{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"vulcan-cyber","name":"Vulcan Cyber","domain":"vulcan.io","category":"Security","one_liner":"The leader in exposure management and AI security, Tenable cybersecurity solutions reduce cyber risk across IT, OT, cloud, identity &","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/vulcan-cyber/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2019-07-08","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/vulcan-cyber/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/7091","fetched_at":"2026-11-02 05:02:51.317784+00","content_hash":"1f1024bd4d2ecc90d6ab0208e22f7d34174e780a63b45bca686edae7692a9930","wayback_url":null,"quote":"Vulcan Cyber: Inactive","confidence":1}]}],"brief":{"summary":"For the EU-US Data Privacy Framework, Vulcan Cyber's registry listing is marked inactive as of 05 Oct 2026, with the original entry issued 08 Jul 2019. No expiry date is given, but the inactive status shows the certification has lapsed since issuance. No public evidence found for SOC 2, ISO/IEC 27001, PCI DSS, GDPR, FedRAMP, or HIPAA as of 05 Oct 2026. Reviewers assessing Vulcan Cyber should treat the Data Privacy Framework record as expired rather than current, since the only available evidence describes an inactive status. No other compliance frameworks are represented in the rows supplied for this vendor.","bullets":["EU-US Data Privacy Framework: inactive/expired, issued 08 Jul 2019 (as of 05 Oct 2026)","No public evidence found for SOC 2, ISO/IEC 27001, PCI DSS","No public evidence found for GDPR, FedRAMP, HIPAA"],"model":"claude-sonnet-5","generated_at":"2026-10-10 05:35:26.924438+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/vulcan-cyber/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-04T06:51:53.343Z"}