Vulcan Cyber

Security and trust center evidence

The leader in exposure management and AI security, Tenable cybersecurity solutions reduce cyber risk across IT, OT, cloud, identity &

vulcan.io SecurityLast verified 2 Nov 2026

Vendor website Are you Vulcan Cyber?

DPFExpired

Vulcan Cyber has , and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is EU-US Data Privacy Framework: Inactive. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

For the EU-US Data Privacy Framework, Vulcan Cyber's registry listing is marked inactive as of 05 Oct 2026, with the original entry issued 08 Jul 2019. No expiry date is given, but the inactive status shows the certification has lapsed since issuance. No public evidence found for SOC 2, ISO/IEC 27001, PCI DSS, GDPR, FedRAMP, or HIPAA as of 05 Oct 2026. Reviewers assessing Vulcan Cyber should treat the Data Privacy Framework record as expired rather than current, since the only available evidence describes an inactive status. No other compliance frameworks are represented in the rows supplied for this vendor.

EU-US Data Privacy Framework: inactive/expired, issued 08 Jul 2019 (as of 05 Oct 2026)
No public evidence found for SOC 2, ISO/IEC 27001, PCI DSS
No public evidence found for GDPR, FedRAMP, HIPAA

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 10 Oct 2026; it is regenerated whenever a row changes.

Among security vendors

0verified rows

Category median 1, across 172 indexed security vendors. Vulcan Cyber has no registry-verified row yet, like 42 percent of them; its evidence is vendor-stated or reported.

cyber riskexposure managementthreat detectionvulnerability management

Compare with similar vendors

Pick your own comparison

Compliance grid

EU-US Data Privacy FrameworkExpired
Inactive
as of 2 Nov 2026
1 source

No public evidence yet for HIPAA, SOC 2, GDPR, FedRAMP, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.