What is the official website of PhonePe ?

The official website of PhonePe is https://www.phonepe.com.

What is PhonePe's cybersecurity risk score?

PhonePe has an AI-generated cybersecurity risk score of 801 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has PhonePe experienced?

According to Rankiteo, PhonePe currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has PhonePe been affected by any supply chain cyber incidents ?

According to Rankiteo, PhonePe has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does PhonePe have SOC 2 Type 1 certification ?

According to Rankiteo, PhonePe is not certified under SOC 2 Type 1.

Does PhonePe have SOC 2 Type 2 certification ?

According to Rankiteo, PhonePe does not hold a SOC 2 Type 2 certification.

Does PhonePe comply with GDPR ?

According to Rankiteo, PhonePe is not listed as GDPR compliant.

Does PhonePe have PCI DSS certification ?

According to Rankiteo, PhonePe does not currently maintain PCI DSS compliance.

Does PhonePe comply with HIPAA ?

According to Rankiteo, PhonePe is not compliant with HIPAA regulations.

Does PhonePe have ISO 27001 certification ?

According to Rankiteo,PhonePe is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does PhonePe operate in ?

PhonePe operates primarily in the Software Development industry.

How many employees does PhonePe have ?

PhonePe employs approximately 18,344 people worldwide.

Does PhonePe own any subsidiaries ?

PhonePe presently has no subsidiaries across any sectors.

How many LinkedIn followers does PhonePe have ?

PhonePe's official LinkedIn profile has approximately 1,419,334 followers.

What is the NAICS classification code for PhonePe ?

PhonePe is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does PhonePe have a Crunchbase profile ?

Yes, PhonePe has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/phonepe.

Does PhonePe have a LinkedIn profile ?

Yes, PhonePe maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/phonepe-internet.

How many cybersecurity incidents has PhonePe experienced ?

As of August 28, 2026, Rankiteo reports that PhonePe has not experienced any cybersecurity incidents.

How many peer or competitor companies does PhonePe have ?

PhonePe has an estimated 30,744 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

PhonePe

Boost Score +25 with badge (5 left)

801

/1000

Good

826

/1000

Good

PhonePe Vendor Cyber Rating & Cyber Score

phonepe.com

cb in

Add Your Compliance Badge

PhonePe Group is India’s leading fintech company, proudly recognized as India’s #1 Trusted Digital Payments* Brand for three consecutive years. Our flagship product, the PhonePe app was launched in August 2016, has rapidly become the preferred consumer payments app in India. In just eight years, PhonePe has gained over 57 crore + registered users and established a digital payments acceptance network of over 4 crore+ merchants spread across Tier 2,3 cites and beyond, covering 99% of the postal codes in the country. Building on our leadership in digital payments, PhonePe Group has expanded into financial services—including insurance, lending, and wealth management—along with new consumer tech ventures such as Pincode, a hyperlocal

PhonePe A.I CyberSecurity Scoring

Scoring History

PhonePe

PhonePe CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

PhonePe Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for PhonePe

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for PhonePe in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for PhonePe in 2026.

Incident Types PhonePe vs Software Development Industry Avg (This Year)

No incidents recorded for PhonePe in 2026.

Incident History - PhonePe (X = Date, Y = Severity)

Loading…

SUBSIDIARY

PhonePe Subsidiaries

PhonePe

Software Development

Website: https://www.phonepe.com

Company Size: 5,001-10,000 employees

PhonePe SupportSoftware Development

Loading…

PhonePe Similar Companies

Databricks

databricks.com

Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and over 60% of the Fortune 500 — rely on Databricks to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified Data Intelligence Platform that includes Agent Bricks, Lakeflow, Lakehouse, Lakebase and Unity Catalog. --- Databricks applicants Please apply through our official Careers page at databricks.com/company/careers. All official communication from Databricks will come from email addresses ending with @databricks.com or @goodtime.io (our meeting tool).

Groupon

cb greenhouse.io

Groupon is an experiences marketplace that brings people more ways to get the most out of their city or wherever they may be. By enabling real-time mobile commerce across local businesses, live events and travel destinations, Groupon helps people find and discover experiences––big and small, new and familiar––that make for a full, fun and rewarding life. Groupon helps local businesses grow and strengthen customer relationships––resulting in strong, vibrant communities. E-commerce never stands still, our transformation strategy, combined with our strong brand, customer base, and marketplace expertise, ensures we are constantly adapting to the evolving market landscape while delivering value for our customers and merchant partners. Groupon is on a radical journey to transform our business. To meet our aggressive goals we are in the process of building a culture that prioritises fast decisions, open communication, and relentless pursuit of results. In the spirit of transparency, things aren't perfect, there are still processes to change and bureaucracy to break so we need people who want to be on this journey with us. Check out our current opportunities with #TeamGroupon and join us on our exciting mission to become The Ultimate Destination For Local Experiences and Services.

Alibaba.com

alibaba.com

The first business of Alibaba Group, Alibaba.com (www.alibaba.com) is the leading platform for global wholesale trade serving millions of buyers and suppliers around the world. Through Alibaba.com, small businesses can sell their products to companies in other countries. Sellers on Alibaba.com are typically manufacturers and distributors based in China and other manufacturing countries such as India, Pakistan, the United States and Thailand. Our Mission As part of the Alibaba Group, our mission is to make it easy to do business anywhere. We do this by giving suppliers the tools necessary to reach a global audience for their products, and by helping buyers find products and suppliers quickly and efficiently. One-Stop Sourcing Alibaba.com brings you hundreds of millions of products in over 40 different major categories, including consumer electronics, machinery and apparel. Buyers for these products are located in 190+ countries and regions, and exchange hundreds of thousands of messages with suppliers on the platform each day. Anytime, Anywhere As a platform, we continue to develop services to help businesses do more and discover new opportunities. Whether it’s sourcing from your mobile phone or contacting suppliers in their local language, turn to Alibaba.com for all your global business needs.

Walmart Global Tech

walmart.com

Walmart has a long history of transforming retail and using technology to deliver innovations that improve how the world shops and empower our 2.1 million associates. It began with Sam Walton and continues today with Global Tech associates working together to power Walmart and lead the next retail disruption. Our world-class software engineers, data scientists and engineers, cybersecurity professionals, product managers and business service professionals work with top talent on cutting-edge technologies that create unique and innovative experiences for our associates, customers and members across Walmart, Sam’s Club and Walmart International. At Walmart Global Tech, one line of code or bold idea can make life easier for hundreds of millions of people – talk about epic impact at a global scale.

[24]7.ai

cb 247.ai

[24]7.ai™ customer engagement solutions use conversational artificial intelligence to understand customer intent, enabling companies to create personalized, predictive, and effortless customer experiences across all channels; attract and retain customers; boost agent productivity and satisfaction; and drive revenues while lowering costs. The world’s largest and most recognizable brands use [24]7.ai intent-driven technologies to serve several hundred million visitors through billions of conversations annually, most of which are automated. The result is an order of magnitude improvement in digital adoption, customer satisfaction, and revenue growth. For more information, visit: www.247.ai. [24]7.ai is based in Campbell, California. [24]7.ai is a registered trademark of 24/7 Customer, Inc.

PayPal

paypal.com

We're championing possibilities for all by making money fast, easy, and more enjoyable. Our hope is to unlock opportunities for people in their everyday lives and empower the millions of people and businesses around the world who trust, rely, and use PayPal every day. For support, visit the PayPal Help Center. https://payp.al/help For employment opportunities, check out our job openings in the 'Jobs' tab. We're an equal opportunity employer that welcomes diversity, and offer generous benefits to help you thrive at work and in your free time. NMLS#910457: https://nmlsconsumeraccess.org/

Synopsys Inc

cb synopsys.com

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

GoTo Group

cb gotocompany.com

GoTo is the largest technology group in Indonesia, combining on-demand and financial services through the Gojek and GoTo Financial brands. It is the first platform in Southeast Asia to host these two essential use cases in one ecosystem, capturing a majority of Indonesian consumer household expenditure. GoTo’s mission is to “Empower Progress” by offering an unparalleled selection of goods and services through a comprehensive merchant and partner network and promoting financial inclusion through its leading payments and financial services business.

DiDi

didiglobal.com

DiDi Global Inc. is a leading mobility technology platform. It offers a wide range of app-based services across Asia Pacific, Latin America, and other global markets, including ride hailing, taxi hailing, designated driving, hitch and other forms of shared mobility as well as certain energy and vehicle services, food delivery, and intra-city freight services. DiDi provides car owners, drivers, and delivery partners with flexible work and income opportunities. It is committed to collaborating with policymakers, the taxi industry, the automobile industry, and the communities to solve the world’s transportation, environmental, and employment challenges through the use of AI technology and localized smart transportation innovations. DiDi strives to create better life experiences and greater social value, by building a safe, inclusive, and sustainable transportation and local services ecosystem for cities of the future.

Loading…

NEWS

PhonePe CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 16, 2026 05:23 PM

PhonePe Delays IPO Plan Amid Global Market Uncertainty

PhonePe has paused its IPO plans due to rising geopolitical tensions and market volatility. The...

Read Article

February 11, 2026 08:00 AM

PhonePe Leads UPI Transactions in January, CRED Drops to 8th Position

PhonePe remained the top player in the Unified Payments Interface (UPI) ecosystem in January, processing 9.91 billion transactions.

Read Article

February 08, 2026 08:00 AM

IPO-bound PhonePe plans to deepen presence in digital payments market

New Delhi: Walmart-backed PhonePe, which is targeting an IPO in April, plans to strengthen its leadership in digital payments while...

Read Article

December 04, 2025 08:00 AM

The Telecommunications (Telecom Cyber Security) Amendment Rules 2025

The Telecommunications (Telecom Cyber Security) Amendment Rules 2025 strengthen cybersecurity, mandate mobile number verification,...

Read Article

November 13, 2025 08:00 AM

Today in AI | PhonePe partners with OpenAI | New Nano Banana tools for edit available

The world of Artificial Intelligence has only begun to affect human lives. In times like these, staying up-to-date with the AI world is of...

Read Article

November 03, 2025 08:00 AM

From Backend to Frontline: How Cybersecurity Became a Product Differentiator in Broking

India's retail investing story has grown rapidly in recent years. As of August 2025, India had a total of 20.46 crore demat accounts,...

Read Article

November 03, 2025 08:00 AM

PhonePe Rolls Out ‘PhonePe Protect’ to Safeguard Users from Fraudulent Transactions

PhonePe has rolled-out 'PhonePe Protect'– a security framework designed to safeguard users from fraudulent transactions.

Read Article

November 03, 2025 08:00 AM

PhonePe rolls out ‘PhonePe Protect’ tool to block payments to government-flagged fraud numbers: Here’s ho

Tech News News: PhonePe has launched 'PhonePe Protect,' a new security feature designed to prevent fraudulent transactions.

Read Article

September 22, 2025 07:00 AM

PhonePe posts 40% revenue surge, turns free cash flow positive ahead of IPO

Phonepe revenue: Fintech firm crosses Rs 7000 crore in revenue as adjusted EBITDA and PAT soar; diversification into lending and broking...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-81934

SUMMARY

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-81931

SUMMARY

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission (routine Seller role) to execute arbitrary JavaScript in the application origin. The photo validation rule classifies the file only by its content (magic bytes) and rejects only a fixed list of PHP extensions, while ProductSaveController::save() names the stored file using the client-supplied extension and copies it into the public web root. A file that begins with an image header and carries an HTML extension passes validation, is stored under public/asset/upload/product/, and is served with a text/html content type, turning the upload into first-party stored script execution.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: )

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-81893

SUMMARY

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write, potentially crashing the application. To exploit this flaw, an application using gdk-pixbuf must process the malicious JPEG image. Affected version >= 2.26.4

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 4.7)

cvss3

Base Score: 4.7

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

REFERENCES

CVE-2026-81838

SUMMARY

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 through 0.23 can allow a third party to write arbitrary files to the local filesystem via crafted zip entry names containing path traversal sequences. This could allow the third party to perform inappropriate actions in the diagram bundle. To remediate this issue, users should upgrade to the version 0.24 or later.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

cvss4

Base Score: 6.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

1.8

REFERENCES

CVE-2026-81834

SUMMARY

A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Executing a manipulation can lead to code injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. Multiple isses were reported to the vendor beforehand. They explain, that "they all apply to Roo Code, a project we no longer support - the repository was archived a while ago, and we don't encourage anyone to use it." This vulnerability only affects products that are no longer supported by the maintainer.

Published

Date2026-08-27

Updated

Date2026-08-27

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…