What is the official website of Databricks ?

The official website of Databricks is https://databricks.com.

What is Databricks's cybersecurity risk score?

Databricks has an AI-generated cybersecurity risk score of 736 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Databricks experienced?

According to Rankiteo, Databricks currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Databricks been affected by any supply chain cyber incidents ?

According to Rankiteo, Databricks has been affected by a supply chain cyber incident involving Databricks, with the incident ID CAR1787696780.

Does Databricks have SOC 2 Type 1 certification ?

According to Rankiteo, Databricks is not certified under SOC 2 Type 1.

Does Databricks have SOC 2 Type 2 certification ?

According to Rankiteo, Databricks does not hold a SOC 2 Type 2 certification.

Does Databricks comply with GDPR ?

According to Rankiteo, Databricks is not listed as GDPR compliant.

Does Databricks have PCI DSS certification ?

According to Rankiteo, Databricks does not currently maintain PCI DSS compliance.

Does Databricks comply with HIPAA ?

According to Rankiteo, Databricks is not compliant with HIPAA regulations.

Does Databricks have ISO 27001 certification ?

According to Rankiteo,Databricks is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Databricks operate in ?

Databricks operates primarily in the Software Development industry.

How many employees does Databricks have ?

Databricks employs approximately 17,312 people worldwide.

Does Databricks own any subsidiaries ?

Databricks presently has no subsidiaries across any sectors.

How many LinkedIn followers does Databricks have ?

Databricks's official LinkedIn profile has approximately 1,344,650 followers.

What is the NAICS classification code for Databricks ?

Databricks is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Databricks have a Crunchbase profile ?

No, Databricks does not have a profile on Crunchbase.

Does Databricks have a LinkedIn profile ?

Yes, Databricks maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/databricks.

How many cybersecurity incidents has Databricks experienced ?

As of October 6, 2026, Rankiteo reports that Databricks has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Databricks have ?

Databricks has an estimated 31,077 peer or competitor companies worldwide.

What types of cybersecurity incidents has Databricks faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Databricks

Boost Score +25 with badge (5 left)

736

/1000

Moderate

761

/1000

Fair

Databricks Vendor Cyber Rating & Cyber Score

databricks.com

Add Your Compliance Badge

Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and over 60% of the Fortune 500 — rely on Databricks to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified Data Intelligence Platform that includes Agent Bricks, Lakeflow, Lakehouse, Lakebase and Unity Catalog. --- Databricks applicants Please apply through our official Careers page at databricks.com/company/careers. All official communication from Databricks will come from email addresses ending with @databricks.com or @goodtime.io (our meeting tool).

Databricks

Databricks CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Databricks

Breach

8/2026

Databricks

CAR1787696780

Loading…

A.I.

Databricks Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Databricks

Incidents vs Software Development Industry Avg (This Year)

Databricks has 4.76% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Databricks has 0.99% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types Databricks vs Software Development Industry Avg (This Year)

Databricks reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.

Incident History - Databricks (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Databricks Subsidiaries

Databricks

Software Development

Website: https://databricks.com

Company Size: 5,001-10,000 employees

Databricks for IndustrialsManufacturing

Databricks for Healthcare and Life SciencesSoftware Development

Databricks for Public SectorGovernment Administration

Databricks for Media, Advertising, and TelecomMedia and Telecommunications

Databricks for Consumer IndustriesRetail

Loading…

Databricks Similar Companies

IGT

IGT.com

IGT is a leading global provider of gaming, digital and financial technology solutions, formed through the combination of International Game Technology PLC’s Gaming & Digital Business and Everi Holdings Inc. IGT’s offering spans gaming machines, game content and systems, iGaming, sports betting, cash access, loyalty and player engagement solutions, enabling it to deliver integrated, customer-centric experiences across land-based and digital environments. Organized into Gaming, Digital and FinTech business units, IGT drives innovation, efficiency and value for casino, digital and hospitality operators worldwide. The company is headquartered in Las Vegas.

Pitney Bowes

cb pitneybowes.com

Pitney Bowes is a technology-driven company that provides digital shipping solutions, mailing innovation, and financial services to clients around the world – including more than 90 percent of the Fortune 500. Small businesses to large enterprises, and government entities rely on Pitney Bowes to reduce the complexity of sending mail and parcels.

Expedia Group

expediagroup.com

At Expedia Group (NASDAQ: EXPE), we believe travel is a force for good – it opens minds, builds connections, and bridges divides. We create transformative tech that enables unforgettable experiences for all travelers, everywhere. Our trusted family of brands are known and loved by millions, and we power more trips than anyone else. To learn more about our vision of a more open world through travel, visit www.expediagroup.com. We’re committed to providing an inclusive and accessible recruiting experience for candidates with disabilities, or other physical or mental health conditions. If you require an accommodation or adjustment for any part of the application or recruitment process, please let us know by completing our Accommodation Request Form or contacting your recruiter. Employment opportunities and job offers at Expedia Group will always come from Expedia Group’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident about who they are. We do not send job offers via email, or any other messaging tools, to individuals we have not had prior contact with. Our email domain is @expediagroup.com. Our official careers website, where you can to find and apply for job openings, is careers.expediagroup.com/jobs. If you require customer service support to cancel, change or ask about a refund for your trip, you can connect with our 24/7 Virtual Agent through the following links: Expedia: https://www.expedia.com/helpcenter Hotels.com: https://service.hotels.com/en-us/ Vrbo: https://help.vrbo.com/ For additional assistance, direct message us on Twitter @ExpediaHelp with your itinerary number and email address: https://twitter.com/ExpediaHelp

Booking.com

booking.com

A career at Booking.com is all about the journey, helping you explore new challenges in a place where you can be your best self. With plenty of exciting twists, turns and opportunities along the way. We’ve always been pioneers, on a mission to shape the future of travel through cutting edge technology, to make it easier for everyone to enjoy amazing experiences wherever they go. Under a desert sky, or in the heart of a bustling city. Discovering the perfect hideaway, or the perfect paella. When you join us, you’ll be part of a community where taking a different path and trying something new is celebrated and supported. And where making a difference counts. We’re determined to make the world of travel more sustainable, more accessible, and more inclusive, to create a positive impact on a global scale. That’s why we’re always looking for people who search for better solutions, the ones eager to stray off the beaten path to find new ways of doing things. Because at Booking.com it’s more than a job, it’s a journey we’re on together.

GlobalLogic

cb globallogic.com

GlobalLogic, a Hitachi Group company, is a trusted partner in design, data, and digital engineering for the world’s largest and most innovative companies. Since our inception in 2000, we have been at the forefront of the digital revolution, helping to create some of the most widely used digital products and experiences. Our purpose is to positively impact society and the planet through cutting-edge technology. Together with our clients, we are engineering impact through intelligent products, platforms, and services that are designed for desirability, engineered for excellence, and curated for intelligence. Our people-first culture fosters shoulder-to-shoulder teamwork, supported by a unique lab model and flexible delivery options, including onshore, nearshore, and offshore solutions. We also prioritize environmental stewardship in our product development and are committed to leveraging the diversity of thoughts as a driver for business innovation, attracting and developing talent, and sustainable growth. We are proud of our global recognitions: Leader in the ISG Provider Lens™ Digital Engineering Services 2024 U.S. report Everest Group's Software Product Engineering Services Peak Matrix 2024 Star Performer in Major Contender in Everest Group’s Trust & Safety Peak Matrix 2024 2024 EcoVadis Silver Sustainability Rating Join us as we continue to shape the future of digital engineering and create lasting impacts for businesses and communities worldwide: globallogic.com

Cox Automotive Inc.

coxautoinc.com

Cox Automotive is the world’s largest automotive services and technology provider. Fueled by the largest breadth of first- and third-party data fed by 2.3 billion online interactions a year, Cox Automotive tailors leading solutions for car shoppers, auto manufacturers, dealers, lenders and fleets. The company has 29,000+ employees on four continents and a portfolio of industry-leading brands that include Autotrader®, Kelley Blue Book®, Manheim®, vAuto®, Dealertrack®, NextGear Capital™, CentralDispatch® and Cox Fleet®. Cox Automotive is a subsidiary of Cox Enterprises Inc., a privately owned, Atlanta-based company with $23 billion in annual revenue. Cox Automotive has been included on Glassdoor’s Best Companies in Tech & AI 2026 and Best Place to Work in 2026 lists.

NetSuite

netsuite.com

Founded in 1998, Oracle NetSuite is the world’s first cloud computing company and the leader in AI-powered cloud enterprise resource planning (ERP) and business management software. NetSuite provides an AI-powered, unified cloud business system that helps organizations manage core business functions in a single system. These include financial management, inventory and supply chain management, CRM, field service management, human resources (HR), professional services automation (PSA), and omnichannel commerce. Businesses use NetSuite to gain real-time visibility into operations, automate financial processes, improve reporting and analytics, and make faster, data-driven decisions using built-in AI capabilities. With more than 25 years of experience in cloud software, NetSuite supports over 43,000 organizations in 220 countries and territories, ranging from startups to global enterprises. NetSuite is commonly used by entrepreneurs, executives, finance operations leaders, and more who need scalable, flexible, and integrated business management solutions to drive efficiency and growth.

Infor

infor.com

Infor is a global leader in business cloud software products for companies in industry specific markets. Infor builds complete industry suites in the cloud and efficiently deploys technology that puts the user experience first, leverages data science, and integrates easily into existing systems. Over 60,000 organizations worldwide rely on Infor to help overcome market disruptions and achieve business-wide digital transformation. Here are some key insights: • 60,000+ customers • 100+ offices • 1,700+ support experts • 2,000+ partners • 17,000+ employees • 175+ countries where customers are located • 15,000+ cloud customers • 40+ countries with Infor offices

DiDi

didiglobal.com

DiDi Global Inc. is a leading mobility technology platform. It offers a wide range of app-based services across Asia Pacific, Latin America, and other global markets, including ride hailing, taxi hailing, designated driving, hitch and other forms of shared mobility as well as certain energy and vehicle services, food delivery, and intra-city freight services. DiDi provides car owners, drivers, and delivery partners with flexible work and income opportunities. It is committed to collaborating with policymakers, the taxi industry, the automobile industry, and the communities to solve the world’s transportation, environmental, and employment challenges through the use of AI technology and localized smart transportation innovations. DiDi strives to create better life experiences and greater social value, by building a safe, inclusive, and sustainable transportation and local services ecosystem for cities of the future.

Loading…

NEWS

Databricks CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 30, 2026 10:58 AM

TeamPCP Supply Chain Attack Allegedly Compromised Databricks Platform

Databricks is currently investigating an alleged security compromise connected to the massive TeamPCP software supply chain attack after...

Read Article

March 27, 2026 06:14 AM

RVI Fund Eyes Best Week Ever — Retail Chases Databricks Pre-IPO Exposure

Databricks raised $4 billion at a $134 billion valuation in December and launched its LakeWatch cybersecurity platform this week.

Read Article

March 27, 2026 12:36 AM

Databricks pitches Lakewatch as a cheaper SIEM — but is it really?

The agentic SIEM shifts costs from ingestion to compute, promising cheaper retention and deeper analytics on enterprise security data.

Read Article

March 26, 2026 10:30 PM

Security hot issue: Tech firms crowd into cybersecurity market

More tech companies that are not primarily known for security are increasing their influence in the cybersecurity market.

Read Article

March 26, 2026 03:26 PM

Databricks unveils agentic security platform to fend-off AI threats

The data and AI provider's launch of Lakewatch comes amid rising concerns over cyberattacks fueled by agentic AI.

Read Article

March 25, 2026 08:29 PM

Don't bet on Databricks being done

Databricks is diving into the highly competitive cybersecurity market, an interesting move for a private company already valued at $134...

Read Article

March 25, 2026 05:42 PM

IPO Prospect Databricks Buys Two Startups to Power New AI Security Platform

Databricks, a leading data and AI company, has acquired two cybersecurity startups, Antimatter and SiftD.ai, to underpin the launch of its...

Read Article

March 25, 2026 03:54 PM

Databricks Enters Cybersecurity Market With Lakewatch SIEM Platform

Security. by Ali Azhar | March 25, 2026. Shares. Press play to listen to this content. 0:00. -:--. 1x. Playback Speed.

Read Article

March 25, 2026 03:51 PM

Databricks Lakewatch to unleash agentic swarms on malware detect-and-destroy missions

Databricks is becoming an active malware hunter with Lakewatch - swarms of agents hunting down malware in customer-owned lakehouses storing...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-105761

SUMMARY

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server endpoint in api/controllers/console/app/mcp_server.py used AppMCPServerController.put() to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged to the requested application and tenant. An authenticated workspace member could therefore change another application's MCP server status and parameters, potentially redirecting data or disabling the service. This issue is fixed in version 1.16.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-105760

SUMMARY

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level media_io_kwargs field to select the GLMGA video backend and supply large values for the fps and max_frames options without a strict work ceiling. GLMGA constructs and deduplicates an attacker-sized pre-decode frame-index list, allowing a compact request and tiny valid video to consume disproportionate CPU time and memory in the shared media-loading executor. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-105759

SUMMARY

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metrics middleware records the raw HTTP method token as a Prometheus label for requests reaching registered routes. An unauthenticated attacker can send unique arbitrary method tokens to unguarded routes such as /tokenize, causing Prometheus's Family::get_or_create function to permanently create counter and histogram label sets. Those label sets increase process memory usage and enlarge the /metrics response until the service or monitoring path is exhausted. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-105758

SUMMARY

vLLM is an inference and serving engine for large language models. From 0.24.0 until 0.30.0, the Qwen2VLVideoBackend and Qwen3VLVideoBackend classes accept request-level values for the media_io_kwargs.video.max_frames and media_io_kwargs.video.fps fields without enforcing server-side ceilings. An unauthenticated caller can submit these values to the /tokenize endpoint, causing the sampler to decode every frame selected from attacker-controlled video input, consume disproportionate frontend memory, and potentially terminate the API process before scheduling or admission control. The Rust frontend is not affected because it rejects the media_io_kwargs field. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-105757

SUMMARY

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by the ngram_gpu speculative-decoding mode can pass a negative token to guidance validation, and the Rust frontend can admit empty structured-output values that the Python frontend rejects, allowing ordinary constrained-generation requests to terminate the shared engine. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Databricks Vendor Cyber Rating & Cyber Score

Databricks A.I CyberSecurity Scoring

Databricks CyberSecurity News & History

Databricks Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Databricks

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Databricks vs Software Development Industry Avg (This Year)

Incident History - Databricks (X = Date, Y = Severity)

Databricks Subsidiaries

Databricks

Databricks Similar Companies

IGT

Pitney Bowes

Expedia Group

Booking.com

GlobalLogic

Cox Automotive Inc.

NetSuite

Infor

DiDi

Databricks CyberSecurity News

TeamPCP Supply Chain Attack Allegedly Compromised Databricks Platform

RVI Fund Eyes Best Week Ever — Retail Chases Databricks Pre-IPO Exposure

Databricks pitches Lakewatch as a cheaper SIEM — but is it really?

Security hot issue: Tech firms crowd into cybersecurity market

Databricks unveils agentic security platform to fend-off AI threats

Don't bet on Databricks being done

IPO Prospect Databricks Buys Two Startups to Power New AI Security Platform

Databricks Enters Cybersecurity Market With Lakewatch SIEM Platform

Databricks Lakewatch to unleash agentic swarms on malware detect-and-destroy missions

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Databricks CyberSecurity News & History

Databricks Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Databricks

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Databricks vs Software Development Industry Avg (This Year)

Incident History - Databricks (X = Date, Y = Severity)

Databricks Subsidiaries

Databricks

Databricks Similar Companies

IGT

Pitney Bowes

Expedia Group

Booking.com

GlobalLogic

Cox Automotive Inc.

NetSuite

Infor

DiDi

Databricks CyberSecurity News

TeamPCP Supply Chain Attack Allegedly Compromised Databricks Platform

RVI Fund Eyes Best Week Ever — Retail Chases Databricks Pre-IPO Exposure

Databricks pitches Lakewatch as a cheaper SIEM — but is it really?

Security hot issue: Tech firms crowd into cybersecurity market

Databricks unveils agentic security platform to fend-off AI threats

Don't bet on Databricks being done

IPO Prospect Databricks Buys Two Startups to Power New AI Security Platform

Databricks Enters Cybersecurity Market With Lakewatch SIEM Platform

Databricks Lakewatch to unleash agentic swarms on malware detect-and-destroy missions

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo