Q: Does gebiz.gov.sg have DNSSEC enabled?

No. Strengths: 12 nameservers configured (ns12.gdnsec.com., ns12.gdnsdef.com., a2-65.akam.net., a3-67.akam.net.); 4 MX records present; Zone transfers properly restricted. Issues: DNSSEC not configured — DNS responses can be spoofed.

B-

Trust rating

Good · 80/100

Procurement snapshot

No critical findings. The 4 remaining items are configuration gaps, not architectural problems.

Strengths

MX Records & Mail Provider

Known Breaches

TLS Configuration

HSTS Header

Questions to ask

Confirm DNSSEC rollout timeline

Estimated remediation effort: 1–2 days

Based on a passive external scan — supplement with vendor-provided attestations, not a replacement.

Trust Score Trend

→ No change 1 scan · Last scanned February 15, 2026

Score

100 75 50 25 0

B-

gebiz.gov.sg

80/100

Compliance & Certifications

Not yet verified

SOC 2 Type II

Audit report not on file

3rd party · AICPA

Pro subscribers only

ISO 27001

Certificate not on file

3rd party · accredited body

Pro subscribers only

GDPR

DPA not on file

Self-reported

Pro subscribers only

CCPA

Self-reported

Pro subscribers only

Incident History

None in 12 months

March 2026

ChatGPT data exposure

1 source

Resolved

Pro subscribers only

April 2023 – Feb 2026

ChatGPT data exposure

1 source

Resolved

Pro subscribers only

Security Posture

4 items need attention

5 passed

Finish setting up email authentication

DMARC / Email Security

2–4 hours

Spoofed emails can still reach your customers and partners until this is fully enforced. Email authentication for gebiz.gov.sg is partly set up, but there are gaps: DKIM isn't set up. Until it's fully in place, someone could still send a convincing fake email pretending to be you.

NIST CSFPR.AC-7

Email authentication is a required access control

How to fix this

1Turn on DKIM signing — look for "DKIM" under your email provider's admin/security settings. It will generate a record for you to paste into the same DNS settings above.

2Double-check it's live: search "dmarc record checker" and enter gebiz.gov.sg.

Email authentication guide

Report unlocked.

View all 5 passed checks

MX Records & Mail Provider

Known Breaches

TLS Configuration

HSTS Header

CVE Exposure

Company Signals

Claim profile →

Operational risk

Low

11 yrs operating. Well-funded

Lynxradar · Composite signal

Last funding

$40B

Series F · Mar 2025 · SoftBank-led

Crunchbase ↗

Employees

~3,000

+40% YoY growth

LinkedIn ↗

Trust Resources

Claim profile →

Trust Center

trust.gebiz.gov.sg ↗

Security page

gebiz.gov.sg/security ↗

gebiz.gov.sg/privacy ↗

DPA (Data Processing Agreement)

gebiz.gov.sg/dpa ↗

Updated recently

Subprocessors List

gebiz.gov.sg/policies/subprocessors ↗

Similar companies

Appears in

Claim profile →

SOC 2 Type II certified vendors

847 companies · Updated weekly by LynxRadar

Track

ISO 27001 certified SaaS

312 companies · Updated weekly by LynxRadar

Track

Top AI vendors by trust score

94 companies · LynxRadar ranking

Track

Enterprise-ready SaaS · Trust score A or above

203 companies · LynxRadar ranking

Track

Medium Priority

p=reject

Strengths: DMARC policy set to reject (strongest); SPF record present with hard-fail (-all). Issues: No DKIM records found for common selectors (may use non-standard selectors).

Likelihood: ★★★☆☆

Impact: ★★★☆☆

Not enabled

Strengths: 12 nameservers configured (ns12.gdnsec.com., ns12.gdnsdef.com., a2-65.akam.net., a3-67.akam.net.); 4 MX records present; Zone transfers properly restricted. Issues: DNSSEC not configured — DNS responses can be spoofed.

Likelihood: ★★☆☆☆

Impact: ★★★☆☆

Warn

Could not load gebiz.gov.sg's homepage to detect its e-commerce platform, payment processor, or CDN.

Best Practice

3/5 present

Missing: CSP, Permissions-Policy

Likelihood: ★★☆☆☆

Impact: ★☆☆☆☆

Issues

Strengths: Certificate valid, 150 days remaining; Issued by GlobalSign nv-sa. Issues: Wildcard certificate in use — broader attack surface if compromised.

Likelihood: ★★☆☆☆

Impact: ★★☆☆☆