What is the official website of Alibaba.com ?

The official website of Alibaba.com is https://x.alibaba.com/E8P5?ck=other.

What is Alibaba.com's cybersecurity risk score?

Alibaba.com has an AI-generated cybersecurity risk score of 829 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has Alibaba.com experienced?

According to Rankiteo, Alibaba.com currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Alibaba.com been affected by any supply chain cyber incidents ?

According to Rankiteo, Alibaba.com has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Alibaba.com have SOC 2 Type 1 certification ?

According to Rankiteo, Alibaba.com is not certified under SOC 2 Type 1.

Does Alibaba.com have SOC 2 Type 2 certification ?

According to Rankiteo, Alibaba.com does not hold a SOC 2 Type 2 certification.

Does Alibaba.com comply with GDPR ?

According to Rankiteo, Alibaba.com is not listed as GDPR compliant.

Does Alibaba.com have PCI DSS certification ?

According to Rankiteo, Alibaba.com does not currently maintain PCI DSS compliance.

Does Alibaba.com comply with HIPAA ?

According to Rankiteo, Alibaba.com is not compliant with HIPAA regulations.

Does Alibaba.com have ISO 27001 certification ?

According to Rankiteo,Alibaba.com is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Alibaba.com operate in ?

Alibaba.com operates primarily in the Software Development industry.

How many employees does Alibaba.com have ?

Alibaba.com employs approximately 28,735 people worldwide.

Does Alibaba.com own any subsidiaries ?

Alibaba.com presently has no subsidiaries across any sectors.

How many LinkedIn followers does Alibaba.com have ?

Alibaba.com's official LinkedIn profile has approximately 605,252 followers.

What is the NAICS classification code for Alibaba.com ?

Alibaba.com is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Alibaba.com have a Crunchbase profile ?

No, Alibaba.com does not have a profile on Crunchbase.

Does Alibaba.com have a LinkedIn profile ?

Yes, Alibaba.com maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/alibaba-com.

How many cybersecurity incidents has Alibaba.com experienced ?

As of July 31, 2026, Rankiteo reports that Alibaba.com has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Alibaba.com have ?

Alibaba.com has an estimated 30,514 peer or competitor companies worldwide.

What types of cybersecurity incidents has Alibaba.com faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Alibaba.com

Boost Score +25 with badge (5 left)

829

/1000

Good

854

/1000

Very Good

Alibaba.com Vendor Cyber Rating & Cyber Score

alibaba.com

Add Your Compliance Badge

The first business of Alibaba Group, Alibaba.com (www.alibaba.com) is the leading platform for global wholesale trade serving millions of buyers and suppliers around the world. Through Alibaba.com, small businesses can sell their products to companies in other countries. Sellers on Alibaba.com are typically manufacturers and distributors based in China and other manufacturing countries such as India, Pakistan, the United States and Thailand. Our Mission As part of the Alibaba Group, our mission is to make it easy to do business anywhere. We do this by giving suppliers the tools necessary to reach a global audience for their products, and by helping buyers find products and suppliers quickly and efficiently. One-Stop

Alibaba.com A.I CyberSecurity Scoring

Scoring History

Alibaba.com

Alibaba.com CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Alibaba.com

Breach

100

09/2018

ALI212330922

Loading…

A.I.

Alibaba.com Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Alibaba.com

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for Alibaba.com in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Alibaba.com in 2026.

Incident Types Alibaba.com vs Software Development Industry Avg (This Year)

No incidents recorded for Alibaba.com in 2026.

Incident History - Alibaba.com (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Alibaba.com Subsidiaries

Alibaba.com

Software Development

Website: https://x.alibaba.com/E8P5?ck=other

Company Size: 10,001+ employees

Alibaba GroupSoftware Development

LazadaSoftware Development

Taobao MarketplaceTechnology, Information and Internet

Ververica | Original creators of Apache Flink®Software Development

Alibaba Digital Media & Entertainment GroupTechnology, Information and Internet

UCWeb Inc.Technology, Information and Internet

Youku Tudou IncMedia Production

TmallTechnology, Information and Internet

Tmall GlobalTechnology, Information and Internet

Alibaba.com TürkiyeTechnology, Information and Internet

Alibaba.com USA SellersInternational Trade and Development

Alibaba.com LATAMWholesale Import and Export

Alibaba.com Pro Buyer InsightsInternational Trade and Development

Loading…

Alibaba.com Similar Companies

Walmart Global Tech

walmart.com

Walmart has a long history of transforming retail and using technology to deliver innovations that improve how the world shops and empower our 2.1 million associates. It began with Sam Walton and continues today with Global Tech associates working together to power Walmart and lead the next retail disruption. Our world-class software engineers, data scientists and engineers, cybersecurity professionals, product managers and business service professionals work with top talent on cutting-edge technologies that create unique and innovative experiences for our associates, customers and members across Walmart, Sam’s Club and Walmart International. At Walmart Global Tech, one line of code or bold idea can make life easier for hundreds of millions of people – talk about epic impact at a global scale.

Instagram

instagram.com

More than one billion people around the world use Instagram, and we’re proud to be bringing them closer to the people and things they love. Instagram inspires people to see the world differently, discover new interests, and express themselves. Since launching in 2010, our community has grown at a rapid pace. Our teams are growing fast, too, and we’re looking for talent across engineering, product management, design, research, analytics, technical program management, operations, and more. In addition to our headquarters in Menlo Park, we have thriving offices in New York City and San Francisco where teams are doing impactful work every day.

Alibaba Group

alibabagroup.com

🌍Alibaba Group is on a mission to make it easy to do business anywhere! Guided by our passion and imagination, we’re leading the way in AI, cloud computing and e-commerce. We aim to build the future infrastructure of commerce, and we aspire to be a good company that lasts for 102 years.

linkedin.com

Founded in 2003, LinkedIn connects the world's professionals to make them more productive and successful. With more than 1 billion members worldwide, including executives from every Fortune 500 company, LinkedIn is the world's largest professional network. The company has a diversified business model with revenue coming from Talent Solutions, Marketing Solutions, Sales Solutions and Premium Subscriptions products. Headquartered in Silicon Valley, LinkedIn has offices across the globe.

IGT

IGT.com

IGT is a leading global provider of gaming, digital and financial technology solutions, formed through the combination of International Game Technology PLC’s Gaming & Digital Business and Everi Holdings Inc. IGT’s offering spans gaming machines, game content and systems, iGaming, sports betting, cash access, loyalty and player engagement solutions, enabling it to deliver integrated, customer-centric experiences across land-based and digital environments. Organized into Gaming, Digital and FinTech business units, IGT drives innovation, efficiency and value for casino, digital and hospitality operators worldwide. The company is headquartered in Las Vegas.

Infor

infor.com

Infor is a global leader in business cloud software products for companies in industry specific markets. Infor builds complete industry suites in the cloud and efficiently deploys technology that puts the user experience first, leverages data science, and integrates easily into existing systems. Over 60,000 organizations worldwide rely on Infor to help overcome market disruptions and achieve business-wide digital transformation. Here are some key insights: • 60,000+ customers • 100+ offices • 1,700+ support experts • 2,000+ partners • 17,000+ employees • 175+ countries where customers are located • 15,000+ cloud customers • 40+ countries with Infor offices

[24]7.ai

cb 247.ai

[24]7.ai™ customer engagement solutions use conversational artificial intelligence to understand customer intent, enabling companies to create personalized, predictive, and effortless customer experiences across all channels; attract and retain customers; boost agent productivity and satisfaction; and drive revenues while lowering costs. The world’s largest and most recognizable brands use [24]7.ai intent-driven technologies to serve several hundred million visitors through billions of conversations annually, most of which are automated. The result is an order of magnitude improvement in digital adoption, customer satisfaction, and revenue growth. For more information, visit: www.247.ai. [24]7.ai is based in Campbell, California. [24]7.ai is a registered trademark of 24/7 Customer, Inc.

Expedia Group

expediagroup.com

At Expedia Group (NASDAQ: EXPE), we believe travel is a force for good – it opens minds, builds connections, and bridges divides. We create transformative tech that enables unforgettable experiences for all travelers, everywhere. Our trusted family of brands are known and loved by millions, and we power more trips than anyone else. To learn more about our vision of a more open world through travel, visit www.expediagroup.com. We’re committed to providing an inclusive and accessible recruiting experience for candidates with disabilities, or other physical or mental health conditions. If you require an accommodation or adjustment for any part of the application or recruitment process, please let us know by completing our Accommodation Request Form or contacting your recruiter. Employment opportunities and job offers at Expedia Group will always come from Expedia Group’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident about who they are. We do not send job offers via email, or any other messaging tools, to individuals we have not had prior contact with. Our email domain is @expediagroup.com. Our official careers website, where you can to find and apply for job openings, is careers.expediagroup.com/jobs. If you require customer service support to cancel, change or ask about a refund for your trip, you can connect with our 24/7 Virtual Agent through the following links: Expedia: https://www.expedia.com/helpcenter Hotels.com: https://service.hotels.com/en-us/ Vrbo: https://help.vrbo.com/ For additional assistance, direct message us on Twitter @ExpediaHelp with your itinerary number and email address: https://twitter.com/ExpediaHelp

TOTVS

cb totvs.com

Olá, somos a TOTVS! A maior empresa de tecnologia do Brasil. 🤓 Líder absoluta em sistemas e plataformas para empresas, a TOTVS possui mais de 70 mil clientes. Indo muito além do ERP, oferece tecnologia completa para digitalização dos negócios por meio de 3 unidades de negócio: - Gestão: ERPs, soluções cross e sistemas especializados visando garantir mais produtividade, eficiência e governança para os negócios; 💻 - Techfin: ERP Banking que oferece soluções de crédito B2B e pagamento, integrados a sistemas de gestão; 💸 - RD Station: Ferramentas digitais de marketing, vendas e relacionamento, para empresas de todos os portes e segmentos. 🚀 Nos últimos 5 anos, a companhia investiu R$3 bilhões em pesquisa e desenvolvimento para atender de maneira cada vez mais especializada empresas de 12 segmentos da economia, tornando-se um trusted advisor de seus clientes. A TOTVS é uma potência tecnológica que apoia a evolução de empresas de norte a sul do país. O Brasil, que faz, faz com TOTVS.

Loading…

NEWS

Alibaba.com CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

July 14, 2026 12:49 AM

Chinese cybersecurity agency urges users to update Claude as recent versions contain a 'backdoor'

A cybersecurity firm associated with the Chinese government reportedly has concerns about Anthropic's Claude AI models and has warned users...

Read Article

July 08, 2026 07:00 AM

China warns about AI risks with Anthropic's Claude Code

The Chinese Ministry of Industry and Information Technology said Wednesday its cybersecurity threat platform found "AI coding tool Claude...

Read Article

July 06, 2026 06:39 AM

'No hacker needed': New AI ransomware can automate database attacks from start to finish, warns cybersecu

Tech News News: Security researchers have identified JadePuffer, the first ransomware attack which is filly executed by an autonomous AI...

Read Article

July 05, 2026 07:00 AM

Cyber Security News Bulletin Weekly - Mythos is Back, WhatsApp Username, Kali Linux 2026.2, +20 Stories

This week's roundup covers a major AI security model redeployment, several critical RCE vulnerabilities across popular tools,...

Read Article

June 25, 2026 07:00 AM

Anthropic accuses China Alibaba of conducting Distillation Attack on Claude AI Models

Artificial intelligence company Anthropic has officially accused Chinese technology giant Alibaba of improperly using its Claude AI models...

Read Article

June 18, 2026 07:00 AM

Alibaba Cloud Bets on France as Europe Seeks More Control Over AI

Alibaba Cloud opened two Paris availability zones as European enterprises weigh data sovereignty, resilience, and AI infrastructure needs.

Read Article

May 21, 2026 07:00 AM

Grab, consultancy RSM to launch AI and cybersecurity initiatives for 12,000 SMEs

SINGAPORE – Ride-hailing platform Grab and cybersecurity consultancy RSM Stone Forest IT will launch targeted programmes for 12,000 small...

Read Article

May 14, 2026 07:00 AM

Foxconn factory attacks, BitLocker zero-day accesses protected drives, MDASH patches Windows flaws

Foxconn said that several North American factories were hit by a cyberattack claimed by the Nitrogen ransomware group, which says it stole...

Read Article

May 08, 2026 07:00 AM

China is going dark to develop its own Mythos, German cyber chief fears

Several Chinese providers have recently stopped updating previously open AI models, which could indicate companies are moving development...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66720

SUMMARY

The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing, causing the process to crash and resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66421

SUMMARY

OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session by injecting HTML markup into agent transcript messages processed through the sessions API. Attackers can craft a message containing inline event handler payloads such as an img tag with an onerror attribute within the 60-character rendering budget, which is stored in the session transcript and interpolated unsanitized into innerHTML on the default landing page, allowing theft of session tokens and unauthorized calls to authenticated administrative endpoints including agent instruction file modification.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 9.3)

cvss3

Base Score: 9.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

cvss4

Base Score: 8.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.8

Exploitability

2.8

REFERENCES

CVE-2026-66420

SUMMARY

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName() function within webserver.js when self-signed certificates are in use. Attackers can open cross-origin WebSocket connections to any of the twelve WebSocket endpoints, send crafted action commands to exfiltrate the server sessionKey used to sign session cookies, forge session tokens as arbitrary users, and gain full remote control of all managed devices governed by the MeshCentral instance.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-66369

SUMMARY

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap out-of-bounds read. On affected platforms, this condition reliably terminates the subscriber process and causes a denial-of-service.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66364

SUMMARY

The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing specific payload fields, an attacker controlled inner element length may exceed its enclosing length, causing the parser to over read by one byte. This out-of-bounds read reliably terminates the subscriber process, resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…