What is the official website of Castlight Health ?

The official website of Castlight Health is https://www.castlighthealth.com/.

What is Castlight Health's cybersecurity risk score?

Castlight Health has an AI-generated cybersecurity risk score of 761 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Castlight Health experienced?

According to Rankiteo, Castlight Health currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Castlight Health been affected by any supply chain cyber incidents ?

According to Rankiteo, Castlight Health has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Castlight Health have SOC 2 Type 1 certification ?

According to Rankiteo, Castlight Health is not certified under SOC 2 Type 1.

Does Castlight Health have SOC 2 Type 2 certification ?

According to Rankiteo, Castlight Health does not hold a SOC 2 Type 2 certification.

Does Castlight Health comply with GDPR ?

According to Rankiteo, Castlight Health is not listed as GDPR compliant.

Does Castlight Health have PCI DSS certification ?

According to Rankiteo, Castlight Health does not currently maintain PCI DSS compliance.

Does Castlight Health comply with HIPAA ?

According to Rankiteo, Castlight Health is not compliant with HIPAA regulations.

Does Castlight Health have ISO 27001 certification ?

According to Rankiteo,Castlight Health is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Castlight Health operate in ?

Castlight Health operates primarily in the Hospitals and Health Care industry.

How many employees does Castlight Health have ?

Castlight Health employs approximately 339 people worldwide.

Does Castlight Health own any subsidiaries ?

Castlight Health presently has no subsidiaries across any sectors.

How many LinkedIn followers does Castlight Health have ?

Castlight Health's official LinkedIn profile has approximately 38,819 followers.

What is the NAICS classification code for Castlight Health ?

Castlight Health is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does Castlight Health have a Crunchbase profile ?

Yes, Castlight Health has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/castlight-health.

Does Castlight Health have a LinkedIn profile ?

Yes, Castlight Health maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/castlight-health.

How many cybersecurity incidents has Castlight Health experienced ?

As of July 29, 2026, Rankiteo reports that Castlight Health has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Castlight Health have ?

Castlight Health has an estimated 33,432 peer or competitor companies worldwide.

What types of cybersecurity incidents has Castlight Health faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Castlight Health

Boost Score +25 with badge (5 left)

761

/1000

Fair

786

/1000

Fair

Castlight Health Vendor Cyber Rating & Cyber Score

castlighthealth.com

cb in

Add Your Compliance Badge

Castlight makes it easy for members to understand, use, and maximize their healthcare benefits by connecting them with the right care at the right time for their personal health journey. Castlight also helps employers effectively select, manage, and deploy benefits through a convenient marketplace of choice and value or seamless integration of their existing benefits ecosystems.

Castlight Health A.I CyberSecurity Scoring

Scoring History

Castlight Health

Castlight Health CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Castlight Health

Cyber Attack

6/2020

CAS231090125

Loading…

A.I.

Castlight Health Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Castlight Health

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Castlight Health in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Castlight Health in 2026.

Incident Types Castlight Health vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Castlight Health in 2026.

Incident History - Castlight Health (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Castlight Health Subsidiaries

Parent Company

Castlight Health

Hospitals and Health Care

Website: https://www.castlighthealth.com/

Company Size: 501-1,000 employees

No subsidiary data available for this company.

Loading…

Castlight Health Similar Companies

Apollo Hospitals

apollohospitals.com

Driven by the vision of its Chairman, Dr. Prathap C. Reddy, the Apollo Hospitals Group pioneered corporate healthcare in India. Apollo revolutionized healthcare when Dr Prathap Reddy opened the first hospital in Chennai in 1983. Today Apollo is the world’s largest integrated healthcare platform with over 10,000 beds across 73 hospitals, over 6000 pharmacies and over 2500 clinics and diagnostic centers as well as 500+ telemedicine centers. Since its inception, Apollo has emerged as one of the world's premier cardiac centers, having conducted over 300,000+ angioplasties and 200,000+ surgeries. Apollo continues to invest in research to bring the most cutting-edge technologies, equipment and treatment protocols to ensure patients have the best available care in the world. Apollo’s 100,000 family members are dedicated to bringing you the best care and leaving the world better than we found it.

Greater Paris University Hospitals - AP-HP

aphp.fr

AP-HP (Greater Paris University Hospitals) is a European world-renowned university hospital. Its 39 hospitals treat 8 million people every year: in consultation, emergency, during scheduled or home hospitalizations. The AP-HP provides a public health service for everyone, 24 hours a day. This mission is a duty as well as a great source of pride. AP-HP is the leading employer in the Greater Paris area: 100.000 staff members – doctors, researchers, paramedical staff, administrative personnel and workers – work there.

Ministry Of Health, Malaysia (KKM)

moh.gov.my

The Ministry of Health (Malay: Kementerian Kesihatan), abbreviated MOH, is a ministry of the Government of Malaysia that is responsible for health system: health behavior, cancer, public health, health management, medical research, health systems research, respiratory medicine, health promotion, healthcare tourism, medical device, blood collection, leprosy control, clinical research, health care, dental care, health institution, laboratory, pharmaceutical, patient safety.

UT Southwestern Medical Center

utsouthwestern.edu

UT Southwestern is an academic medical center, world-renowned for its research, regarded among the best in the country for medical education and for clinical and scientific training, and nationally recognized for the quality of care its faculty provides to patients at UT Southwestern’s University Hospital & Clinics and affiliated institutions. The Medical Center includes three degree-granting institutions: UT Southwestern Medical School, UT Southwestern Graduate School of Biomedical Sciences, and UT Southwestern School of Health Professions. - The schools train nearly 3,700 medical, graduate, and health profession students, residents, and postdoctoral fellows each year. - Ongoing support from federal agencies, along with foundations, individuals, and corporations, provides more than $524 million per year to fund faculty research. - UT Southwestern physicians provide care in about 80 specialties to more than 117,000 hospitalized patients, more than 360,000 emergency room cases, and oversee nearly 3 million outpatient visits a year. - UT Southwestern has approximately 25,000 employees and an operating budget of $3.7 billion. - UT Southwestern is the #1 hospital in Dallas-Fort Worth for the ninth year in a row, according to U.S. News & World Report. In addition, 12 of our specialties are nationally ranked for 2025-2026 – the most of any hospital in Texas. Those specialties include: Cancer; Cardiology, Heart & Vascular Surgery; Diabetes & Endocrinology; Gastroenterology & GI Surgery; Geriatrics; Neurology & Neurosurgery; Obstetrics & Gynecology; Orthopedics; Otolaryngology – Ear, Nose & Throat; Pulmonology & Lung Surgery; Rehabilitation; and Urology.

Hapvida NotreDame Intermédica

hapvida.com.br

Com 80 anos de experiência, a Hapvida é hoje a maior empresa de saúde integrada da América Latina. A companhia, que possui mais de 73 mil colaboradores, atende 16 milhões de beneficiários de saúde e odontologia espalhados pelas cinco regiões do Brasil. Todo o aparato foi construído a partir de uma visão voltada ao cuidado de ponta a ponta, a partir de 86 hospitais, 78 prontos atendimentos, 363 clínicas médicas e 305 centros de diagnóstico por imagem e coleta laboratorial, além de unidades especificamente voltadas ao cuidado preventivo e crônico. Dessa combinação de negócios, apoiada em qualidade médica e inovação, resulta uma empresa com os melhores recursos humanos e tecnológicos para os seus clientes.

Children's Hospital of Philadelphia

cb chop.edu

Since its start in 1855 as the nation's first hospital devoted exclusively to caring for children, The Children's Hospital of Philadelphia has been the birthplace for many dramatic firsts in pediatric medicine. The Hospital has fostered medical discoveries and innovations that have improved pediatric healthcare and saved countless children’s lives. Today, The Children's Hospital of Philadelphia is one of the leading pediatric hospitals and research facilities in the world. Our 150 years of innovation and service to our patients, their families and our community reflect an ongoing commitment to exceptional patient care, training new generations of pediatric healthcare providers and pioneering significant research initiatives.

Advocate Health Care

cb advocatehealth.com

Advocate Health Care is proud to be a part of Advocate Health, the third-largest nonprofit integrated health system in the U.S. Advocate Health is the third-largest nonprofit, integrated health system in the United States, created from the combination of Advocate Aurora Health and Atrium Health. Providing care under the names Advocate Health Care in Illinois; Atrium Health in the Carolinas, Georgia and Alabama; and Aurora Health Care in Wisconsin, Advocate Health is a national leader in clinical innovation, health outcomes, consumer experience and value-based care. Headquartered in Charlotte, North Carolina, Advocate Health services nearly 6 million patients and is engaged in hundreds of clinical trials and research studies, with Wake Forest University School of Medicine serving as the academic core of the enterprise. It is nationally recognized for its expertise in cardiology, neurosciences, oncology, pediatrics and rehabilitation, as well as organ transplants, burn treatments and specialized musculoskeletal programs. Advocate Health employs nearly 150,000 team members across 68 hospitals and over 1,000 care locations, and offers one of the nation’s largest graduate medical education programs with over 2,000 residents and fellows across more than 200 programs. Committed to providing equitable care for all, Advocate Health provides nearly $5 billion in annual community benefits. Learn more: advocatehealth.org Read our social media community engagement guidelines: aah.org/social

Rede D'Or

rededorsaoluiz.com.br

A Rede D’Or é a maior rede de saúde da América Latina. São 79 hospitais e mais de 60 clínicas oncológicas com presença nos estados de AL, BA, CE, DF, MA, MG, MS, PA, PB, PE, PR, RJ, SE, SP. Referência em qualidade técnica, a Rede D’Or atua em serviços complementares como banco de sangue, diálise e ambulatórios de diversas especialidades. A Rede D’Or também investe em inovação e pesquisa clínica por meio do IDOR - Instituto D’Or de Pesquisa e Ensino. Siga a Rede D’Or também em: Instagram: @rededor_oficial Facebook: https://www.facebook.com/rededor YouTube: https://www.youtube.com/user/rededorsaoluiz

Elevance Health

elevancehealth.com

Fueled by our bold purpose to improve the health of humanity, we are transforming from a traditional health benefits organization into a lifetime trusted health partner.   Our nearly 100,000 associates serve more than 118 million people, at every stage of health. We address a full range of needs with an integrated whole health approach, powered by industry-leading capabilities and a digital platform for health.  We believe that improving health for everyone is possible. It begins by redefining health, reimagining the health system, and strengthening our communities.

Loading…

NEWS

Castlight Health CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 20, 2026 06:21 PM

Alliance of companies will help accelerate $50 billion in rural health programs

The Alliance for Advancing Rural Healthcare includes Arcadia, Castlight Health, Covista, Mission Mobile Medical, Telemedicine.com,...

Read Article

February 20, 2026 03:33 PM

SAIC launches alliance to accelerate state-led execution of $50B rural health care transformation program

The Alliance includes Walgreens, Arcadia, Castlight Health, Covista, Mission Mobile Medical, Telemedicine.com and TruBridge.

Read Article

February 19, 2026 06:45 PM

Health tech companies announce new alliance to assist Rural Health Transformation Program

CMS has awarded first round of money for state health care programs in $50B federal plan.

Read Article

February 18, 2026 09:33 PM

SAIC Launches Alliance to Accelerate State-Led Execution of $50 Billion Rural Healthcare Transformation Program

Bringing together Arcadia, Castlight Health, Covista, Mission Mobile Medical, Telemedicine.com, TruBridge, and Walgreens to help states...

Read Article

April 18, 2025 07:00 AM

Castlight Health intros virtual urgent care for members

The round-the-clock service, powered by technology from Fabric and integrated with Castlight's benefits navigation app, offers chat-based...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66064

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection and block-list checks. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-66063

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-64863

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-62325

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allowed unauthenticated file access. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-59921

SUMMARY

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without validating or sanitizing CRLF characters (\r\n). Since MIME headers are delimited by CRLF, an attacker who controls the filename can inject arbitrary MIME headers into the multipart body part. The root cause is that neither the encoder nor the FileUpload implementations' setFilename() methods, which only check for null, neutralize CRLF characters before the filename is embedded into the header. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.1

REFERENCES

https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…