SafeBase

{
  "id": "safebase",
  "name": "SafeBase",
  "tier": "tier1",
  "adapter_status": "implemented",
  "connect_method": "impersonated_rest",
  "auth": "none (Cloudflare bot-protected; curl_cffi Chrome TLS impersonation via scripts/safebase-fetch.py)",
  "normalized_coverage": {
    "organizations": true,
    "certifications": true,
    "controls": true,
    "subprocessors": "when_public",
    "documents": true,
    "securityUpdates": true
  },
  "rate_limit": {
    "recommendedRps": 4,
    "maxConcurrency": 4,
    "readCeiling": "Cloudflare bot mode blocks plain Node/curl entirely; curl_cffi chrome136 passes. ~3 GETs/tenant.",
    "limiter": "Cloudflare bot management (TLS/JA3 + challenge) on the tenant origin",
    "penalty": "blocked_challenge ('Just a moment...') for non-impersonated clients",
    "backoff": "stay <=4 concurrent on the Python side; min request interval courtesy throttle"
  },
  "stats": {
    "providerId": "safebase",
    "name": "SafeBase",
    "adapterStatus": "implemented",
    "organizations": 1059,
    "trustCenters": 1059,
    "certifications": 5612,
    "controls": 78540,
    "subprocessors": 0,
    "documents": 21933,
    "securityUpdates": 1446,
    "sources": 1059
  }
}

{
  "support_status": "supported",
  "sync_cadence": "daily_full_sync_with_provider_rate_limit",
  "rate_limit": {
    "recommendedRps": 4,
    "maxConcurrency": 4,
    "readCeiling": "Cloudflare bot mode blocks plain Node/curl entirely; curl_cffi chrome136 passes. ~3 GETs/tenant.",
    "limiter": "Cloudflare bot management (TLS/JA3 + challenge) on the tenant origin",
    "penalty": "blocked_challenge ('Just a moment...') for non-impersonated clients",
    "backoff": "stay <=4 concurrent on the Python side; min request interval courtesy throttle"
  },
  "known_source_count": 1104,
  "harvestable_source_count": 1104,
  "seed": "seeds/safebase-backfill-2026-06-11.json"
}

{
  "companies": 1059,
  "trust_centers": 1059,
  "certifications": 5612,
  "controls": 78540,
  "subprocessors": 0,
  "documents": 21933,
  "security_updates": 1446,
  "sources": 1059
}

{
  "score": 84,
  "score_kind": "bounded_0_to_100_observed_normalized_trust_center_coverage",
  "granularity_tier": "high_granularity",
  "observed_capabilities": {
    "trust_centers": true,
    "certifications": true,
    "controls": true,
    "subprocessors": false,
    "documents": true,
    "security_updates": true,
    "provenance": true
  },
  "available_capabilities": [
    "trust_centers",
    "certifications",
    "controls",
    "documents",
    "security_updates",
    "provenance"
  ],
  "missing_capabilities": [
    "subprocessors"
  ],
  "analysis_readiness": {
    "vendor_risk_profile": true,
    "security_questionnaire_evidence": true,
    "subprocessor_monitoring": false,
    "document_inventory": true,
    "compliance_tracking": true,
    "security_advisory_monitoring": true,
    "provenance_audit": true
  },
  "counts": {
    "trust_centers": 1059,
    "certifications": 5612,
    "controls": 78540,
    "subprocessors": 0,
    "documents": 21933,
    "security_updates": 1446,
    "sources": 1059
  }
}

{
  "access_profiles": [
    {
      "key": "safebase_curl_cffi_rest",
      "count": 1059
    }
  ],
  "access_levels": [
    {
      "key": "unknown",
      "count": 1059
    }
  ],
  "data_access": {
    "certifications": 1032,
    "controls": 1026,
    "subprocessors": 0,
    "documents": 973,
    "security_updates": 315
  }
}

{
  "rank": 1,
  "segment": "enterprise",
  "owner": "Drata (acquired ~2025, ~$250M)",
  "auth": "none (Chrome TLS/client fingerprint required for direct HTTP)",
  "connect": {
    "method": "embedded_json_or_public_rest_curl_cffi",
    "fetch": "GET https://{tenantDomain}/ with curl_cffi impersonate=chrome136",
    "extract": "script#__NEXT_DATA__ -> props.pageProps.orgInfo",
    "officialApi": "app.safebase.io/api/ext/v1/rest (per-customer API key, NOT usable cross-tenant)",
    "publicApi": "tenant-relative /api/trust-center/public/{orgUuid} and /api/statuspage/share/{orgUuid}/public/compliance-update"
  },
  "discovery": {
    "cnameTarget": "{companyHandle}.portals.safebase.io",
    "handleInCname": true,
    "fingerprints": [
      "CNAME *.portals.safebase.io",
      "app.safebase.io assets",
      "__NEXT_DATA__ orgInfo",
      "Powered by SafeBase footer"
    ],
    "channels": [
      "dns_cname_sweep",
      "crt.sh",
      "builtwith:SafeBase"
    ]
  },
  "backfill_2026_06_11": {
    "priorKnown": 7,
    "harvestableNow": 1104,
    "netNew": 1097,
    "totalKnown": 1104,
    "commonCrawlFloor": 969,
    "observedHostDomains": 1073,
    "missingObservedHostDomains": 31,
    "unit": "companyDomain; observedHosts retained where present in raw CNAME resolution files",
    "sourceChannels": [
      "Common Crawl ccindex host enumeration over trust/security/compliance prefixes",
      "live CNAME resolution against vendor fingerprints",
      "URLScan and Certificate Transparency enrichment",
      "7,144-company status-page corpus CNAME sweep"
    ],
    "seed": "seeds/safebase-backfill-2026-06-11.json",
    "notes": "Confirmed source-registry floor; SafeBase disables SEO crawling on many tenants, so this is strong but not a full census."
  }
}

{
  "self": "/v1/coverage/providers/safebase",
  "provider": "/v1/providers/safebase",
  "companies": "/v1/companies?provider=safebase",
  "trust_centers": "/v1/trust-centers?provider=safebase",
  "sources": "/v1/sources?provider=safebase"
}