What is the official website of Chess.com ?

The official website of Chess.com is http://chess.com.

What is Chess.com's cybersecurity risk score?

Chess.com has an AI-generated cybersecurity risk score of 704 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Chess.com experienced?

According to Rankiteo, Chess.com currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Chess.com been affected by any supply chain cyber incidents ?

According to Rankiteo, Chess.com has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Chess.com have SOC 2 Type 1 certification ?

According to Rankiteo, Chess.com is not certified under SOC 2 Type 1.

Does Chess.com have SOC 2 Type 2 certification ?

According to Rankiteo, Chess.com does not hold a SOC 2 Type 2 certification.

Does Chess.com comply with GDPR ?

According to Rankiteo, Chess.com is not listed as GDPR compliant.

Does Chess.com have PCI DSS certification ?

According to Rankiteo, Chess.com does not currently maintain PCI DSS compliance.

Does Chess.com comply with HIPAA ?

According to Rankiteo, Chess.com is not compliant with HIPAA regulations.

Does Chess.com have ISO 27001 certification ?

According to Rankiteo,Chess.com is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Chess.com operate in ?

Chess.com operates primarily in the Technology, Information and Internet industry.

How many employees does Chess.com have ?

Chess.com employs approximately 1,004 people worldwide.

Does Chess.com own any subsidiaries ?

Chess.com presently has no subsidiaries across any sectors.

How many LinkedIn followers does Chess.com have ?

Chess.com's official LinkedIn profile has approximately 55,624 followers.

What is the NAICS classification code for Chess.com ?

Chess.com is classified under the NAICS code 513, which corresponds to Others.

Does Chess.com have a Crunchbase profile ?

No, Chess.com does not have a profile on Crunchbase.

Does Chess.com have a LinkedIn profile ?

Yes, Chess.com maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/chess-com.

How many cybersecurity incidents has Chess.com experienced ?

As of July 30, 2026, Rankiteo reports that Chess.com has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Chess.com have ?

Chess.com has an estimated 15,104 peer or competitor companies worldwide.

What types of cybersecurity incidents has Chess.com faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Chess.com

Boost Score +25 with badge (5 left)

704

/1000

Moderate

729

/1000

Moderate

Chess.com Vendor Cyber Rating & Cyber Score

chess.com

Add Your Compliance Badge

Chess.com is the #1 chess destination with more than 235 million members! Play for free, join tournaments, and improve your game with lessons and videos from top Grandmasters and coaches. Improve your tactics, strategy, analytical thinking and problem solving with training tools and discussion forums. Our site and apps are a labor of love, from our 100% remote global team of over 700 passionate chess fans.

Chess.com A.I CyberSecurity Scoring

Scoring History

Chess.com

Chess.com CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Chess.com

Breach

6/2025

CHE536035309042...

Loading…

A.I.

Chess.com Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Chess.com

Incidents vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for Chess.com in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Chess.com in 2026.

Incident Types Chess.com vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for Chess.com in 2026.

Incident History - Chess.com (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Chess.com Subsidiaries

Parent Company

Chess.com

Technology, Information and Internet

Website: http://chess.com

Company Size: 501-1,000 employees

No subsidiary data available for this company.

Loading…

Chess.com Similar Companies

Freelancer.com

cb freelancer.com

Thirteen-time Webby award-winning Freelancer is the world’s largest freelancing and crowdsourcing marketplace by total number of users and projects posted. More than 80 million registered users have posted over 25 million projects and contests to date in over 3,000 areas as diverse as website development, logo design, marketing, copywriting, astrophysics, aerospace engineering and manufacturing. Freelancer owns Escrow.com, the world's largest online escrow company. Freelancer also owns Loadshift, Australia's largest heavy haulage freight marketplace, with over 800 million kilometers of freight posted since inception. Freelancer Limited is listed on the Australian Securities Exchange under the ticker ASX:FLN and is quoted in the US as FRLCY.

Cimpress

cb cimpress.com

Cimpress plc (Nasdaq: CMPR) invests in and builds customer-focused, entrepreneurial, mass-customization businesses for the long term. Mass customization is a competitive strategy which seeks to produce goods and services to meet individual customer needs with near mass production efficiency. Cimpress is a strategically-focused group of more than a dozen businesses, each operating in a largely autonomous manner other than as it relates to the select few shared strategic and corporate activities that we maintain centrally. Cimpress businesses include Drukwerkdeal, Exaprint, National Pen, Pixartprinting, Printi, Vistaprint and WIRmachenDRUCK. Founded by Robert Keane, who remains President & CEO today, the company has been passionate about empowering people to make an impression through individually meaningful, personalized physical products for more than 20 years. To learn more, visit http://www.cimpress.com.

Taobao Marketplace

cb taobao.com

Launched in May 2003, Taobao Marketplace (www.taobao.com) is the online shopping destination of choice for Chinese consumers looking for wide selection, value and convenience. Shoppers choose from a wide range of products and services on Taobao Marketplace, which features hundreds of millions of product and service listings. Taobao Marketplace was China's largest online shopping destination in terms of gross merchandise volume in 2013, according to iResearch. In addition, the Mobile Taobao App was the most popular mobile commerce app in China from August 2012 to July 2014 in terms of mobile monthly active users, according to iResearch. Taobao Marketplace is a business within Alibaba Group.

Arrow Electronics

arrow.com

Arrow Electronics (NYSE:ARW) guides innovation forward for thousands of leading technology manufacturers and service providers. With 2024 sales of $27.9 billion, Arrow develops technology solutions that help improve business and daily life. Our broad portfolio that spans the entire technology landscape, helps customers design, distribute and deploy forward-thinking products that make the benefits of technology accessible to as many people as possible. Learn more at arrow.com. Are you thinking Five Years Out? Join us at careers.arrow.com.

Nothing

cb nothing.tech

Nothing exists to make tech feel exciting again. We’re building a different kind of company, one that puts design, emotion, and human creativity at the heart of everything we do. From the way our products look to how they sound, feel, and function, we care about the details that make technology not just useful, but inspiring. This is a place for the curious. The creators. The ones who ask why not and mean it. If you're drawn to bold ideas, fast moves, and work that actually makes you feel something, you’ll fit right in. We're not here to follow the rules. We're here to make better ones. Founded in London in 2020, Nothing is a design-led tech company building an alternative to the industry giants. Our products, from award-winning smartphones to expressive audio and wearables, blend iconic design with intuitive engineering to put people and creativity back at the centre of consumer tech. Backed by GV (Google Ventures), EQT Ventures, C Ventures, and influential investors like Tony Fadell (iPod), Casey Neistat, and Kevin Lin (Twitch), we’ve grown from startup to global challenger in just a few years.

YouTube

cb youtube.com

YouTube is a team-oriented, creative workplace where every single employee has a voice in the choices we make and the features we implement. We work together in small teams to design, develop, and roll out key features and products in very short time frames. Which means something you write today could be seen by millions of viewers tomorrow. And even though we’re a part of Google and enjoy all of the corporate perks, it still feels like you’re working at a startup. YouTube is headquartered in San Bruno, California, 12 miles south of San Francisco. We also have many job openings in Mountain View, and across the globe

Everforth

everforth.com

Everforth, Inc. (NYSE: EFOR) is a leading technology and digital engineering company that helps organizations adapt, innovate, and thrive in a world of constant change. Our six solution areas — AI and data, cloud and infrastructure, application and digital engineering, experience, cybersecurity, and enterprise platforms — accelerate time to value for our commercial and federal clients. Powered by proprietary assets, accelerators, and proven expertise, Everforth turns complexity into progress and delivers measurable outcomes. Everforth: Adapt and Thrive™.

Primary School

primaryschool.com.au

www.primaryschool.com.au is a directory of sites for students and lesson plans and reference material for teachers and parents. It is currently averaging up to 350,000 unique visitors a month and has over 44,000 subscribers to its free weekly newsletter which showcases the latest internet based resources. The site ranks first in results for primary school related searches in Google. It is popular because it is simple, safe and relevant.

Synechron

synechron.com

At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron’s progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our FinLabs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more. Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 14,000+, and has 55 offices in 20 countries within key global markets. For more information on the company, please visit our website:www.synechron.com.

Loading…

NEWS

Chess.com CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 24, 2025 08:00 AM

Viswanathan Anand joins NIIT Foundation as Ambassador for Cybersecurity Awareness Initiative

NIIT Foundation, a Delhi-based not-for-profit organisation, has announced the appointment of five-time World Chess Champion and Padma...

Read Article

December 23, 2025 08:00 AM

Viswanathan Anand joins NIIT Foundation as Ambassador for its cybersecurity awareness initiative

NIIT Foundation, a Delhi-based not-for-profit organisation, has announced five-time World Chess Champion Viswanathan Anand as the Ambassador...

Read Article

November 14, 2025 08:00 AM

Hacking with Burp AI in the Chesspocalypse: API expert Corey Ball showcases how Burp AI can support pentesters.

AI isn't just reshaping cybersecurity - it's challenging testers to rethink their entire playbook. In his latest article, “Hacking with Burp...

Read Article

October 10, 2025 07:00 AM

Chess.com discloses recent data breach via file transfer app

The routine failure of traditional, perimeter-based security constructs against these threats is undeniable.

Read Article

September 09, 2025 07:00 AM

How playing chess from age 6 helped NFL star Larry Fitzgerald 'slow down' his thoughts while managing ADHD and think strategically as an investor

The celebrated Arizona Cardinals wide receiver started playing when he was six years old, and is currently an investor in chess.com.

Read Article

September 08, 2025 07:00 AM

News - Chess.com Reports Data Breach via Third-Party File Transfer Tool

Online chess platform Chess.com said it suffered a significant data security breach after threat actors gained unauthorised access to a...

Read Article

September 08, 2025 07:00 AM

SVG phishing, Anthropic piracy suit, Qantas docks executives

Malware phishing campaign hidden in SVG files, Anthropic to pay $1.5bn in book piracy lawsuit, Qantas penalizes executives for cyberattack.

Read Article

September 05, 2025 07:28 AM

Chess.com Confirms Data Breach Exposing Information of 4,541 Users

The Chess.com data breach occurred on June 5 and June 18, 2025, but was not discovered until June 19.

Read Article

September 05, 2025 07:00 AM

Chess.com Hit by Limited Data Breach Linked to 3rd-Party File Transfer Tool

Chess.com confirms a limited data breach affecting 4500 users after a 3rd-party file transfer tool was hacked. No passwords or payments...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-67595

SUMMARY

VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template responsible for rendering security OTP emails, allowing remote attackers to execute unauthorized code in any browser that renders the affected email template with JavaScript enabled. The payload establishes a WebSocket connection to a hardcoded command-and-control endpoint, installs a password-field keylogger using MutationObserver to capture dynamically added inputs, scrapes WhatsApp Web DOM content, and accepts remote commands to redirect or overwrite the rendered page.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.2

REFERENCES

CVE-2026-15157

SUMMARY

undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, an application that passes a hand-rolled blob-like body (via request, stream, pipeline, or dispatch) whose type is derived from untrusted input allows an attacker to inject CRLF sequences and append arbitrary HTTP headers, potentially smuggling a second request past the upstream. Native Blob objects are safe because their constructor strips CRLF from the type, and fetch is unaffected because it validates headers, but ecosystem libraries that build duck-typed blob shapes from user input can reach the vulnerable path. This is the same defect class as CVE-2022-35948 and CVE-2026-1527, on a header sink that the earlier fixes did not cover. The issue is fixed in undici 6.28.0, 7.29.0, and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 4.2)

cvss3

Base Score: 4.2

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

1.6

REFERENCES

CVE-2026-14643

SUMMARY

undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. In undici from 7.0.0 up to before 7.29.0 and from 8.0.0 up to before 8.9.0, the parser either drops the directive or stores a field name with literal quote characters, so the cache decision fails to recognize the qualification and the response is stored. In shared-cache mode, this lets a response containing one user's authenticated data be served from cache to a later caller, including an unauthenticated one, when both requests resolve to the same cache key. It affects applications that enable the cache interceptor in shared mode, forward Authorization headers upstream, and receive cacheable responses with qualified directives padded with whitespace around the equals sign. This is the whitespace-around-equals variant that the fix for CVE-2026-9678 did not normalize, and it is fixed in undici 7.29.0 and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2025-69949

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and email.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2025-69945

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/hospitalmanagementsystemproject/20250811-hospital-management-system-edit-patient.php-editid-sqli/20250811-hospital-management-system-edit-patient.php-editid-sqli.md

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…