What is the official website of Mercor ?

The official website of Mercor is http://mercor.com.

What is Mercor's cybersecurity risk score?

Mercor has an AI-generated cybersecurity risk score of 603 out of 1000, indicating a Poor security posture according to Rankiteo's assessment.

How many security incidents has Mercor experienced?

According to Rankiteo, Mercor currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Mercor been affected by any supply chain cyber incidents ?

According to Rankiteo, Mercor has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: LiteLLM (Incident ID: AGOBOO1776904233) Mercor (Incident ID: ANTMIC1776882793) LiteLLM (Incident ID: MER1775255558) LiteLLM (Incident ID: MERLIT1775010644) LiteLLM (Incident ID: OPE1775256197) Mercor (Incident ID: NUCHAS1775060645) Mercor (Incident ID: ANT1774621550) LiteLLM (Incident ID: MER1775112166)

Does Mercor have SOC 2 Type 1 certification ?

According to Rankiteo, Mercor is not certified under SOC 2 Type 1.

Does Mercor have SOC 2 Type 2 certification ?

According to Rankiteo, Mercor does not hold a SOC 2 Type 2 certification.

Does Mercor comply with GDPR ?

According to Rankiteo, Mercor is not listed as GDPR compliant.

Does Mercor have PCI DSS certification ?

According to Rankiteo, Mercor does not currently maintain PCI DSS compliance.

Does Mercor comply with HIPAA ?

According to Rankiteo, Mercor is not compliant with HIPAA regulations.

Does Mercor have ISO 27001 certification ?

According to Rankiteo,Mercor is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Mercor operate in ?

Mercor operates primarily in the Software Development industry.

How many employees does Mercor have ?

Mercor employs approximately 5,609 people worldwide.

Does Mercor own any subsidiaries ?

Mercor presently has no subsidiaries across any sectors.

How many LinkedIn followers does Mercor have ?

Mercor's official LinkedIn profile has approximately 672,135 followers.

What is the NAICS classification code for Mercor ?

Mercor is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Mercor have a Crunchbase profile ?

Yes, Mercor has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/mercor-dde3.

Does Mercor have a LinkedIn profile ?

Yes, Mercor maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mercor-ai.

How many cybersecurity incidents has Mercor experienced ?

As of July 13, 2026, Rankiteo reports that Mercor has experienced 8 cybersecurity incidents.

How many peer or competitor companies does Mercor have ?

Mercor has an estimated 30,318 peer or competitor companies worldwide.

What types of cybersecurity incidents has Mercor faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Vulnerability and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Mercor

Boost Score +25 with badge (5 left)

603

/1000

Poor

628

/1000

Poor

Mercor Vendor Cyber Rating & Cyber Score

mercor.com

cb in

Add Your Compliance Badge

Mercor is defining the future of work. We connect human expertise with leading AI labs and enterprises to train frontier models.

Mercor A.I CyberSecurity Scoring

Scoring History

Mercor

Mercor CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Mercor

Breach

4/2026

LiteLLM

AGOBOO177690423...

Mercor

Breach

4/2026

Mercor

ANTMIC177688279...

Mercor

Breach

100

4/2026

LiteLLM

MER1775255558

Mercor

Vulnerability

100

4/2026

LiteLLM

MERLIT177501064...

Mercor

Cyber Attack

3/2026

LiteLLM

OPE1775256197

Mercor

Cyber Attack

100

3/2026

Mercor

NUCHAS177506064...

Mercor

Breach

3/2026

Mercor

ANT1774621550

Mercor

Breach

100

4/2025

LiteLLM

MER1775112166

Loading…

A.I.

Mercor Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Mercor

Incidents vs Software Development Industry Avg (This Year)

Mercor has 560.38% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Mercor has 560.38% more incidents than the average of all companies with at least one recorded incident.

Incident Types Mercor vs Software Development Industry Avg (This Year)

Mercor reported 7 incidents this year: 2 cyber attacks, 0 ransomware, 1 vulnerabilities, 4 data breaches, compared to industry peers with at least 1 incident.

Incident History - Mercor (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Mercor Subsidiaries

Parent Company

Mercor

Software Development

Website: http://mercor.com

Company Size: 51-200 employees

No subsidiary data available for this company.

Loading…

Mercor Similar Companies

IDEMIA

cb idemia.com

IDEMIA Secure Transactions (IST) is a leading provider of payment, connectivity, and cybersecurity solutions, serving billions of people worldwide. With decades of expertise in cryptography and credential issuance, IST is trusted by over 2000 financial institutions, mobile operators, automotive manufacturers, and IoT providers worldwide. IST is a division of IDEMIA Group. IDEMIA Public Security, another division of IDEMIA Group, is the premium provider of convenient and trusted biometric-based solutions, transforming public and private organizations across the globe. Follow them here: https://www.linkedin.com/company/idemia-public-security/

Daraz

cb daraz.com

Founded in 2015, Daraz is the leading e-commerce platform in South Asia with operations in Pakistan, Bangladesh, Sri Lanka, Nepal, and Myanmar. It provides sellers and consumers with cutting-edge marketplace technology, targeting a rapidly growing region of over 500 million people. By building an integrated infrastructure covering e-commerce, logistics, payment and financial services, the company aims to deliver an immersive, personalized shopping experience and uplift South Asian communities through the power of commerce. Daraz has consistently invested in building an e-commerce ecosystem in South Asia through advancements in technology, logistics and digital payments. As digital penetration and consumer awareness have surged, the region is now ready for a transformative leap. Leveraging new-age advancements such as AI, Daraz is poised to further enhance the platform’s efficiency to enable a seamless experience for its consumers and sellers. Visit https://www.daraz.com/ to learn more.

Cox Automotive Inc.

coxautoinc.com

Cox Automotive is the world’s largest automotive services and technology provider. Fueled by the largest breadth of first-party data fed by 2.3 billion online interactions a year, Cox Automotive tailors leading solutions for car shoppers, auto manufacturers, dealers, lenders and fleets. The company has 29,000+ employees on five continents and a portfolio of industry-leading brands that include Autotrader®, Kelley Blue Book®, Manheim®, vAuto®, Dealertrack®, NextGear Capital™, CentralDispatch® and FleetNet America®. Cox Automotive is a subsidiary of Cox Enterprises Inc., a privately-owned, Atlanta-based company with $22 billion in annual revenue.

Microsoft

cb microsoft.com

Every company has a mission. What's ours? To empower every person and every organization to achieve more. We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today. Our culture doesn’t just encourage curiosity; it embraces it. Each day we make progress together by showing up as our authentic selves. We show up with a learn-it-all mentality. We show up cheering on others, knowing their success doesn't diminish our own. We show up every day open to learning our own biases, changing our behavior, and inviting in differences. Because impact matters. Microsoft operates in 190 countries and is made up of approximately 228,000 passionate employees worldwide.

KPIT

kpit.com

About KPIT KPIT is reimagining the future of mobility, forging ahead with group companies and partners to shape a world that is cleaner, smarter, and safer. With over 25 years of specialized expertise in Mobility, KPIT is accelerating the transformation towards Software and AI-Defined Vehicles through its advanced solutions, platforms, and products—propelled by mobility-infused AI frameworks, software craftsmanship, and systems integration mastery. Vision in Motion Fueled by 2000+ vehicle production programs and powering 20+ million vehicles on the road with KPIT software, our experience in unmatched. At the same time, we push boundaries, developing solutions that enable Mobility OEMs to innovate at speed and scale. For more details, visit www.kpit.com

Groupon

cb greenhouse.io

Groupon is an experiences marketplace that brings people more ways to get the most out of their city or wherever they may be. By enabling real-time mobile commerce across local businesses, live events and travel destinations, Groupon helps people find and discover experiences––big and small, new and familiar––that make for a full, fun and rewarding life. Groupon helps local businesses grow and strengthen customer relationships––resulting in strong, vibrant communities. E-commerce never stands still, our transformation strategy, combined with our strong brand, customer base, and marketplace expertise, ensures we are constantly adapting to the evolving market landscape while delivering value for our customers and merchant partners. Groupon is on a radical journey to transform our business. To meet our aggressive goals we are in the process of building a culture that prioritises fast decisions, open communication, and relentless pursuit of results. In the spirit of transparency, things aren't perfect, there are still processes to change and bureaucracy to break so we need people who want to be on this journey with us. Check out our current opportunities with #TeamGroupon and join us on our exciting mission to become The Ultimate Destination For Local Experiences and Services.

JD.COM

cb jd.com

JD.com, also known as JINGDONG, is a leading e-commerce company transferring to be a technology and service enterprise with supply chain at its core. JD.com’s business has expanded across retail, technology, logistics, health, property development, industrials, and international business. Ranking 44 on the Fortune Global 500, JD.com is China’s largest retailer by revenue. JD.com serves over 600 million customers and has set the standard for e-commerce through its commitment to quality, authenticity, and competitive pricing. The company operates the largest fulfillment infrastructure of any e-commerce company in China, enabling 90% of retail orders to be delivered within the same or next day. JD.com also promotes productivity and innovation across a range of industries by offering its cutting-edge technology and infrastructure to partners, brands, and diverse sectors.

Bosch Global Software Technologies

bosch-softwaretechnologies.com

With our unique ability to offer end-to-end solutions that connect the three pillars of IoT - Sensors, Software, and Services, we enable businesses to move from the traditional to the digital, or improve businesses by introducing a digital element in their products and processes. Now more than ever, companies across the world are becoming rapidly aware of the potential and impact of modern-day digital technologies on customers, people, and organisational processes. We aim to empower and translate this realisation into a new reality for enterprises, leveraging our in-depth understanding of global business complexities, the risk of disruption that digital technologies bring, and the technology thought leadership that we have built over decades of experience at Bosch. Founded in 1997, we are a 100% owned subsidiary of Robert Bosch GmbH, with over 35,000 associates across the globe. [Data protection notice: www.bosch-softwaretechnologies.com/en/terms-of-use/data-protection-notice/ ]

Cadence

cadence.com

Cadence is a market leader in AI and digital twins, pioneering the application of computational software to accelerate innovation in the engineering design of silicon to systems. Our design solutions, based on Cadence’s Intelligent System Design™ strategy, are essential for the world’s leading semiconductor and systems companies to build their next-generation products from chips to full electromechanical systems that serve a wide range of markets, including hyperscale computing, mobile communications, automotive, aerospace, industrial, life sciences and robotics. In 2024, Cadence was recognized by the Wall Street Journal as one of the world’s top 100 best-managed companies. Cadence solutions offer limitless opportunities—learn more at www.cadence.com.

Loading…

NEWS

Mercor CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 12, 2026 07:00 AM

This 22-year-old co-founder surpassed Mark Zuckerberg’s Forbes record: Meet Surya Midha

Mercor co-founder, Surya Midha, reportedly has $2.2 billion of net worth.

Read Article

November 03, 2025 08:00 AM

Meet Indian-origin Silicon Valley Mercor founders who became world’s youngest self-made billionaires at 22

Three 22-year-old entrepreneurs from Silicon Valley have created history by becoming the world's youngest self-made billionaires.

Read Article

October 31, 2025 07:00 AM

The Week’s 10 Biggest Funding Rounds: AI, Fintech And E-Commerce In The Lead

Want to keep track of the largest startup funding deals in 2025 with our curated list of $100 million-plus venture deals to U.S.-based...

Read Article

October 21, 2025 07:00 AM

Serval raises $47M to bring AI agents to IT service management

Serval is using agentic AI models to automate IT service management, but the company has a unique approach that takes advantage of agentic...

Read Article

October 15, 2025 07:00 AM

LinkedIn’s list of top 50 U.S. startups includes three emerging companies from Seattle area

From left: Logos on LinkedIn for Seattle-area startups Chainguard, Common Room and Truveta. (Images via LinkedIn).

Read Article

September 16, 2025 07:48 AM

Scale AI lost its focus on product, says Mercor's CEO

Mercor's CEO said that the most important aspect of the industry was quality and "having phenomenal people that you treat incredibly well."

Read Article

September 09, 2025 07:00 AM

Exclusive: AI training startup Mercor eyes $10B+ valuation on $450 million run rate, sources say

Mercor, a startup that connects companies like OpenAI and Meta with domain experts needed to train and refine their foundational AI models,...

Read Article

June 19, 2025 07:00 AM

Meta’s $14.3B stake triggers Scale AI customer exodus, could be a windfall for rivals like Mercor

Meta is investing $14.3 billion in the data labeling and model evaluation startup, which gives the social media giant a 49% stake in the company.

Read Article

April 17, 2025 07:00 AM

Welcome, Shreya Shekhar!

Shreya will focus on working with early-stage founders across AI, cybersecurity, infrastructure and developer tooling.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-15511

SUMMARY

A vulnerability was determined in Comfast CF-WR631AX V3 up to 2.7.0.8. Affected by this vulnerability is the function system_wl_upload_pic_file of the file /usr/bin/webmgnt of the component FastCGI Backend. This manipulation of the argument filename causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-07-12

Updated

Date2026-07-12

RISK INFORMATION (Score: 9.8)

cvss2

Base Score: 10.0

Complexity: LOW

AV:N/AC:L/Au:N/C:C/I:C/A:C

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-15510

SUMMARY

A vulnerability was found in Leantime up to 3.8.0. Affected is the function Setting::saveSetting of the component API. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-07-12

Updated

Date2026-07-12

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15509

SUMMARY

A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON-RPC Endpoint. The manipulation of the argument role leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-07-12

Updated

Date2026-07-12

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15508

SUMMARY

A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_target_url of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extracted_path_and_query can lead to server-side request forgery. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-07-12

Updated

Date2026-07-12

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15507

SUMMARY

A vulnerability was detected in coollabsio Coolify up to 4.1.1. The impacted element is an unknown function of the file /app/Policies/ of the component Policy Handler. Performing a manipulation results in missing authorization. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-07-12

Updated

Date2026-07-12

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…