What is the official website of OpenSearch Project ?

The official website of OpenSearch Project is https://opensearch.org/.

What is OpenSearch Project's cybersecurity risk score?

OpenSearch Project has an AI-generated cybersecurity risk score of 592 out of 1000, indicating a Very Poor security posture according to Rankiteo's assessment.

How many security incidents has OpenSearch Project experienced?

According to Rankiteo, OpenSearch Project currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has OpenSearch Project been affected by any supply chain cyber incidents ?

According to Rankiteo, OpenSearch Project has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: npm, Inc. (Incident ID: ELAGITAMAOPENPM1780050263) TanStack (Incident ID: MISUIPOPETANGUA1778567093) TanStack (Incident ID: MIS1778869722)

Does OpenSearch Project have SOC 2 Type 1 certification ?

According to Rankiteo, OpenSearch Project is not certified under SOC 2 Type 1.

Does OpenSearch Project have SOC 2 Type 2 certification ?

According to Rankiteo, OpenSearch Project does not hold a SOC 2 Type 2 certification.

Does OpenSearch Project comply with GDPR ?

According to Rankiteo, OpenSearch Project is not listed as GDPR compliant.

Does OpenSearch Project have PCI DSS certification ?

According to Rankiteo, OpenSearch Project does not currently maintain PCI DSS compliance.

Does OpenSearch Project comply with HIPAA ?

According to Rankiteo, OpenSearch Project is not compliant with HIPAA regulations.

Does OpenSearch Project have ISO 27001 certification ?

According to Rankiteo,OpenSearch Project is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does OpenSearch Project operate in ?

OpenSearch Project operates primarily in the Software Development industry.

How many employees does OpenSearch Project have ?

OpenSearch Project employs approximately 120 people worldwide.

Does OpenSearch Project own any subsidiaries ?

OpenSearch Project presently has no subsidiaries across any sectors.

How many LinkedIn followers does OpenSearch Project have ?

OpenSearch Project's official LinkedIn profile has approximately 9,731 followers.

What is the NAICS classification code for OpenSearch Project ?

OpenSearch Project is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does OpenSearch Project have a Crunchbase profile ?

No, OpenSearch Project does not have a profile on Crunchbase.

Does OpenSearch Project have a LinkedIn profile ?

Yes, OpenSearch Project maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/opensearch-project.

How many cybersecurity incidents has OpenSearch Project experienced ?

As of July 19, 2026, Rankiteo reports that OpenSearch Project has experienced 3 cybersecurity incidents.

How many peer or competitor companies does OpenSearch Project have ?

OpenSearch Project has an estimated 30,390 peer or competitor companies worldwide.

What types of cybersecurity incidents has OpenSearch Project faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack and Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

OpenSearch Project

Boost Score +25 with badge (5 left)

592

/1000

Very Poor

617

/1000

Poor

OpenSearch Project Vendor Cyber Rating & Cyber Score

opensearch.org

Add Your Compliance Badge

OpenSearch is the trusted vendor-neutral open source platform for AI-powered search, analytics, observability, and vector database solutions. Built for scalability, performance, and extensibility, developers and enterprises rely on OpenSearch to securely manage workloads, without costly licensing. Hosted by the Linux Foundation and backed by the Apache 2.0-license, the OpenSearch platform offers transparent governance, freedom from vendor lock-in, and community-driven innovation.

OpenSearch Project A.I CyberSecurity Scoring

Scoring History

OpenSearch Project

OpenSearch Project CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

OpenSearch Project

Cyber Attack

5/2026

npm, Inc.

ELAGITAMAOPENPM...

OpenSearch Project

Breach

5/2026

TanStack

MISUIPOPETANGUA...

OpenSearch Project

Breach

5/2026

TanStack

MIS1778869722

Loading…

A.I.

OpenSearch Project Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for OpenSearch Project

Incidents vs Software Development Industry Avg (This Year)

OpenSearch Project has 183.02% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

OpenSearch Project has 185.71% more incidents than the average of all companies with at least one recorded incident.

Incident Types OpenSearch Project vs Software Development Industry Avg (This Year)

OpenSearch Project reported 3 incidents this year: 1 cyber attacks, 0 ransomware, 0 vulnerabilities, 2 data breaches, compared to industry peers with at least 1 incident.

Incident History - OpenSearch Project (X = Date, Y = Severity)

Loading…

SUBSIDIARY

OpenSearch Project Subsidiaries

Parent Company

OpenSearch Project

Software Development

Website: https://opensearch.org/

Company Size: 51-200 employees

No subsidiary data available for this company.

Loading…

OpenSearch Project Similar Companies

Grab

grab.careers

Grab is Southeast Asia’s leading superapp, offering a suite of services consisting of deliveries, mobility, financial services, enterprise and others. Grabbers come from all over the world, and we are united by a common mission: to drive Southeast Asia forward by creating economic empowerment for everyone. At Grab, every Grabber is guided by The Grab Way, which explains our mission and the operating principles on how we can achieve it together. We call these principles the 4Hs: Heart We work together as OneGrab to serve communities in Southeast Asia Hunger We work to understand ground truths and drive improvements, big and small Honour We keep our word and steward our resources wisely to build and sustain trust Humility We are a constant work-in-progress, and we never stop learning to get better

Zoho

zoho.com

Zoho offers beautifully smart software to help you grow your business. With over 100 million users worldwide, Zoho's 55+ products aid your sales and marketing, support and collaboration, finance, and recruitment needs—letting you focus only on your business. Zoho respects user privacy and does not have an ad-revenue model in any part of its business, including its free products. Zoho Corporation is privately held and profitable, with its headquarters in Chennai, India, and offices across the globe.

PhonePe

cb phonepe.com

PhonePe Group is India’s leading fintech company, proudly recognized as India’s #1 Trusted Digital Payments* Brand for three consecutive years. Our flagship product, the PhonePe app was launched in August 2016, has rapidly become the preferred consumer payments app in India. In just eight years, PhonePe has gained over 57 crore + registered users and established a digital payments acceptance network of over 4 crore+ merchants spread across Tier 2,3 cites and beyond, covering 99% of the postal codes in the country. Building on our leadership in digital payments, PhonePe Group has expanded into financial services—including insurance, lending, and wealth management—along with new consumer tech ventures such as Pincode, a hyperlocal ecommerce platform, Indus App Store - India’s first localized app store, and Share.Market- A wealth and investment platform (app & website), catering to investors and traders needs. Headquartered in India, PhonePe Group aligns its diverse portfolio of businesses with our vision We're committed to empowering every Indian by unlocking the flow of money and providing equal access to easy & secure payments and financial services.

Alibaba Group

alibabagroup.com

🌍Alibaba Group is on a mission to make it easy to do business anywhere! Guided by our passion and imagination, we’re leading the way in AI, cloud computing and e-commerce. We aim to build the future infrastructure of commerce, and we aspire to be a good company that lasts for 102 years.

Walmart Global Tech

walmart.com

Walmart has a long history of transforming retail and using technology to deliver innovations that improve how the world shops and empower our 2.1 million associates. It began with Sam Walton and continues today with Global Tech associates working together to power Walmart and lead the next retail disruption. Our world-class software engineers, data scientists and engineers, cybersecurity professionals, product managers and business service professionals work with top talent on cutting-edge technologies that create unique and innovative experiences for our associates, customers and members across Walmart, Sam’s Club and Walmart International. At Walmart Global Tech, one line of code or bold idea can make life easier for hundreds of millions of people – talk about epic impact at a global scale.

Canva

canva.com

We're a global online visual communications platform on a mission to empower the world to design. Featuring a simple drag-and-drop user interface and a vast range of templates ranging from presentations, documents, websites, social media graphics, posters, apparel to videos, plus a huge library of fonts, stock photography, illustrations, video footage, and audio clips, anyone can take an idea and create something beautiful on Canva on any device, from anywhere in the world. Since our launch in 2013, we’ve had the crazy big goal of making design accessible to everyone. We were founded on the belief that people shouldn't need to understand complex software to unlock their creativity. We’re leveling the playing field and democratizing access to design and visual communication by empowering 100% of the world to communicate in a way that was once limited to the 1%. We've always had a deeper mission surrounding Canva — which we talk about as our 'simple' two-step plan: to build one of the world’s most valuable companies, and to do the most good we possibly can. We're committed to our core value of Being a Force for Good, so as the value of our company grows, so too does our ability to have a positive impact on the world.

Lazada

lazada.com

About Lazada Group Founded in 2012, Lazada Group is the leading eCommerce platform in Southeast Asia. We are accelerating progress in Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam through commerce and technology. With the largest logistics and payments networks in the region, Lazada is a part of our consumers’ daily lives in the region and we aim to serve 300 million shoppers by 2030. Since 2016, Lazada is the Southeast Asia flagship platform of the Alibaba Group powered by its cutting-edge technology infrastructure.

Groupon

cb greenhouse.io

Groupon is an experiences marketplace that brings people more ways to get the most out of their city or wherever they may be. By enabling real-time mobile commerce across local businesses, live events and travel destinations, Groupon helps people find and discover experiences––big and small, new and familiar––that make for a full, fun and rewarding life. Groupon helps local businesses grow and strengthen customer relationships––resulting in strong, vibrant communities. E-commerce never stands still, our transformation strategy, combined with our strong brand, customer base, and marketplace expertise, ensures we are constantly adapting to the evolving market landscape while delivering value for our customers and merchant partners. Groupon is on a radical journey to transform our business. To meet our aggressive goals we are in the process of building a culture that prioritises fast decisions, open communication, and relentless pursuit of results. In the spirit of transparency, things aren't perfect, there are still processes to change and bureaucracy to break so we need people who want to be on this journey with us. Check out our current opportunities with #TeamGroupon and join us on our exciting mission to become The Ultimate Destination For Local Experiences and Services.

Airbnb

airbnb.com

Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays, experiences and services that make it possible for guests to connect with communities in a more authentic way.

Loading…

NEWS

OpenSearch Project CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 02, 2026 08:00 AM

Top Cyber Security Projects to Build Skills and Portfolio

TL;DR: This article lists top cybersecurity project ideas for beginners, intermediates, and experts, along with project repos and starter...

Read Article

November 13, 2025 08:00 AM

Researchers lead project to fortify Canada's cybersecurity | Engineering

A research team led by Waterloo Engineering professors received $2 million in new federal funding to safeguard Canada's critical...

Read Article

November 05, 2025 08:00 AM

HydraPWK Penetration Testing OS With Necessary Hacking Tools and Simplified Interface

The HydraPWK project's latest Apes-T1 snapshot refines its penetration-testing Linux distribution by replacing Elasticsearch with the...

Read Article

October 10, 2025 07:00 AM

UK competition cops unlock Google search crackdown powers

The UK's competition watchdog has officially slapped Google with "strategic market status," a new legal label that gives the regulator...

Read Article

February 05, 2025 08:00 AM

Trellix lowers cost, increases speed, and adds delivery flexibility with cost-effective and performant Amazon Nova Micro and Amazon Nova Lite models | Amazon Web Services

This post is co-written with Martin Holste from Trellix. Security teams are dealing with an evolving universe of cybersecurity threats.

Read Article

September 16, 2024 07:00 AM

AWS brings OpenSearch under the Linux Foundation umbrella

AWS today announced that it is transitioning OpenSearch, its open source fork of the popular Elasticsearch search and analytics engine, to the Linux Foundation.

Read Article

August 13, 2024 07:00 AM

ArtiPACKED: Hacking Giants Through a Race Condition in GitHub Actions Artifacts

New research uncovers a potential attack vector on GitHub repositories, with leaked tokens leading to potential compromise of services.

Read Article

July 17, 2023 07:00 AM

Build a serverless log analytics pipeline using Amazon OpenSearch Ingestion with managed Amazon OpenSearch Service

In this post, we show how to build a log ingestion pipeline using the new Amazon OpenSearch Ingestion, a fully managed data collector that delivers real-time...

Read Article

March 14, 2023 07:00 AM

Identify and remediate security threats to your business using security analytics with Amazon OpenSearch Service

Amazon OpenSearch Service is a fully managed and scalable log analytics framework that you can use to ingest, store, and visualize data.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-16197

SUMMARY

A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. The affected element is the function handleMessageReceive of the file pkg/channels/feishu/feishu_64.go of the component Group Message Handler. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The reported GitHub issue was closed automatically due to inactivity.

Published

Date2026-07-18

Updated

Date2026-07-18

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-16196

SUMMARY

A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the component web_fetch. This manipulation causes server-side request forgery. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Patch name: 2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405. To fix this issue, it is recommended to deploy a patch.

Published

Date2026-07-18

Updated

Date2026-07-18

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-16195

SUMMARY

A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This issue affects the function dispatchIncoming of the file pkg/channels/wecom/wecom.go of the component Group Message Handler. The manipulation results in incorrect authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed automatically due to inactivity.

Published

Date2026-07-18

Updated

Date2026-07-18

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-10130

SUMMARY

QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid session tokens for existing accounts by submitting a signup request with a known victim email address. The signup route unconditionally creates and links a new token to the matching Identity via a Cypher MERGE operation before checking whether the email belongs to an existing account, causing the server to return a valid authenticated session token for the victim's identity without requiring any prior credentials or user interaction.

Published

Date2026-07-18

Updated

Date2026-07-18

RISK INFORMATION (Score: 8.2)

cvss3

Base Score: 8.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

cvss4

Base Score: 8.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

4.2

Exploitability

3.9

REFERENCES

CVE-2026-16194

SUMMARY

A vulnerability was determined in zhayujie CowAgent up to 2.1.1. This affects the function WebFetch.execute of the file agent/tools/web_fetch/web_fetch.py. Executing a manipulation of the argument url can lead to server-side request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.1.2 is able to mitigate this issue. This patch is called ea47f3097eed4f8295c4cb3d76ecb97e0f43d632. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Published

Date2026-07-18

Updated

Date2026-07-18

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…