Officials say HealthCare.gov has gotten cybersecurity upgrades ahead of a Nov. 15 start for the second open enrollment season under President Barack Obama's health care law.

Andy Slavitt, overseeing the complex technology, says the facility that hosts HealthCare.gov is now certified to meet the highest government standards for cloud computing. Cloud operations use large networks of machines in different locations to handle data.

HealthCare.gov is also conducting daily security scans and weekly so-called "white-hat" hacking attempts that simulate real attacks. The Homeland Security department is also helping to bolster HealthCare.gov's detection and defense.

The federal marketplace for subsidized private health insurance will serve 38 states this year. Cybersecurity is getting scrutiny from critics as well. Last year's chaotic debut of the program did not allow time to complete security testing.