Companies Using SafeBase

In our crawl SafeBase behaves like a sales tool: almost every detection is a page a company built for its buyers. A domain counts here when one of its hostnames loads SafeBase's trust-center app from safebase.io, and 919 of those hostnames start with trust. and 144 with security. Our October 2026 crawl counts 1,036 domains, 968 matched to a company, 10th of 17 in Security Testing & Compliance. On 15 October I opened a random 50 of the live domains. 48 were working SafeBase trust centers under the customer's own name, one showed SafeBase's "This Trust Center is unavailable" page and one hostname no longer resolves.

What one detection means

Each trust page has its own SafeBase portal. The 1,011 hostnames that point at SafeBase in DNS lead to 982 portals, and among the working pages I fetched, every repeated share id belongs to one company listed twice. No agency or platform is spreading one account over unrelated sites. It was the first thing I checked. The overcounting is smaller and duller. 31 live rows are a trust hostname listed as its own domain beside its parent, trust.ramp.com next to ramp.com, for example, and four rows belong to SafeBase and Drata themselves. Those 35 are about 3% of the rows, so the number of customer organisations sits a little below the domain count. The count also misses some: SafeBase can host a trust center on its own domain, as it does for ICE at ice.safebase.us, and those never show up as the customer's site.

Dead pages are the other leak. I fetched every hostname our crawl hadn't re-read in October, and every one whose DNS no longer points at SafeBase: 78 of those 89 still serve SafeBase. With the random sample and the top companies added, 16 rows (1.45%) are dead or gone. Six show the unavailable page, five hostnames no longer resolve, three now run a Vanta or Conveyor trust center, and Bird's two rows now lead to a trust page with no SafeBase code. Of the 122 hostnames I fetched that our crawl had re-read in October, one was dead, so the rest of the list is in better shape.

Sales signal: one row is one company with one trust page. Dedupe by root domain before counting accounts, and expect a few large SafeBase customers to be missing because their page lives on safebase.us.

Growth is mostly our coverage

The chart reads 433 domains in June 2026, 533 in July, 875 in August, 1,039 in September and 1,036 in October. Two things on our side drive most of that: the set of domains we crawl turns over every month, with dead sites dropping out and newly found ones added, and our detection widened over the summer. October's flat reading is the first month I'd treat as a level. Drata's February 2025 announcement said over 1,000 organisations had used SafeBase trust centers since 2020, which squares with a live base of about a thousand today.

"A SafeBase page is something a company publishes for its buyers, so this list is closer to a list of companies in active enterprise sales cycles than a list of security programmes." - Mehmet Suleyman, CEO & Co-founder at TechnologyChecker.io

Sales signal: size the market at about a thousand live trust centers. Nothing in the line supports a fast-growth story for SafeBase itself.

Who publishes one

SafeBase customers are bigger and older than the trust-center category's other big name. 28.16% of matched companies with a known size have 51 to 200 staff and 26.92% have 11 to 50; only 16.87% are 10 people or fewer. Vanta's Trust Center profile puts 70.47% of its companies at 50 staff or fewer, against 43.79% here. 85 companies have more than 1,000 employees, among them T-Mobile on security.t-mobile.com, Aflac on cybertrust.aflac.com, CDW, Fortinet, Zscaler on compliance.zscaler.com, RR Donnelley and Allegion. Founding years match: 44.96% date from the 2010s and 27.46% from the 2020s.

Sales signal: the owner of a trust page is usually security, GRC or a sales-engineering team that fields questionnaires. At the large accounts, that team is the buyer for anything that shortens a security review.

Industry and country

Software Development is 45.55% of matched companies, and with Technology, Information and Internet, Computer and Network Security and IT Services the four reach 69.88%. Financial Services adds 5.8%, and law firms such as Barnes & Thornburg and MinterEllison publish one for their clients. The base is American: 602 of the 968 matched companies, then the United Kingdom (92), Canada (43), Australia (28) and Germany (26). Israel's 18 equals France's.

Sales signal: outside software, the clearest pockets are financial services and professional services firms with enterprise clients. Outside the United States, start with the UK and Canada.

Vanta, Wiz and the switching question

We publish no migration table for SafeBase because the numbers are too small to mean anything. Six domains have carried both SafeBase and Vanta's Trust Center at some point since March, and none runs both today. 20 domains dropped SafeBase on a hostname since we began tracking it in March 2026. Two of them, drata.com and safebase.io, still run it on another hostname, and two more are SafeBase's and Drata's own spare domains, which leaves 16 customer domains. Wiz is a different story: 49 SafeBase domains also carry Wiz's DNS verification record today, out of 53 that ever had both, so the two sit side by side.

"Six domains have ever shown SafeBase and Vanta together, and none does now. In our data, a company runs one trust center at a time." - Mehmet Suleyman, CEO & Co-founder at TechnologyChecker.io

Sales signal: displacing a live trust center is slow work. A rival trust-center vendor will do better with companies that have no trust page yet than with SafeBase's installed base.

The stack around a trust center

These shares cover every hostname on a domain, so they describe the company's main site too. Google Analytics runs on 82.05% of live SafeBase domains, WordPress on 27.65% and Webflow on 21.31%, with Framer (5.8%) and Lovable (2.54%) behind. Cloudflare (100%) and Google Cloud CDN (99.55%) are how SafeBase delivers the page. OneTrust (12.51%), Cookiebot (10.06%) and CookieYes (9.79%) handle consent, and Pendo (6.71%) and Apollo (6.07%) point to software companies with product analytics and an outbound sales team.

Sales signal: a Webflow or Framer marketing site plus a trust page is the profile of a software company selling upmarket. Pen-test firms and compliance auditors sell to this profile.

What it costs

There is no public price. Drata's plans page, checked 28 October 2026, sells the trust center in Assurance Foundation, Advanced and Enterprise plans and shows no prices. Foundation includes a branded trust center, up to 100 approved domains, a custom URL, clickwrap NDAs and AI help for up to 100 questionnaires. Drata's Compliance Automation Foundation plan also lists a standard trust center.

Sales signal: Drata's compliance plans now list a trust center, so a Drata customer may already have one included. Ask before pitching a stand-alone trust page.

Key takeaways

1. 1,036 domains in October 2026. About 3% of rows are duplicate trust hostnames or SafeBase's own, 1.45% were dead on our check, and trust centers hosted on safebase.us aren't counted.

2. Mid-sized software and security companies, with 85 firms over 1,000 staff.

3. 62.19% of matched companies are American.

4. Vanta's Trust Center, at 2,756 domains, is the only like-for-like rival in our category outside Drata's own (163), and no domain runs both SafeBase and Vanta.

5. Wiz's verification record sits on 49 SafeBase domains, the clearest co-purchase in the data.

How to use this list

Filter by size and country, then dedupe by root domain. A company with a SafeBase page is in enterprise sales and gets security questionnaires, so lead with whatever shortens that review. Our notes on how we detect technologies explain why a hosted page on a customer's subdomain counts as that customer's site. For the full list of 1,036 SafeBase domains with company, size and stack data, explore TechnologyChecker.io.