Is carmax.com safe?
Review carmax.com security risks.

Nudge Security provides security profiles for thousands of SaaS apps, including carmax.com. This public profile has the basics you’ll need for a vendor risk assessment. For more details on carmax.com, including breach history, start a free trial of Nudge Security.
carmax.com Security Profile

CATEGORY

Shopping

Organization Details

What is

carmax.com

?

HEADQUARTERS

HOSTING

HOSTING LOCATION

Who's Using carmax.com in your org?

Nudge Security discovers every user for every SaaS app within minutes of starting a free trial. No credit card required.

Learn how

Security Program

SECURITY CERTIFICATIONS

SOC2 Compliance
PCI Compliant
HIPAA Compliant
SOC2 Compliance
SOC 2 Compliant
GDPR Compliant
ISO 27001 Compliant
FedRamp Compliant
CSA Star Level 1
Compliant

SECURITY PAGE

SECURITY PORTAL

BUG BOUNTY

VULNERABILITY DISCLOSURE

TERMS OF SERVICE

PRIVACY POLICY

STATUS PAGE

carmax.com breach history
Has carmax.com experienced a recent breach? Start a free trial of Nudge Security for a full breach history and more security program details.
Learn more

Authentication

AUTHENTICATION / SSO

Supported Okta Features
Login with Google support
Login with Microsoft support
Supports SSO
Two-factor authentication via SMS
Two-factor authentication via E-mail
Two-factor authentication via Hardware
Two-factor authentication via Software
Two-factor authentication via TOTP
Two-factor authentication via U2F

oauth details

carmax.com OAuth Grants
Is carmax.com connected to your other business apps? Start a free trial of Nudge Security to see all app-to-app OAuth grants.
Learn more

Supply Chain

Apps in carmax.com's supply chain
  • Microsoft Azure
  • Akamai
  • Cloudflare
  • Proofpoint
  • Squarespace
  • q4inc.com
  • Apigee API Management
  • Oracle Cloud
  • Phenom
  • Adobe
  • Apple Business Manager
  • tractionguest.com
  • Facebook
  • Google Analytics
  • Miro
  • Docker
  • DocuSign
carmax.com supply chain breach history
What's in carmax.com's SaaS supply chain? Start a free trial of Nudge Security to manage software supply chain security at scale.
Learn more

Subdomains

carmax.com subdomains
  • testautomation-gateway.buys-dev.carmax.com
  • design.carmax.com
  • webreconditioning-service-qa.carmax.com
  • appraisal-check-in-qa.carmax.com
  • www.carmax.com
  • login.carmax.com
  • webvehicleadmin-qa.sites.carmax.com
  • cvml-dev.carmax.com
  • origin-busopsnow-services.carmax.com
  • finance-prod-east-gateway.carmax.com
  • enrichmentsvc.sells-qa.carmax.com
  • edocs-referenceservice-stg.carmax.com
  • esignstg.carmax.com
  • investor.carmax.com
  • nmvtis.enrichment.carmax.com
  • busopsnow-staging.carmax.com
  • www4qa.carmax.com
  • conditions-store-adapter.supply.carmax.com
  • media.carmax.com
  • img2qa.carmax.com
  • picsy-staging-qa.services.carmax.com
  • origin-busopsnow.carmax.com
  • webvehicle-qa-east-service.carmax.com
  • offerreposvc.sells-qa.carmax.com
  • order-insights-dev.carmax.com
  • messaging-dev.sites.carmax.com
  • capmetrics-prod.services.carmax.com
  • testautomation-gateway.buys-qa.carmax.com
  • webrecommendation-prod-west.services.carmax.com
  • learningondemand-website-qa.carmax.com
  • next-best-action-dev-west-service.carmax.com
  • work-management-service-qa.carmax.com
  • partnership-appraisals.sites.carmax.com
  • maxoffer-service-qa.carmax.com
  • next-best-action-qa-east-service.carmax.com
  • sales-insights-site-dev.carmax.com
  • webresearch-qa-east-website.carmax.com
  • maxoffer-prod-west-service.carmax.com
  • edocs-event-handler-dev-west.carmax.com
  • customer-transfer-qa-mock-server.carmax.com
  • next-best-action-qa-west-service-service-staging.carmax.com
  • webvehicleadmin.sites.carmax.com
  • jobsqa.carmax.com
  • isxcstrp-service-qa.carmax.com
  • edocs-event-handler-dev.carmax.com
  • origin-maxoffer-website.carmax.com
  • finance2-qa.carmax.com
  • work-management-service.carmax.com
  • webrecommendation.services.carmax.com
  • loginqa.carmax.com
  • onlinefinance-website2-qa.carmax.com
  • next-best-action-qa-east-service-service-staging.carmax.com
  • next-best-action-service-dev.carmax.com
  • appraisal-gateway-qa.services.carmax.com
  • maxoffer-prod-east-website.carmax.com
  • sitecrawler-service.carmax.com
  • checkout-admin-qa.carmax.com
  • origin-maxoffer-service.carmax.com
  • idpdev.carmax.com
  • staging.carmax.com
  • foundation-website-qa.carmax.com
  • next-best-action-dev-east-service-service-staging.carmax.com
  • webresearch-prod-west-website.carmax.com
  • vehpurchase-mgmtportal-qa.carmax.com
  • origin-appraisal-gateway-qa.services.carmax.com
  • edocs-event-handler-stg.carmax.com
  • websearch-service-qa.carmax.com
  • searchrecommendations-service-qa.carmax.com
  • origin-webstore-service-qa.carmax.com
  • logistics-service-staging-qa.carmax.com
  • obwqa.carmax.com
  • edocs-event-handler-stg-east.carmax.com
  • dsml-logistics-service.carmax.com
  • hraplearning2021-website-qa.carmax.com
  • seocontent-website.carmax.com
  • onlinefinance-qa-east-website2.carmax.com
  • edocs-referenceservice-stg-west.carmax.com
  • credit-service.buys-qa.carmax.com
  • dsa-dev.sites.carmax.com
  • workdayqa.carmax.com
  • logistics-service-staging.qa.carmax.com
  • maxoffer-prod-east-service.carmax.com
  • edocs-event-handler-qa-west.carmax.com
  • wcsqa.carmax.com
  • vehicleacquisitionorder-service.sells-qa.carmax.com
  • wwwqa.carmax.com
  • next-best-action-qa-west-service.carmax.com
  • githubqa.carmax.com
  • maxcare-service-qa.carmax.com
  • origin-webvehicle-service-qa.carmax.com
  • origin-webvehicle-service.carmax.com
  • img.carmax.com
  • edocs-referenceservice-prod-west.carmax.com
  • careers.carmax.com
  • maxcaredata-service-dev.carmax.com
  • webstore-website.carmax.com
  • content-images-qa.carmax.com
  • busopsnow-east.carmax.com
  • picsy-qa.services.carmax.com
  • busopsnow-staging-qa.carmax.com
  • maxcaredata-service.carmax.com

Regain control of SaaS security.

Nudge Security discovers all SaaS accounts ever created by anyone in your org within minutes of starting a free trial. Get a full SaaS inventory today, along with insights and automation to improve your SaaS security posture.