What is the official website of DoorDash for Business ?

The official website of DoorDash for Business is https://business.doordash.com/.

What is DoorDash for Business's cybersecurity risk score?

DoorDash for Business has an AI-generated cybersecurity risk score of 702 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has DoorDash for Business experienced?

According to Rankiteo, DoorDash for Business currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has DoorDash for Business been affected by any supply chain cyber incidents ?

According to Rankiteo, DoorDash for Business has been affected by a supply chain cyber incident involving Woflow, with the incident ID WOFAUBWALDOO1772749980.

Does DoorDash for Business have SOC 2 Type 1 certification ?

According to Rankiteo, DoorDash for Business is not certified under SOC 2 Type 1.

Does DoorDash for Business have SOC 2 Type 2 certification ?

According to Rankiteo, DoorDash for Business does not hold a SOC 2 Type 2 certification.

Does DoorDash for Business comply with GDPR ?

According to Rankiteo, DoorDash for Business is not listed as GDPR compliant.

Does DoorDash for Business have PCI DSS certification ?

According to Rankiteo, DoorDash for Business does not currently maintain PCI DSS compliance.

Does DoorDash for Business comply with HIPAA ?

According to Rankiteo, DoorDash for Business is not compliant with HIPAA regulations.

Does DoorDash for Business have ISO 27001 certification ?

According to Rankiteo,DoorDash for Business is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does DoorDash for Business operate in ?

DoorDash for Business operates primarily in the Technology, Information and Internet industry.

How many employees does DoorDash for Business have ?

DoorDash for Business employs approximately 92 people worldwide.

Does DoorDash for Business own any subsidiaries ?

DoorDash for Business presently has no subsidiaries across any sectors.

How many LinkedIn followers does DoorDash for Business have ?

DoorDash for Business's official LinkedIn profile has approximately 3,451 followers.

What is the NAICS classification code for DoorDash for Business ?

DoorDash for Business is classified under the NAICS code 513, which corresponds to Others.

Does DoorDash for Business have a Crunchbase profile ?

No, DoorDash for Business does not have a profile on Crunchbase.

Does DoorDash for Business have a LinkedIn profile ?

Yes, DoorDash for Business maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/doordash-for-business.

How many cybersecurity incidents has DoorDash for Business experienced ?

As of July 2, 2026, Rankiteo reports that DoorDash for Business has experienced 11 cybersecurity incidents.

How many peer or competitor companies does DoorDash for Business have ?

DoorDash for Business has an estimated 14,893 peer or competitor companies worldwide.

What types of cybersecurity incidents has DoorDash for Business faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

702

/1000

Moderate

727

/1000

Moderate

DoorDash for Business Vendor Cyber Rating & Cyber Score

doordash.com

Add Your Compliance Badge

DoorDash for Business, a product of DoorDash, specializes in end-to-end delivery for every corporate food need. Our fast and easy meal program provides unparalleled service and quality for all sizes of companies and all types of occasions. This page is not being monitored for Help & Support requests. For all requests, please visit: https://help.doordash.com/business/s/work-support?language=en_US

DB A.I CyberSecurity Scoring

Scoring History

DoorDash for Business CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

DoorDash

Breach

3/2026

Woflow

WOFAUBWALDOO177...

DoorDash for Busine...

Breach

11/2025

DOO599375911172...

DoorDash for Busine...

Breach

10/2025

DOO410424111272...

DoorDash for Busine...

Breach

10/2025

DOO563255611182...

DoorDash for Busine...

Breach

5/2025

DOO429304211192...

DoorDash for Busine...

Vulnerability

7/2023

DOO249252411172...

DoorDash for Busine...

Breach

08/2022

DOO0162922

DoorDash for Busine...

Breach

09/2019

DOO15123922

DoorDash for Busine...

Breach

6/2019

DOO520345211212...

DoorDash for Busine...

Breach

5/2019

DOO622072825

DoorDash for Busine...

Breach

09/2018

DOO232301022

Loading…

A.I.

DB Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for DB

Incidents vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for DoorDash for Business in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for DoorDash for Business in 2026.

Incident Types DB vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for DoorDash for Business in 2026.

Incident History - DB (X = Date, Y = Severity)

Loading…

SUBSIDIARY

DoorDash for Business Subsidiaries

DB

Technology, Information and Internet

Website: https://business.doordash.com/

Company Size: 10,001+ employees

DoorDashSoftware Development

Loading…

DoorDash for Business Similar Companies

Nothing

cb nothing.tech

Nothing exists to make tech feel exciting again. We’re building a different kind of company, one that puts design, emotion, and human creativity at the heart of everything we do. From the way our products look to how they sound, feel, and function, we care about the details that make technology not just useful, but inspiring. This is a place for the curious. The creators. The ones who ask why not and mean it. If you're drawn to bold ideas, fast moves, and work that actually makes you feel something, you’ll fit right in. We're not here to follow the rules. We're here to make better ones. Founded in London in 2020, Nothing is a design-led tech company building an alternative to the industry giants. Our products, from award-winning smartphones to expressive audio and wearables, blend iconic design with intuitive engineering to put people and creativity back at the centre of consumer tech. Backed by GV (Google Ventures), EQT Ventures, C Ventures, and influential investors like Tony Fadell (iPod), Casey Neistat, and Kevin Lin (Twitch), we’ve grown from startup to global challenger in just a few years.

Arrow Electronics

arrow.com

Arrow Electronics (NYSE:ARW) guides innovation forward for thousands of leading technology manufacturers and service providers. With 2024 sales of $27.9 billion, Arrow develops technology solutions that help improve business and daily life. Our broad portfolio that spans the entire technology landscape, helps customers design, distribute and deploy forward-thinking products that make the benefits of technology accessible to as many people as possible. Learn more at arrow.com. Are you thinking Five Years Out? Join us at careers.arrow.com.

eBay

ebayinc.com

At eBay, we create pathways to connect millions of sellers and buyers in more than 190 markets around the world. Our technology empowers our customers, providing everyone the opportunity to grow and thrive — no matter who they are or where they are in the world. And the ripple effect of our work creates waves of change for our customers, our company, our communities and our planet.

Flipkart

flipkart.com

At Flipkart, we're driven by our purpose of empowering every Indian's dream by delivering value through innovation in technology and commerce. With a customer base of over 350 million, product coverage of over 150 million across 80+ categories, a focus on generating direct and indirect employment and a commitment to empowering generations of entrepreneurs and MSMEs, all driven by a sustainable growth strategy – Flipkart is maximising for customers, stakeholders, and the planet at large! At Flipkart, our promise to every Flipster is - getting an opportunity to leave a mark and create their own legacy, the freedom to experiment, learn and grow, work with the industry’s brightest minds as part of a diverse team and we will extend our culture of care to them to ensure that they can focus on doing their best work. Driven by audacity, bias for action, customer first, integrity and inclusion – Flipsters have pioneered solutions that have transformed digital commerce in India. From the industry-first introduction of cash-on-delivery in 2010 to the launch of voice search and multiple vernacular interfaces in 2021 that have made e-commerce a very inclusive experience, Flipkart continues the exciting journey of solving for the Indian customer. We understand that your own aspirations and journeys are unique. So you choose what you want to maximise, and we provide you the platform for it - because when you maximise, we maximise. Flipkart is a part of the Walmart-owned Flipkart Group, which also includes group companies Flipkart Wholesale, Flipkart Health+, Cleartrip, and Myntra. Get in touch with our experts for support with your orders here: https://www.flipkart.com/helpcentre

Times Internet

timesinternet.in

At Times Internet, we create premium digital products that simplify and enhance the lives of millions. As India’s largest digital products company, we have a significant presence across a wide range of categories, including News, Sports, Fintech, and Enterprise solutions. Our portfolio features market-leading and iconic brands such as TOI, ET, NBT, Cricbuzz, Times Prime, Times Card, Indiatimes, Whatshot, Abound, Willow TV, Techgig and Times Mobile among many more. Each of these products is crafted to enrich your experiences and bring you closer to your interests and aspirations. As an equal opportunity employer, Times Internet strongly promotes inclusivity and diversity. We are proud to have achieved overall gender pay parity in 2018, verified by an independent audit conducted by Aon Hewitt. We are driven by the excitement of new possibilities and are committed to bringing innovative products, ideas, and technologies to help people make the most of every day. Join us and take us to the next level!

Mynet

mynet.com

Türk internet kullanıcılarının en çok tercih ettiği dijital platform olan Mynet, 1999 yılından bugüne liderliğini koruyor. Kendi alanında sayısız ilki gerçekleştiren öncü internet devi Mynet, Türkiye'nin dijital ekosisteminin kalkınmasına ve gelişmesine destek olmayı sürdürüyor. Her ay ortalama 42 milyon internet kullanıcısına erişen Mynet'in sosyal ağlardaki toplam kitlesi ise 10 milyonu geride bırakmış bulunuyor. Mynet, ziyaretçilerine her ay 100 milyondan fazla video izletiyor. 1 milyonun üzerinde kullanıcısı olan Türkiye’nin en büyük online video eğitim platformu Vidobu ile Türkçe bilen tüm coğrafyanın ihtiyacı olan eğitimleri, alanında uzman eğitmenler ile veriyor. Böylece yüksek kalitedeki eğitimlerin herkes tarafından, her yerden ve düşük maliyetle erişilebilir olmasını sağlıyor. Ayrıca Vidobu, eğitim sektöründeki Global SAAS projesi olan Corviq ile kurumların kendi özel video öğrenme platformlarını oluşturmasını sağlayan bir altyapı da sunuyor. En büyük oyun stüdyolarından biri olan Mynet Games adı altında yayınladığı oyunlarla 10 milyondan fazla oyuncuyla buluşuyor. Kelime Savaşı oyunu Apple tarafından PubG ve Subway Surfers ile birlikte 2019’un en çok indirilen 3 oyunundan biri olarak açıklandı. ABD pazarına sunduğumuz Homer City, HR Master ve Racing Wheels adlı oyunlarımız dünya sıralamasında zirvede yer almıştır. ABD pazarına hybrid-casual’dan mid-core oyunlara kadar oyun geliştiren CASUAL MONSTER ve RARE FORGE şirketlerimiz ile de oyun sektöründe büyümeye devam ediyoruz.

IndiaMART InterMESH Limited

cb indiamart.com

IndiaMART is India's largest online B2B marketplace, connecting buyers with suppliers across a wide array of industries. IndiaMART provides a platform for Small & Medium Enterprises (SMEs), large enterprises, and individual buyers, helping them access diverse portfolios of quality products. Since 1999, IndiaMART’s mission has been to make doing business easy. Today, over 21.9 Crore buyers can explore and choose from 12.4 Crore products, sourced from 86 Lakh suppliers, creating a one-stop platform for all business needs. IndiaMART offers enhanced business visibility and credibility for suppliers, with tools designed to support business growth and operational efficiency. With a dedicated workforce of over 5000 employees across India, IndiaMART continues to facilitate seamless connections and provide a trusted marketplace for businesses to thrive.

Myntra

myntra.com

At Myntra, we don’t just follow fashion - we define it. As India's leading fashion, lifestyle, and beauty destination, we bring together the best of style, technology, and innovation to create a seamless shopping experience for our customers. With a commitment to empowering self-expression, we curate over 13,000+ brands and labels, blending global trends with India’s unique fashion pulse. Our people are at the heart of everything we do. We thrive on innovation and impact, where data-driven insights and cutting-edge technology shape the future of fashion. We encourage out-of-the-box thinking, collaboration with leaders and experts, and driving meaningful change. Myntraites have a passion for fashion - we take pride in being India's voice in fashion and in the brand we stand for. Our non-hierarchical, inclusive culture values ownership, meritocracy, and self-driven individuals who challenge the status quo and grow with every opportunity. We believe in empowering every Myntraite by providing the freedom to shape their career, fostering an environment where creativity thrives, and ensuring well-being and self-expression for all. If you thrive in a fast-paced, result-driven environment and share our passion for fashion, Myntra is the place for you. Explore opportunities: https://jobs.myntra.com/home Be The Trend. Be Myntra.

Swiggy

swiggy.com

Swiggy is India’s pioneering on-demand convenience platform, catering to millions of consumers each month. Founded in 2014, its mission is to elevate the quality of life for the urban consumer by offering unparalleled convenience. With an extensive footprint in food delivery, Swiggy Food collaborates with nearly 2 lakh restaurants across 600+ cities. Swiggy Instamart, its quick commerce platform operating in 120+ cities, delivers groceries and other essentials across 40+ categories in 10 minutes. Fueled by a commitment to innovation, Swiggy continually incubates and integrates new services like Swiggy Dineout and Swiggy Genie into its multi-service app. Leveraging cutting-edge technology and Swiggy One, the country’s only membership program offering benefits across food, quick commerce, dining out, and pick-up and drop services, Swiggy aims to provide a superior experience to its consumers. For more information, visit www.swiggy.com

Loading…

NEWS

DoorDash for Business CyberSecurity News

Global CVEs (Not Company-Specific)

CVE-2026-55790

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50284

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50283

SUMMARY

Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14440

SUMMARY

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.6

Complexity: HIGH

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14422

SUMMARY

Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…