What is the official website of SourceForge ?

The official website of SourceForge is https://sourceforge.net.

What is SourceForge's cybersecurity risk score?

SourceForge has an AI-generated cybersecurity risk score of 738 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has SourceForge experienced?

According to Rankiteo, SourceForge currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has SourceForge been affected by any supply chain cyber incidents ?

According to Rankiteo, SourceForge has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does SourceForge have SOC 2 Type 1 certification ?

According to Rankiteo, SourceForge is not certified under SOC 2 Type 1.

Does SourceForge have SOC 2 Type 2 certification ?

According to Rankiteo, SourceForge does not hold a SOC 2 Type 2 certification.

Does SourceForge comply with GDPR ?

According to Rankiteo, SourceForge is not listed as GDPR compliant.

Does SourceForge have PCI DSS certification ?

According to Rankiteo, SourceForge does not currently maintain PCI DSS compliance.

Does SourceForge comply with HIPAA ?

According to Rankiteo, SourceForge is not compliant with HIPAA regulations.

Does SourceForge have ISO 27001 certification ?

According to Rankiteo,SourceForge is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does SourceForge operate in ?

SourceForge operates primarily in the Software Development industry.

How many employees does SourceForge have ?

SourceForge employs approximately 63 people worldwide.

Does SourceForge own any subsidiaries ?

SourceForge presently has no subsidiaries across any sectors.

How many LinkedIn followers does SourceForge have ?

SourceForge's official LinkedIn profile has approximately 38,709 followers.

What is the NAICS classification code for SourceForge ?

SourceForge is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does SourceForge have a Crunchbase profile ?

No, SourceForge does not have a profile on Crunchbase.

Does SourceForge have a LinkedIn profile ?

Yes, SourceForge maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/sourceforge-net.

How many cybersecurity incidents has SourceForge experienced ?

As of August 23, 2026, Rankiteo reports that SourceForge has experienced 1 cybersecurity incidents.

How many peer or competitor companies does SourceForge have ?

SourceForge has an estimated 30,692 peer or competitor companies worldwide.

What types of cybersecurity incidents has SourceForge faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

SourceForge

Boost Score +25 with badge (5 left)

738

/1000

Moderate

763

/1000

Fair

SourceForge Vendor Cyber Rating & Cyber Score

sourceforge.net

Add Your Compliance Badge

SourceForge is the complete software platform. SourceForge is the largest B2B software review and comparison directory in the world with nearly 20 million monthly users looking for software, reading user reviews, and comparing B2B software products. SourceForge's business software reviews and comparison directory lists over 105,000 B2B software products across over 4000 B2B software categories, and offers robust tools for business software and service comparisons and buying decisions, which allows B2B professionals to compare software and services by price, user reviews, integrations, deployment, region, support and training offerings, and more. Our team of business software and service experts, who have thousands of hours of software

SourceForge A.I CyberSecurity Scoring

Scoring History

SourceForge

SourceForge CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

SourceForge

Cyber Attack

100

9/2025

SOU1777645601

Loading…

A.I.

SourceForge Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for SourceForge

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for SourceForge in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for SourceForge in 2026.

Incident Types SourceForge vs Software Development Industry Avg (This Year)

No incidents recorded for SourceForge in 2026.

Incident History - SourceForge (X = Date, Y = Severity)

Loading…

SUBSIDIARY

SourceForge Subsidiaries

Parent Company

SourceForge

Software Development

Website: https://sourceforge.net

Company Size: 51-200 employees

No subsidiary data available for this company.

Loading…

SourceForge Similar Companies

Groupon

cb greenhouse.io

Groupon is an experiences marketplace that brings people more ways to get the most out of their city or wherever they may be. By enabling real-time mobile commerce across local businesses, live events and travel destinations, Groupon helps people find and discover experiences––big and small, new and familiar––that make for a full, fun and rewarding life. Groupon helps local businesses grow and strengthen customer relationships––resulting in strong, vibrant communities. E-commerce never stands still, our transformation strategy, combined with our strong brand, customer base, and marketplace expertise, ensures we are constantly adapting to the evolving market landscape while delivering value for our customers and merchant partners. Groupon is on a radical journey to transform our business. To meet our aggressive goals we are in the process of building a culture that prioritises fast decisions, open communication, and relentless pursuit of results. In the spirit of transparency, things aren't perfect, there are still processes to change and bureaucracy to break so we need people who want to be on this journey with us. Check out our current opportunities with #TeamGroupon and join us on our exciting mission to become The Ultimate Destination For Local Experiences and Services.

IGT

IGT.com

IGT is a leading global provider of gaming, digital and financial technology solutions, formed through the combination of International Game Technology PLC’s Gaming & Digital Business and Everi Holdings Inc. IGT’s offering spans gaming machines, game content and systems, iGaming, sports betting, cash access, loyalty and player engagement solutions, enabling it to deliver integrated, customer-centric experiences across land-based and digital environments. Organized into Gaming, Digital and FinTech business units, IGT drives innovation, efficiency and value for casino, digital and hospitality operators worldwide. The company is headquartered in Las Vegas.

[24]7.ai

cb 247.ai

[24]7.ai™ customer engagement solutions use conversational artificial intelligence to understand customer intent, enabling companies to create personalized, predictive, and effortless customer experiences across all channels; attract and retain customers; boost agent productivity and satisfaction; and drive revenues while lowering costs. The world’s largest and most recognizable brands use [24]7.ai intent-driven technologies to serve several hundred million visitors through billions of conversations annually, most of which are automated. The result is an order of magnitude improvement in digital adoption, customer satisfaction, and revenue growth. For more information, visit: www.247.ai. [24]7.ai is based in Campbell, California. [24]7.ai is a registered trademark of 24/7 Customer, Inc.

Nielsen

cb nlsn.co

Nielsen shapes the world’s media and content as a global leader in audience insights, data and analytics. Through our understanding of people and their behaviors across all channels and platforms, we empower our clients with independent and actionable intelligence so they can connect and engage with their audiences—now and into the future. Nielsen operates around the world in more than 55 countries. Learn more at http://nlsn.co/6006JMfty and connect with us on social media (LinkedIn, Twitter, Facebook and Instagram).

Daraz

cb daraz.com

Founded in 2015, Daraz is the leading e-commerce platform in South Asia with operations in Pakistan, Bangladesh, Sri Lanka, Nepal, and Myanmar. It provides sellers and consumers with cutting-edge marketplace technology, targeting a rapidly growing region of over 500 million people. By building an integrated infrastructure covering e-commerce, logistics, payment and financial services, the company aims to deliver an immersive, personalized shopping experience and uplift South Asian communities through the power of commerce. Daraz has consistently invested in building an e-commerce ecosystem in South Asia through advancements in technology, logistics and digital payments. As digital penetration and consumer awareness have surged, the region is now ready for a transformative leap. Leveraging new-age advancements such as AI, Daraz is poised to further enhance the platform’s efficiency to enable a seamless experience for its consumers and sellers. Visit https://www.daraz.com/ to learn more.

Canva

canva.com

We're a global online visual communications platform on a mission to empower the world to design. Featuring a simple drag-and-drop user interface and a vast range of templates ranging from presentations, documents, websites, social media graphics, posters, apparel to videos, plus a huge library of fonts, stock photography, illustrations, video footage, and audio clips, anyone can take an idea and create something beautiful on Canva on any device, from anywhere in the world. Since our launch in 2013, we’ve had the crazy big goal of making design accessible to everyone. We were founded on the belief that people shouldn't need to understand complex software to unlock their creativity. We’re leveling the playing field and democratizing access to design and visual communication by empowering 100% of the world to communicate in a way that was once limited to the 1%. We've always had a deeper mission surrounding Canva — which we talk about as our 'simple' two-step plan: to build one of the world’s most valuable companies, and to do the most good we possibly can. We're committed to our core value of Being a Force for Good, so as the value of our company grows, so too does our ability to have a positive impact on the world.

Infor

infor.com

Infor is a global leader in business cloud software products for companies in industry specific markets. Infor builds complete industry suites in the cloud and efficiently deploys technology that puts the user experience first, leverages data science, and integrates easily into existing systems. Over 60,000 organizations worldwide rely on Infor to help overcome market disruptions and achieve business-wide digital transformation. Here are some key insights: • 60,000+ customers • 100+ offices • 1,700+ support experts • 2,000+ partners • 17,000+ employees • 175+ countries where customers are located • 15,000+ cloud customers • 40+ countries with Infor offices

Bolt

bolt.eu

At Bolt, we're building a future where people don’t need to own personal cars to move around safely and conveniently. A future where people have the freedom to use transport on demand, choosing whatever vehicle's best for each occasion — be it a car, scooter, or e-bike. We're helping over 200 million customers move around in more than 600 cities globally while also supporting more than 4.5 million drivers and couriers to earn a living. The best bit? We're only just getting started. Read more at bolt.eu

Loading…

NEWS

SourceForge CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 19, 2026 08:00 AM

Spin.AI Receives SourceForge Winter 2026 Top Performer Award Based on High Volume of Positive User Reviews

Palo Alto, California--(Newsfile Corp. - February 19, 2026) - Spin.AI, a leading SaaS security platform provider, announces it has been...

Read Article

December 27, 2025 08:00 AM

Spotify’s expropriation, a crypto wallet–targeting stealer, and other cybersecurity news

The week's key cybersecurity developments. 27.12.2025 ForkLog. We have gathered the week's most important cybersecurity news. Researchers found a new,...

Read Article

December 22, 2025 08:00 AM

Kaspersky flags malware posing as Roblox and GTAV mods to steal crypto data

Kaspersky has warned of a new malware that hides itself as video game mods and cheats for popular titles like Roblox and GTAV and targets...

Read Article

December 21, 2025 08:00 AM

Video game mods are spreading new ‘Stealka’ crypto infostealer: Kaspersky

New malware has been discovered that targets crypto wallets and browser extensions while disguising itself as game cheats and mods,...

Read Article

December 19, 2025 08:00 AM

New Malware Poses as Roblox Mods to Steal Crypto Credentials

In brief Cybersecurity experts at Kaspersky have discovered a new type of infostealer that has the ability to steal sensitive info from a...

Read Article

August 04, 2025 07:00 AM

cside Emerges as Go-To Defense Against the Fastest-Growing Threat to Web Security

Multiple cybersecurity honors and customer growth highlight cside's leadership in browser-side protection amid accelerating attacks...

Read Article

April 09, 2025 07:00 AM

Threat actors exploit SourceForge to spread fake Microsoft add-ins

Threat actors are exploiting SourceForge platform to spread counterfeit Microsoft add-ins that install malicious software on victims'...

Read Article

April 09, 2025 07:00 AM

Hackers Hide Malware in Fake Microsoft Office Add-Ons to Steal Crypto

Hackers have embedded malware in fake Microsoft Office add-ons on SourceForge, swapping victims' crypto wallet addresses with the attacker's...

Read Article

April 08, 2025 07:00 AM

Cryptocurrency Miner and Clipper Malware Spread via SourceForge Cracked Software Listings

Malware campaign via SourceForge and fake AI sites deploy miner, clipper, and RAT malware, impacting 4604 users in Russia.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-78122

SUMMARY

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.8

REFERENCES

CVE-2026-78049

SUMMARY

A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPC_NodeMgtHelperInternal_AddVariableNodeAttributes of the file src/ClientServer/address_space/internal/sopc_node_mgt_helper_internal.c of the component AddNodes Service. The manipulation of the argument UserAccessLevel leads to out-of-bounds read. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is aafbd37d381b618312ebdf5ddf57027f62c14fdd. It is suggested to install a patch to address this issue.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 3.7)

cvss2

Base Score: 2.6

Complexity: HIGH

AV:N/AC:H/Au:N/C:N/I:N/A:P

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 2.9

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-12999

SUMMARY

The Infineon Airoc Wi-Fi driver's transmit callback airoc_mgmt_send() in drivers/wifi/infineon/airoc_wifi.c allocates a net_buf from the fixed airoc_pool for every outbound packet. When whd_network_send_ethernet_data() returns a synchronous failure, the underlying WHD library does not take ownership of the buffer, but the pre-fix driver returned -EIO without releasing it. Each failed transmit therefore permanently leaks one buffer from the pool. airoc_pool is small and fixed (AIROC_WIFI_TX_PACKET_POOL_COUNT + AIROC_WIFI_RX_PACKET_POOL_COUNT, default 20 buffers) and is shared by WHD's whd_host_buffer_get callback for both transmit and receive. Once enough send failures have leaked the pool dry, airoc_wifi_host_buffer_get() returns WHD_BUFFER_ALLOC_FAIL for all subsequent allocations, so both transmit and the WHD-driven receive path fail and Wi-Fi connectivity is lost until the device is rebooted. The leak occurs only on the transmit error path. A Wi-Fi-adjacent attacker can influence the conditions that cause synchronous send failures (for example by deauthenticating/disassociating the station while the local stack continues to attempt transmits), and ordinary transient failures over the device's lifetime accumulate toward the same state. Reliable on-demand triggering is of high complexity and the impact is availability-only, but the resulting denial of service is permanent and non-recoverable without a reboot. The fix releases the buffer with airoc_wifi_buffer_release() on the failure branch, returning it to the pool. The commit also removes a redundant k_sem_give() in airoc_mgmt_disconnect(); because data->sema_common is a binary semaphore (limit 1) the duplicate give merely saturated at 1 and had no security impact.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

1.6

REFERENCES

CVE-2026-74733

SUMMARY

In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock Locking is disabled in the regmap config as this driver uses its own lock. This means that all calls to regmap functions (read or write) must hold the i2c_lock. The function pca953x_irq_bus_sync_unlock() did not do this, and it was therefore possible that multiple threads could cause an incorrect register to be read/written. A previous patch partly fixed this, but only protected the write to the interrupt mask register, and not the read from the direction register.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-74732

SUMMARY

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check for tg ops in dce110_set_avmute Some older DCE timing generators do not implement is_tg_enabled in their ops table. Calling it unconditionally when waiting for AV mute frames causes a NULL pointer dereference on Southern Islands dGPUs when turning the display off over HDMI. Check that tg and the required ops exist before waiting for frames. (cherry picked from commit 2686a0c0aaa07bec2e24131835cf27b5fd4935a5)

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

SourceForge Vendor Cyber Rating & Cyber Score

SourceForge A.I CyberSecurity Scoring

SourceForge CyberSecurity News & History

SourceForge Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for SourceForge

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types SourceForge vs Software Development Industry Avg (This Year)

Incident History - SourceForge (X = Date, Y = Severity)

SourceForge Subsidiaries

Parent Company

SourceForge

SourceForge Similar Companies

Groupon

IGT

[24]7.ai

Nielsen

Meta

Daraz

Canva

Infor

Bolt

SourceForge CyberSecurity News

Spin.AI Receives SourceForge Winter 2026 Top Performer Award Based on High Volume of Positive User Reviews

Spotify’s expropriation, a crypto wallet–targeting stealer, and other cybersecurity news

Kaspersky flags malware posing as Roblox and GTAV mods to steal crypto data

Video game mods are spreading new ‘Stealka’ crypto infostealer: Kaspersky

New Malware Poses as Roblox Mods to Steal Crypto Credentials

cside Emerges as Go-To Defense Against the Fastest-Growing Threat to Web Security

Threat actors exploit SourceForge to spread fake Microsoft add-ins

Hackers Hide Malware in Fake Microsoft Office Add-Ons to Steal Crypto

Cryptocurrency Miner and Clipper Malware Spread via SourceForge Cracked Software Listings

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

SourceForge CyberSecurity News & History

SourceForge Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for SourceForge

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types SourceForge vs Software Development Industry Avg (This Year)

Incident History - SourceForge (X = Date, Y = Severity)

SourceForge Subsidiaries

Parent Company

SourceForge

SourceForge Similar Companies

Groupon

IGT

[24]7.ai

Nielsen

Meta

Daraz

Canva

Infor

Bolt

SourceForge CyberSecurity News

Spin.AI Receives SourceForge Winter 2026 Top Performer Award Based on High Volume of Positive User Reviews

Spotify’s expropriation, a crypto wallet–targeting stealer, and other cybersecurity news

Kaspersky flags malware posing as Roblox and GTAV mods to steal crypto data

Video game mods are spreading new ‘Stealka’ crypto infostealer: Kaspersky

New Malware Poses as Roblox Mods to Steal Crypto Credentials

cside Emerges as Go-To Defense Against the Fastest-Growing Threat to Web Security

Threat actors exploit SourceForge to spread fake Microsoft add-ins

Hackers Hide Malware in Fake Microsoft Office Add-Ons to Steal Crypto

Cryptocurrency Miner and Clipper Malware Spread via SourceForge Cracked Software Listings

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?