52
Fail

myinfo.gov.sg

Security posture assessment · Scanned February 15, 2026

Findings
3 · 2 · 0
Checks
8 passive

myinfo.gov.sg scored 52/100 and does not currently meet the minimum security posture threshold. Multiple configuration gaps were identified that require attention before approval.

Positive signals: Known Breaches, DMARC / Email Security, CVE Exposure all passed.

2 action items identified, including 0 critical. The issues are configuration gaps, not architectural problems. A focused remediation effort of 2–5 days could address all findings.

Ordered by priority · 2 items
1
Enable DNSSEC on your domain
Effort: 1–3 days (depends on registrar)   Owner: DNS administrator / domain registrar
medium
Without DNSSEC, DNS responses for myinfo.gov.sg can be spoofed, potentially redirecting users to malicious sites. This requires coordination with your domain registrar to publish DS records.
Compliance Impact
NIST 800-53SC-20
Secure name/address resolution service
Remediation Steps
1
Check if your DNS provider supports DNSSEC (Cloudflare, Route53, etc.)
2
Enable DNSSEC signing in your DNS provider dashboard
3
Add the DS record to your registrar for .sg TLD
4
Verify: dig +dnssec myinfo.gov.sg
2
Review certificate configuration
Effort: 1–2 hours   Owner: Infrastructure / DevOps
low
Certificate issues found for myinfo.gov.sg: . These are operational hygiene items, not immediate security risks.
Remediation Steps
1
Consolidate certificate issuance to 1–2 trusted CAs
DNS Configuration
Warning
Certificate Hygiene
Warning
TLS Configuration
Error
HSTS Header
Error
Security Headers
Error
Known Breaches
Healthy
DMARC / Email Security
Healthy
CVE Exposure
Healthy