Certifications & standards
What we hold, practice, and are building toward.
One page, no fine print games. Every item says exactly what it is: a certification we hold, a standard we practice in the open, or a roadmap we are working. If it is not on this page, we do not claim it.
Plain rule: Held means a third party verified it. Active means it is live and checkable right now. In progress and Practice mean exactly that — no purchased badges, no implied audits.
Check us yourself
Independent, free tools anyone can run against this site — no account needed. We link them because trust you can re-verify beats trust you are asked for.
| TLS configuration | SSL Labs report for fedm8.com |
|---|---|
| Security headers | securityheaders.com scan · Mozilla Observatory |
| SDVOSB status | Search UEI SVPSJ52ZGAY9 in SBA Dynamic Small Business Search |
| Vulnerability disclosure | security.txt (RFC 9116) · disclosure policy |