What is nPhase, LLC's cybersecurity risk score?

nPhase, LLC has an AI-generated cybersecurity risk score of 748 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has nPhase, LLC experienced?

According to Rankiteo, nPhase, LLC currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has nPhase, LLC been affected by any supply chain cyber incidents ?

According to Rankiteo, nPhase, LLC has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: UUNET (Incident ID: LUMATTVERFBIWINFIN1772764213) AT&T (Incident ID: FBIATTVER1772836650) Verizon (Incident ID: ATT000011825)

Does nPhase, LLC have SOC 2 Type 1 certification ?

According to Rankiteo, nPhase, LLC is not certified under SOC 2 Type 1.

Does nPhase, LLC have SOC 2 Type 2 certification ?

According to Rankiteo, nPhase, LLC does not hold a SOC 2 Type 2 certification.

Does nPhase, LLC comply with GDPR ?

According to Rankiteo, nPhase, LLC is not listed as GDPR compliant.

Does nPhase, LLC have PCI DSS certification ?

According to Rankiteo, nPhase, LLC does not currently maintain PCI DSS compliance.

Does nPhase, LLC comply with HIPAA ?

According to Rankiteo, nPhase, LLC is not compliant with HIPAA regulations.

Does nPhase, LLC have ISO 27001 certification ?

According to Rankiteo,nPhase, LLC is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does nPhase, LLC operate in ?

nPhase, LLC operates primarily in the IT Services and IT Consulting industry.

How many employees does nPhase, LLC have ?

nPhase, LLC employs approximately 6 people worldwide.

Does nPhase, LLC own any subsidiaries ?

nPhase, LLC presently has no subsidiaries across any sectors.

How many LinkedIn followers does nPhase, LLC have ?

nPhase, LLC's official LinkedIn profile has approximately 1,675 followers.

What is the NAICS classification code for nPhase, LLC ?

nPhase, LLC is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does nPhase, LLC have a Crunchbase profile ?

Yes, nPhase, LLC has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/nphase.

Does nPhase, LLC have a LinkedIn profile ?

Yes, nPhase, LLC maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/nphase-llc.

How many cybersecurity incidents has nPhase, LLC experienced ?

As of August 2, 2026, Rankiteo reports that nPhase, LLC has experienced 32 cybersecurity incidents.

How many peer or competitor companies does nPhase, LLC have ?

nPhase, LLC has an estimated 41,229 peer or competitor companies worldwide.

What types of cybersecurity incidents has nPhase, LLC faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Data Leak, Cyber Attack, Vulnerability and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

nPhase, LLC

Boost Score +25 with badge (5 left)

748

/1000

Moderate

773

/1000

Fair

nPhase, LLC Vendor Cyber Rating & Cyber Score

verizonenterprise.com

cb in

Add Your Compliance Badge

nPhase was acquired by Verizon in January of 2012. With the advent of M2M, the vision of a wholly connected world is now becoming a reality. Leading this mainstream adoption is nPhase with our secure, reliable, scalable, end-to-end M2M service delivery platform, with simplified management of assets and devices via wireless connectivity, the world will see endless new possibilities for the way people live, work, learn and play. The growth of the M2M market is accelerating as users become more aware of the opportunities this offers to drive new competitive advantages and revenue streams. Nearly any machine can be M2M enabled and there is an explosion of connected devices taking place, including eBook readers, wireless diagnostic heart

nPhase, LLC A.I CyberSecurity Scoring

Scoring History

nPhase, LLC

nPhase, LLC CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Verizon

Cyber Attack

6/2026

VERONE178496783...

Verizon Business

Cyber Attack

100

5/2026

VER1779294542

Verizon

Cyber Attack

5/2026

VER1779352298

Verizon

Cyber Attack

3/2026

VERGOOECL177385...

Verizon

Breach

100

3/2026

UUNET

LUMATTVERFBIWIN...

Verizon

Breach

2/2026

VER1772112429

Verizon Business

Cyber Attack

100

2/2026

AT&T

FBIATTVER177283...

Verizon

Breach

2/2026

VERRUSAPP177376...

Verizon

Vulnerability

10/2025

VERCIS177923186...

Verizon

Breach

5/2025

VER1779216233

Verizon

Breach

100

5/2025

VER1778085829

Verizon

Ransomware

100

5/2025

COGVERRUB177094...

nPhase, LLC

Vulnerability

2/2025

VER203040225

Verizon

Breach

1/2025

VER1771008392

Verizon

Breach

1/2025

VER1773678485

Verizon

Breach

1/2025

VERCYB177102228...

Verizon

Breach

100

1/2025

VER1775522053

Verizon

Breach

100

1/2025

VER1779209354

Verizon

Breach

100

1/2025

Verizon

ATT000011825

Verizon

Vulnerability

1/2025

VER1779243969

nPhase, LLC

Cyber Attack

100

10/2024

VER000102624

nPhase, LLC

Breach

100

6/2024

VER000102724

Verizon

Cyber Attack

6/2024

SOPVERINT176943...

nPhase, LLC

Breach

9/2023

VER948072625

nPhase, LLC

Breach

100

05/2022

VER31211822

nPhase, LLC

Breach

100

09/2017

VER27111223

nPhase, LLC

Breach

100

07/2017

VER919291022

nPhase, LLC

Vulnerability

10/2016

VER12367622

nPhase, LLC

Breach

8/2016

VER242071625

nPhase, LLC

Breach

100

03/2016

VER1744261023

nPhase, LLC

Breach

100

03/2016

VER232118522

nPhase, LLC

Data Leak

12/2015

VER41721823

Loading…

A.I.

nPhase, LLC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for nPhase, LLC

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for nPhase, LLC in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for nPhase, LLC in 2026.

Incident Types nPhase, LLC vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for nPhase, LLC in 2026.

Incident History - nPhase, LLC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

nPhase, LLC Subsidiaries

nPhase, LLC

IT Services and IT Consulting

Website: http://www.verizonenterprise.com/us/solutions/connected-machines/?cmp=KNC-58100000008502146

Company Size: 6

Verizon BusinessIT Services and IT Consulting

Verizon FrontlinePublic Safety

VerizonIT Services and IT Consulting

Inside VerizonTelecommunications

Verizon PolicyIT Services and IT Consulting

Verizon Partner SolutionsTelecommunications

Verizon ConnectSoftware Development

Verizon Connect GermanyIT-Dienstleistungen und IT-Beratung

Verizon Connect AustraliaIT Services and IT Consulting

Verizon Connect UK & IrelandIT Services and IT Consulting

CloudSwitchSoftware Development

ICSA Labs, an independent division of VerizonComputer and Network Security

CybertrustComputer and Network Security

Loading…

nPhase, LLC Similar Companies

Virtusa

cb virtusa.com

Virtusa is a global product and platform engineering services company that makes experiences better with technology. We help organizations grow faster, more profitably, and more sustainably by reimagining enterprises through domain-driven solutions. We combine strategy, design, and engineering, backed by unmatched expertise at the intersection of industry, business, and technology to generate real-world business impact for clients. Headquartered in Massachusetts with global delivery centers, Virtusa provides a broad range of services, solutions, and assets, including strategy and design, AI advisory and services, digital engineering, data and analytics, digital assurance, cloud and security, cx transformation and managed services across industries such as financial services, healthcare, communications, media, entertainment, travel, manufacturing, and technology.

Insight

insight.com

Insight Enterprises, Inc. is a Fortune 500 solutions integrator helping organizations accelerate their digital journey to modernize their business and maximize the value of technology. Insight’s technical expertise spans cloud and edge-based transformation solutions, with global scale and optimization built on 33+ years of deep partnerships with the world’s leading and emerging technology providers.

Mastercard

mastercard.com

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re building a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Capita

capita.com

Capita is an outsourcer, helping clients across the public and private sectors run complex business processes more efficiently, creating better consumer experiences. Operating across eight countries, Capita’s 34,000 colleagues support primarily UK and European clients with people-based services underpinned by market-leading technology. We’re a vital support service for our clients, enabling the everyday interactions that we expect to run seamlessly, to run seamlessly. A publicly listed business with adjusted revenue of £2.4bn, Capita’s areas of focus are Central Government, Local Public Service, Defence, Learning, Fire & Security, Contact Centres and Pensions Solutions. We’re embracing change to respond to the ever-changing needs of society, creating better outcomes for all our stakeholders.

inDrive

cb inDrive.com

inDrive is a global mobility and urban services platform. The inDrive app has been downloaded over 400 million times, and has been the second most downloaded mobility app for the third consecutive year. In addition to ride-hailing, inDrive provides an expanding list of urban services, including intercity transportation and delivery. In 2023, inDrive launched New Ventures, a venture and M&A arm. inDrive operates in 1065 cities in 48 countries. Driven by its mission of challenging social injustice, the company is committed to having a positive impact on the lives of one billion people by 2030. It pursues this goal both through its core business, which supports local communities via a fair pricing model; and through the work of inVision, its non-profit arm. inVision’s community empowerment programs help to advance education, sports, arts and sciences, gender equality and other vital initiatives. For more information visit www.inDrive.com

Iron Mountain

cb ironmountain.com

In the era of AI, your data is your advantage. Yet too often it remains untapped: disconnected from systems, underutilized, untrained, and exposed to risk. Iron Mountain is the trusted partner for organizations of all sizes to unlock what’s possible, transforming information into intelligence and assets into advantage. How? By seamlessly managing digital and physical assets of all kinds across their lifecycle—making them visible, secure, accessible, and AI-ready. From payments to pathology, mortgages to media, fine art to IT, we’ve helped more than 240,000 customers around the world, including 95% of the Fortune 1000, unlock more value from what’s already within reach. All with unparalleled security, governance, and sustainability at every step. What can we unlock together?

Engineering Group

eng.it

Engineering Group is the Digital Transformation Company, leader in Italy and expanding its global footprint, with around 14,000 associates and with over 80 offices spread across Europe, the United States, and South America and global delivery. The Engineering Group, consisting of over 70 companies in 21 countries, has been supporting the continuous evolution of companies and organizations for more than 40 years, thanks to a deep understanding of business processes in all market segments, fully leveraging the opportunities offered by advanced digital technologies and proprietary solutions. It integrates best-of-breed market solutions, managed services, and continues to expand its expertise through M&As and partnerships with leading technology players. The Group strongly invests both in innovation, through its R&I division, and in human capital, with the internal IT & Management Academy. Engineering is a key player in the creation of digital ecosystems that bridge the gap between different markets, while developing composable solutions that ultimately foster a continuous Business transformation. In 2026, Engineering achieved, for the second consecutive year, the Top Employers Italy certification, reaffirming the significant growth process for the company, which is constantly committed to enhancing HR policies to create a work environment centered on the well-being of people.

Cognizant

cognizant.ai

Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value. We build full-stack AI solutions powered by deep industry, process and engineering expertise — embedding an organization's unique context into technology systems that amplify human potential and drive tangible outcomes. From strategy to deployment, we help global enterprises move from AI ambition to AI impact and stay ahead in a fast-changing world. See how at cognizant.ai | Follow us @cognizant

AlmavivA Group

almaviva.it

Almaviva is the Italian digital innovation group that supports the country’s growth by helping enterprises meet the challenges of staying competitive in the digital age. The Group helps organizations transform their business models, operational structures, corporate culture, and ICT systems. Building on strong Made in Italy expertise, the Almaviva Group has developed a global network of 41,000 professionals, 30 companies, and 80 offices worldwide, with a significant presence in Latin America (Brazil, Colombia, and the Dominican Republic), as well as in the United States, Belgium, Spain, Finland, Saudi Arabia, the United Arab Emirates, Egypt, and Tunisia.

Loading…

NEWS

nPhase, LLC CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…