The programmes the world's leading cyber agencies run for their public sector - protective DNS, email-authentication enforcement, a national exploited-vulnerability catalogue, STIX 2.1 threat exchange and early warning - delivered as one sovereign module. Every check below runs for real on what you type; national volumes are representative until the feeds connect.
A real, non-intrusive assessment of SPF, DMARC, DKIM, MTA-STS, TLS-RPT, DNSSEC, CAA and HSTS - the controls national directives mandate for every government domain (cf. BOD 18-01). Type any public domain.
When deployed, every government query passes through the national resolver. SHIELD applies the blocklist, typosquat and homoglyph detection against protected domains, DGA entropy analysis and high-abuse TLD policy - try one. Resolver volumes are representative until the national resolver is connected; the policy decision on the domain you type is real.
| Blocked domain | Category | Impersonates | Entity targeted | Blocked · 24h | Source |
|---|
The catalogue (cf. CISA KEV; BOD 22-01, succeeded in June 2026 by BOD 26-04 and its 3, 14 and 60-day windows) carries a national remediation window per entry. SHIELD correlates it live against the software the Domain Scanner observed and the Infra Monitor's unpatched inventory - or against an asset list you paste.
| CVE | Product | Observed | Status | Due | Action | Source |
|---|
One asset per line - product and version. Paste a CMDB export, a scanner's software list, or use the sample.
Results appear here - exposed, possible (version unknown) and patched, with the national due date for each.
| CVE | Vendor · product | Vulnerability | Ransomware | Added | Window | Due |
|---|
Paste a STIX 2.1 bundle, a CSV, or one indicator per line (defanged is fine). SHIELD normalises, de-duplicates, applies TLP, correlates against the platform's own telemetry - and exports a STIX 2.1 bundle any MISP, OpenCTI or SIEM can consume.
| Type | Indicator | TLP | Source | Conf. | Sightings on this platform | Shared with |
|---|
Derived automatically from the four capabilities above - exploited-CVE exposure, resolver blocks, shared-indicator sightings, spoofable domains - addressed to the responsible entity with an SLA, and acknowledged on the record (signed).
| Severity | Entity | Warning | Source | SLA | Status |
|---|
A catalogue of vulnerabilities with confirmed exploitation, each with a federal remediation deadline.
DMARC p=reject, SPF, STARTTLS and HSTS mandated across every government domain.
Protective DNS, Early Warning, Takedown and Share-and-Defend protecting the whole public sector at scale.
STIX/TAXII sharing of indicators between the national agency and its constituents.
