Jump to a page

All servicesAssessments, testing, and advisory work for security and compliance programs.
PCI DSS readinessScoping, readiness, and remediation for card-payment environments
Penetration testingAuthorized testing of apps, APIs, and networks
Compliance readinessSOC 2, ISO/IEC 27001, HIPAA, and CMMC readiness
Cloud & application securityArchitecture, configuration, and identity reviews
vCISO advisorySecurity leadership without a full-time hire
Incident readinessResponse plans and tabletop exercises
Risk assessmentsWhere you stand against NIST CSF 2.0 and CIS Controls
Policies, controls & evidenceA security program you can repeat and prove
Vendor riskThird-party reviews with clear priorities
Find the right service
SOC 2 readiness
ISO/IEC 27001 readiness
HIPAA Security Rule readiness
CMMC readiness
Assurance and trust centerHow to check credentials, how engagements run, how we stay independent, and how this website handles your data.
Credentials & authorizationsHow credentials and authorizations work, and how to check them
MethodologyHow engagements are scoped, run, and reported
IndependenceHow advisory work stays separate from formal assessment
Responsible disclosureHow to report a security issue in our website or systems
About
Team
Industries
Pricing
Contact
InsightsPlain-language articles on security and compliance topics
GlossarySecurity and compliance terms, defined in plain language
Search the siteServices, readiness guides, glossary terms, and articles
Privacy notice
Terms of use
Accessibility
Privacy choices

Certificate lookup

Find a certified website

Enter a website address or a certificate ID. You’ll see whether SecurityInspect has issued a certificate for it, exactly what that certificate covers, and whether it is active today.

A web address as it appears in your browser, or the certificate ID printed on a badge or certificate: SIAS- followed by 16 letters and numbers.

How verification works

Every SecurityInspect certificate has one public record at https://securityinspect.com/verify/ followed by its ID. The record is the only thing that confirms a certificate. A badge, a PDF or a screenshot does not. Certification is valid only when the record shows the status Active.

How to check a record

  1. Open the record from the badge, or enter the website address or certificate ID above.
  2. Check that the status is Active.
  3. Check that the holder name and the domains listed under “Covers” match the site or document you came from. If they don't, the certificate does not apply to it.
  4. Read the scope, exclusions and limitations before you rely on it.

Records are digitally signed. Developers can fetch the signed, machine-readable version from https://securityinspect.com/api/verify/v1/ followed by the ID.