What is the official website of NGINX ?

The official website of NGINX is https://www.f5.com.

What is NGINX's cybersecurity risk score?

NGINX has an AI-generated cybersecurity risk score of 721 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has NGINX experienced?

According to Rankiteo, NGINX currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has NGINX been affected by any supply chain cyber incidents ?

According to Rankiteo, NGINX has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: F5 (Incident ID: F51784499829) F5 (Incident ID: NGIF51781792829) F5 (Incident ID: F5NGI1779539045) NGINX (Incident ID: BOANGI1770244421)

Does NGINX have SOC 2 Type 1 certification ?

According to Rankiteo, NGINX is not certified under SOC 2 Type 1.

Does NGINX have SOC 2 Type 2 certification ?

According to Rankiteo, NGINX does not hold a SOC 2 Type 2 certification.

Does NGINX comply with GDPR ?

According to Rankiteo, NGINX is not listed as GDPR compliant.

Does NGINX have PCI DSS certification ?

According to Rankiteo, NGINX does not currently maintain PCI DSS compliance.

Does NGINX comply with HIPAA ?

According to Rankiteo, NGINX is not compliant with HIPAA regulations.

Does NGINX have ISO 27001 certification ?

According to Rankiteo,NGINX is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does NGINX operate in ?

NGINX operates primarily in the IT Services and IT Consulting industry.

How many employees does NGINX have ?

NGINX employs approximately 173 people worldwide.

Does NGINX own any subsidiaries ?

NGINX presently has no subsidiaries across any sectors.

How many LinkedIn followers does NGINX have ?

NGINX's official LinkedIn profile has approximately 90,437 followers.

What is the NAICS classification code for NGINX ?

NGINX is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does NGINX have a Crunchbase profile ?

Yes, NGINX has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/nginx.

Does NGINX have a LinkedIn profile ?

Yes, NGINX maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/nginx.

How many cybersecurity incidents has NGINX experienced ?

As of August 8, 2026, Rankiteo reports that NGINX has experienced 11 cybersecurity incidents.

How many peer or competitor companies does NGINX have ?

NGINX has an estimated 41,295 peer or competitor companies worldwide.

What types of cybersecurity incidents has NGINX faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

NGINX

Boost Score +25 with badge (5 left)

721

/1000

Moderate

746

/1000

Moderate

NGINX Vendor Cyber Rating & Cyber Score

f5.com

cb in

Add Your Compliance Badge

We have moved! Follow us at @F5 for all relevant updates.

NGINX A.I CyberSecurity Scoring

Scoring History

NGINX

NGINX CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

NGINX

Vulnerability

100

7/2026

F51784499829

NGINX

Vulnerability

6/2026

NGIF51781792829

NGINX

Vulnerability

100

5/2026

F5NGI1779539045

NGINX

Vulnerability

100

5/2026

NGI1779279820

NGINX

Vulnerability

100

5/2026

NGI1778747274

NGINX

Vulnerability

100

4/2026

NGI1776335195

NGINX

Vulnerability

100

3/2026

NGI1773116620

NGINX

Vulnerability

100

3/2026

NGI1776291864

NGINX

Vulnerability

1/2026

NGINX

BOANGI177024442...

NGINX

Vulnerability

100

1/2020

BROMIC7-ENGICIS...

NGINX

Vulnerability

100

3/2011

NGI1784521421

Loading…

A.I.

NGINX Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for NGINX

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

NGINX has 504.03% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

NGINX has 773.79% more incidents than the average of all companies with at least one recorded incident.

Incident Types NGINX vs IT Services and IT Consulting Industry Avg (This Year)

NGINX reported 9 incidents this year: 0 cyber attacks, 0 ransomware, 9 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - NGINX (X = Date, Y = Severity)

Loading…

SUBSIDIARY

NGINX Subsidiaries

Parent Company

NGINX

IT Services and IT Consulting

Website: https://www.f5.com

Company Size: 201-500 employees

No subsidiary data available for this company.

Loading…

NGINX Similar Companies

Zebra Technologies

zebra.com

Zebra provides the foundation for intelligent operations with an award-winning portfolio of connected frontline, asset visibility and automation solutions. Organizations globally across retail, manufacturing, transportation, logistics, healthcare, and other industries rely on us to deliver outcomes today while driving innovation for what’s next. Together with our partners, we create new ways of working that improve productivity and empower organizations to be better every day. Learn more at www.zebra.com.

Lenovo

lenovo.com

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #196 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Guided by its vision of “Smarter Technology for All”, Lenovo is executing a Hybrid AI strategy that spans Personal AI – one personal AI, multiple devices; and Enterprise AI – helping customers turn data into insights and value. This strategy is delivered through the Group’s commitment to world-class innovation and a full-stack AI portfolio, including devices (PCs, workstations, smartphones, tablets, accessories), infrastructure solutions (server, storage, edge, high performance computing and software defined infrastructure), as well as software, solutions, and services. With a global footprint spanning 21 research and development locations in 11 markets, and a global supply chain including more than 30 manufacturing sites across 10 markets, Lenovo is widely recognized for its operational excellence, including ranking #8 in the Gartner Supply Chain Top 25. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY). To find out more visit https://www.lenovo.com, and read about the latest news via our StoryHub at https://news.lenovo.com/. To learn more about our career opportunities, visit our careers page at http://jobs.lenovo.com/.

Swisscom

swisscom.ch

As No. 1, we inspire people in the connected world. With the latest technologies and innovations, together we have the opportunity to shape the future. To do this, we are and act trustworthy, committed and curious. Are you with us? Join us on this exciting journey and work with us or in one of the DevOps Centres in Riga or Rotterdam in different business areas on the latest technological trends. Find out more about us and our vacancies on our careers page: www.swisscom.ch/career We look forward to hearing from you!

Serco

serco.com

We bring together the right people, the right technology and the right partners to create innovative solutions that make positive impact and address some of the most urgent and complex challenges facing the modern world. With a focus on serving governments globally, Serco’s services span justice, migration, defence, space, customer services, health, and transport. Our core capabilities include service design and advisory, resourcing, complex programme management, systems integration, case management, engineering, and asset & facilities management.

Gainwell Technologies

gainwelltechnologies.com

The people who build careers at Gainwell Technologies share one thing: they want their work to matter. Here, it does. We're the essential ingredient that makes Medicaid work. For more than 50 years, we've combined our sweeping scale and technology to turn complex policies into thriving programs. We act as the crucial connection bringing the U.S. healthcare ecosystem together, and we partner with state agencies to modernize public health. Our solutions translate complex member data into meaningful action. We streamline administration, connect vital systems, and drive efficiency. This gives providers more time to focus on delivering quality care to the people who need it most. When we bring Medicaid touchpoints to life, members thrive. From fighting fraud and recovering improper payments to speeding up verifications, every solution we deploy expands what's possible for the future of healthcare. Less burden, more mission. Gainwell.

Minsait

minsait.com

We are one of the world's leading consultancies in technological services for companies and the public sector. With headquarters in Spain and presence in more than 100 countries, we combine experience in AI, data, cloud and cybersecurity to help companies and organizations generate a positive impact on society. Tech for impact #Minsait

Hitachi

hitachi.com

For over 100 years, Hitachi has been committed to developing innovations that improve lives. Today, this means creating superior technology and products that balance environment, well-being, and economic growth. We integrate IT, operational technology (OT), and products to transform critical infrastructure and industrial systems. Through Hitachi’s process for creating value from data, which we call Lumada, we combine rich industry insight and infrastructure expertise to create measurable, positive change. We operate across four global sectors – Digital Systems & Services, Energy, Mobility, and Connective Industries – plus a Strategic Social Innovation Business Unit developing next-generation solutions. With over 280,000 employees across 618 consolidated subsidiaries in over 140 countries, we partner with our customers to create a harmonized society and build what’s next for people and planet.

Dimension Data

cb dimensiondata.com

Dimension Data is a leading African born technology provider operating in the Middle East and Africa, offering a portfolio of services including systems integration, managed services infrastructure, cloud solutions, business applications, customer experience, and intelligent security solutions. We provide innovative solutions that optimise today’s evolving technology environments, enabling clients to leverage data in a digital age. Founded in 1983, and headquartered in Johannesburg, Dimension Data is a proud member of the NTT Group, one of the world’s leading information communication technology (ICT) companies, comprising a group of global technology companies. In 2020, Dimension Data completed its transition to operate as one entity consolidating all its subsidiaries under a single Dimension Data brand employing over 10 000 employees across 15 countries. We continue to invest heavily in innovation bringing together the world’s best technologies, from consulting, technical and support services to a fully managed service. Dimension Data is currently a level 2 BBBEE contributor after successfully concluding a significant BBBEE transaction in 2019. Dimension Data will continue to implement strategies to ensure it contributes meaningfully to transformation towards an inclusive society.

Expleo Group

expleo.com

Expleo is a global engineering, technology and consulting service provider that partners with leading organisations to guide them through their business transformation, helping them achieve operational excellence and future-proof their businesses. Expleo benefits from more than 50 years of experience developing complex products, optimising manufacturing processes, and ensuring the quality of information systems. Leveraging its deep sector knowledge and wide-ranging expertise in fields including AI engineering, digitalisation, hyper-automation, cybersecurity and data science, the group’s mission is to fast-track innovation through each step of the value chain. As a responsible and diverse organisation, Expleo is committed to doing business with integrity and working towards a more sustainable and secure society. Expleo boasts an extensive global footprint, powered by 18,000 highly-skilled experts delivering value in 29 countries and generating more than €1.4 billion in revenue.

Loading…

NEWS

NGINX CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 10, 2026 02:24 AM

Patch now! Exploitation of Nginx UI vulnerability “imminent,” warns threat analyst

Hackers are already probing impacted versions of Nginx web server's user interface, hunting for credentials and encryption keys.

Read Article

March 10, 2026 12:04 AM

Critical Nginx UI flaw allows unauthenticated backup downloads and decryption

A critical vulnerability in Nginx UI, identified as CVE-2026-27944, allows attackers to download and decrypt full server backups without any...

Read Article

March 09, 2026 05:04 PM

Vietnam-Based Cybercrime Network Enables Fraudulent Account Signups at Scale

Vietnam-linked O-UNC-036 runs bots and disposable emails to mass-create fake accounts used in phishing, spam, and large-scale scams.

Read Article

March 09, 2026 03:59 PM

Security Risk Advisors Releases “The Purple Perspective 2026” Report

Security Risk Advisors releases the Purple Perspective 2026 report highlighting key cybersecurity detection insights.

Read Article

March 09, 2026 02:20 PM

Microsoft Launches Copilot Cowork, a New AI Feature in Microsoft 365 to Automate Tasks

Microsoft has introduced Copilot Cowork, a new AI-powered feature embedded within Microsoft 365 that moves beyond conversational assistance...

Read Article

March 09, 2026 01:06 PM

ClipXDaemon Emerges as C2-Less Linux Clipboard Hijacker, Targeting Crypto Wallets in X11 Sessions

ClipXDaemon Linux malware hijacks crypto transfers by replacing wallet addresses in the clipboard every 200ms, operating fully offline.

Read Article

March 09, 2026 11:24 AM

Critical Nginx UI Vulnerabilities Allow Attacker to Download a Full System Backup

A critical flaw in Nginx UI allows unauthenticated attackers to download and decrypt full system backups.

Read Article

March 09, 2026 09:53 AM

Critical Nginx UI Vulnerabilities Allow Attackers to Download Full System Backups

The issue, tracked as CVE-2026-27944, has been rated 9.8 (Critical) on the CVSS scale, highlighting its severity and potential impact on production systems...

Read Article

March 09, 2026 07:17 AM

Nginx UI Vulnerabilities Let Attackers Download Full System Backups

A critical security flaw has been discovered in Nginx UI that allows unauthenticated threat actors to download and decrypt complete system...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-52880

SUMMARY

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions from 1.7.14 through 1.7.17 are vulnerable to a remotely triggerable denial of service. Both REST APIs are started with the Gin Engine.Run convenience method, which serves requests through Go's default HTTP server with no ReadHeaderTimeout, ReadTimeout, or MaxHeaderBytes configured. As a result, incoming connections that never complete their request headers are held open indefinitely. When a REST listener is reachable beyond localhost through the documented all-interface bind or a Docker port-publish deployment, a single unauthenticated client can open many slow-header connections and hold them open until server file descriptors are exhausted, preventing the API from accepting new connections. This renders the REST API unavailable to legitimate clients. This issue is fixed in version 1.7.18.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-52879

SUMMARY

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns a new goroutine for every incoming direct message before the processor-level antiflood layer makes any admission decision, with no semaphore, throttler, or bound on the number of concurrent in-flight spawns. Because the antiflood check runs inside the spawned goroutine rather than before it, a single connected peer can open a direct-send stream and send a stream of well-formed messages to force unbounded goroutine creation, where each goroutine allocates its own stack and holds a message reference until processing completes, adding scheduler and garbage-collection pressure faster than the runtime can drain it. This lets one peer degrade the node's availability and its ability to process legitimate traffic, resulting in a remotely triggerable denial of service. The issue is fixed in 1.7.18.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-52878

SUMMARY

Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction whose embedded RawData sub-message is omitted. This omission causes RawData to decode to nil. Every transaction gossiped on the Klever-Go P2P network is decoded and validated synchronously inside the libp2p pubsub topic-validator callback, where txVersionChecker.CheckTxVersion dereferences tx.RawData.Version with no nil check. Because the libp2p pubsub callback, the underlying go-libp2p-pubsub validation worker, and Klever's own network/p2p layer install no recover(), the panic propagates and crashes the entire node process. The attacker payload is a 3-byte protobuf message; no validator key, stake, funds, or on-chain account is required, and delivery aimed at enough of the BLS validator set can halt block production, resulting in a chain halt. This issue has been fixed in version 1.7.18.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-49343

SUMMARY

Klever-Go is the Go implementation of the Klever blockchain protocol. In versions prior to 1.7.18, the account-data trie syncers are vulnerable to a resource-exhaustion flaw that leaks bounded throttler slots on error paths. In syncDataTrie() (in both userAccountsSyncer.go and kappAccountsSyncer.go), StartProcessing() reserves a slot from the NumGoRoutinesThrottler, but the corresponding EndProcessing() is only called on the success path and on the duplicate-root early return. As a result, any error from trie.NewTrie(), trie.NewTrieSyncer(), or trieSyncer.StartSyncing() (including the network-dependent timeout path) permanently consumes one slot for the lifetime of the throttler. An attacker who can repeatedly cause trie-node sync failures or timeouts during bootstrap can exhaust the bounded throttler, after which further account-data trie syncs stop making progress and SyncAccounts() returns a timeout. Because epoch bootstrap in syncUserAccountsState() and syncKappAccountsState() aborts on any such error, this causes bootstrap to fail, a core availability issue affecting fresh, restarting, or resyncing nodes and validators. This issue is fixed in version 1.7.18.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-48122

SUMMARY

Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level settings in the Ruby LSP VS Code extension prior to version 0.10.4 could override the path to the Ruby executable, the version manager executables, or the Bundler `Gemfile` used at startup. A malicious repository containing a `.vscode/settings.json` could set these values to attacker-controlled targets. Opening and trusting the repository would then execute code with the privileges of the developer. The Ruby LSP gem and clients of the language server in other editors are not affected. Version 0.10.4 of the Ruby LSP VS Code extension fixes the issue.

Published

Date2026-08-07

Updated

Date2026-08-07

RISK INFORMATION (Score: )

cvss4

Base Score: 5.4

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/Shopify/ruby-lsp/security/advisories/GHSA-2x7g-8mp4-572w

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…