What is the official website of Zoho One ?

The official website of Zoho One is https://www.zoho.com/one/.

What is Zoho One's cybersecurity risk score?

Zoho One has an AI-generated cybersecurity risk score of 757 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Zoho One experienced?

According to Rankiteo, Zoho One currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Zoho One been affected by any supply chain cyber incidents ?

According to Rankiteo, Zoho One has been affected by a supply chain cyber incident involving Wondershare Technology, with the incident ID ZOHWON1776076134.

Does Zoho One have SOC 2 Type 1 certification ?

According to Rankiteo, Zoho One is not certified under SOC 2 Type 1.

Does Zoho One have SOC 2 Type 2 certification ?

According to Rankiteo, Zoho One does not hold a SOC 2 Type 2 certification.

Does Zoho One comply with GDPR ?

According to Rankiteo, Zoho One is not listed as GDPR compliant.

Does Zoho One have PCI DSS certification ?

According to Rankiteo, Zoho One does not currently maintain PCI DSS compliance.

Does Zoho One comply with HIPAA ?

According to Rankiteo, Zoho One is not compliant with HIPAA regulations.

Does Zoho One have ISO 27001 certification ?

According to Rankiteo,Zoho One is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Zoho One operate in ?

Zoho One operates primarily in the IT Services and IT Consulting industry.

How many employees does Zoho One have ?

Zoho One employs approximately None employees people worldwide.

Does Zoho One own any subsidiaries ?

Zoho One presently has no subsidiaries across any sectors.

How many LinkedIn followers does Zoho One have ?

Zoho One's official LinkedIn profile has approximately 19,286 followers.

What is the NAICS classification code for Zoho One ?

Zoho One is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Zoho One have a Crunchbase profile ?

No, Zoho One does not have a profile on Crunchbase.

Does Zoho One have a LinkedIn profile ?

Yes, Zoho One maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/osforbiz.

How many cybersecurity incidents has Zoho One experienced ?

As of October 11, 2026, Rankiteo reports that Zoho One has experienced 3 cybersecurity incidents.

How many peer or competitor companies does Zoho One have ?

Zoho One has an estimated 41,862 peer or competitor companies worldwide.

What types of cybersecurity incidents has Zoho One faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack and Vulnerability.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Zoho One

Boost Score +25 with badge (5 left)

757

/1000

Fair

782

/1000

Fair

Zoho One Vendor Cyber Rating & Cyber Score

zoho.com

Add Your Compliance Badge

Grow your business with one smart and customizable system of unified software for sales, marketing, support, accounting, operations, and HR.

Zoho One

Zoho One CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Zoho

Cyber Attack

100

12/2025

Wondershare Tec...

ZOHWON177607613...

Zoho

Cyber Attack

10/2025

ZOH1776249079

Zoho One

Vulnerability

3/2025

ZOH411030525

Loading…

A.I.

Zoho One Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Zoho One

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Zoho One in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Zoho One in 2026.

Incident Types Zoho One vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Zoho One in 2026.

Incident History - Zoho One (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Zoho One Subsidiaries

Zoho One

IT Services and IT Consulting

Website: https://www.zoho.com/one/

Company Size: 201-500 employees

ZohoSoftware Development

Zoho RecruitSoftware Development

Zoho PeopleHuman Resources Services

Zoho CreatorSoftware Development

Zoho Middle East & North AfricaSoftware Development

Loading…

Zoho One Similar Companies

Capgemini

capgemini.com

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2025 global revenues of €22.5 billion. Make it real | www.capgemini.com

Sutherland

sutherlandglobal.com

Artificial Intelligence. Automation. Cloud Engineering. Advanced Analytics. For Enterprises, these are key factors of success. For us, they’re our core expertise. We work with global iconic brands. We bring them a unique value proposition through market-leading technologies and business process excellence. At the heart of it all is Digital Engineering services – the foundation that powers rapid innovation and scalable business transformation. We’ve created 363 unique and independent inventions, 250 of which are AI-based and rolled up under several patent grants in critical technologies. Leveraging our advanced products and platforms, we drive digital transformation at scale, optimize critical business operations, reinvent experiences, and pioneer new solutions, all provided through a seamless “as-a-service” model. For each company, we provide new keys for their businesses, the people they work with, and the customers they serve. With proven strategies and agile execution, we don’t just enable change — we engineer digital outcomes.

Dimension Data

dimensiondata.com

Dimension Data is a leading African born technology provider operating in the Middle East and Africa, offering a portfolio of services including systems integration, managed services infrastructure, cloud solutions, business applications, customer experience, and intelligent security solutions. We provide innovative solutions that optimise today’s evolving technology environments, enabling clients to leverage data in a digital age. Founded in 1983, and headquartered in Johannesburg, Dimension Data is a proud member of the NTT Group, one of the world’s leading information communication technology (ICT) companies, comprising a group of global technology companies. In 2020, Dimension Data completed its transition to operate as one entity consolidating all its subsidiaries under a single Dimension Data brand employing over 10 000 employees across 15 countries. We continue to invest heavily in innovation bringing together the world’s best technologies, from consulting, technical and support services to a fully managed service. Dimension Data is currently a level 2 BBBEE contributor after successfully concluding a significant BBBEE transaction in 2019. Dimension Data will continue to implement strategies to ensure it contributes meaningfully to transformation towards an inclusive society.

Globant

cb globant.link

At Globant, we create the digitally-native products that people love. We bridge the gap between businesses and consumers through technology and creativity, leveraging our experience as an AI powerhouse. We dare to digitally transform organizations and strive to delight their customers. - We have more than 30,000 employees and are present in 33 countries across 5 continents, working for companies like Google, Electronic Arts, and Santander, among others. - We were named a Worldwide Leader in AI Services (2023) and a Worldwide Leader in CX Improvement Services (2020) by IDC MarketScape report. - We are the fastest-growing IT brand and the 5th strongest IT brand globally (2024), according to Brand Finance. - We were featured as a business case study at Harvard, MIT, and Stanford. - We are active members of The Green Software Foundation (GSF) and the Cybersecurity Tech Accord. For more information, visit https://bit.ly/globant_com Follow us: http://www.twitter.com/globant http://www.youtube.com/Globant http://www.facebook.com/Globant https://instagram.com/Globant https://www.tiktok.com/@globant

CGI

cgi.com

Insights you can act on. Founded in 1976, CGI is among the largest IT and business consulting services firms in the world. We are insights-driven and outcomes-focused to help accelerate returns on your investments. Across hundreds of locations worldwide, we provide comprehensive, scalable and sustainable IT and business consulting services that are informed globally and delivered locally. We value your opinions and welcome your comments and questions on our posts here on LinkedIn. Please keep a polite, professional and constructive tone. We remove comments containing objectionable language and derogatory views. We do not allow content that is unrelated to the subject, and we remove discriminatory and racist comments as well as spam and advertising. Note that content on this page contains general information regarding CGI’s services and initiatives and should not be considered direct business advice. To engage in a discussion with one of our experts, please make a request through https://www.cgi.com/en/contact-us

Asurion

cb asurion.com

As the world’s leading tech care company, Asurion eliminates the fears and frustrations associated with technology, to ensure our 300 million customers get the most out of their devices, appliances and connections. We provide insurance, repair, replacement, installation and 24/7 support for everything from cellphones to laptops and household appliances. Our experts are available online, on the phone, at one of our more than 800 stores, or can even come to you.

Neobpo

www.neobpo

Somos especializados em integrar tecnologia com inteligência humana, oferecendo soluções digitais que promovem transformação e eficiência operacional. Nosso foco é gerar valor por meio de resultados reais, utilizando inteligência digital para atender às necessidades específicas de cada cliente. Mergulhamos nos desafios de empresas que buscam inovação, modernização e escalabilidade, oferecendo soluções seguras e personalizadas para impulsionar seu crescimento. Adotamos uma abordagem consultiva ao longo de toda a jornada, identificando oportunidades estratégicas desde o primeiro contato, proporcionando soluções sob medida que combinam dados, automação e atendimento dedicado. O impacto que geramos vai além da entrega de resultados. Transformamos a forma como nossos clientes operam, melhorando sua produtividade, segurança e escalabilidade, garantindo um crescimento sustentável e criando valor mensurável para seus negócios.

Mastercard

mastercard.com

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re building a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Nagarro

cb nagarro.com

Nagarro helps future-proof your business through a forward-thinking, fluidic, and CARING mindset. We excel at digital engineering and help our clients become human-centric, digital-first organizations, augmenting their ability to be responsive, efficient, intimate, creative, and sustainable. Today, we are 18,000+ experts across 38 countries, forming a Nation of Nagarrians, ready to help our customers succeed.

Loading…

NEWS

Zoho One CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 27, 2026 08:00 AM

ScarCruft Uses Zoho WorkDrive and USB Malware to Breach Air-Gapped Networks

The North Korean threat actor known as ScarCruft has been attributed to a fresh set of tools, including a backdoor that uses Zoho WorkDrive...

Read Article

February 21, 2026 08:00 AM

One AI Tweet, $10 Billion Gone: Is Cyber Security in Trouble?

The kind of significant advancements that we are observing in the AI sector in recent times has been beyond measure, and this is leading to...

Read Article

February 09, 2026 08:00 AM

Threat actors target SolarWinds Web Help Desk flaw

Researchers say hackers are using remote monitoring and other tools in compromised environments.

Read Article

February 09, 2026 08:00 AM

SolarWinds Web Help Desk Exploited for RCE in Multi-Stage Attacks on Exposed Servers

Microsoft links SolarWinds WHD exploits to RCE, lateral movement, and domain compromise in multi-stage attacks.

Read Article

February 09, 2026 08:00 AM

Hackers Actively Exploiting SolarWinds Web Help Desk RCE Vulnerability to Deploy Custom Tools

Active exploitation of a remote code execution (RCE) vulnerability in SolarWinds Web Help Desk (WHD) is accelerating, with attackers rapidly...

Read Article

February 08, 2026 08:00 AM

Active Exploitation of SolarWinds Web Help Desk (CVE-2025-26399)

Acknowledgments: Special thanks to Dipo Rodipe, Dray Agha, and Lindon Wass for their contributions to this investigation and write-up.

Read Article

January 20, 2026 08:00 AM

India-based Zoho Corporation planning to expand data centres in ME and Africa: CEO - Tech - Business

Zoho Corporation and its IT management arm ManageEngine are planning to expand data centre investments across the Middle East and Africa,...

Read Article

January 15, 2026 08:00 AM

Zoho Opens First UAE Data Centres for Local Cloud Hosting

Zoho Corporation expands with new data centres in Dubai and Abu Dhabi to support UAE data sovereignty and cloud adoption for business and...

Read Article

January 15, 2026 08:00 AM

Zoho opens first UAE data centres, will host over 100 cloud services

The new facilities in Dubai and Abu Dhabi will host more than 100 cloud‑based solutions from Zoho's two main brands.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-108680

SUMMARY

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/api/sendTemplateAnnouncement. Low-privileged attackers can supply forged sender, recipients, title, and template parameters to deliver messages appearing to come from admin or system accounts.

Published

Date2026-10-10

Updated

Date2026-10-10

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-108679

SUMMARY

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController that allows any authenticated user to send announcements without the required permissions. Low-privileged attackers can POST crafted bodies to /sys/api/sendBusAnnouncement with forged sender, recipients, title and content to deliver spoofed admin or system messages for phishing.

Published

Date2026-10-10

Updated

Date2026-10-10

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-108678

SUMMARY

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiController that lets authenticated users read any user's role codes. Low-privileged attackers can send GET requests to /sys/api/queryUserRoles with an arbitrary username to enumerate role assignments and identify administrator accounts.

Published

Date2026-10-10

Updated

Date2026-10-10

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-108677

SUMMARY

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value. Attackers can decrypt the AES-CBC protected response using the hard-coded key exposed by /sys/getEncryptedString to obtain administrators' password ciphertexts for offline guessing.

Published

Date2026-10-10

Updated

Date2026-10-10

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-108676

SUMMARY

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController downLoadFiles handler that allows low-privileged authenticated users to download announcement attachments. Attackers can supply a known announcement id to retrieve a ZIP of attachments from unreleased announcements or those addressed only to other users.

Published

Date2026-10-10

Updated

Date2026-10-10

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Zoho One Vendor Cyber Rating & Cyber Score

Zoho One A.I CyberSecurity Scoring

Zoho One CyberSecurity News & History

Zoho One Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Zoho One

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Zoho One vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - Zoho One (X = Date, Y = Severity)

Zoho One Subsidiaries

Zoho One

Zoho One Similar Companies

Capgemini

Sutherland

Dimension Data

Globant

CGI

Asurion

Neobpo

Mastercard

Nagarro

Zoho One CyberSecurity News

ScarCruft Uses Zoho WorkDrive and USB Malware to Breach Air-Gapped Networks

One AI Tweet, $10 Billion Gone: Is Cyber Security in Trouble?

Threat actors target SolarWinds Web Help Desk flaw

SolarWinds Web Help Desk Exploited for RCE in Multi-Stage Attacks on Exposed Servers

Hackers Actively Exploiting SolarWinds Web Help Desk RCE Vulnerability to Deploy Custom Tools

Active Exploitation of SolarWinds Web Help Desk (CVE-2025-26399)

India-based Zoho Corporation planning to expand data centres in ME and Africa: CEO - Tech - Business

Zoho Opens First UAE Data Centres for Local Cloud Hosting

Zoho opens first UAE data centres, will host over 100 cloud services

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Zoho One CyberSecurity News & History

Zoho One Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Zoho One

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Zoho One vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - Zoho One (X = Date, Y = Severity)

Zoho One Subsidiaries

Zoho One

Zoho One Similar Companies

Capgemini

Sutherland

Dimension Data

Globant

CGI

Asurion

Neobpo

Mastercard

Nagarro

Zoho One CyberSecurity News

ScarCruft Uses Zoho WorkDrive and USB Malware to Breach Air-Gapped Networks

One AI Tweet, $10 Billion Gone: Is Cyber Security in Trouble?

Threat actors target SolarWinds Web Help Desk flaw

SolarWinds Web Help Desk Exploited for RCE in Multi-Stage Attacks on Exposed Servers

Hackers Actively Exploiting SolarWinds Web Help Desk RCE Vulnerability to Deploy Custom Tools

Active Exploitation of SolarWinds Web Help Desk (CVE-2025-26399)

India-based Zoho Corporation planning to expand data centres in ME and Africa: CEO - Tech - Business

Zoho Opens First UAE Data Centres for Local Cloud Hosting

Zoho opens first UAE data centres, will host over 100 cloud services

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo