Red Hat

redhat.com

Excellent

Top 3%of 32 enterprise software vendors measured

Enterprise open-source software company (IBM subsidiary).

enterprise software⚠ Unverified — automated scan only, no vendor confirmationScanned 9/6/2026Added 9/3/2026

Score breakdown

AI safetypending

Signals planned: model card presence, training data disclosure, published red-team results. Some checks will be partially automated via website scanning; others require vendor submission.

Governance+0/31 bonus pts

SOC 2 Type II

Not found0

Board-level oversight

Requires vendor submission — not yet collected.

Not found0

Not found0

Not found0

Not found0

Verification bonus+0/5 bonus pts

Claimed profile

Domain ownership verified by claiming the profile0/5

Security hygiene & transparency28/28 pts

Trust page

Public trust/security page found+5

security.txt

security.txt file found

Contact field present+2

Expires field present+2

Encryption field present+1

Disclosure policy

Security disclosure page found+3

Page references vulnerability reporting+2

Source: redhat.com/security · Scanned 9/6/2026

Security headers

Content-Security-Policy header+3

X-Frame-Options header+2

X-Content-Type-Options: nosniff+2

Referrer-Policy header+1

Source: response headers from redhat.com · Scanned 9/6/2026

HTTPS + HSTS

HTTP redirects to HTTPS+3

HSTS header enforced+2

Source: response headers from redhat.com · Scanned 9/6/2026

Incident historypending

Signals planned: breach-history lookup, incident response quality assessment. This category is coming soon.

Rubric v1.3.0 · 28/28 implemented pts · click a category to see details

Score history (5 updates)

↑ improving

v1B- → B- → A- → A+ → A+v5

Score history

Grade improved: A- → A+

Score +5pts (23 → 28)

trustPagePresence.found added (+pts)

Recomputed from already-known data, not a full rescan

9/6/2026

Grade improved: B- → A-

9/6/2026

Scanned 3d ago

Certifications & disclosures

Found
security.txt
Discovered at redhat.com/.well-known/security.txt on 9/6/2026