What is the official website of Cashea ?

The official website of Cashea is https://www.cashea.app.

What is Cashea's cybersecurity risk score?

Cashea has an AI-generated cybersecurity risk score of 715 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Cashea experienced?

According to Rankiteo, Cashea currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Cashea been affected by any supply chain cyber incidents ?

According to Rankiteo, Cashea has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Cashea have SOC 2 Type 1 certification ?

According to Rankiteo, Cashea is not certified under SOC 2 Type 1.

Does Cashea have SOC 2 Type 2 certification ?

According to Rankiteo, Cashea does not hold a SOC 2 Type 2 certification.

Does Cashea comply with GDPR ?

According to Rankiteo, Cashea is not listed as GDPR compliant.

Does Cashea have PCI DSS certification ?

According to Rankiteo, Cashea does not currently maintain PCI DSS compliance.

Does Cashea comply with HIPAA ?

According to Rankiteo, Cashea is not compliant with HIPAA regulations.

Does Cashea have ISO 27001 certification ?

According to Rankiteo,Cashea is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Cashea operate in ?

Cashea operates primarily in the Financial Services industry.

How many employees does Cashea have ?

Cashea employs approximately 597 people worldwide.

Does Cashea own any subsidiaries ?

Cashea presently has no subsidiaries across any sectors.

How many LinkedIn followers does Cashea have ?

Cashea's official LinkedIn profile has approximately 770 followers.

What is the NAICS classification code for Cashea ?

Cashea is classified under the NAICS code 52, which corresponds to Finance and Insurance.

Does Cashea have a Crunchbase profile ?

Yes, Cashea has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/cashea.

Does Cashea have a LinkedIn profile ?

Yes, Cashea maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/cashea.

How many cybersecurity incidents has Cashea experienced ?

As of July 17, 2026, Rankiteo reports that Cashea has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Cashea have ?

Cashea has an estimated 32,303 peer or competitor companies worldwide.

What types of cybersecurity incidents has Cashea faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Cashea

Boost Score +25 with badge (5 left)

715

/1000

Moderate

740

/1000

Moderate

Cashea Vendor Cyber Rating & Cyber Score

cashea.app

cb in

Add Your Compliance Badge

En Cashea, tenemos un propósito que nos une: habilitar posibilidades que impulsen a las personas a seguir creciendo. Para eso, tenemos el compromiso de ser una alternativa accesible que ayude a las personas a alcanzar las cosas que quieren y necesitan. Cashea nació en 2022 como el primer compra ahora y paga después de Venezuela, contribuyendo con optimismo a la recuperación de la confianza de los venezolanos. Desde entonces, hemos logrado grandes resultados desarrollando servicios financieros simples, transparentes y centrados en nuestros usuarios.

Cashea A.I CyberSecurity Scoring

Scoring History

Cashea

Cashea CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Cashea

Cyber Attack

3/2026

YUMCAS177429117...

Loading…

A.I.

Cashea Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Cashea

Incidents vs Financial Services Industry Avg (This Year)

Cashea has 43.18% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Cashea has 4.76% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types Cashea vs Financial Services Industry Avg (This Year)

Cashea reported 1 incidents this year: 1 cyber attacks, 0 ransomware, 0 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - Cashea (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Cashea Subsidiaries

Parent Company

Cashea

Financial Services

Website: https://www.cashea.app

Company Size: 501-1,000 employees

No subsidiary data available for this company.

Loading…

Cashea Similar Companies

Deutsche Bank

cb db.com

Deutsche Bank is the leading German bank with strong European roots and a global network. The bank focuses on its strengths in a Corporate Bank newly created in 2019, a leading Private Bank, a focused investment bank and in asset management. We provide financial services to companies, governments, institutional investors, small and medium-sized businesses and private individuals. Deutsche Bank was founded in 1870 to accompany German businesses into the world, and has worked across borders ever since. Useful links: Jobs https://www.db.com/careers. Netiquette at https://www.db.com/netiquette. Data protection policy https://www.db.com/DataProtection. Imprint https://www.db.com/imprint.

Prudential plc

prudentialplc.com

We are Prudential. For Every Life, For Every Future. Prudential provides life and health insurance and asset management in Greater China, ASEAN, India and Africa. Prudential’s mission is to be the most trusted partner and protector for this generation and generations to come, by providing simple and accessible financial and health solutions. We are headquartered in Hong Kong and have dual primary listings on the Stock Exchange of Hong Kong and the London Stock Exchange. Visit our websites for more information: Prudential plc: https://www.prudentialplc.com/ Prudence Foundation: https://www.prudentialplc.com/en/prudence-foundation

Banco Davivienda

cb davivienda.com

En Davivienda creemos en un mundo financiero sin barreras que facilite la vida a las personas, las empresas, las ciudades y municipios. Por esta razón hoy somos más de 19.000 personas innovando y creando cada día soluciones y ofertas exclusivas para 10 millones de clientes que permitan una mayor inclusión financiera y un mayor desarrollo sostenible.

Raymond James

cb raymondjames.com

Founded in 1962 and a public company since 1983, Raymond James Financial, Inc. is a Florida-based diversified holding company providing financial services to individuals, corporations and municipalities through its subsidiary companies engaged primarily in investment and financial planning, in addition to capital markets and asset management. The firm's stock is traded on the New York Stock Exchange (RJF). Through its three broker/dealer subsidiaries, Raymond James Financial has approximately 8,700 financial advisors throughout the United States, Canada and overseas. Total client assets are $1.26 trillion (as of 10/25/2023). Raymond James has been recognized nationally for its community support and corporate philanthropy. The company has been ranked as one of the best in the country in customer service, as a great place to work and as a national leader in support of the arts.

Nationale-Nederlanden

nn.nl

NN Group is an international financial services company, active in 10 countries, with a strong presence in a number of European countries and Japan. Our roots lie in the Netherlands, with a rich history of more than 175 years. With our 15,000 employees, NN Group provides retirement services, pensions, insurance, banking and investments to approximately 18 million customers. NN Group includes Nationale-Nederlanden, NN, ABN AMRO Insurance, Movir, AZL, BeFrank, OHRA and Woonnu. NN Group opened for trading on 2 July 2014 on Euronext Amsterdam under the symbol ‘NN’ after its initial public offering (IPO). For more than 175 years, our company has merged, grown and changed, but the core of who we are has remained the same. At NN Group, we put our resources, expertise, and networks to use for the well-being of our customers, the advancement of our communities, the preservation of our planet, and for the promotion of a stable, inclusive, and sustainable economy. Our purpose is to help people care for what matters most to them. Because what matters to them matters to us.

BlackRock

blackrock.com

BlackRock is a global asset manager and technology provider dedicated to helping more and more people experience financial well-being. We help millions of people invest to build savings that serve them throughout their lives. We always start with our clients’ needs and look to offer them more quality choices for how and where to invest their money. Our global investments platform offers our clients access to the world’s markets while making investing easier and more affordable. And with offices in more than 40 countries, our global expertise helps them navigate changing markets to stay ahead of the curve. Follow us for global insights shaping the economy, conversations about financial well-being and more information on culture and careers at BlackRock. https://bit.ly/3n6Fxdy

Shriram Finance Limited

shriramfinance.in

Shriram Finance is the country’s biggest retail NBFC offering credit solutions for commercial vehicles, two-wheeler loans, car loans, home loans, gold loans, personal and small business loans. We are part of the 50-year-old Shriram Group, a financial conglomerate that has emerged as a trusted partner in creating transformative experiences and lasting impressions in customers’ lives. In November 2022, Shriram Group’s entities – Shriram Transport Finance Company Limited, Shriram City Union Finance Limited , and Shriram Capital Limited – merged to form Shriram Finance Limited . As on September 30, 2024, with a network of 3,149 branches and a workforce of more than 77,764, Shriram Finance has combined Assets Under Management (AUM) worth ₹243,042 crores.

Global Payments Inc.

globalpayments.com

Global Payments (NYSE: GPN) is a leading payment technology and software company that powers commerce for businesses of all sizes worldwide. We help businesses grow with confidence by delivering innovative solutions that enable seamless payment acceptance, smarter operations and exceptional client experiences – online, in store and everywhere in between. With its global reach, local expertise and scale, Global Payments manages trillions in payments volume and billions of transactions across more than 175 countries. Headquartered in Atlanta, Georgia, Global Payments is a Fortune 500® company and a member of the S&P 500. Learn more at company.globalpayments.com and follow Global Payments on X (@globalpayinc), LinkedIn and Facebook.

Grupo Salinas

gruposalinas.com

Grupo Salinas es un conjunto de empresas dinámicas, que se caracterizan por la evolución constante y la innovación, enfocadas en la creación de valor económico, social y ambiental. Estamos en industrias diversas como comercio especializado, servicios financieros, telecomunicaciones y medios de comunicación, entre otros sectores. Nuestra Visión: Crear valor y prosperidad para millones de familias con base en una visión de negocios incluyente. Nuestra Misión: Ser el grupo empresarial mexicano más influyente con el mejor equipo de trabajo y con un modelo de gestión de alto desempeño; que permita la innovación permanente e impulsar la libertad, el estado de derecho y la igualdad de oportunidades. Sabemos que entender al cliente y ofrecerle todo lo que necesita para mejorar su calidad de vida es la vía para crear valor. Las acciones y estrategias del Grupo están alineadas a los más altos estándares internacionales en beneficio de la sociedad. Nuestro propósito es ofrecer excelentes productos y servicios que mejoren la calidad de vida de la población, sobre todo en los sectores menos favorecido. Grupo Salinas está integrada por: • Más de 100,000 colaboradores. • Banco Azteca, Tiendas Elektra, Italika, TV Azteca, Totalplay, Grupo Dragón, UPAX, Tiendas Neto, entre otras. • Estamos cerca de nuestros clientes en más de 6,000 puntos de contacto. • Presencia en 5 países: México, Estados Unidos, Guatemala, Honduras y Panamá.

Loading…

NEWS

Cashea CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 23, 2026 05:32 PM

Venezuelan Startups Have a Blindspot: Cybersecurity

Recent data leaks at Cashea and Yummy, two leading tech players, signal a deeper vulnerability in an industry ripe for transformation.

Read Article

March 10, 2026 08:53 AM

Critical Pingora Vulnerabilities Expose Cloudflare to Request Smuggling and Cache Poisoning Attacks

Pingora is Cloudflare's Rust‑based proxy framework, used both inside Cloudflare and by external adopters, with optional caching provided via pingora-cache...

Read Article

March 10, 2026 07:00 AM

Cloudflare Pingora Vulnerabilities Allows Request Smuggling & Cache Poisoning Attacks

Cloudflare patched Pingora flaws enabling HTTP request smuggling and cache poisoning in internet-exposed proxies.

Read Article

February 18, 2026 08:00 AM

Threat Actors Advertising New ‘ClickFix’ Payload That Stores Malware within Browser Cache

Cybersecurity researchers have uncovered a new iteration of the 'ClickFix' social engineering campaign, which now employs a sophisticated...

Read Article

February 17, 2026 08:00 AM

New ‘ClickFix’ Malware Payload Targets Browser Cache, Warns Cybersecurity Experts

‼️ A threat actor is advertising a “ClickFix” payload delivery method that allegedly stores malware within browser cache to evade detection and...

Read Article

January 14, 2026 08:00 AM

10 Dangerous DNS Attacks Types & Prevention Measures – 2026

DNS Attacks Types: 1. DNS Cache Poisoning Attack 2. Distributed Reflection Denial of Service 3. DNS Hijacking 4. Phantom Domain Attack.

Read Article

December 26, 2025 08:00 AM

AMD's dual-cache Ryzen 9 9950X3D2 appears in first benchmark leaks — gaming-focused CPU features 192MB of L3 cache stacked across both CCDs

In late October, AMD's mid-cycle Zen 5 refresh leaked, giving us a glimpse at two new X3D CPUs the company has in store for CES 2026.

Read Article

November 24, 2025 08:00 AM

PoC Released for W3 Total Cache RCE Vulnerability Exposing 1+ Million Websites

The vulnerability stems from an unauthenticated command injection flaw in W3 Total Cache's page-caching mechanism.

Read Article

November 18, 2025 08:00 AM

W3 Total Cache Command Injection Vulnerability Exposes 1 Million WordPress Sites to RCE Attacks

A vulnerability found in W3 Total Cache plugin, one of WordPress's most popular caching solutions used by approximately 1 million websites.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-44453

SUMMARY

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 6b5370d, h2o is vulnerable to a Denial of Service attack when calling alloca under certain conditions. When serving static files, h2o builds the file path on stack, by calling alloca. The maximum size of the memory allocated using alloca can be as huge as ~600KB, which exceeds the default pthread stack size used by musl libc (128KB). If the amount of memory allocated by alloca exceeds the stack size, the h2o server crashes with a segmentation fault, while it tries to touch the guard page. This issue has been fixed by commit 6b5370d.

Published

Date2026-07-16

Updated

Date2026-07-16

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-44452

SUMMARY

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. Prior to commit 8dc37cb, when h2o receives a ClientHello message over TLS or QUIC and it contains a zero-length SNI extension, the h2o server runs over the zero-length hostname while trying to copy the hostname, assuming that it is NULL-terminated. This is a potential denial-of-service attack vector in sense that it might trigger segmentation violation. This issue has been fixed by commit 8dc37cb.

Published

Date2026-07-16

Updated

Date2026-07-16

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-44436

SUMMARY

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b178e6, Quicly is vulnerable to a Denial of Service attack through connection state corruption. In QUIC Invariants, the maximum length of a Connection ID is 255 bytes, while QUIC version 1 further restricts the maximum to 20 bytes. Quicly implements QUIC version 1 and therefore its CID buffers are limited to 20 bytes. However, to be able to respond to unknown versions of QUIC, its packet decoder accepts Connection IDs of up to 255 bytes. As its CID buffers are merely 20 bytes long, Quicly must reject QUIC version 1 packets with Connection IDs longer than that. The command line tool bundled with Quicly has had that check, however the library itself lacked such enforcement. As a consequence, when used by applications that lack their own enforcement, the connection state becoming inconsistent to buffer overrun. Fortunately, the overflow stops within the allocated chunk of memory, but nevertheless, the bug leads to assertion failures. This issue has been fixed by commit 8b178e6.

Published

Date2026-07-16

Updated

Date2026-07-16

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-44435

SUMMARY

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 937d0e9, an assertion failure is raised when the total number of valid handshake messages received over a CRYPTO stream of a single packet number space exceeds 32KB, causing a Denial of Service. This issue has been fixed by commit 937d0e9.

Published

Date2026-07-16

Updated

Date2026-07-16

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-44434

SUMMARY

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit dccf5d4, Quicly was vulnerable to stateless reset injection through lack of packet entry validation. The QUIC protocol is designed to withstand packet injection attacks, once the handshake is complete. Only packets that carry some secret patterns are considered as stateless resets. Quicly allows the peer to share up to 4 such patterns per connection. However, until now, it failed to determine which of the 4 slots that it uses to retain the secret patterns contains a valid entry. As the slots are zero-initialized, the failure meant that, unless the peer advertised 4 of such patterns, an all-zero pattern was treated as a stateless reset.In effect, this allowed an on-path attacker to reset QUIC connections governed by Quicly. This issue has been fixed by commit dccf5d4.

Published

Date2026-07-16

Updated

Date2026-07-16

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…