What is the official website of OneTrust ?

The official website of OneTrust is http://www.onetrust.com.

What is OneTrust's cybersecurity risk score?

OneTrust has an AI-generated cybersecurity risk score of 771 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has OneTrust experienced?

According to Rankiteo, OneTrust currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has OneTrust been affected by any supply chain cyber incidents ?

According to Rankiteo, OneTrust has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does OneTrust have SOC 2 Type 1 certification ?

According to Rankiteo, OneTrust is not certified under SOC 2 Type 1.

Does OneTrust have SOC 2 Type 2 certification ?

According to Rankiteo, OneTrust does not hold a SOC 2 Type 2 certification.

Does OneTrust comply with GDPR ?

According to Rankiteo, OneTrust is not listed as GDPR compliant.

Does OneTrust have PCI DSS certification ?

According to Rankiteo, OneTrust does not currently maintain PCI DSS compliance.

Does OneTrust comply with HIPAA ?

According to Rankiteo, OneTrust is not compliant with HIPAA regulations.

Does OneTrust have ISO 27001 certification ?

According to Rankiteo,OneTrust is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does OneTrust operate in ?

OneTrust operates primarily in the Software Development industry.

How many employees does OneTrust have ?

OneTrust employs approximately 2,503 people worldwide.

Does OneTrust own any subsidiaries ?

OneTrust presently has no subsidiaries across any sectors.

How many LinkedIn followers does OneTrust have ?

OneTrust's official LinkedIn profile has approximately 396,992 followers.

What is the NAICS classification code for OneTrust ?

OneTrust is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does OneTrust have a Crunchbase profile ?

No, OneTrust does not have a profile on Crunchbase.

Does OneTrust have a LinkedIn profile ?

Yes, OneTrust maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/onetrust.

How many cybersecurity incidents has OneTrust experienced ?

As of August 27, 2026, Rankiteo reports that OneTrust has not experienced any cybersecurity incidents.

How many peer or competitor companies does OneTrust have ?

OneTrust has an estimated 30,736 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

OneTrust

Boost Score +25 with badge (5 left)

771

/1000

Fair

796

/1000

Fair

OneTrust Vendor Cyber Rating & Cyber Score

onetrust.com

Add Your Compliance Badge

OneTrust, the AI-Ready Governance Platform™, enables innovation through the responsible use of data and AI. Trusted by over half of the Fortune 500, we help businesses govern well and move fast, turning responsible data use into a catalyst for growth. To learn more, visit www.onetrust.com

OneTrust A.I CyberSecurity Scoring

Scoring History

OneTrust

OneTrust CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

OneTrust Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for OneTrust

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for OneTrust in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for OneTrust in 2026.

Incident Types OneTrust vs Software Development Industry Avg (This Year)

No incidents recorded for OneTrust in 2026.

Incident History - OneTrust (X = Date, Y = Severity)

Loading…

SUBSIDIARY

OneTrust Subsidiaries

OneTrust

Software Development

Website: http://www.onetrust.com

Company Size: 1,001-5,000 employees

OneTrust DataGuidanceLegal Services

OneTrust FranceSoftware Development

OneTrust Risk & Security ManagementSoftware Development

OneTrust Data & Privacy ManagementSoftware Development

OneTrust ItaliaSoftware Development

Loading…

OneTrust Similar Companies

Wolt

wolt.com

Wolt is a Helsinki-based technology company with a mission to bring joy, simplicity and earnings to the neighborhoods of the world. Wolt develops a local commerce platform that connects people looking to order food, groceries, and other goods with people interested in selling and delivering them. Wolt was founded in 2014 and joined forces with DoorDash (NASDAQ: DASH) in 2022. Together, we operate in more than 30 countries today.

ByteDance

bytedance.com

ByteDance is a global incubator of platforms at the cutting edge of commerce, content, entertainment and enterprise services - over 2.5bn people interact with ByteDance products including TikTok. Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible. Together, we inspire creativity and enrich life - a mission we aim towards achieving every day. At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve. We are committed to building a safe, healthy and positive online environment for all our users. We have over 110,000 employees based in more than 30 countries globally. Join us.

DoorDash

careersatdoordash.com

At DoorDash, our mission to empower local economies shapes how our team members move quickly and always learn and reiterate to support merchants, Dashers and the communities we serve. We are a technology and logistics company that started with door-to-door delivery, and we are looking for team members who can help us go from a company that is known for delivering food to a company that people turn to for any and all goods. DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers. Our leaders seek the truth and welcome big, hairy, audacious questions. We are grounded in our company values, and we make intentional decisions that are both logical and display empathy for our range of users—from Dashers to Merchants to Customers.

[24]7.ai

cb 247.ai

[24]7.ai™ customer engagement solutions use conversational artificial intelligence to understand customer intent, enabling companies to create personalized, predictive, and effortless customer experiences across all channels; attract and retain customers; boost agent productivity and satisfaction; and drive revenues while lowering costs. The world’s largest and most recognizable brands use [24]7.ai intent-driven technologies to serve several hundred million visitors through billions of conversations annually, most of which are automated. The result is an order of magnitude improvement in digital adoption, customer satisfaction, and revenue growth. For more information, visit: www.247.ai. [24]7.ai is based in Campbell, California. [24]7.ai is a registered trademark of 24/7 Customer, Inc.

Atlassian

atlassian.com

Atlassian powers the collaboration that helps teams accomplish what would otherwise be impossible alone. From space missions and motor racing to bugs in code and IT requests, no task is too large or too small with the right team, the right tools, and the right practices. Over 300,000 global companies and 80% of the Fortune 500 rely on Atlassian’s software, like Jira, Confluence, Loom, and Trello, to help their teams work better together and deliver quality results on time. With our 300,000+ customers and team of 10,000+ Atlassians, we are building the next generation of team collaboration and productivity software. We believe the power of teams has the potential to change the world — one that is more open, authentic, and inclusive.

JD.COM

cb jd.com

JD.com, also known as JINGDONG, is a leading e-commerce company transferring to be a technology and service enterprise with supply chain at its core. JD.com’s business has expanded across retail, technology, logistics, health, property development, industrials, and international business. Ranking 44 on the Fortune Global 500, JD.com is China’s largest retailer by revenue. JD.com serves over 600 million customers and has set the standard for e-commerce through its commitment to quality, authenticity, and competitive pricing. The company operates the largest fulfillment infrastructure of any e-commerce company in China, enabling 90% of retail orders to be delivered within the same or next day. JD.com also promotes productivity and innovation across a range of industries by offering its cutting-edge technology and infrastructure to partners, brands, and diverse sectors.

Lazada

lazada.com

About Lazada Group Founded in 2012, Lazada Group is the leading eCommerce platform in Southeast Asia. We are accelerating progress in Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam through commerce and technology. With the largest logistics and payments networks in the region, Lazada is a part of our consumers’ daily lives in the region and we aim to serve 300 million shoppers by 2030. Since 2016, Lazada is the Southeast Asia flagship platform of the Alibaba Group powered by its cutting-edge technology infrastructure.

GoTo Group

cb gotocompany.com

GoTo is the largest technology group in Indonesia, combining on-demand and financial services through the Gojek and GoTo Financial brands. It is the first platform in Southeast Asia to host these two essential use cases in one ecosystem, capturing a majority of Indonesian consumer household expenditure. GoTo’s mission is to “Empower Progress” by offering an unparalleled selection of goods and services through a comprehensive merchant and partner network and promoting financial inclusion through its leading payments and financial services business.

linkedin.com

Founded in 2003, LinkedIn connects the world's professionals to make them more productive and successful. With more than 1 billion members worldwide, including executives from every Fortune 500 company, LinkedIn is the world's largest professional network. The company has a diversified business model with revenue coming from Talent Solutions, Marketing Solutions, Sales Solutions and Premium Subscriptions products. Headquartered in Silicon Valley, LinkedIn has offices across the globe.

Loading…

NEWS

OneTrust CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 28, 2025 09:39 PM

Atlanta Inno - Silicon Road Ventures raises $31M | OneTrust acquires AI tech

Atlanta Inno features local news and analysis about Atlanta's startup and tech ecosystems. We also provide tools to help growing businesses scale,...

Read Article

December 15, 2025 03:42 PM

IAPP Global Summit 2026: Privacy | AI governance | Cybersecurity law

Come to Summit for strategic vision, operational insights and global connection. IAPP Global Summit is the world's largest annual gathering of digital...

Read Article

November 17, 2025 08:00 AM

OneTrust Named a Leader in IDC MarketScape 2025 Worldwide Data Privacy Compliance Software Report

PRNewswire/ -- OneTrust, the AI-ready governance platform, today announced it has been named a Leader in the IDC MarketScape: Worldwide Data...

Read Article

November 14, 2025 08:00 AM

OneTrust’s Privacy Empire Eyes Private Equity Exit Amid Valuation Turbulence

OneTrust, the Atlanta-based startup that rode the wave of global privacy regulations to a staggering $5.3 billion valuation peak,...

Read Article

November 13, 2025 08:00 AM

OneTrust, Privacy Startup Last Valued at $4.5 Billion, Discusses Private Equity Sale

OneTrust, a nine-year-old startup that benefited from a wave of European and U.S. laws regulating how companies collect and share website...

Read Article

October 30, 2025 07:00 AM

KPMG forms India-focused alliances with OneTrust and Zeron

Big Four firm KPMG has formed alliances with two global technology vendors, OneTrust and Zeron.

Read Article

September 29, 2025 07:00 AM

Risk mitigation budgets swell as enterprise AI adoption grows

Governing AI comes at a cost with most organizations increasing oversight investments in the next financial year, according to OneTrust...

Read Article

September 25, 2025 07:00 AM

How Enterprise AI Agents Can Reach Their Potential

Also in the Forbes CIO newsletter: AI adds governance issues, Nvidia invests in several AI companies, H-1B visa fees will help foreign tech...

Read Article

September 09, 2025 07:00 AM

OneTrust Research & Product Updates Show Need for AI Governance

AI growth exposes governance gaps, finds OneTrust's 2025 report. New AI agents, privacy tools, and Databricks integration target oversight...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-81203

SUMMARY

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Published

Date2026-08-26

Updated

Date2026-08-26

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-80158

SUMMARY

A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. The module's bind_pw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with no_log, unlike the sibling password parameter in the same module. As a consequence, the supplied IPA/LDAP bind password is recorded in cleartext in the managed host's system journal/syslog (the module's "Invoked with" record), is included in the module's return values and verbose (-v) output, and is displayed in Automation Controller / AWX job output. The password is additionally passed on the command line to the ipa-getkeytab helper (as --bindpw <value>), exposing it in the process list to local users while the command runs. An attacker able to read these logs, job output, or the process table can obtain the directory bind credential, potentially compromising the accounts and objects that credential can access.

Published

Date2026-08-26

Updated

Date2026-08-26

RISK INFORMATION (Score: 5.5)

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

1.8

REFERENCES

CVE-2026-75340

SUMMARY

The device metadata import interface /device/instance/{productId}/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery (SSRF).

Published

Date2026-08-26

Updated

Date2026-08-26

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/fangtang7/CVE/blob/main/jetlinks-community/ssrf.md

CVE-2026-75338

SUMMARY

disconf (Distributed Configuration Management Platform) 2.6.36 is vulnerable to Incorrect Access Control. The config-fetching APIs /api/config/item, /api/config/file, /api/config/list and /api/config/simple/list are exposed without authentication. The LoginInterceptor explicitly whitelists these four paths, so any anonymous attacker can read every configuration item and configuration file managed by the config center.

Published

Date2026-08-26

Updated

Date2026-08-26

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/fangtang7/CVE/blob/main/disconf/Unauthenticated.md

CVE-2026-75336

SUMMARY

Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json.

Published

Date2026-08-26

Updated

Date2026-08-26

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/fangtang7/CVE/blob/main/funiture/SQL%20Injection.md

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…