What is the official website of Fireworks Software (formerly Fire Engine RED) ?

The official website of Fireworks Software (formerly Fire Engine RED) is https://www.fireworkssoftware.com/.

What is Fireworks Software (formerly Fire Engine RED)'s cybersecurity risk score?

Fireworks Software (formerly Fire Engine RED) has an AI-generated cybersecurity risk score of 749 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Fireworks Software (formerly Fire Engine RED) experienced?

According to Rankiteo, Fireworks Software (formerly Fire Engine RED) currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Fireworks Software (formerly Fire Engine RED) been affected by any supply chain cyber incidents ?

According to Rankiteo, Fireworks Software (formerly Fire Engine RED) has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Fireworks Software (formerly Fire Engine RED) have SOC 2 Type 1 certification ?

According to Rankiteo, Fireworks Software (formerly Fire Engine RED) is not certified under SOC 2 Type 1.

Does Fireworks Software (formerly Fire Engine RED) have SOC 2 Type 2 certification ?

According to Rankiteo, Fireworks Software (formerly Fire Engine RED) does not hold a SOC 2 Type 2 certification.

Does Fireworks Software (formerly Fire Engine RED) comply with GDPR ?

According to Rankiteo, Fireworks Software (formerly Fire Engine RED) is not listed as GDPR compliant.

Does Fireworks Software (formerly Fire Engine RED) have PCI DSS certification ?

According to Rankiteo, Fireworks Software (formerly Fire Engine RED) does not currently maintain PCI DSS compliance.

Does Fireworks Software (formerly Fire Engine RED) comply with HIPAA ?

According to Rankiteo, Fireworks Software (formerly Fire Engine RED) is not compliant with HIPAA regulations.

Does Fireworks Software (formerly Fire Engine RED) have ISO 27001 certification ?

According to Rankiteo,Fireworks Software (formerly Fire Engine RED) is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Fireworks Software (formerly Fire Engine RED) operate in ?

Fireworks Software (formerly Fire Engine RED) operates primarily in the Higher Education industry.

How many employees does Fireworks Software (formerly Fire Engine RED) have ?

Fireworks Software (formerly Fire Engine RED) employs approximately 2 people worldwide.

Does Fireworks Software (formerly Fire Engine RED) own any subsidiaries ?

Fireworks Software (formerly Fire Engine RED) presently has no subsidiaries across any sectors.

How many LinkedIn followers does Fireworks Software (formerly Fire Engine RED) have ?

Fireworks Software (formerly Fire Engine RED)'s official LinkedIn profile has approximately followers.

What is the NAICS classification code for Fireworks Software (formerly Fire Engine RED) ?

Fireworks Software (formerly Fire Engine RED) is classified under the NAICS code 6113, which corresponds to Colleges, Universities, and Professional Schools.

Does Fireworks Software (formerly Fire Engine RED) have a Crunchbase profile ?

No, Fireworks Software (formerly Fire Engine RED) does not have a profile on Crunchbase.

Does Fireworks Software (formerly Fire Engine RED) have a LinkedIn profile ?

Yes, Fireworks Software (formerly Fire Engine RED) maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/fireworks-software.

How many cybersecurity incidents has Fireworks Software (formerly Fire Engine RED) experienced ?

As of June 23, 2026, Rankiteo reports that Fireworks Software (formerly Fire Engine RED) has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Fireworks Software (formerly Fire Engine RED) have ?

Fireworks Software (formerly Fire Engine RED) has an estimated 17,098 peer or competitor companies worldwide.

What types of cybersecurity incidents has Fireworks Software (formerly Fire Engine RED) faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

749

/1000

Moderate

774

/1000

Fair

Fireworks Software (formerly Fire Engine RED) Vendor Cyber Rating & Cyber Score

fireworkssoftware.com

Add Your Compliance Badge

Fireworks Software, Inc. has been providing software solutions to the higher education market since our CEO & Chief Creative Officer, Shelly J. Spiegel, founded the company in 2001. The company's current offerings include a recruitment CRM, known as Fireworks CRM, and seven stand-alone software products such as text messaging and broadcast email. Our software products are easy to use, completely customizable, affordably priced, and are implemented and supported by our legendary client care team.

FS A.I CyberSecurity Scoring

Scoring History

Fireworks Software (formerly Fire Engine RED) CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Fireworks Software ...

Breach

6/2024

FIR150072925

Loading…

A.I.

FS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for FS

Incidents vs Higher Education Industry Avg (This Year)

No incidents recorded for Fireworks Software (formerly Fire Engine RED) in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Fireworks Software (formerly Fire Engine RED) in 2026.

Incident Types FS vs Higher Education Industry Avg (This Year)

No incidents recorded for Fireworks Software (formerly Fire Engine RED) in 2026.

Incident History - FS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Fireworks Software (formerly Fire Engine RED) Subsidiaries

Parent Company

FS

Higher Education

Website: https://www.fireworkssoftware.com/

Company Size: 11-50 employees

No subsidiary data available for this company.

Loading…

Fireworks Software (formerly Fire Engine RED) Similar Companies

Università degli Studi di Padova

unipd.it

Established in 1222, the University of Padova is one of Europe’s oldest and most prestigious seats of learning. Here is where Galileo Galilei taught and Elena Lucrezia Cornaro Piscopia became the first woman in the world to receive a university degree. Traditionally a free-thinking and trailblazing centre of education and research, the University Padova keeps faith with his historical motto Universa Universis Patavina Libertas: Liberty of Padova, universally and for all. Its excellence in the area of research is acknowledged by the National Agency for University Evaluation (Anvur 2017), which placed Padova at the first place of the national rankings for major universities. The University of Padova firmly believes in international collaborations as fundamental growth opportunities, as can be testified by the always increasing number of graduate and post-graduate student exchange programs promoted every year. Valuing the importance of quality and innovation, the University of Padova updates constantly its courses in order to meet the ever-changing needs of the labour market. Its potential students can choose among/between 8 schools, 32 departments, 173 degree courses and a wide range of post-graduate training options. Social Policy https://bit.ly/PSunipd

Kansas State University

k-state.edu

Kansas State University, often referred to as K-State, is an institution of higher learning located in Manhattan, Kansas, in the United States. A branch campus, including the College of Technology and Aviation, is located in Salina, Kansas. A third campus, K-State Olathe, officially opened on April 26, 2011 and will be the academic research presence within the Kansas Bioscience Park. Kansas State has nearly 24,000 students from all 50 states and more than 100 countries. Social Media User Policy at https://www.k-state.edu/social.

University of Arkansas

uark.edu

The University of Arkansas is Arkansas' only R1 research institution and is the flagship land-grant campus of the U of A System. We provide an internationally competitive education for undergraduate and graduate students in more than 200 academic programs and contribute more than $2.2 billion in economic impact to the state of Arkansas. The Carnegie Foundation classifies the U of A among the top 3 percent of colleges and universities in America with the highest level of research activity. U.S. News & World Report ranks the University of Arkansas among its top American public research universities. Founded in 1871, the University of Arkansas comprises 10 colleges and schools and maintains a low student-to-faculty ratio that promotes personal attention and close mentoring to provide all students with life-changing opportunities. The U of A is dedicated to Arkansas and works to build a better world.

University of Minnesota

umn.edu

One of the nation’s largest schools, the University of Minnesota offers baccalaureate, master’s, and doctoral degrees in virtually every field—from medicine to business, law to liberal arts, and science and engineering to architecture. The University of Minnesota system is made up of five campuses in Minnesota including Crookston, Duluth, Morris, Rochester, and the Twin Cities (Minneapolis/St. Paul). University of Minnesota Extension provides outreach and education services to Minnesota's communities through science-based knowledge, expertise and training. The University of Minnesota was recognized by Forbes in 2018 in the Best Employer, Best Employer for Diversity, and Best Employer for New Grads categories.

University of Missouri-Columbia

missouri.edu

We are Mizzou! Our distinct mission, as Missouri's only state-supported member of the Association of American Universities, is to provide all Missourians the benefits of a world-class research university. We are stewards and builders of a priceless state resource, a unique physical infrastructure and scholarly environment in which our tightly interlocked missions of teaching, research, service and economic development work together on behalf of all citizens. Students work side by side with some of the world's best faculty to advance the arts and humanities, the sciences, and the professions. Scholarship and teaching are daily driven by a sense of public service — the obligation to produce and disseminate knowledge that will improve the quality of life in the state, the nation and the world.

Carnegie Mellon University

cmu.edu

Carnegie Mellon University founder Andrew Carnegie said: "My heart is in the work." No statement better captures the passion and drive of our people to make a real difference. At Carnegie Mellon, we're not afraid of the work. Our educational environment creates problem solvers, drivers of innovation and pioneers in technology and the arts. Employers in every field say our graduates are ready to hit the ground running the day they graduate. So, join us. Whether you're looking for a career or an education. Or both.

New York University

nyu.edu

Founded in 1831, NYU is one of the world’s foremost research universities and is a member of the selective Association of American Universities. The first Global Network University, NYU has degree-granting university campuses in New York and Abu Dhabi, and has announced a third in Shanghai; has a dozen other global academic sites, including London, Paris, Florence, Tel Aviv, Buenos Aires, and Accra; and sends more students to study abroad than any other U.S. college or university. Through its numerous schools and colleges, NYU conducts research and provides education in the arts and sciences, law, medicine, business, dentistry, education, nursing, the cinematic and performing arts, music and studio arts, public administration, social work, and continuing and professional studies, among other areas.

UNSW

unsw.edu.au

The University of New South Wales (UNSW) is one of Australia's leading research and teaching universities. Established in 1949, UNSW has expanded rapidly and now has more than 52,000 students, including more than 14,000 international students from over 130 different countries. UNSW offers more than 300 undergraduate and 600 postgraduate programs, and has developed an extensive network of alumni chapters throughout Asia. UNSW is a founding member of the prestigious Group of Eight research intensive universities in Australia and a member of the Universitas 21 international consortium. The main UNSW campus is located on a 38-hectare site at Kensington, in Sydney. Other campuses are UNSW Art and Design (Paddington), UNSW Canberra (Canberra City and Australian Defence Force Academy), and sub-campuses at Randwick and Coogee, as well as research stations around NSW. We believe in academic freedom, so posts do not necessarily represent official UNSW views. Read our Social Media Terms of Service at www.unsw.to/sm UNSW Sydney CRICOS no.00098G facebook.com/unsw twitter.com/unsw instagram.com/unsw youtube.com/unsw

University of Connecticut

uconn.edu

The University of Connecticut (UConn), a Wall Street Journal top 10 public university, is home to more than 32,000 students, 1,500 faculty, 255,000 proud alumni, and a handsome husky named Jonathan. The University has fourteen schools and colleges: Agriculture and Natural Resources, Business, Dental Medicine, Education, Engineering, Fine Arts, Law, Liberal Arts and Sciences, Medicine, Nursing, Pharmacy, and Social Work. Students can choose from eight undergraduate bachelor's degrees with 102 possible majors, as well as seventeen graduate/doctoral degrees and five professional degree programs (MD, JD, etc.). UConn's main campus in Storrs is admitting the highest-achieving freshmen in University history. Student diversity continues to increase, as does the number of honors students, valedictorians and salutatorians who consistently make UConn their top choice. It's a great time to be a Husky!

Loading…

NEWS

Fireworks Software (formerly Fire Engine RED) CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-54236

SUMMARY

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, the fix for CVE-2026-22778, which introduced a sanitize_message helper that strips object-repr memory addresses from error messages before they reach the client, is incomplete: several response paths echo str(exc) directly to clients without calling sanitize_message. The unsanitized sites include the Anthropic API router in vllm/entrypoints/anthropic/api_router.py (the POST /v1/messages and POST /v1/messages/count_tokens handlers), the Server-Sent Events streaming converter in vllm/entrypoints/anthropic/serving.py, and the realtime speech-to-text WebSocket in vllm/entrypoints/speech_to_text/realtime/connection.py. These paths catch the exception inside the route coroutine and construct the JSONResponse themselves, bypassing the sanitizing global FastAPI exception handler, and WebSocket frames do not traverse that handler chain at all. Using the same primitive as the parent issue, an unauthenticated attacker can send malformed image bytes through the Anthropic Messages API image content parts so that PIL.Image.open raises an UnidentifiedImageError whose message contains the BytesIO object repr, leaking the heap memory address verbatim in the error.message field of the response body. This vulnerability is fixed in 0.23.1rc0.

Published

Date2026-06-22

Updated

Date2026-06-22

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-54235

SUMMARY

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, ll temperature validation gates use comparison operators (<, >), which silently evaluate to False for NaN and for positive Infinity in Python's IEEE 754 float semantics. Both values pass every guard and propagate to GPU sampling kernels, where they produce undefined behavior or CUDA errors that can crash the inference worker. This vulnerability is fixed in 0.23.1rc0.

Published

Date2026-06-22

Updated

Date2026-06-22

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54233

SUMMARY

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, vLLM's /v1/audio/transcriptions endpoint limits compressed upload size but not decoded PCM output. A 25MB OPUS file expands to ~14.9GB of float32 PCM at decode time. This vulnerability is fixed in 0.23.1rc0.

Published

Date2026-06-22

Updated

Date2026-06-22

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-54232

SUMMARY

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer-jit-cache package. The package is installed from a custom index (flashinfer.ai/whl/) using --extra-index-url, but the package name was not registered on PyPI, and UV_INDEX_STRATEGY="unsafe-best-match" is set globally. An attacker who registers flashinfer-jit-cache on PyPI with version 0.6.11.post2 can execute arbitrary code as root during the Docker build and backdoor every resulting container image, enabling exfiltration of all user prompts, API credentials, and model data from production vLLM deployments This vulnerability is fixed in 0.22.1.

Published

Date2026-06-22

Updated

Date2026-06-22

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

2.8

REFERENCES

https://github.com/vllm-project/vllm/security/advisories/GHSA-jrf6-vqxq-pjv2

CVE-2026-53923

SUMMARY

vLLM is an inference and serving engine for large language models (LLMs). From 0.5.5 until 0.23.1rc0, integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels (csrc/quantization/gguf/gguf_kernel.cu) causes partial tensor processing. The output tensor is allocated at full size via torch::empty (uninitialized memory), but the dequantize CUDA kernel processes only a truncated number of elements. The unfilled portion of the output tensor retains whatever was previously in GPU memory. In multi-tenant inference deployments, this residual GPU memory may contain tensor data from other users' inference requests, constituting information disclosure. This vulnerability is fixed in 0.23.1rc0.

Published

Date2026-06-22

Updated

Date2026-06-22

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…