What is the official website of OWASP® Foundation ?

The official website of OWASP® Foundation is https://http://owasp.org.

What is OWASP® Foundation's cybersecurity risk score?

OWASP® Foundation has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has OWASP® Foundation experienced?

According to Rankiteo, OWASP® Foundation currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has OWASP® Foundation been affected by any supply chain cyber incidents ?

According to Rankiteo, OWASP® Foundation has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does OWASP® Foundation have SOC 2 Type 1 certification ?

According to Rankiteo, OWASP® Foundation is not certified under SOC 2 Type 1.

Does OWASP® Foundation have SOC 2 Type 2 certification ?

According to Rankiteo, OWASP® Foundation does not hold a SOC 2 Type 2 certification.

Does OWASP® Foundation comply with GDPR ?

According to Rankiteo, OWASP® Foundation is not listed as GDPR compliant.

Does OWASP® Foundation have PCI DSS certification ?

According to Rankiteo, OWASP® Foundation does not currently maintain PCI DSS compliance.

Does OWASP® Foundation comply with HIPAA ?

According to Rankiteo, OWASP® Foundation is not compliant with HIPAA regulations.

Does OWASP® Foundation have ISO 27001 certification ?

According to Rankiteo,OWASP® Foundation is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does OWASP® Foundation operate in ?

OWASP® Foundation operates primarily in the Software Development industry.

How many employees does OWASP® Foundation have ?

OWASP® Foundation employs approximately 648 people worldwide.

Does OWASP® Foundation own any subsidiaries ?

OWASP® Foundation presently has no subsidiaries across any sectors.

How many LinkedIn followers does OWASP® Foundation have ?

OWASP® Foundation's official LinkedIn profile has approximately 288,043 followers.

What is the NAICS classification code for OWASP® Foundation ?

OWASP® Foundation is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does OWASP® Foundation have a Crunchbase profile ?

No, OWASP® Foundation does not have a profile on Crunchbase.

Does OWASP® Foundation have a LinkedIn profile ?

Yes, OWASP® Foundation maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/owasp.

How many cybersecurity incidents has OWASP® Foundation experienced ?

As of October 6, 2026, Rankiteo reports that OWASP® Foundation has experienced 1 cybersecurity incidents.

How many peer or competitor companies does OWASP® Foundation have ?

OWASP® Foundation has an estimated 31,076 peer or competitor companies worldwide.

What types of cybersecurity incidents has OWASP® Foundation faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

OWASP® Foundation

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

OWASP® Foundation Vendor Cyber Rating & Cyber Score

owasp.org

Add Your Compliance Badge

The Open Worldwide Application Security Project (OWASP) is a worldwide free and open community focused on improving the security of software. Our mission is to make application security "visible," so that people and organizations can make informed decisions about application security risks. Everyone is free to participate in OWASP and all of our materials are available under a free and open software license. The OWASP Foundation is a 501c3 not-for-profit charitable organization that ensures the ongoing availability and support for our work.

OWASP® Foundation

OWASP® Foundation CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

OWASP® Foundation

Vulnerability

1/2026

OWA1769633044

Loading…

A.I.

OWASP® Foundation Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for OWASP® Foundation

Incidents vs Software Development Industry Avg (This Year)

OWASP® Foundation has 4.76% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

OWASP® Foundation has 0.99% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types OWASP® Foundation vs Software Development Industry Avg (This Year)

OWASP® Foundation reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 1 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - OWASP® Foundation (X = Date, Y = Severity)

Loading…

SUBSIDIARY

OWASP® Foundation Subsidiaries

Parent Company

OWASP® Foundation

Software Development

Website: https://http://owasp.org

Company Size: 648

No subsidiary data available for this company.

Loading…

OWASP® Foundation Similar Companies

Avaya

cb tinyurl.com

At Avaya, we give our customers the freedom to take their business in the directions that benefit them most. We provide the paths for both customers and their employees where every moment big and small can drive in the moment, memorable experiences. The journey is theirs at the pace that makes sense for them with the innovation without disruption they need now and the solutions they can invest in the future.

Databricks

databricks.com

Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and over 60% of the Fortune 500 — rely on Databricks to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified Data Intelligence Platform that includes Agent Bricks, Lakeflow, Lakehouse, Lakebase and Unity Catalog. --- Databricks applicants Please apply through our official Careers page at databricks.com/company/careers. All official communication from Databricks will come from email addresses ending with @databricks.com or @goodtime.io (our meeting tool).

Zoho

zoho.com

Zoho offers beautifully smart software to help you grow your business. With over 100 million users worldwide, Zoho's 55+ products aid your sales and marketing, support and collaboration, finance, and recruitment needs—letting you focus only on your business. Zoho respects user privacy and does not have an ad-revenue model in any part of its business, including its free products. Zoho Corporation is privately held and profitable, with its headquarters in Chennai, India, and offices across the globe.

bigbasket

cb bigbasket.com

Starting our journey in 2011, today, bigbasket - a Tata Enterprise is India’s largest online supermarket with over 13 million customers and a presence in 60+ cities & towns. With our presence spanning the entire spectrum of consumer needs, we operate through a range of business lines - bigbasket, bbnow, bbinstant, bbdaily, fresho, bbmandi, and bbsaathi. We offer convenience by making grocery shopping easy for customers while enhancing their experience. With more than 47,000 employees, we are a proud & growing bigbasket family. With our businesses scaling, we are keen on working with the best talent in the industry. Every bigbasketeer embodies the ‘Spirit of bb’ that defines our work ethos. We believe in nurturing a people-first environment where the health and well-being of our employees are always prioritised. Fostering bigbasket’s value system, we encourage humility, transparency, integrity, and respect amongst each other to create an elevated work culture. At bigbasket, we empower every bigbasketeer with responsibility and ownership in everything they do. Being a customer-centric organisation, we operate with a maniacal focus on customers ensuring we always deliver our best. bigbasket has been proudly certified as a Great Place to Work, and Great Place to Work for Women. Our business model is designed to create opportunities for our country’s gig economy. We have achieved the highest ranking in the Fairwork India Ratings for Gig Workers. Through our DEI initiative – Aarambh, we foster Diversity, Equity, & Inclusion driving a workplace where everybody feels welcomed. Alongside this, we take conscious and proactive measures towards curtailing our impact on the environment. Our electric vehicles delivery fleet and solar panel equipped warehouses help us minimize carbon emissions. By promoting organic farming, we encourage fresh farm produce contributing to good land and soil health. #JoinTheSquad and be a part of our growth story!

Pitney Bowes

cb pitneybowes.com

Pitney Bowes is a technology-driven company that provides digital shipping solutions, mailing innovation, and financial services to clients around the world – including more than 90 percent of the Fortune 500. Small businesses to large enterprises, and government entities rely on Pitney Bowes to reduce the complexity of sending mail and parcels.

Sage

sage.com

At Sage, we knock down barriers with information, insights, and tools to help your business flow. We provide businesses with software and services that are simple and easy to use, as we work with you to give you that feeling of confidence. Customers trust our Payroll, HR, and Finance software to make business flow with ease. From our local network of experts to our ever-growing partnerships, we are on hand to give you all the insights you need to thrive. 💚

OpenText

cb opentext.com

OpenText is a leading Cloud and AI company that provides organizations around the world with a comprehensive suite of Business AI, Business Clouds, and Business Technology. We help organizations grow, innovate, become more efficient and effective, and do so in a trusted and secure way—through Information Management. OpenText (NASDAQ/TSX: OTEX), founded in 1991 in Waterloo, has a rich history of helping customers manage their most important asset—information. Originating from a collaboration to digitize the Oxford English Dictionary, OpenText has grown into a global leader in information management. With over 120,000 enterprise customers across 180 countries, OpenText supports 98 of the top 100 global companies. A wide breadth of offerings uniquely positions OpenText to help customers unlock the value of that information using Al, cloud, and security innovations. At OpenText, our culture is at the heart of everything we do—and today, that includes being proudly AI-first. We’re creating a workplace where everyone can thrive, with artificial intelligence integrated into how we work, solve problems, and innovate together. By fostering a collaborative and inclusive environment, we empower digital knowledge workers and drive forward-thinking solutions that shape the future of information management. We believe our success comes from the strength of our team—talent that AI can’t replace—and we’re committed to attracting and supporting those who bring unique insight, adaptability, and creativity. Because at OpenText, people aren’t just our greatest asset—they’re the reason we shine in an AI-powered world. Join us at OpenText and become part of a team where your talents and ideas are truly valued.

PedidosYa

pedidosya.com

We’re the delivery market leader in Latin America. Our platform connects over 77.000 restaurants, supermarkets, pharmacies and stores with millions of users. Nowadays we operate in more than 500 cities in Latinamerica. And we are now over 3.400 employees. PedidosYa is available for iOS, Android and Windows Phone operating systems and downloads are now over 20 million.

Intuit

intuit.com

Intuit is a global technology platform that helps our customers and communities overcome their most important financial challenges. Serving millions of customers worldwide with TurboTax, QuickBooks, Credit Karma and Mailchimp, we believe that everyone should have the opportunity to prosper and we work tirelessly to find new, innovative ways to deliver on this belief. We encourage conversations on this page and will not delete comments that follow our terms of use. In order to keep this a safe community, the below posts may be removed: Repeated posts of the same content, spam or posts from fake accounts or profiles, offensive language or material, threats to others in the community, posts deliberately aimed to have a negative effect on the community or conversations.

Loading…

NEWS

OWASP® Foundation CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 19, 2026 02:49 PM

Expanding the Role of the OWASP Top 10 in Protecting Critical Infrastructure

Critical infrastructure has long shaped cybersecurity risk discussions, leading to the development of frameworks that helped organizations...

Read Article

February 17, 2026 03:06 PM

CredShields Leads OWASP Smart Contract Top 10 2026 as Governance and Access Failures Drive Onchain Risk

SINGAPORE, Singapore, February 17th, 2026, CyberNewswire. CredShields announces that the OWASP Smart Contract Security Project has...

Read Article

February 13, 2026 02:43 PM

From Risk to Resilience: Women Shaping Modern Cybersecurity Operations

Discover how women leaders are transforming cybersecurity operations from managing risk to building resilient, future-ready security strategies.

Read Article

January 26, 2026 08:00 AM

Аgentic AI security measures based on the OWASP ASI Top 10

Key security controls to implement in your organization to protect against malicious AI agent behavior.

Read Article

November 16, 2025 08:00 AM

OWASP Releases: CheatSheet – A Practical Guide for Securely Using Third-Party MCP Servers

Read Article

November 12, 2025 08:00 AM

The OWASP Foundation Unveils The 2025 Top 10 List, Introducing Two New Categories

Read Article

September 11, 2025 07:00 AM

OWASP API Security Top 10 Risks

Explore OWASP API Security and discover essential cloud-first strategies to safeguard your APIs. Understand the top threats and best...

Read Article

July 01, 2025 07:00 AM

SANS and OWASP Join Forces to Standardize AI Security Controls

With attacks escalating and no clear standards in place, two of cybersecurity's most trusted communities are joining forces to give...

Read Article

June 28, 2025 07:00 AM

OWASP Launches AI Testing Guide to Address Security, Bias, and Risk in AI Systems

The OWASP Foundation has officially introduced the AI Testing Guide (AITG), a new open-source initiative aimed at assisting organizations in...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-105761

SUMMARY

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server endpoint in api/controllers/console/app/mcp_server.py used AppMCPServerController.put() to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged to the requested application and tenant. An authenticated workspace member could therefore change another application's MCP server status and parameters, potentially redirecting data or disabling the service. This issue is fixed in version 1.16.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-105760

SUMMARY

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level media_io_kwargs field to select the GLMGA video backend and supply large values for the fps and max_frames options without a strict work ceiling. GLMGA constructs and deduplicates an attacker-sized pre-decode frame-index list, allowing a compact request and tiny valid video to consume disproportionate CPU time and memory in the shared media-loading executor. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-105759

SUMMARY

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metrics middleware records the raw HTTP method token as a Prometheus label for requests reaching registered routes. An unauthenticated attacker can send unique arbitrary method tokens to unguarded routes such as /tokenize, causing Prometheus's Family::get_or_create function to permanently create counter and histogram label sets. Those label sets increase process memory usage and enlarge the /metrics response until the service or monitoring path is exhausted. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-105758

SUMMARY

vLLM is an inference and serving engine for large language models. From 0.24.0 until 0.30.0, the Qwen2VLVideoBackend and Qwen3VLVideoBackend classes accept request-level values for the media_io_kwargs.video.max_frames and media_io_kwargs.video.fps fields without enforcing server-side ceilings. An unauthenticated caller can submit these values to the /tokenize endpoint, causing the sampler to decode every frame selected from attacker-controlled video input, consume disproportionate frontend memory, and potentially terminate the API process before scheduling or admission control. The Rust frontend is not affected because it rejects the media_io_kwargs field. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-105757

SUMMARY

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore fatal-error path. A per-request backend mismatch can re-raise a grammar compilation exception, padding produced by the ngram_gpu speculative-decoding mode can pass a negative token to guidance validation, and the Rust frontend can admit empty structured-output values that the Python frontend rejects, allowing ordinary constrained-generation requests to terminate the shared engine. This issue is fixed in version 0.30.0.

Published

Date2026-10-05

Updated

Date2026-10-05

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

OWASP® Foundation Vendor Cyber Rating & Cyber Score

OWASP® Foundation A.I CyberSecurity Scoring

OWASP® Foundation CyberSecurity News & History

OWASP® Foundation Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for OWASP® Foundation

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types OWASP® Foundation vs Software Development Industry Avg (This Year)

Incident History - OWASP® Foundation (X = Date, Y = Severity)

OWASP® Foundation Subsidiaries

Parent Company

OWASP® Foundation

OWASP® Foundation Similar Companies

Avaya

Databricks

Zoho

bigbasket

Pitney Bowes

Sage

OpenText

PedidosYa

Intuit

OWASP® Foundation CyberSecurity News

Expanding the Role of the OWASP Top 10 in Protecting Critical Infrastructure

CredShields Leads OWASP Smart Contract Top 10 2026 as Governance and Access Failures Drive Onchain Risk

From Risk to Resilience: Women Shaping Modern Cybersecurity Operations

Аgentic AI security measures based on the OWASP ASI Top 10

OWASP Releases: CheatSheet – A Practical Guide for Securely Using Third-Party MCP Servers

The OWASP Foundation Unveils The 2025 Top 10 List, Introducing Two New Categories

OWASP API Security Top 10 Risks

SANS and OWASP Join Forces to Standardize AI Security Controls

OWASP Launches AI Testing Guide to Address Security, Bias, and Risk in AI Systems

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

OWASP® Foundation CyberSecurity News & History

OWASP® Foundation Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for OWASP® Foundation

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types OWASP® Foundation vs Software Development Industry Avg (This Year)

Incident History - OWASP® Foundation (X = Date, Y = Severity)

OWASP® Foundation Subsidiaries

Parent Company

OWASP® Foundation

OWASP® Foundation Similar Companies

Avaya

Databricks

Zoho

bigbasket

Pitney Bowes

Sage

OpenText

PedidosYa

Intuit

OWASP® Foundation CyberSecurity News

Expanding the Role of the OWASP Top 10 in Protecting Critical Infrastructure

CredShields Leads OWASP Smart Contract Top 10 2026 as Governance and Access Failures Drive Onchain Risk

From Risk to Resilience: Women Shaping Modern Cybersecurity Operations

Аgentic AI security measures based on the OWASP ASI Top 10

OWASP Releases: CheatSheet – A Practical Guide for Securely Using Third-Party MCP Servers

The OWASP Foundation Unveils The 2025 Top 10 List, Introducing Two New Categories

OWASP API Security Top 10 Risks

SANS and OWASP Join Forces to Standardize AI Security Controls

OWASP Launches AI Testing Guide to Address Security, Bias, and Risk in AI Systems

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?