American Express

Observed: 15 May 2026

American Express operates in the Financials sector with operations recorded in US. CipherCue's most recent observation pass for American Express surfaced 2 open services and 2 certificate transparency records across the public attack surface. Email authentication is enforced at a strict DMARC reject policy, indicating mature outbound mail controls. Methodology →

2 certificate records observed in CT logs. Full subdomain mapping and historical DNS shifts are available to subscribers.

Observations for American Express are produced from DNS and email policy checks, perimeter port discovery, certificate transparency log review and trust and security disclosure detection, performed across 3 distinct observation days against publicly accessible sources. No authenticated access, intrusive probing, or proprietary data feeds are used. Negative findings are recorded only where the public record permits a defensible assertion.

Historical change tracking, remediation velocity, and peer benchmarks are reserved for authenticated subscribers. Read the full methodology.