Northrop Grumman · Domain Security

Northrop Grumman Domain Security

Domain security

Domain security posture for Northrop Grumman, probed live across 1 host(s) and 4 registrable domain(s). 1 host(s) serve HTTPS (up to TLSv1.3); 1 advertise HSTS. Email/DNS controls: DNSSEC absent, SPF absent, DMARC absent.

AerospaceAutonomous SystemsCommand and ControlCybersecurityDefenseFortune 100Fortune 500GovernmentManufacturingMission SystemsSpace

Transport & Host Security

www.northropgrumman.com

HTTPS: yes · TLS: TLSv1.3 · HSTS: yes · cert expires: Nov 18 06:23:39 2026 GMT

Domain (DNS/Email) Security

northropgrumman.com

DNSSEC: no · SPF: no · DMARC: no · CAA: none

ngc.com

DNSSEC: no · SPF: yes · DMARC: yes (p=quarantine) · CAA: none

northgrum.com

DNSSEC: no · SPF: yes · DMARC: no · CAA: none

northrop-grumman.com

DNSSEC: no · SPF: no · DMARC: no · CAA: none

Source

Domain Security

generated: '2026-08-28'
method: probed
source: live DNS/TLS/HTTP probes of apis.yml hosts (DoH via cloudflare-dns.com; TLS/HSTS via HTTPS handshake)
note: >-
  Northrop Grumman splits its web identity from its mail identity. The public web domain
  northropgrumman.com carries no SPF, no DMARC, no CAA and no DNSSEC, while the corporate
  mail domain ngc.com — which redirects to the same website — carries both an SPF record
  and a DMARC policy at p=quarantine. northgrum.com (the authoritative nameserver domain)
  carries SPF but no DMARC. The hyphenated domain northrop-grumman.com, which this
  profile previously pointed at, does not resolve at all (NXDOMAIN).
hosts:
- host: www.northropgrumman.com
  https: true
  tls_version: TLSv1.3
  cert_expires: Nov 18 06:23:39 2026 GMT
  hsts: true
  hsts_max_age: 63072000
domains:
- domain: northropgrumman.com
  role: public website
  resolves: true
  dnssec: false
  caa: []
  spf: false
  dmarc: false
  note: >-
    TXT records present but none is a v=spf1 policy; _dmarc.northropgrumman.com returns
    NXDOMAIN (DNS status 3). No CAA records published.
- domain: ngc.com
  role: corporate mail domain; 301s to www.northropgrumman.com
  resolves: true
  dnssec: false
  caa: []
  spf: true
  spf_record: 'v=spf1 exists:%{i}.spf.ngc.iphmx.com -all'
  dmarc: true
  dmarc_record: 'v=DMARC1; p=quarantine; fo=1; rua=mailto:dmarc_rua@ngc.com; ruf=mailto:dmarc_ruf@ngc.com'
  dmarc_policy: quarantine
- domain: northgrum.com
  role: authoritative nameserver domain (sunrise/sundown/po/dnsdal.northgrum.com)
  resolves: true
  dnssec: false
  caa: []
  spf: true
  spf_record: 'v=spf1 exists:%{i}.spf.ngc.iphmx.com -all'
  dmarc: false
- domain: northrop-grumman.com
  role: not owned / not delegated
  resolves: false
  dns_status: NXDOMAIN
  note: >-
    Probed because the previous apis.yml Website pointer used this hyphenated form. It has
    no A record and no nameservers; the pointer was dead and has been corrected to
    https://www.northropgrumman.com/.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/northrop-grumman-domain-security"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.