For Your Sector

For SLTT Organizations

How VouchCore defends state, local, Tribal, and territorial governments — CISA BOD 18-01 aligned.

Government entities at every level face escalating phishing campaigns targeting constituents, staff, and inter-agency communications. VouchCore provides the continuous monitoring your jurisdiction needs without adding IT overhead.

The SLTT Threat Surface

For SLTT organizations, the brand attack surface includes:

  • Constituent-targeted campaigns — Fraudulent emails impersonating your agency to collect payments, credentials, or personal information from the public you serve
  • Staff-targeted BEC — Business Email Compromise campaigns targeting finance, procurement, and HR functions
  • Lookalike domain infrastructure — Domains designed to impersonate official government addresses (e.g., county-gov.com vs county.gov)

CISA BOD 18-01 Alignment

CISA Binding Operational Directive 18-01 mandates DMARC, SPF, and DKIM implementation for federal agencies and strongly recommends compliance for SLTT organizations. VouchCore's BOD 18-01 Alignment Score provides a 0–100 composite rating across the four BOD 18-01 control factors: DMARC enforcement (40 points), SPF hardfail (30 points), DKIM configuration (20 points), and RUA reporting (10 points).

MS-ISAC Integration Context

VouchCore is designed to complement existing MS-ISAC membership and Albert Network sensor deployments — not replace them. VouchCore's exclusive domain is the email authentication and brand surface vector. Traditional network monitoring and endpoint security are outside VouchCore's scope by design.

Tribal Nation Sovereignty

VouchCore's Enclave Architecture treats Tribal nation tenant data with the same sovereignty considerations as federal data. Your jurisdiction's intelligence is never accessible to other nodes, never shared with other government entities, and never leaves GCP boundaries.