What is the official website of Heap | by Contentsquare ?

The official website of Heap | by Contentsquare is https://heap.io/.

What is Heap | by Contentsquare's cybersecurity risk score?

Heap | by Contentsquare has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Heap | by Contentsquare experienced?

According to Rankiteo, Heap | by Contentsquare currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Heap | by Contentsquare been affected by any supply chain cyber incidents ?

According to Rankiteo, Heap | by Contentsquare has been affected by a supply chain cyber incident involving PowerSchool, with the incident ID MICHOTGOOPOW1779697543.

Does Heap | by Contentsquare have SOC 2 Type 1 certification ?

According to Rankiteo, Heap | by Contentsquare is not certified under SOC 2 Type 1.

Does Heap | by Contentsquare have SOC 2 Type 2 certification ?

According to Rankiteo, Heap | by Contentsquare does not hold a SOC 2 Type 2 certification.

Does Heap | by Contentsquare comply with GDPR ?

According to Rankiteo, Heap | by Contentsquare is not listed as GDPR compliant.

Does Heap | by Contentsquare have PCI DSS certification ?

According to Rankiteo, Heap | by Contentsquare does not currently maintain PCI DSS compliance.

Does Heap | by Contentsquare comply with HIPAA ?

According to Rankiteo, Heap | by Contentsquare is not compliant with HIPAA regulations.

Does Heap | by Contentsquare have ISO 27001 certification ?

According to Rankiteo,Heap | by Contentsquare is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Heap | by Contentsquare operate in ?

Heap | by Contentsquare operates primarily in the Software Development industry.

How many employees does Heap | by Contentsquare have ?

Heap | by Contentsquare employs approximately 181 people worldwide.

Does Heap | by Contentsquare own any subsidiaries ?

Heap | by Contentsquare presently has no subsidiaries across any sectors.

How many LinkedIn followers does Heap | by Contentsquare have ?

Heap | by Contentsquare's official LinkedIn profile has approximately 71,275 followers.

What is the NAICS classification code for Heap | by Contentsquare ?

Heap | by Contentsquare is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Heap | by Contentsquare have a Crunchbase profile ?

Yes, Heap | by Contentsquare has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/heap.

Does Heap | by Contentsquare have a LinkedIn profile ?

Yes, Heap | by Contentsquare maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/heap-inc-.

How many cybersecurity incidents has Heap | by Contentsquare experienced ?

As of October 3, 2026, Rankiteo reports that Heap | by Contentsquare has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Heap | by Contentsquare have ?

Heap | by Contentsquare has an estimated 31,067 peer or competitor companies worldwide.

What types of cybersecurity incidents has Heap | by Contentsquare faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

Heap | by Contentsquare Vendor Cyber Rating & Cyber Score

heap.io

cb in

Add Your Compliance Badge

Heap is a digital insights platform that enables fast-moving digital teams to understand and improve digital experiences. We believe that every person deserves a great digital experience and every builder should have the toolkit to create them. Heap’s complete dataset, natively integrated data science, and qualitative analytics enable you to quickly pinpoint the most valuable insights and act with confidence.

Heap | by Contentsquare CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Hotjar | by Content...

Breach

8/2021

PowerSchool

MICHOTGOOPOW177...

Loading…

A.I.

HC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for HC

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for Heap | by Contentsquare in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Heap | by Contentsquare in 2026.

Incident Types HC vs Software Development Industry Avg (This Year)

No incidents recorded for Heap | by Contentsquare in 2026.

Incident History - HC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Heap | by Contentsquare Subsidiaries

HC

Software Development

Website: https://heap.io/

Company Size: 181

ContentsquareSoftware Development

Hotjar | by ContentsquareIT Services and IT Consulting

Loading…

Heap | by Contentsquare Similar Companies

GoTo Group

gotocompany.com

GoTo is the largest technology group in Indonesia, combining on-demand and financial services through the Gojek and GoTo Financial brands. It is the first platform in Southeast Asia to host these two essential use cases in one ecosystem, capturing a majority of Indonesian consumer household expenditure. GoTo’s mission is to “Empower Progress” by offering an unparalleled selection of goods and services through a comprehensive merchant and partner network and promoting financial inclusion through its leading payments and financial services business.

Bosch Global Software Technologies

bosch-softwaretechnologies.com

With our unique ability to offer end-to-end solutions that connect the three pillars of IoT - Sensors, Software, and Services, we enable businesses to move from the traditional to the digital, or improve businesses by introducing a digital element in their products and processes. Now more than ever, companies across the world are becoming rapidly aware of the potential and impact of modern-day digital technologies on customers, people, and organisational processes. We aim to empower and translate this realisation into a new reality for enterprises, leveraging our in-depth understanding of global business complexities, the risk of disruption that digital technologies bring, and the technology thought leadership that we have built over decades of experience at Bosch. Founded in 1997, we are a 100% owned subsidiary of Robert Bosch GmbH, with over 35,000 associates across the globe. [Data protection notice: www.bosch-softwaretechnologies.com/en/terms-of-use/data-protection-notice/ ]

Snowflake

snowflake.com

**Snowflake is proud to be the Official Data Collaboration Provider for LA28 and Team USA.** Snowflake delivers the AI Data Cloud — a global network where thousands of organizations mobilize data with near-unlimited scale, concurrency, and performance. Inside the AI Data Cloud, organizations unite their siloed data, easily discover and securely share governed data, and execute diverse analytic workloads. Wherever data or users live, Snowflake delivers a single and seamless experience across multiple public clouds. Snowflake’s platform is the engine that powers and provides access to the AI Data Cloud, creating a solution for data warehousing, data lakes, data engineering, data science, data application development, and data sharing. Join Snowflake customers, partners, and data providers already taking their businesses to new frontiers in the AI Data Cloud.

Synopsys Inc

cb synopsys.com

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

JD.COM

cb jd.com

JD.com, also known as JINGDONG, is a leading e-commerce company transferring to be a technology and service enterprise with supply chain at its core. JD.com’s business has expanded across retail, technology, logistics, health, property development, industrials, and international business. Ranking 44 on the Fortune Global 500, JD.com is China’s largest retailer by revenue. JD.com serves over 600 million customers and has set the standard for e-commerce through its commitment to quality, authenticity, and competitive pricing. The company operates the largest fulfillment infrastructure of any e-commerce company in China, enabling 90% of retail orders to be delivered within the same or next day. JD.com also promotes productivity and innovation across a range of industries by offering its cutting-edge technology and infrastructure to partners, brands, and diverse sectors.

Grab

grab.careers

Grab is Southeast Asia’s leading superapp, offering a suite of services consisting of deliveries, mobility, financial services, enterprise and others. Grabbers come from all over the world, and we are united by a common mission: to drive Southeast Asia forward by creating economic empowerment for everyone. At Grab, every Grabber is guided by The Grab Way, which explains our mission and the operating principles on how we can achieve it together. We call these principles the 4Hs: Heart We work together as OneGrab to serve communities in Southeast Asia Hunger We work to understand ground truths and drive improvements, big and small Honour We keep our word and steward our resources wisely to build and sustain trust Humility We are a constant work-in-progress, and we never stop learning to get better

Walmart Global Tech

walmart.com

Walmart has a long history of transforming retail and using technology to deliver innovations that improve how the world shops and empower our 2.1 million associates. It began with Sam Walton and continues today with Global Tech associates working together to power Walmart and lead the next retail disruption. Our world-class software engineers, data scientists and engineers, cybersecurity professionals, product managers and business service professionals work with top talent on cutting-edge technologies that create unique and innovative experiences for our associates, customers and members across Walmart, Sam’s Club and Walmart International. At Walmart Global Tech, one line of code or bold idea can make life easier for hundreds of millions of people – talk about epic impact at a global scale.

Google

cb goo.gle

A problem isn't truly solved until it's solved for all. Googlers build products that help create opportunities for everyone, whether down the street or across the globe. Bring your insight, imagination and a healthy disregard for the impossible. Bring everything that makes you unique. Together, we can build for everyone. Check out our career opportunities at goo.gle/3DLEokh

Loading…

NEWS

Heap | by Contentsquare CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

July 20, 2022 07:00 AM

Contentsquare closes a mammoth $600M round as customers clamor for digital analytics

Contentsquare, a company developing a platform for web and app analytics, has closed a $600 million funding round to bring its total raised...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-84411

SUMMARY

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of service, using a single crafted request.

Published

Date2026-10-02

Updated

Date2026-10-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-105051

SUMMARY

Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel).

Published

Date2026-10-02

Updated

Date2026-10-02

RISK INFORMATION (Score: 1.9)

cvss3

Base Score: 1.9

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

0.5

REFERENCES

CVE-2026-105050

SUMMARY

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.

Published

Date2026-10-02

Updated

Date2026-10-02

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-105049

SUMMARY

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet.

Published

Date2026-10-02

Updated

Date2026-10-02

RISK INFORMATION (Score: 5.8)

cvss3

Base Score: 5.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-105048

SUMMARY

The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).

Published

Date2026-10-02

Updated

Date2026-10-02

RISK INFORMATION (Score: 4)

cvss3

Base Score: 4.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Heap | by Contentsquare Vendor Cyber Rating & Cyber Score

HC A.I CyberSecurity Scoring

Heap | by Contentsquare CyberSecurity News & History

HC Company Scoring based on AI Models