92
Pass

mot.gov.sg

Security posture assessment · Scanned February 15, 2026

Findings
7 · 1 · 0
Checks
8 passive

mot.gov.sg scored 92/100, demonstrating a strong security posture. Minor improvements are noted below.

Positive signals: TLS Configuration, Known Breaches, HSTS Header all passed.

1 action item identified, including 0 critical. The issues are configuration gaps, not architectural problems. A focused remediation effort of 2–5 days could address all findings.

Ordered by priority · 1 items
1
Strengthen email authentication configuration
Effort: 2–4 hours   Owner: IT / DNS administrator
high
Email authentication is partially configured for mot.gov.sg but has gaps. Actions needed: configure DKIM. Until DMARC enforcement is active, spoofed emails may still reach recipients.
Compliance Impact
NIST CSFPR.AC-7
Email authentication is a required access control
Remediation Steps
1
Configure DKIM and publish public key in DNS
2
Verify with: nslookup -type=txt _dmarc.mot.gov.sg
DMARC / Email Security
Warning
TLS Configuration
Healthy
HSTS Header
Healthy
Security Headers
Healthy
Known Breaches
Healthy
CVE Exposure
Healthy
DNS Configuration
Healthy
Certificate Hygiene
Healthy