Signals planned: model card presence, training data disclosure, published red-team results. Some checks will be partially automated via website scanning; others require vendor submission.

Verification bonus+0/5 bonus pts

Claimed profile

Domain ownership verified by claiming the profile0/5

Security hygiene & transparency19/28 pts

Disclosure policy

Security disclosure page found+3

Page references vulnerability reporting+2

Source: h2o.ai/security · Scanned 9/6/2026

Security headers

Content-Security-Policy header0/3

X-Frame-Options header+2

X-Content-Type-Options: nosniff+2

Referrer-Policy header0/1

Source: response headers from h2o.ai · Scanned 9/6/2026

HTTPS + HSTS

HTTP redirects to HTTPS+3

HSTS header enforced+2

Source: response headers from h2o.ai · Scanned 9/6/2026

security.txt

security.txt file found

Contact field present0/2

Expires field present0/2

Encryption field present0/1

Trust page

Public trust/security page found+5

Rubric v1.3.0 · 19/28 implemented pts · click a category to see details

Current:Good

With verification:Excellent(+5pts)

Claim this profile to improve your grade →

Score history (5 updates)

↑ improving

v1D+ → D+ → C → B → Bv5

Score history

Grade improved: C → B

Score +5pts (14 → 19)

trustPagePresence.found added (+pts)

Recomputed from already-known data, not a full rescan

9/6/2026

Grade improved: D+ → C

9/6/2026

Scanned 3d ago

Certifications & disclosures

Something look wrong? Signed-in users can flag a certification below — an Entropy admin reviews every report.

Unverified
ISO 27001
Discovered at trust.h2o.ai on 9/6/2026, not vendor-confirmed
Unverified
SOC 2 Type II
Discovered at trust.h2o.ai on 9/6/2026, not vendor-confirmed