Is SpiderFoot safe?
Review SpiderFoot security risks.

The following security profile for SpiderFoot includes the basics you’ll need for a vendor risk assessment: security certifications, supply chain details, privacy policy, terms of service, GDPR compliance, and more.
SpiderFoot Organization Details

Category

Organization Details

What is SpiderFoot?

SpiderFoot automates OSINT so you can find what matters, faster..SpiderFoot comes in two flavors: an Open Source version that you can set up and run locally if all you need is to peform scans, or SpiderFoot HX which is a completely revamped and managed cloud-based version with scanning plus collaboration, analysis and monitoring features..SpiderFoot modules integrate with a wide variety of threat intelligence sources, Internet scanners, breach databases, e-mail contact databases and more. Be confident that when a SpiderFoot scan completes, everything that was found is everything that can be found about your target..SpiderFoot is unique in that it recursively analyses each piece of data found during a scan so that no stone is left unturned in the search for that critical IP address, e-mail address or other data point that makes the difference between the success or failure of your investigation..SpiderFoot is continuously growing. Check us out on Twitter for the latest news.

Headquarters

Hosting

Hosting locations

Security Program

Security Certifications

SOC2 Compliance
PCI Compliant
HIPAA Compliant
SOC2 Compliance
SOC 2 Compliant
GDPR Compliant
ISO 27001 Compliant
FedRamp Compliant
CSA Star Level 1
Compliant

Security Page

Security Portal

Bug Bounty

Vulnerability Disclosure

Terms of Service

Status Page

Authentication

Authentication / SSO

Supported Okta Features
Login with Google support
Login with Microsoft support
Supports SSO
Two-factor authentication via SMS
Two-factor authentication via E-mail
Two-factor authentication via Hardware
Two-factor authentication via Software
Two-factor authentication via TOTP
Two-factor authentication via U2F

OAuth Details

SpiderFoot Supply Chain
  • Mailgun
  • ProtonMail
  • Google Tag Manager
  • Google Analytics
SpiderFoot Subdomains
  • email.spiderfoot.net

Regain control of SaaS security.

Nudge Security discovers all SaaS accounts ever created by anyone in your org within minutes of starting a free trial. Get a full SaaS inventory today, along with insights and automation to improve your SaaS security posture.

was able to find all this and much more.
Nudge was able to find all this and much more.
Nudge Security provides detailed security profiles for thousands of SaaS apps. Sail through security assessments with our proprietary intelligence on vendors’ security, risk, and compliance programs.
Stop chasing down answers. Start a free 14-day trial of Nudge Security to learn:
Stop chasing down answers.
Start a free 14-day trial of Nudge Security today.
Who’s using SpiderFoot in your org?
What data does SpiderFoot have access to?
What is SpiderFoot’s breach history?
What apps are in SpiderFoot’s supply chain?