ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

Empower Your Business with AI Let AI-NOMIS Be Your Guide! Welcome to AI-NOMIS, AI-NOMIS strives to brighten the future through advancements in AI technology, aiming to create an environment where every individual and company can realize the potential of AI. This embodies the democratization of AI development. We aim to establish a user-friendly AI development environment that surpasses the limitations of traditional hard-coding techniques, offering the opportunity to bring creative ideas to life through no-code AI solutions. Our vision is to democratize AI technology, bridging the gap for individuals and organizations, regardless of size or domain. We envision a world where AI, intuitive and accessible, serves as a catalyst for innovation in every corner of society. <About Us> Our vision is to democratize AI technology, bridging the gap for individuals and organizations, regardless of size or domain. We envision a world where AI, intuitive and accessible, serves as a catalyst for innovation in every corner of society. Our commitment lies in crafting AI solutions that are not just at the forefront of technology but are also inherently user-friendly, making the promise of AI a reality for all. <What We Offer> Customized AI Training: Based on the provided data, we fine-tune the LLM, TTS, STF, and STT models to create tailored AI models. Corporate GPT Development: Developing corporate GPTs based on domain-specific GPTs, such as beauty and law, ensuring a secure environment without the risk of information leakage. User-specific AI Development: Customizing AI solutions to cater to specific user needs and preferences. Unbeatable Deals: Thanks to our NOCODING AI technology, we develop AI much Faster and Affordable! we ensure your AI solution will be tailored to your specific needs and crafted in the most cost-effective manner. Also we offer you 1 year of Free Server. 🔗 Contact us to Empower your startup with AI: AI-NOMIS

AI-NOMIS A.I CyberSecurity Scoring

AI-NOMIS

Company Details

Linkedin ID:

nomis-ai

Employees number:

2

Number of followers:

21

NAICS:

5415

Industry Type:

IT Services and IT Consulting

Homepage:

ai-nomis.com

IP Addresses:

0

Company ID:

AI-_5066736

Scan Status:

In-progress

AI scoreAI-NOMIS Risk Score (AI oriented)

Between 700 and 749

https://images.rankiteo.com/companyimages/nomis-ai.jpeg
AI-NOMIS IT Services and IT Consulting
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreAI-NOMIS Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/nomis-ai.jpeg
AI-NOMIS IT Services and IT Consulting
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

AI-NOMIS Company CyberSecurity News & History

Past Incidents
1
Attack Types
1
EntityTypeSeverityImpactSeenBlog DetailsIncident DetailsView
AI-NOMISBreach10044/2025
Rankiteo Explanation :
Attack with significant impact with customers data leaks

Description: AI-NOMIS, a South Korean AI firm, experienced a major data leak through its GenNomis platform, resulting in 47.8 gigabytes of data exposure, including explicit AI-generated images and JSON files. Among the leaked content were deeply concerning images depicting individuals who appeared to be minors and celebrities in explicit contexts. The exploited vulnerability led to potential risks of extortion, reputation damage, and the unauthorized creation of pornographic deepfakes, sparking significant privacy and ethical issues around AI-generated content.

AI-NOMIS
Breach
Severity: 100
Impact: 4
Seen: 4/2025
Blog:
Rankiteo Explanation
Attack with significant impact with customers data leaks

Description: AI-NOMIS, a South Korean AI firm, experienced a major data leak through its GenNomis platform, resulting in 47.8 gigabytes of data exposure, including explicit AI-generated images and JSON files. Among the leaked content were deeply concerning images depicting individuals who appeared to be minors and celebrities in explicit contexts. The exploited vulnerability led to potential risks of extortion, reputation damage, and the unauthorized creation of pornographic deepfakes, sparking significant privacy and ethical issues around AI-generated content.

Ailogo

AI-NOMIS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for AI-NOMIS

Incidents vs IT Services and IT Consulting Industry Average (This Year)

AI-NOMIS has 81.82% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

AI-NOMIS has 56.25% more incidents than the average of all companies with at least one recorded incident.

Incident Types AI-NOMIS vs IT Services and IT Consulting Industry Avg (This Year)

AI-NOMIS reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.

Incident History — AI-NOMIS (X = Date, Y = Severity)

AI-NOMIS cyber incidents detection timeline including parent company and subsidiaries

AI-NOMIS Company Subsidiaries

SubsidiaryImage

Empower Your Business with AI Let AI-NOMIS Be Your Guide! Welcome to AI-NOMIS, AI-NOMIS strives to brighten the future through advancements in AI technology, aiming to create an environment where every individual and company can realize the potential of AI. This embodies the democratization of AI development. We aim to establish a user-friendly AI development environment that surpasses the limitations of traditional hard-coding techniques, offering the opportunity to bring creative ideas to life through no-code AI solutions. Our vision is to democratize AI technology, bridging the gap for individuals and organizations, regardless of size or domain. We envision a world where AI, intuitive and accessible, serves as a catalyst for innovation in every corner of society. <About Us> Our vision is to democratize AI technology, bridging the gap for individuals and organizations, regardless of size or domain. We envision a world where AI, intuitive and accessible, serves as a catalyst for innovation in every corner of society. Our commitment lies in crafting AI solutions that are not just at the forefront of technology but are also inherently user-friendly, making the promise of AI a reality for all. <What We Offer> Customized AI Training: Based on the provided data, we fine-tune the LLM, TTS, STF, and STT models to create tailored AI models. Corporate GPT Development: Developing corporate GPTs based on domain-specific GPTs, such as beauty and law, ensuring a secure environment without the risk of information leakage. User-specific AI Development: Customizing AI solutions to cater to specific user needs and preferences. Unbeatable Deals: Thanks to our NOCODING AI technology, we develop AI much Faster and Affordable! we ensure your AI solution will be tailored to your specific needs and crafted in the most cost-effective manner. Also we offer you 1 year of Free Server. 🔗 Contact us to Empower your startup with AI: AI-NOMIS

Loading...
similarCompanies

AI-NOMIS Similar Companies

We don’t just imagine the future — we create it. We collaborate with technologists, developers and engineers to turn bold ideas into real-world impact. We partner with iconic brands like Ferrari and global events like the US Open, Wimbledon and The Masters to bring innovation to the world’s bigge

ASGN Incorporated

ASGN Incorporated (NYSE: ASGN) is a leading provider of IT services and solutions across the commercial and government sectors. ASGN helps corporate enterprises and government organizations develop, implement and operate critical IT and business solutions through its integrated offerings. For more i

Zebra Technologies

Zebra (NASDAQ: ZBRA) helps organizations monitor, anticipate, and accelerate workflows by empowering their frontline and ensuring that everyone and everything is visible, connected and fully optimized. Our award-winning portfolio spans software to innovations in robotics, machine vision, automation

Wipro

Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, a

General Dynamics Information Technology

GDIT is a global technology and professional services company that delivers solutions, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solut

Hexaware Technologies

At Hexaware, we're not just a global technology and business process services company; we're a community of 31,600+ Hexawarians dedicated to one singular purpose: creating smiles through the power of great people and technology. With a presence in 58 offices across 28 countries, we empower enterpris

UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to op

Elsevier

As a global leader in information and analytics, Elsevier helps researchers and healthcare professionals advance science and improve health outcomes for the benefit of society. We do this by facilitating insights and critical decision-making for customers across the global research and health ecosys

DXC Technology

DXC Technology (NYSE: DXC) helps global companies run their mission-critical systems and operations while modernizing IT, optimizing data architectures, and ensuring security and scalability across public, private and hybrid clouds. The world's largest companies and public sector organizations trust

newsone

AI-NOMIS CyberSecurity News

April 06, 2025 07:00 AM
AI Startup Deletes Entire Website After Researcher Finds Something Disgusting There

A cybersecurity researcher's shocking discovery has uncovered a rampant trove of deepfakes, highlighting the need for more AI regulation.

April 04, 2025 07:00 AM
Massive trove of underage deepfakes leaked by misconfigured GenNomis database

South Korean artificial intelligence firm AI-NOMIS had 47.8 GB of data with 93485 explicit AI-generated images depicting underage...

April 04, 2025 07:00 AM
Underage Deepfakes Exposed: GenNomis Database Leaks 47GB Data

A serious data breach at AI-NOMIS exposes explicit AI-generated images of minors. Discover the implications and security measures needed to...

April 03, 2025 07:00 AM
AI Image Site GenNomis Exposed 47GB of Underage Deepfakes

Cybersecurity researcher Jeremiah Fowler uncovers a massive 47.8GB database with disturbing AI-generated content belonging to GenNomis.

April 02, 2025 07:00 AM
AI Image Leak: Explicit Deepfake Content Discovered In Open Database

A non-password-protected database that contained just under 100k records belonging to GenNomis by AI-NOMIS —was discovered by cybersecurity...

April 01, 2025 07:00 AM
GenAI website goes dark after explicit fakes exposed

Jeremiah Fowler, an Indiana Jones of insecure systems, says he found a trove of sexually explicit AI-generated images exposed to the public internet.

April 01, 2025 07:00 AM
Thousands Of AI-Generated and Deepfake Images Exposed in Unprotected Database Online

There's no telling what one may stumble upon when scouring the web. Recently, cybersecurity researcher Jeremiah Fowler uncovered a database...

March 31, 2025 07:00 AM
GenNomis database exposes 100K sensitive records of AI images

Cybersecurity researcher Jeremiah Fowler discovered an unsecured database belonging to GenNomis by AI-NOMIS, a South Korean AI company.

March 31, 2025 07:00 AM
Thousands of AI & DeepFake Images Exposed on Nudify Service Data Breach

Cybersecurity Researcher, Jeremiah Fowler, discovered and reported to vpnMentor about a non-password-protected database that contained just...

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

AI-NOMIS CyberSecurity History Information

Official Website of AI-NOMIS

The official website of AI-NOMIS is https://www.ai-nomis.com.

AI-NOMIS’s AI-Generated Cybersecurity Score

According to Rankiteo, AI-NOMIS’s AI-generated cybersecurity score is 700, reflecting their Moderate security posture.

How many security badges does AI-NOMIS’ have ?

According to Rankiteo, AI-NOMIS currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does AI-NOMIS have SOC 2 Type 1 certification ?

According to Rankiteo, AI-NOMIS is not certified under SOC 2 Type 1.

Does AI-NOMIS have SOC 2 Type 2 certification ?

According to Rankiteo, AI-NOMIS does not hold a SOC 2 Type 2 certification.

Does AI-NOMIS comply with GDPR ?

According to Rankiteo, AI-NOMIS is not listed as GDPR compliant.

Does AI-NOMIS have PCI DSS certification ?

According to Rankiteo, AI-NOMIS does not currently maintain PCI DSS compliance.

Does AI-NOMIS comply with HIPAA ?

According to Rankiteo, AI-NOMIS is not compliant with HIPAA regulations.

Does AI-NOMIS have ISO 27001 certification ?

According to Rankiteo,AI-NOMIS is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of AI-NOMIS

AI-NOMIS operates primarily in the IT Services and IT Consulting industry.

Number of Employees at AI-NOMIS

AI-NOMIS employs approximately 2 people worldwide.

Subsidiaries Owned by AI-NOMIS

AI-NOMIS presently has no subsidiaries across any sectors.

AI-NOMIS’s LinkedIn Followers

AI-NOMIS’s official LinkedIn profile has approximately 21 followers.

NAICS Classification of AI-NOMIS

AI-NOMIS is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

AI-NOMIS’s Presence on Crunchbase

No, AI-NOMIS does not have a profile on Crunchbase.

AI-NOMIS’s Presence on LinkedIn

Yes, AI-NOMIS maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/nomis-ai.

Cybersecurity Incidents Involving AI-NOMIS

As of November 27, 2025, Rankiteo reports that AI-NOMIS has experienced 1 cybersecurity incidents.

Number of Peer and Competitor Companies

AI-NOMIS has an estimated 36,262 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at AI-NOMIS ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Incident Details

Can you provide details on each incident ?

Incident : Data Leak

Title: AI-NOMIS Data Leak

Description: AI-NOMIS, a South Korean AI firm, experienced a major data leak through its GenNomis platform, resulting in 47.8 gigabytes of data exposure, including explicit AI-generated images and JSON files. Among the leaked content were deeply concerning images depicting individuals who appeared to be minors and celebrities in explicit contexts. The exploited vulnerability led to potential risks of extortion, reputation damage, and the unauthorized creation of pornographic deepfakes, sparking significant privacy and ethical issues around AI-generated content.

Type: Data Leak

Attack Vector: Exploited Vulnerability

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Breach.

Impact of the Incidents

What was the impact of each incident ?

Incident : Data Leak NOM336040325

Data Compromised: Explicit ai-generated images, Json files

Systems Affected: GenNomis platform

Brand Reputation Impact: Significant

What types of data are most commonly compromised in incidents ?

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Explicit Ai-Generated Images, Json Files and .

Which entities were affected by each incident ?

Incident : Data Leak NOM336040325

Entity Name: AI-NOMIS

Entity Type: AI Firm

Industry: Technology

Location: South Korea

Data Breach Information

What type of data was compromised in each breach ?

Incident : Data Leak NOM336040325

Type of Data Compromised: Explicit ai-generated images, Json files

Sensitivity of Data: High

File Types Exposed: ImagesJSON

Additional Questions

Impact of the Incidents

What was the most significant data compromised in an incident ?

Most Significant Data Compromised: The most significant data compromised in an incident were Explicit AI-generated images, JSON files and .

What was the most significant system affected in an incident ?

Most Significant System Affected: The most significant system affected in an incident was GenNomis platform.

Data Breach Information

What was the most sensitive data compromised in a breach ?

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Explicit AI-generated images and JSON files.

cve

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=nomis-ai' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge