What is the official website of OpenEMR ?

The official website of OpenEMR is https://open-emr.org/.

What is OpenEMR's cybersecurity risk score?

OpenEMR has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has OpenEMR experienced?

According to Rankiteo, OpenEMR currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has OpenEMR been affected by any supply chain cyber incidents ?

According to Rankiteo, OpenEMR has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does OpenEMR have SOC 2 Type 1 certification ?

According to Rankiteo, OpenEMR is not certified under SOC 2 Type 1.

Does OpenEMR have SOC 2 Type 2 certification ?

According to Rankiteo, OpenEMR does not hold a SOC 2 Type 2 certification.

Does OpenEMR comply with GDPR ?

According to Rankiteo, OpenEMR is not listed as GDPR compliant.

Does OpenEMR have PCI DSS certification ?

According to Rankiteo, OpenEMR does not currently maintain PCI DSS compliance.

Does OpenEMR comply with HIPAA ?

According to Rankiteo, OpenEMR is not compliant with HIPAA regulations.

Does OpenEMR have ISO 27001 certification ?

According to Rankiteo,OpenEMR is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does OpenEMR operate in ?

OpenEMR operates primarily in the Technology, Information and Internet industry.

How many employees does OpenEMR have ?

OpenEMR employs approximately 4 people worldwide.

Does OpenEMR own any subsidiaries ?

OpenEMR presently has no subsidiaries across any sectors.

How many LinkedIn followers does OpenEMR have ?

OpenEMR's official LinkedIn profile has approximately 685 followers.

What is the NAICS classification code for OpenEMR ?

OpenEMR is classified under the NAICS code 513, which corresponds to Others.

Does OpenEMR have a Crunchbase profile ?

No, OpenEMR does not have a profile on Crunchbase.

Does OpenEMR have a LinkedIn profile ?

Yes, OpenEMR maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/openemr.

How many cybersecurity incidents has OpenEMR experienced ?

As of August 15, 2026, Rankiteo reports that OpenEMR has experienced 1 cybersecurity incidents.

How many peer or competitor companies does OpenEMR have ?

OpenEMR has an estimated 15,167 peer or competitor companies worldwide.

What types of cybersecurity incidents has OpenEMR faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

OpenEMR

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

OpenEMR Vendor Cyber Rating & Cyber Score

open-emr.org

Add Your Compliance Badge

The OpenEMR Foundation supports OpenEMR, an open-source electronic medical records software that is used all around the globe. We strive to improve the health care delivery system globally by providing low-cost solutions to clinics big and small. Our international users benefit from a royalty-free license with affordable infrastructure solutions available via both Google Cloud and Amazon Web Services.

OpenEMR A.I CyberSecurity Scoring

Scoring History

OpenEMR

OpenEMR CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

OpenEMR

Vulnerability

100

2/2023

OPE452070624

Loading…

A.I.

OpenEMR Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for OpenEMR

Incidents vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for OpenEMR in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for OpenEMR in 2026.

Incident Types OpenEMR vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for OpenEMR in 2026.

Incident History - OpenEMR (X = Date, Y = Severity)

Loading…

SUBSIDIARY

OpenEMR Subsidiaries

Parent Company

OpenEMR

Technology, Information and Internet

Website: https://open-emr.org/

Company Size: 2-10 employees

No subsidiary data available for this company.

Loading…

OpenEMR Similar Companies

Sohu.com

cb sohu.com

Sohu.com Inc. (NASDAQ: SOHU) is China's premier online brand and indispensable to the daily life of millions of Chinese, providing a network of web properties and community based/web 2.0 products which offer the vast Sohu user community a broad array of choices regarding information, entertainment and communication. Sohu has built one of the most comprehensive matrices of Chinese language web properties and proprietary search engines, consisting of seven leading web properties.

Prosus

prosus.com

Prosus is the power behind the world’s leading lifestyle e-commerce brands. Bringing together bold ideas and the power of AI, Prosus builds technology ecosystems where lifestyle ecommerce brands can become global success stories. These ecosystems span three core geographies – Europe, Latin America and India. In these geographies, Prosus simplifies the often-fragmented experience for consumer buyers and sellers, providing an integrated and frictionless approach that helps billions of consumers to buy, sell and transact through food, Fintech, experiences and commerce platforms

Everforth

everforth.com

Everforth, Inc. (NYSE: EFOR) is a leading technology and digital engineering company that helps organizations adapt, innovate, and thrive in a world of constant change. Our six solution areas — AI and data, cloud and infrastructure, application and digital engineering, experience, cybersecurity, and enterprise platforms — accelerate time to value for our commercial and federal clients. Powered by proprietary assets, accelerators, and proven expertise, Everforth turns complexity into progress and delivers measurable outcomes. Everforth: Adapt and Thrive™.

Indeed

cb Indeed.com

More people find jobs on Indeed than anywhere else. Indeed is the #1 job site in the world (Comscore, Total Visits, March 2024) and allows job seekers to search millions of jobs in more than 60 countries and 28 languages. Indeed has more than 580 million Job Seeker Profiles. Every day, job seekers use Indeed to search for jobs, post resumes, research companies and more. For more information, visit indeed.com. **Indeed data (worldwide), job seeker accounts that have a unique, verified email address.

Jumia Group

cb jumia.com

Jumia (NYSE :JMIA) is a leading e-commerce platform in Africa. It is built around a marketplace, Jumia Logistics, and JumiaPay. The marketplace helps millions of consumers and sellers to connect and transact. Jumia Logistics enables the delivery of millions of packages through our network of local partners. JumiaPay facilitates the payments of online transactions for Jumia's ecosystem. With over 1 billion people and 500 million internet users in Africa, Jumia believes that e-commerce is making people's lives easier by helping them shop and pay for millions of products at the best prices wherever they live. E-commerce is also creating new opportunities for SMEs to grow, and job opportunities for a new generation to thrive. With over 3,000 employees in more than 9 countries in Africa, Jumia is led by top talented leaders offering a great mix of local and international talents and is backed by very high-profile shareholders. Jumia is committed to creating sustainable impact in Africa. Jumia offers unique opportunities in a vibrant and booming environment, creating new jobs, new skills, and empowering a new generation.

Fanatics

fanaticsinc.com

Fanatics is a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

Avnet

avnet.com

Avnet is a global electronic components distributor with extensive design, product, marketing and supply chain expertise for customers and suppliers at every stage of the product lifecycle. For the past 100 years, Avnet has helped its customers and suppliers around the world realize the transformative possibilities of technology. Our culture was founded on new ideas and emerging technology. Headquartered in Phoenix, Arizona, Avnet is a leading global technology distributor and solutions provider at the center of the technology value chain. Founded in 1921, we work with suppliers in every major technology segment to serve customers worldwide across a broad range of markets. Whether working on large-scale production or early prototypes, we meet customer needs through individualized, end-to-end service to streamline solutions and improve efficiency for customers worldwide. We serve more than 1 million customers in more than 140 countries and partner with global suppliers from almost every technology segment. Learn more about Avnet at www.avnet.com.

Meesho

meesho.io

Meesho is India’s e-commerce marketplace, on a mission to democratise internet commerce. Our multi-sided technology platform connects four key stakeholders — consumers, sellers, logistics partners, and content creators — to power inclusive growth at scale. We enable individuals and small businesses to sell online with ease, offering access to a wide customer base, integrated logistics, payment solutions, and platform support. For customers, Meesho offers a broad and affordable selection, tailored for diverse needs across Bharat. We also empower creators to build commerce-driven content that drives discovery and engagement. Our logistics operations are powered by Valmo, Meesho’s asset-light logistics platform that works entirely through partner-led infrastructure to ensure cost-efficient and scalable deliveries.

OYO

cb oyorooms.com

OYO is a global platform that aims to empower entrepreneurs and small businesses with hotels and homes by providing full-stack technology products and services that aims to increase revenue and ease operations; bringing easy-to-book, affordable, and trusted accommodation to customers around the world. OYO offers 40+ integrated products and solutions to patrons who operate over 157K hotel and home storefronts in more than 35 countries including India, Europe, and Southeast Asia. OYO was founded by 27-year-old Ritesh Agarwal, the first Asian resident to be accepted to the Thiel Fellowship (started by Paypal founder Peter Thiel). OYO operates a unique business model that helps its patrons transform fragmented, unbranded and underutilized hospitality assets into branded, digitally-enabled storefronts with higher revenue generation potential and provides its customers with access to a broad range of high-quality storefronts at compelling price points. Owners and operators of over 157K storefronts use the OYO platform to manage all mission-critical aspects of their business operations. OYO’s comprehensive, full-stack technology suite integrates more than 40 products and services across digital sign-up and onboarding, revenue management, daily business management and D2C stacks into two flagship patron applications, Co-OYO and OYO OS. OYO customers can book storefronts through OYO’s own D2C channels and through indirect channels with third-party OTAs. The OYO App offers a variety of digital tools to guide customers throughout their journey, including discovery, seamless booking, pre-stay assistance, cancellations, digital check-ins as well as in-stay and post-stay services. With over 100 mn downloads, the OYO App was the 3rd most downloaded travel app in 2020. OYO Wizard, OYO’s loyalty program, has 9.2 million members and is the second largest loyalty program run by a travel or food brand in India, by subscriber base.

Loading…

NEWS

OpenEMR CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 04, 2026 08:51 AM

Handmade by human hands using machines

Threat Metrics: CVSS: 10 | EPSS: N/A. MITRE Tactic: Initial Access. Attack Vector: Network. Tactical Mitigation: Upgrade to OpenEMR version 8.0.0...

Read Article

March 01, 2026 06:23 AM

Handmade by human hands using machines

BLUF: This cycle is dominated by the disclosure of high and critical-impact vulnerabilities across diverse software.

Read Article

February 02, 2023 08:00 AM

FTC Imposes $1.5M Penalty on GoodRx Over Failure to Report Healthcare Data Breach

The FTC alleged that GoodRx failed to notify consumers of a healthcare data breach stemming from its unauthorized disclosure of health...

Read Article

February 01, 2023 08:00 AM

OpenEMR Flaws Could Allow Attackers to Steal Data, More

A combination of three security flaws contained in an open-source electronic health record used mainly by smaller medical practices in the...

Read Article

January 30, 2023 08:00 AM

Multiple Vulnerabilities Identified in OpenEMR Health Record and Practice Management Software

Multiple vulnerabilities have been identified in the popular open source electronic health record and medical practice management software, OpenEMR.

Read Article

August 08, 2018 07:00 AM

Multiple vulnerabilities found in OpenEMR system

The OpenEMR system is used around the world. Enterprise network security specialists from the International Institute of Cyber Security...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-74250

SUMMARY

In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 6.3)

cvss3

Base Score: 6.3

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Impact Score

Exploitability

1.8

REFERENCES

https://bugs.launchpad.net/ossa/+bug/2163017

CVE-2026-74247

SUMMARY

A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-Side Request Forgery (SSRF) vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network addresses. Such an action could lead to the disclosure of sensitive internal information.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 4.2)

cvss3

Base Score: 4.2

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

1.6

REFERENCES

CVE-2026-74245

SUMMARY

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to information disclosure, potentially exposing sensitive data such as usernames, email addresses, IP addresses, and action-specific metadata.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-74244

SUMMARY

A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unauthenticated attacker to forge billing events by sending crafted JSON requests to the `/webhooks/stripe` endpoint without validating the Stripe-Signature header. Successful exploitation can lead to the unauthorized resetting of a namespace's build quota to its maximum and trigger unsolicited billing emails to namespace administrators.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-74243

SUMMARY

A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not set, a remote unauthenticated attacker can send POST requests to the security scanner notification endpoint. This allows the attacker to flood the notification queue and inject path traversal characters into Clair API URL paths. The primary consequence is worker resource exhaustion and blind path manipulation on the configured Clair host, potentially leading to a denial of service.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Impact Score

2.5

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…