generated: '2026-07-18'
method: searched
source: https://www.dragos.com/security-program/
standards:
- id: iso-27001-2022
  conforms: true
  evidence: Dragos holds ISO/IEC 27001:2022 certification covering global infrastructure, development, personnel, policies, and operations (security-program page + ISO 27001:2022 datasheet).
- id: soc2-type2
  conforms: true
  evidence: SOC 2 Type II report available annually to customers/partners under NDA (security-program page).
- id: nist-csf
  conforms: true
  evidence: Products align with the NIST Cybersecurity Framework (security-program page).
- id: gdpr
  conforms: true
  evidence: GDPR compliance stated in Dragos privacy program.
- id: ccpa
  conforms: true
  evidence: CCPA compliance stated in Dragos privacy program.
- id: oauth2
  conforms: true
  evidence: Dragos Platform SiteStore v2 API supports OAuth 2.0 Bearer (JWT) access tokens.
- id: stix-2.0
  conforms: true
  evidence: WorldView API exposes indicators and product bundles as STIX 2.0 JSON (openapi/dragos-worldview-openapi-original.json).
- id: rfc9457-problem-details
  conforms: false
  evidence: WorldView error responses (401/403/404/429) are not declared as application/problem+json.
compliance_page: https://www.dragos.com/security-program/