What is the official website of Smithery ?

The official website of Smithery is http://smithery.ai.

What is Smithery's cybersecurity risk score?

Smithery has an AI-generated cybersecurity risk score of 796 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Smithery experienced?

According to Rankiteo, Smithery currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Smithery been affected by any supply chain cyber incidents ?

According to Rankiteo, Smithery has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Smithery have SOC 2 Type 1 certification ?

According to Rankiteo, Smithery is not certified under SOC 2 Type 1.

Does Smithery have SOC 2 Type 2 certification ?

According to Rankiteo, Smithery does not hold a SOC 2 Type 2 certification.

Does Smithery comply with GDPR ?

According to Rankiteo, Smithery is not listed as GDPR compliant.

Does Smithery have PCI DSS certification ?

According to Rankiteo, Smithery does not currently maintain PCI DSS compliance.

Does Smithery comply with HIPAA ?

According to Rankiteo, Smithery is not compliant with HIPAA regulations.

Does Smithery have ISO 27001 certification ?

According to Rankiteo,Smithery is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Smithery operate in ?

Smithery operates primarily in the Technology, Information and Internet industry.

How many employees does Smithery have ?

Smithery employs approximately 6 people worldwide.

Does Smithery own any subsidiaries ?

Smithery presently has no subsidiaries across any sectors.

How many LinkedIn followers does Smithery have ?

Smithery's official LinkedIn profile has approximately followers.

What is the NAICS classification code for Smithery ?

Smithery is classified under the NAICS code 513, which corresponds to Others.

Does Smithery have a Crunchbase profile ?

No, Smithery does not have a profile on Crunchbase.

Does Smithery have a LinkedIn profile ?

Yes, Smithery maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/smithery-ai.

How many cybersecurity incidents has Smithery experienced ?

As of September 22, 2026, Rankiteo reports that Smithery has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Smithery have ?

Smithery has an estimated 15,465 peer or competitor companies worldwide.

What types of cybersecurity incidents has Smithery faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Smithery

Boost Score +25 with badge (5 left)

796

/1000

Fair

821

/1000

Good

Smithery Vendor Cyber Rating & Cyber Score

smithery.ai

Add Your Compliance Badge

Smithery

Smithery CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Smithery

Vulnerability

100

10/2025

SMI316213110232...

Loading…

A.I.

Smithery Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Smithery

Incidents vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for Smithery in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Smithery in 2026.

Incident Types Smithery vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for Smithery in 2026.

Incident History - Smithery (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Smithery Subsidiaries

Parent Company

Smithery

Technology, Information and Internet

Website: http://smithery.ai

Company Size: 2-10 employees

No subsidiary data available for this company.

Loading…

Smithery Similar Companies

Sohu.com

sohu.com

Sohu.com Inc. (NASDAQ: SOHU) is China's premier online brand and indispensable to the daily life of millions of Chinese, providing a network of web properties and community based/web 2.0 products which offer the vast Sohu user community a broad array of choices regarding information, entertainment and communication. Sohu has built one of the most comprehensive matrices of Chinese language web properties and proprietary search engines, consisting of seven leading web properties.

e&

eand.com

We're a global technology group focused on innovation and collaboration to create a better future for all. Since 1976, we've been pioneering new technologies and expanding our reach to more people and places. Today, we provide services to over 163 million customers across 16 countries in the Middle East, Asia, and Africa through our telecom brands under e& international and e& UAE. We're committed to driving the digital future to empower societies and help businesses and governments create a smarter, safer, and more sustainable world through all our business verticals including e& enterprise, e& life, and e& capital. Our goal is to empower people, communities, and societies worldwide to achieve more.

Freelancer.com

freelancer.com

Thirteen-time Webby award-winning Freelancer is the world’s largest freelancing and crowdsourcing marketplace by total number of users and projects posted. More than 85 million registered users have posted over 25 million projects and contests to date in over 4,000 areas as diverse as website development, logo design, marketing, copywriting, astrophysics, aerospace engineering and manufacturing. Freelancer owns Escrow.com, the world's largest online escrow company. Freelancer also owns Loadshift, Australia's largest heavy haulage freight marketplace, with over 800 million kilometers of freight posted since inception. Freelancer Limited is listed on the Australian Securities Exchange under the ticker ASX:FLN and is quoted in the US as FRLCY.

Delivery Hero

deliveryhero.com

As the world’s pioneering local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in around 65 countries worldwide, powered by tech, designed by people. As one of Europe’s largest tech platforms, headquartered in Berlin, Germany, Delivery Hero has been listed on the Frankfurt Stock Exchange since 2017 and is part of the MDAX stock market index. We push hard, learn quickly, and stay human along the way. It’s this wonderful mix of high performance and real community that makes Delivery Hero a place where ambition and belonging grow side by side. If you’re curious, collaborative, and ready to dive deep into meaningful work, you’ll fit right in.

Swiggy

swiggy.com

Swiggy is India’s pioneering on-demand convenience platform, catering to millions of consumers each month. Founded in 2014, its mission is to elevate the quality of life for the urban consumer by offering unparalleled convenience. With an extensive footprint in food delivery, Swiggy Food collaborates with nearly 2 lakh restaurants across 600+ cities. Swiggy Instamart, its quick commerce platform operating in 120+ cities, delivers groceries and other essentials across 40+ categories in 10 minutes. Fueled by a commitment to innovation, Swiggy continually incubates and integrates new services like Swiggy Dineout and Swiggy Genie into its multi-service app. Leveraging cutting-edge technology and Swiggy One, the country’s only membership program offering benefits across food, quick commerce, dining out, and pick-up and drop services, Swiggy aims to provide a superior experience to its consumers. For more information, visit www.swiggy.com

Jumia Group

cb jumia.com

Jumia (NYSE :JMIA) is a leading e-commerce platform in Africa. It is built around a marketplace, Jumia Logistics, and JumiaPay. The marketplace helps millions of consumers and sellers to connect and transact. Jumia Logistics enables the delivery of millions of packages through our network of local partners. JumiaPay facilitates the payments of online transactions for Jumia's ecosystem. With over 1 billion people and 500 million internet users in Africa, Jumia believes that e-commerce is making people's lives easier by helping them shop and pay for millions of products at the best prices wherever they live. E-commerce is also creating new opportunities for SMEs to grow, and job opportunities for a new generation to thrive. With over 3,000 employees in more than 9 countries in Africa, Jumia is led by top talented leaders offering a great mix of local and international talents and is backed by very high-profile shareholders. Jumia is committed to creating sustainable impact in Africa. Jumia offers unique opportunities in a vibrant and booming environment, creating new jobs, new skills, and empowering a new generation.

Times Internet

timesinternet.in

At Times Internet, we create premium digital products that simplify and enhance the lives of millions. As India’s largest digital products company, we have a significant presence across a wide range of categories, including News, Sports, Fintech, and Enterprise solutions. Our portfolio features market-leading and iconic brands such as TOI, ET, NBT, Cricbuzz, Times Prime, Times Card, Indiatimes, Whatshot, Abound, Willow TV, Techgig and Times Mobile among many more. Each of these products is crafted to enrich your experiences and bring you closer to your interests and aspirations. As an equal opportunity employer, Times Internet strongly promotes inclusivity and diversity. We are proud to have achieved overall gender pay parity in 2018, verified by an independent audit conducted by Aon Hewitt. We are driven by the excitement of new possibilities and are committed to bringing innovative products, ideas, and technologies to help people make the most of every day. Join us and take us to the next level!

Myntra

myntra.com

At Myntra, we don’t just follow fashion - we define it. As India's leading fashion, lifestyle, and beauty destination, we bring together the best of style, technology, and innovation to create a seamless shopping experience for our customers. With a commitment to empowering self-expression, we curate over 13,000+ brands and labels, blending global trends with India’s unique fashion pulse. Our people are at the heart of everything we do. We thrive on innovation and impact, where data-driven insights and cutting-edge technology shape the future of fashion. We encourage out-of-the-box thinking, collaboration with leaders and experts, and driving meaningful change. Myntraites have a passion for fashion - we take pride in being India's voice in fashion and in the brand we stand for. Our non-hierarchical, inclusive culture values ownership, meritocracy, and self-driven individuals who challenge the status quo and grow with every opportunity. We believe in empowering every Myntraite by providing the freedom to shape their career, fostering an environment where creativity thrives, and ensuring well-being and self-expression for all. If you thrive in a fast-paced, result-driven environment and share our passion for fashion, Myntra is the place for you. Explore opportunities: https://jobs.myntra.com/home Be The Trend. Be Myntra.

IndiaMART InterMESH Limited

cb indiamart.com

IndiaMART is India's largest online B2B marketplace, connecting buyers with suppliers across a wide array of industries. IndiaMART provides a platform for Small & Medium Enterprises (SMEs), large enterprises, and individual buyers, helping them access diverse portfolios of quality products. Since 1999, IndiaMART’s mission has been to make doing business easy. Today, over 21.9 Crore buyers can explore and choose from 12.4 Crore products, sourced from 86 Lakh suppliers, creating a one-stop platform for all business needs. IndiaMART offers enhanced business visibility and credibility for suppliers, with tools designed to support business growth and operational efficiency. With a dedicated workforce of over 5000 employees across India, IndiaMART continues to facilitate seamless connections and provide a trusted marketplace for businesses to thrive.

Loading…

NEWS

Smithery CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 05, 2025 08:00 AM

MCP servers emerge as new supply chain risk as real attacks accelerate

Model Context Protocol (MCP) servers were introduced to help AI systems interact safely with enterprise tools and data.

Read Article

October 22, 2025 07:00 AM

From Path Traversal to Supply Chain Compromise: Breaking MCP Server Hosting

We found a path traversal vulnerability in Smithery.ai that compromised over 3000 MCP servers and exposed thousands of API keys.

Read Article

October 22, 2025 07:00 AM

Critical Vulnerability in MCP Server Platform Exposes 3,000 Servers and Thousands of API Keys

A critical vulnerability in Smithery.ai, a popular registry for Model Context Protocol (MCP) servers. This issue could have allowed...

Read Article

April 29, 2025 07:00 AM

A Look Into the Secrets of MCP: The New Secret Leak Source

MCP rapidly enhances AI capabilities but introduces security challenges through its distributed architecture. Especially, the distributed...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-94426

SUMMARY

A vulnerability was determined in xuxueli xxl-job up to 3.5.0. The impacted element is an unknown function of the file /jobgroup/insert. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-09-21

Updated

Date2026-09-21

RISK INFORMATION (Score: 3.5)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:N

cvss3

Base Score: 3.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.1

REFERENCES

CVE-2026-94425

SUMMARY

A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-09-21

Updated

Date2026-09-21

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 6.8

Complexity: LOW

AV:L/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-94627

SUMMARY

vLLM Mooncake connector through 0.29.0 fails to properly manage GPU KV cache block ownership when concurrent child requests share a single transfer ID in prefill/decode disaggregated deployments. Attackers can trigger GPU memory exhaustion by submitting completion requests with multiple prompts, causing orphaned KV cache blocks to accumulate until process restart and eventually preventing legitimate requests from executing.

Published

Date2026-09-21

Updated

Date2026-09-21

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-94626

SUMMARY

vLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_params on OpenAI-compatible completion endpoints, allowing attackers to allocate unbounded memory. Attackers can supply arbitrary tp_size values in prefill/decode disaggregated deployments to exhaust memory and trigger kernel OOM-kill of the decode worker process.

Published

Date2026-09-21

Updated

Date2026-09-21

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-94625

SUMMARY

vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill requests create ownerless transfer placeholders that are never reclaimed. Attackers can send rejected requests to exhaust sender task pools, causing valid requests to be delayed by up to 480 seconds while health checks continue returning success.

Published

Date2026-09-21

Updated

Date2026-09-21

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Smithery Vendor Cyber Rating & Cyber Score

Smithery A.I CyberSecurity Scoring

Smithery CyberSecurity News & History

Smithery Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Smithery

Incidents vs Technology, Information and Internet Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Smithery vs Technology, Information and Internet Industry Avg (This Year)

Incident History - Smithery (X = Date, Y = Severity)

Smithery Subsidiaries

Parent Company

Smithery

Smithery Similar Companies

Sohu.com

e&

Freelancer.com

Delivery Hero

Swiggy

Jumia Group

Times Internet

Myntra

IndiaMART InterMESH Limited

Smithery CyberSecurity News

MCP servers emerge as new supply chain risk as real attacks accelerate

From Path Traversal to Supply Chain Compromise: Breaking MCP Server Hosting

Critical Vulnerability in MCP Server Platform Exposes 3,000 Servers and Thousands of API Keys

A Look Into the Secrets of MCP: The New Secret Leak Source

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Smithery CyberSecurity News & History

Smithery Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Smithery

Incidents vs Technology, Information and Internet Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Smithery vs Technology, Information and Internet Industry Avg (This Year)

Incident History - Smithery (X = Date, Y = Severity)

Smithery Subsidiaries

Parent Company

Smithery

Smithery Similar Companies

Sohu.com

e&

Freelancer.com

Delivery Hero

Swiggy

Jumia Group

Times Internet

Myntra

IndiaMART InterMESH Limited

Smithery CyberSecurity News

MCP servers emerge as new supply chain risk as real attacks accelerate

From Path Traversal to Supply Chain Compromise: Breaking MCP Server Hosting

Critical Vulnerability in MCP Server Platform Exposes 3,000 Servers and Thousands of API Keys

A Look Into the Secrets of MCP: The New Secret Leak Source

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo