A-
Trust rating
Excellent · 90/100
Procurement snapshot
No critical findings. The 2 remaining items are configuration gaps, not architectural problems.
Strengths
SOC 2 Type II
GDPR
TLS Configuration
DNS Configuration
Questions to ask
Confirm HSTS is enabled and its max-age setting
Estimated remediation effort: 1–2 days
Based on a passive external scan — supplement with vendor-provided attestations, not a replacement.
Trust Score Trend
→ No change
1 scan · Last scanned February 15, 2026
Your rating
Industry average
Score
100
75
50
25
0
A-
90/100
Compliance & Certifications
SOC 2 Type II
ISO 27001
3rd party · accredited body
Pro subscribers only
GDPR
Incident History
None in 12 months
March 2026
ChatGPT data exposure
1 source
Pro subscribers only
April 2023 – Feb 2026
ChatGPT data exposure
1 source
Pro subscribers only
Security Posture
2 items need attention
8 passed
Increase how long HSTS stays remembered
HSTS Header
This briefly reopens an interception window for returning visitors. HSTS is already turned on for n8n.io, which is good — but it's only set to be remembered for 0 day(s), well under the 6-month minimum that's considered safe. A short duration means a returning visitor's browser "forgets" the HTTPS-only rule quickly, briefly reopening the same risk HSTS is meant to close.
PCI-DSS 4.0Req 6.4.1
Application security header configuration
How to fix this
1Update the existing header to the value below (same place you originally added it). You're using Cloudflare in front of this site — add it there, see https://developers.cloudflare.com/rules/transform/response-header-modification/create-dashboard/.
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2Confirm it's live: search "http header checker" and enter n8n.io.
Report unlocked.
View all 8 passed checks
TLS Configuration
DNS Configuration
Known Breaches
CVE Exposure
DMARC / Email Security
MX Records & Mail Provider
Certificate Hygiene
Subprocessors & Tech Stack
Company Signals
Claim profile →
Operational risk
Low
11 yrs operating. Well-funded
Lynxradar · Composite signal
Last funding
$40B
Series F · Mar 2025 · SoftBank-led
Crunchbase ↗
Employees
~3,000
+40% YoY growth
LinkedIn ↗
Trust Resources
Claim profile →
SafeBase Trust Center
trust.n8n.io
Security page
n8n.io/security ↗
Privacy Policy
n8n.io/privacy ↗
DPA (Data Processing Agreement)
n8n.io/dpa ↗
Updated recently
Subprocessors List
n8n.io/policies/subprocessors ↗
Tech Stack Detected
Subprocessors
Cloudflare
Bot & abuse protection
Cloudflare Turnstile
Similar companies in B2B SaaS / Software
Appears in
Claim profile →
SOC 2 Type II certified vendors
847 companies · Updated weekly by LynxRadar
ISO 27001 certified SaaS
312 companies · Updated weekly by LynxRadar
Top AI vendors by trust score
94 companies · LynxRadar ranking
Enterprise-ready SaaS · Trust score A or above
203 companies · LynxRadar ranking
