SAFA presents itself as an independent, offensive-led threat intelligence house focused on European organizations. If you're asking 'Is safateam.com a scam?' the short answer is that nothing in our technical signals suggests foul play — the domain is four years old, the site has a legal disclosure page, and its security basics (HTTPS, no blacklists) are in order. But for a security vendor, the lack of public footprint stands out: there are no Wayback Machine snapshots, no Trustpilot reviews, and the site's security headers are minimal. That doesn't prove it's fake, but it does mean you can't easily verify their track record through third-party sources. In the cybersecurity industry, most legitimate firms have at least some conference appearances, published research, or press coverage you can cross-check. SAFA claims to have a blog and advisories, but those pages aren't heavily indexed. If you're considering buying their ThreatVision service or booking a demo, the sensible step is to ask for case studies, talk to existing clients, and verify the team's credentials directly. The site itself passes basic safety checks, but trust in a security provider should go beyond what a website can show you.
In plain English
SAFA looks like a legitimate cybersecurity intelligence firm — it’s been around for four years, publishes a legal entity disclosure, and has solid technical basics like HTTPS and clean reputation databases. The biggest caveat is its near-invisible public footprint: no Wayback Machine history and no third-party reviews. That doesn’t mean it’s a scam, but it does mean you’re relying mostly on the site’s own claims. If you’re evaluating them as a vendor, ask for client references directly.
Where the score comes from
Solid baseline: HTTPS with modern encryption, no blacklisting, and Google sees no malware. But for a cybersecurity firm, the lack of additional browser protections (like content security headers) is a missed opportunity, not a dealbreaker.
The domain has been registered for over four years and the business discloses legal entity info publicly. Ownership is not hidden, which is a strong signal for a company in this space.
No Trustpilot or Wayback Machine presence despite a four-year-old domain. That’s unusual and suggests limited public footprint. No blacklists or threat flags, but the lack of external validation is a minor concern.
The site clearly states what it does, has an about page, contact info, social links, and a legal disclosure. This is better than many small security consultancies.
Privacy policy and terms of service are present, which is expected for a commercial threat intelligence provider. No cookie consent found, but that’s not uncommon for lead-gen sites that don’t track heavily.
Fast hosting on Vercel with Google email, SPF configured, and a proper sitemap. DNSSEC is not enabled, and email authentication is set to monitoring mode only — acceptable for a small business but not best-in-class.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →