What is the official website of Norton ?

The official website of Norton is http://us.norton.com.

What is Norton's cybersecurity risk score?

Norton has an AI-generated cybersecurity risk score of 587 out of 1000, indicating a Very Poor security posture according to Rankiteo's assessment.

How many security incidents has Norton experienced?

According to Rankiteo, Norton currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Norton been affected by any supply chain cyber incidents ?

According to Rankiteo, Norton has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Shopify (Incident ID: NORPAYSHOAPPMCA1782469522) Snowflake (Incident ID: 23A1764346412)

Does Norton have SOC 2 Type 1 certification ?

According to Rankiteo, Norton is not certified under SOC 2 Type 1.

Does Norton have SOC 2 Type 2 certification ?

According to Rankiteo, Norton does not hold a SOC 2 Type 2 certification.

Does Norton comply with GDPR ?

According to Rankiteo, Norton is not listed as GDPR compliant.

Does Norton have PCI DSS certification ?

According to Rankiteo, Norton does not currently maintain PCI DSS compliance.

Does Norton comply with HIPAA ?

According to Rankiteo, Norton is not compliant with HIPAA regulations.

Does Norton have ISO 27001 certification ?

According to Rankiteo,Norton is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Norton operate in ?

Norton operates primarily in the Software Development industry.

How many employees does Norton have ?

Norton employs approximately None employees people worldwide.

Does Norton own any subsidiaries ?

Norton presently has no subsidiaries across any sectors.

How many LinkedIn followers does Norton have ?

Norton's official LinkedIn profile has approximately 5,510 followers.

What is the NAICS classification code for Norton ?

Norton is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Norton have a Crunchbase profile ?

No, Norton does not have a profile on Crunchbase.

Does Norton have a LinkedIn profile ?

Yes, Norton maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/norton.

How many cybersecurity incidents has Norton experienced ?

As of July 14, 2026, Rankiteo reports that Norton has experienced 11 cybersecurity incidents.

How many peer or competitor companies does Norton have ?

Norton has an estimated 30,334 peer or competitor companies worldwide.

What types of cybersecurity incidents has Norton faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Vulnerability, Ransomware, Data Leak and Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Norton

Boost Score +25 with badge (5 left)

587

/1000

Very Poor

612

/1000

Poor

Norton Vendor Cyber Rating & Cyber Score

norton.com

Add Your Compliance Badge

Norton is a leader in Cyber Safety, and part of Gen™ (NASDAQ: GEN), a global company dedicated to powering Digital Freedom with a family of trusted consumer brands. Norton empowers millions of individuals and families with award-winning protection for their devices, online privacy, and identity. Norton products and services are certified by independent testing organizations including AV-TEST, AV-Comparatives, and SE Labs. Norton is a founding member of the Coalition Against Stalkerware.

Norton A.I CyberSecurity Scoring

Scoring History

Norton

Norton CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Norton

Cyber Attack

6/2026

Shopify

NORPAYSHOAPPMCA...

Avast

Cyber Attack

2/2026

AVA1772015041

Norton

Breach

11/2025

Snowflake

23A1764346412

Norton

Cyber Attack

1/2025

NOR1778862436

Norton

Vulnerability

100

11/2024

AVA000112624

Norton

Data Leak

6/2023

GEN111718923

Norton

Data Leak

01/2023

NOR225881023

Norton

Breach

12/2022

NOR153072525

Norton

Ransomware

100

4/2022

AVA915071024

Norton

Vulnerability

07/2018

NOR013101122

Norton

Data Leak

5/2014

AVA221624123

Loading…

A.I.

Norton Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Norton

Incidents vs Software Development Industry Avg (This Year)

Norton has 5.66% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Norton has 4.76% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types Norton vs Software Development Industry Avg (This Year)

Norton reported 1 incidents this year: 1 cyber attacks, 0 ransomware, 0 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - Norton (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Norton Subsidiaries

Norton

Software Development

Website: http://us.norton.com

Company Size: 1,001-5,000 employees

GenTechnology, Information and Internet

AvastComputer and Network Security

CyberSec&AI ConnectedSoftware Development

AviraComputer and Network Security

AVG TechnologiesSoftware Development

Avast BusinessComputer and Network Security

Loading…

Norton Similar Companies

NetSuite

netsuite.com

Founded in 1998, Oracle NetSuite is the world’s first cloud computing company and the leader in AI-powered cloud enterprise resource planning (ERP) and business management software. NetSuite provides an AI-powered, unified cloud business system that helps organizations manage core business functions in a single system. These include financial management, inventory and supply chain management, CRM, field service management, human resources (HR), professional services automation (PSA), and omnichannel commerce. Businesses use NetSuite to gain real-time visibility into operations, automate financial processes, improve reporting and analytics, and make faster, data-driven decisions using built-in AI capabilities. With more than 25 years of experience in cloud software, NetSuite supports over 43,000 organizations in 220 countries and territories, ranging from startups to global enterprises. NetSuite is commonly used by entrepreneurs, executives, finance operations leaders, and more who need scalable, flexible, and integrated business management solutions to drive efficiency and growth.

Trimble Inc.

trimble.com

Trimble is a global technology company that connects the physical and digital worlds, transforming the ways work gets done. With relentless innovation in precise positioning, modeling and data analytics, Trimble enables essential industries including construction, geospatial and transportation. Whether it's helping customers build and maintain infrastructure, design and construct buildings, optimize global supply chains or map the world, Trimble is at the forefront, driving productivity and progress. For more information about Trimble (Nasdaq: TRMB), visit: www.trimble.com.

bigbasket

cb bigbasket.com

Starting our journey in 2011, today, bigbasket - a Tata Enterprise is India’s largest online supermarket with over 13 million customers and a presence in 60+ cities & towns. With our presence spanning the entire spectrum of consumer needs, we operate through a range of business lines - bigbasket, bbnow, bbinstant, bbdaily, fresho, bbmandi, and bbsaathi. We offer convenience by making grocery shopping easy for customers while enhancing their experience. With more than 47,000 employees, we are a proud & growing bigbasket family. With our businesses scaling, we are keen on working with the best talent in the industry. Every bigbasketeer embodies the ‘Spirit of bb’ that defines our work ethos. We believe in nurturing a people-first environment where the health and well-being of our employees are always prioritised. Fostering bigbasket’s value system, we encourage humility, transparency, integrity, and respect amongst each other to create an elevated work culture. At bigbasket, we empower every bigbasketeer with responsibility and ownership in everything they do. Being a customer-centric organisation, we operate with a maniacal focus on customers ensuring we always deliver our best. bigbasket has been proudly certified as a Great Place to Work, and Great Place to Work for Women. Our business model is designed to create opportunities for our country’s gig economy. We have achieved the highest ranking in the Fairwork India Ratings for Gig Workers. Through our DEI initiative – Aarambh, we foster Diversity, Equity, & Inclusion driving a workplace where everybody feels welcomed. Alongside this, we take conscious and proactive measures towards curtailing our impact on the environment. Our electric vehicles delivery fleet and solar panel equipped warehouses help us minimize carbon emissions. By promoting organic farming, we encourage fresh farm produce contributing to good land and soil health. #JoinTheSquad and be a part of our growth story!

Intuit

intuit.com

Intuit is a global technology platform that helps our customers and communities overcome their most important financial challenges. Serving millions of customers worldwide with TurboTax, QuickBooks, Credit Karma and Mailchimp, we believe that everyone should have the opportunity to prosper and we work tirelessly to find new, innovative ways to deliver on this belief. We encourage conversations on this page and will not delete comments that follow our terms of use. In order to keep this a safe community, the below posts may be removed: Repeated posts of the same content, spam or posts from fake accounts or profiles, offensive language or material, threats to others in the community, posts deliberately aimed to have a negative effect on the community or conversations.

HubSpot

hubspot.com

HubSpot is a leading CRM platform that provides software and support to help businesses grow better. Our platform includes marketing, sales, service, and website management products that start free and scale to meet our customers’ needs at any stage of growth. Today, thousands of customers around the world use our powerful and easy-to-use tools and integrations to attract, engage, and delight customers. HubSpot's award-winning culture has been recognized by Glassdoor, Great Place to Work, Comparably, Fortune, Entrepreneur, Inc., and more. We build connections, careers, and employee growth by creating a workplace that values flexibility, autonomy, and transparency. You can learn more about our commitment to creating an inclusive and diverse workplace in the HubSpot Culture Code. HubSpot is a hybrid company with employees working fully remotely, from an office, or a mix of the two. We are headquartered in Cambridge, MA with offices in Amsterdam, Berlin, Bogota, Dublin, Ghent, London, Madrid, Paris, San Francisco, Singapore, Sydney, Tokyo and Toronto. To learn more about HubSpot, visit www.hubspot.com and to join our team, visit www.hubspot.com/careers

Microsoft

cb microsoft.com

Every company has a mission. What's ours? To empower every person and every organization to achieve more. We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today. Our culture doesn’t just encourage curiosity; it embraces it. Each day we make progress together by showing up as our authentic selves. We show up with a learn-it-all mentality. We show up cheering on others, knowing their success doesn't diminish our own. We show up every day open to learning our own biases, changing our behavior, and inviting in differences. Because impact matters. Microsoft operates in 190 countries and is made up of approximately 228,000 passionate employees worldwide.

Synopsys Inc

cb synopsys.com

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

SS&C Technologies

ssctech.com

SS&C is a leading global provider of mission-critical, cloud-based software and solutions for the financial and healthcare industries. Named to the Fortune 1000 list as a top U.S. company based on revenue, SS&C (NASDAQ: SSNC) is a trusted provider to more than 22,000 financial services and healthcare companies, with over 27,000 employees and operations in more than 35 countries. Built upon a foundation of expertise, innovation and excellent customer service, SS&C powers some of the largest financial and healthcare firms in the world. +++++++++++++++++ ALPS Portfolio Solutions Distributor, Inc., ALPS Advisors, ALPS Funds and SS&C Technologies are affiliated. Distributed by ALPS Portfolio Solutions Distributor, Inc. AN INVESTMENT IN THE FUNDS INVOLVES RISK, INCLUDING LOSS OF PRINCIPAL. AN INVESTOR SHOULD CONSIDER INVESTMENT OBJECTIVES, RISKS, CHARGES AND EXPENSES CAREFULLY BEFORE INVESTING. TO OBTAIN A PROSPECTUS, WHICH CONTAINS THIS AND OTHER INFORMATION, CALL 1.877.398.8461 OR VISIT WWW.ALPSFUNDS.COM. READ THE PROSPECTUS CAREFULLY BEFORE INVESTING.

Groupon

cb greenhouse.io

Groupon is an experiences marketplace that brings people more ways to get the most out of their city or wherever they may be. By enabling real-time mobile commerce across local businesses, live events and travel destinations, Groupon helps people find and discover experiences––big and small, new and familiar––that make for a full, fun and rewarding life. Groupon helps local businesses grow and strengthen customer relationships––resulting in strong, vibrant communities. E-commerce never stands still, our transformation strategy, combined with our strong brand, customer base, and marketplace expertise, ensures we are constantly adapting to the evolving market landscape while delivering value for our customers and merchant partners. Groupon is on a radical journey to transform our business. To meet our aggressive goals we are in the process of building a culture that prioritises fast decisions, open communication, and relentless pursuit of results. In the spirit of transparency, things aren't perfect, there are still processes to change and bureaucracy to break so we need people who want to be on this journey with us. Check out our current opportunities with #TeamGroupon and join us on our exciting mission to become The Ultimate Destination For Local Experiences and Services.

Loading…

NEWS

Norton CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

April 01, 2026 10:00 AM

Norton 360 Deluxe: Comprehensive Cybersecurity for North American Investors in a Rising Threat Lands

Norton 360 Deluxe stands out as a leading multi-device protection suite from Gen Digital, offering AI-driven threat detection, VPN,...

Read Article

March 30, 2026 03:30 PM

Norton Review 2026: Solid Antivirus With Great Safe Browsing Tools and Parental Controls

Norton offers a variety of quality cybersecurity tools for multidevice users and families with young kids, even if other companies provide...

Read Article

March 29, 2026 07:34 PM

Norton 360 Deluxe: Comprehensive Cybersecurity for North American Investors in a Threat-Heavy Digita

Norton 360 Deluxe stands as a flagship cybersecurity solution from Gen Digital, offering multi-device protection, VPN, and identity theft...

Read Article

March 26, 2026 10:32 AM

Norton 360 Deluxe Sees Major Pricing Updates and Discounts in March 2026 Enhancing Cybersecurity Acc

Norton 360 Deluxe, a leading all-in-one cybersecurity solution from Gen Digital, rolls out refreshed subscription tiers and up to 60%...

Read Article

March 25, 2026 04:35 PM

This Norton Deal Makes Premium Cybersecurity Worth It

Discover Norton's latest premium deal. Learn more about its advanced cybersecurity features like real-time protection, a password manager,...

Read Article

March 22, 2026 07:00 AM

Norton 360 Antivirus Review 2026 — Is It Actually the Best?

Is Norton still the best antivirus? We put this antivirus to the test in our Norton review to learn if it is. Read the full results in...

Read Article

March 16, 2026 07:00 AM

The Best Security Suites We've Tested for 2026

What's the top security software to keep your PC safe? We've tested, reviewed, and rated more than 40 apps to help you choose the right...

Read Article

March 16, 2026 07:00 AM

Norton 360 Deluxe 2026: AI Features and Price Hikes Reshape Cybersecurity Landscape

Norton 360 Deluxe 2026 introduces cutting-edge AI features targeting modern cyber threats. Real-time antivirus scanning now leverages machine...

Read Article

March 16, 2026 07:00 AM

The Best Security Suites for 2026

What's the top security software to keep your PC safe? We've tested, reviewed, and rated more than 40 apps to help you choose the right...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-58489

SUMMARY

HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.0, the GitHub Gist export flow created an OAuth2 state value but only checked that it was present rather than validating it against the value expected for the user's session. Because the state was not properly validated, an attacker could forge a callback URL containing their own valid GitHub OAuth code. When processing the callback, HedgeDoc used the victim's logged-in session to select which note to export, but the attacker's authorization code to determine which GitHub account received it. As a result, a logged-in victim who clicked a crafted link could export their own private, protected, or limited note directly into a Gist controlled by the attacker. This issue has been fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 6.8

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58486

SUMMARY

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, HedgeDoc was vulnerable to a YAML alias bomb due to unsafe processing of the note frontmatter. HedgeDoc parsed frontmatter with js-yaml.load (js-yaml v3) via @hedgedoc/meta-marked, which resolved YAML anchor aliases. A compact malicious payload could therefore expand into a huge object structure, consuming excessive CPU. This expansion ran on every request to the publish view (/s/<shortid>) and, when placed under the opengraph key, the editor view (/<noteId>). A ten-level alias bomb could block the single Node.js event loop for roughly 235 seconds per request, causing concurrent requests to hang or drop and rendering the instance unavailable (DoS). Because the note was stored in the database, the impact survived process restarts until the note was removed. toobusy-js did not reliably mitigate the worst cases, as the event loop was saturated before the middleware could respond. This issue was fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58102

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via extensions(), extensions_by_long_name(), extensions_by_oid(), or has_extension_oid()), the code passes OBJ_obj2txt()'s return value as the hash-key length; because that value is the OID's full text length rather than the bytes written to the fixed-size buffer (129 bytes), an OID whose text is longer than the 129-byte buffer causes a read past the allocation, exposing adjacent heap memory as the returned hash key. extensions_by_name() uses the static shortname path and is not affected.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-58101

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check. keyid_data also dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when the parse succeeds. A caller invoking an affected helper on an extension from an untrusted certificate triggers a SIGSEGV that crashes the Perl process.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-57856

SUMMARY

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php sanitizes the bucket name with preg_replace('/[^a-zA-Z0-9-_\\.]/','', $bucket), which permits '..' and '../' sequences. The sanitized value is interpolated into a Flysystem path as uploads://buckets/{bucket}. Flysystem's WhitespacePathNormalizer resolves 'buckets/..' to the empty string (the uploads storage root) without raising PathTraversalDetected because the '..' has a preceding component to consume. An authenticated low-privileged user can send a crafted request with a '../' bucket name to list, upload, and delete files across all buckets, including those belonging to other users or roles

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…