Is nrf.gov.sg safe to use as a vendor?

nrf.gov.sg scored 100/100 on LynxRadar's security posture assessment. The domain meets baseline security requirements. 10 checks passed, 0 warnings, 0 critical issues across 10 passive checks including TLS, DMARC, security headers, breaches, and CVEs.

What TLS version does nrf.gov.sg use?

nrf.gov.sg uses TLSv1.3 with TLS_AES_256_GCM_SHA384. TLSv1.3 negotiated with TLS_AES_256_GCM_SHA384 (256-bit). Strong configuration with no deprecated protocols or weak ciphers detected.

Does nrf.gov.sg have DMARC configured?

Yes. nrf.gov.sg's DMARC policy is set to 'reject'. SPF record: yes. Strengths: DMARC policy set to reject (strongest); DMARC pct=100 — policy applies to all mail; Aggregate reports (rua) configured; Forensic reports (ruf) configured; SPF hard-fail (-all) configured; SPF DNS lookup count: 5/10 (within limit); DKIM configured (selectors: k2, k3).

Does nrf.gov.sg have SPF configured?

Yes. SPF record found: v=spf1 include:support.gov.sg include:spf.protection.outlook.com include:mandril...

Does nrf.gov.sg have security headers configured?

nrf.gov.sg has 4 of 5 recommended security headers. Present: CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy. Missing: Permissions-Policy.

Does nrf.gov.sg use HSTS?

Yes. HSTS enabled: max-age=31536000 with includeSubDomains and preload. Meets best-practice configuration.

Has nrf.gov.sg been involved in a data breach?

No known breaches found. No known breaches found in public disclosure databases.

Does nrf.gov.sg have known CVE vulnerabilities?

Detected technologies: AmazonS3, Proxy/CDN. (Proxy/CDN detected but excluded from CVE matching — upstream infrastructure). No version information exposed — CVE matching not possible (this is good practice).

Is nrf.gov.sg's SSL certificate valid?

Yes. Strengths: Certificate valid, 65 days remaining; Issued by Let's Encrypt.

Does nrf.gov.sg have DNSSEC enabled?

Yes. Strengths: 12 nameservers configured (a9-65.akam.net., ns3.gdnsec.com., ns12.gdnsec.com., ns7.gdnsdef.com.); 4 MX records present; DNSSEC enabled; Zone transfers properly restricted.

nrf.gov.sg Security Report — Grade A+ (100/100)

A+

Trust rating

Excellent · 100/100

Procurement snapshot

No open findings from this scan.

Strengths

TLS Configuration

DMARC / Email Security

MX Records & Mail Provider

HSTS Header

Based on a passive external scan — supplement with vendor-provided attestations, not a replacement.

Trust Score Trend

→ No change 1 scan · Last scanned February 15, 2026

Your rating Industry average

Score

100 75 50 25 0

A+

nrf.gov.sg

100/100

Compliance & Certifications

Not yet verified

FedRAMP

ATO not on file

3rd party · 3PAO

NIST 800-53

Not on file

Federal control baseline

Incident History

No public breaches on record

Security Posture

10 passed

No issues found — great work!

View all 10 passed checks

TLS Configuration

DMARC / Email Security

MX Records & Mail Provider

HSTS Header

Security Headers

Known Breaches

CVE Exposure

DNS Configuration

Certificate Hygiene

Subprocessors & Tech Stack

Company Signals

Operational risk

Last funding

Employees

Trust Resources

Claim profile →

Trust Center

Not detected

DPA (Data Processing Agreement)

Subprocessors List

Tech Stack Detected

Subprocessors

Amazon CloudFront

Similar companies in Government / Public Sector

Appears in

Government / Public Sector vendors

60 companies scanned by LynxRadar

Vendors graded A

377 companies · LynxRadar ranking

Top 10% by security score

287 companies · LynxRadar ranking