What is the official website of Storm Reply ?

The official website of Storm Reply is http://www.reply.com/storm-reply/.

What is Storm Reply's cybersecurity risk score?

Storm Reply has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Storm Reply experienced?

According to Rankiteo, Storm Reply currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Storm Reply been affected by any supply chain cyber incidents ?

According to Rankiteo, Storm Reply has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Storm Reply have SOC 2 Type 1 certification ?

According to Rankiteo, Storm Reply is not certified under SOC 2 Type 1.

Does Storm Reply have SOC 2 Type 2 certification ?

According to Rankiteo, Storm Reply does not hold a SOC 2 Type 2 certification.

Does Storm Reply comply with GDPR ?

According to Rankiteo, Storm Reply is not listed as GDPR compliant.

Does Storm Reply have PCI DSS certification ?

According to Rankiteo, Storm Reply does not currently maintain PCI DSS compliance.

Does Storm Reply comply with HIPAA ?

According to Rankiteo, Storm Reply is not compliant with HIPAA regulations.

Does Storm Reply have ISO 27001 certification ?

According to Rankiteo,Storm Reply is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Storm Reply operate in ?

Storm Reply operates primarily in the IT Services and IT Consulting industry.

How many employees does Storm Reply have ?

Storm Reply employs approximately 434 people worldwide.

Does Storm Reply own any subsidiaries ?

Storm Reply presently has no subsidiaries across any sectors.

How many LinkedIn followers does Storm Reply have ?

Storm Reply's official LinkedIn profile has approximately 305,543 followers.

What is the NAICS classification code for Storm Reply ?

Storm Reply is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Storm Reply have a Crunchbase profile ?

No, Storm Reply does not have a profile on Crunchbase.

Does Storm Reply have a LinkedIn profile ?

Yes, Storm Reply maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/storm-reply.

How many cybersecurity incidents has Storm Reply experienced ?

As of October 18, 2026, Rankiteo reports that Storm Reply has not experienced any cybersecurity incidents.

How many peer or competitor companies does Storm Reply have ?

Storm Reply has an estimated 41,920 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Storm Reply

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

Storm Reply Vendor Cyber Rating & Cyber Score

reply.com

Add Your Compliance Badge

Storm Reply is a global AWS Premier Consulting Partner and a specialist for professional cloud computing services in the Reply network. Storm Reply holds comprehensive technical expertise on the most relevant enablers of digital transformation including Cloud, Big Data, IoT, and Cybersecurity - addressed by a clear understanding of the business factors. Having consolidated experience and certifications in Cloud IaaS, SaaS, and PaaS architectures, Storm Reply provides end-to-end services for Cloud adoption: - Cloud Strategy, Advisory and Migration - Public, Private & Hybrid Cloud Architectures Design & Deployment - Cloud Native Software Development - Cloud Security Fully Managed Operations 24x7 - ROI & TCO

Storm Reply

Storm Reply CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Storm Reply Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Storm Reply

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Storm Reply in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Storm Reply in 2026.

Incident Types Storm Reply vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Storm Reply in 2026.

Incident History - Storm Reply (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Storm Reply Subsidiaries

Storm Reply

IT Services and IT Consulting

Website: http://www.reply.com/storm-reply/

Company Size: 434

124

ReplyIT Services and IT Consulting

Open Reply ITIT Services and IT Consulting

Concept Reply GmbHInformation Technology & Services

AIM ReplyIT Services and IT Consulting

Sense ReplyIT Services and IT Consulting

Airwalk ReplyIT Services and IT Consulting

Sprint Reply ITInformation Technology & Services

Blue Reply ITIT Services and IT Consulting

Concept Reply USInformation Technology & Services

Solidsoft ReplyIT Services and IT Consulting

Logistics Reply UKSoftware Development

Roboverse Reply DEIT Services and IT Consulting

Business Elements ReplyIT Services and IT Consulting

Life At ReplyIT Services and IT Consulting

Avantage ReplyFinancial Services

IFRS 9Financial Services

Compliance and Conduct RiskFinancial Services

CLUSTER REPLYIT Services and IT Consulting

BitmamaAdvertising Services

Xister ReplyAdvertising Services

Nexi DigitalFinancial Services

Valorem ReplyIT Services and IT Consulting

Valorem Reply - Technology Industry SolutionsIT Services and IT Consulting

Lynx RecruitmentStaffing and Recruiting

Wemanity MarocIT Services and IT Consulting

Syskoplan Reply USIT Services and IT Consulting

Threepipe ReplyAdvertising Services

Cloud9 ReplyIT Services and IT Consulting

WM ReplyIT Services and IT Consulting

Technology ReplySoftware Development

Mansion House ConsultingBusiness Consulting and Services

Wemanity BelgiumInformation Technology & Services

Net ReplyIT Services and IT Consulting

Go ReplyIT Services and IT Consulting

Concept Engineering ReplyIT Services and IT Consulting

Machine Learning Reply GmbHIT Services and IT Consulting

ATLAS REPLYIT Services and IT Consulting

Cluster Reply DEIT Services and IT Consulting

TD ReplyBusiness Consulting and Services

Sytel ReplyIT Services and IT Consulting

Whitehall ReplyIT Services and IT Consulting

Data Reply FRInformation Technology & Services

Connect ReplyIT Services and IT Consulting

Laife ReplyInformation Technology & Services

Business ReplySoftware Development

Comsysto Reply GmbHIT Services and IT Consulting

Aktive ReplyInformation Technology & Services

ARLANIS REPLY ITIT Services and IT Consulting

Canvas ReplyIT Services and IT Consulting

Graymatter ReplyAdvertising Services

Graymatter REPLY DigitalAdvertising Services

Light ReplyIT Services and IT Consulting

Triplesense ReplyTechnology, Information and Internet

Syskoplan Reply DACHInformation Technology & Services

Logistics Reply DESoftware Development

4brands ReplyInformation Technology & Services

Pay ReplyInformation Technology & Services

Technology Reply RomaniaIT Services and IT Consulting

Blue Reply DEIT Services and IT Consulting

Shield ReplyIT Services and IT Consulting

Autonomous Reply FRIT Services and IT Consulting

Accelerator 365 by ReplySoftware Development

Cortex Reply DEIT Services and IT Consulting

Cortex Reply UKTechnology, Information and Internet

Spike Reply LuxembourgIT Services and IT Consulting

Liquid ReplyIT Services and IT Consulting

Fincon Reply GmbHInformation Services

Sprint Reply DEIT Services and IT Consulting

Spike ReplyIT Services and IT Consulting

Communication Valley ReplyComputer and Network Security

Spur ReplyBusiness Consulting and Services

KI ReplyInformation Technology & Services

Sprint Reply BEIT Services and IT Consulting

Concept Quality ReplyIT Services and IT Consulting

Core ReplyInformation Technology & Services

Starbytes.itInformation Technology & Services

Comwrap Reply DACHTechnology, Information and Internet

Reply ChallengesFornitori di e-learning

Target ReplyData Infrastructure and Analytics

Data Reply ITIT Services and IT Consulting

Wemanity NetherlandsProfessional Training and Coaching

Blockchain ReplyIT Services and IT Consulting

Data Reply DEInformation Technology & Services

Leadvise ReplyBusiness Consulting and Services

Digital Transformation der Regulatory AffairsUnternehmensberatung

Data Reply UKIT Services and IT Consulting

Logistics Reply USSoftware Development

Infinity Reply ITIT Services and IT Consulting

Storm Reply DEIT Services and IT Consulting

Like ReplyAdvertising Services

Target Reply RomeIT Services and IT Consulting

Wemanity Learning CenterDéveloppement professionnel et coaching

HERMES REPLYInformation Technology & Services

Open Reply UKInformation Technology & Services

Sytel Reply NorthInformation Technology & Services

Machine Learning ReplyIT Services and IT Consulting

Open ReplyInformation Technology & Services

ARLANIS REPLYIT Services and IT Consulting

Up ReplyIT Services and IT Consulting

Glue ReplyIT Services and IT Consulting

Red Reply DEIT Services and IT Consulting

Live Reply ItalyIT Services and IT Consulting

Neo ReplyIT Services and IT Consulting

Net Reply UKIT Services and IT Consulting

Live Reply DEIT Services and IT Consulting

Brick Reply | IT Solutions and Services for ManufacturingSoftware Development

Storm Reply, Inc.Professional Services

e*finance consulting ReplyFinancial Services

Air ReplyIT Services and IT Consulting

Eos ReplyIT Services and IT Consulting

Spike Reply UKTechnology, Information and Internet

Infinity Reply DEIT Services and IT Consulting

Open Reply Benelux - FranceBusiness Consulting and Services

Zest ReplyIT Services and IT Consulting

Arlanis Reply UKIT Services and IT Consulting

Sprint Reply UKIT Services and IT Consulting

Macros Reply GmbHIT Services and IT Consulting

Cluster Reply PLIT Services and IT Consulting

Atomic ReplyBusiness Consulting and Services

Industrie Reply USMotor Vehicle Manufacturing

Alpha ReplyIT Services and IT Consulting

Nimbus ReplyIT Services and IT Consulting

Affinity ReplyIT Services and IT Consulting

Ki Reply UKIT Services and IT Consulting

Loading…

Storm Reply Similar Companies

CACI International Inc

cb caci.com

At CACI International Inc (NYSE: CACI), our 25,000 talented and dynamic employees are ever vigilant in delivering distinctive expertise and technology to meet our customers’ greatest challenges in national security. We are a company of good character, relentless innovation, and long-standing excellence. Our culture drives our success and earns us recognition as a Fortune World's Most Admired Company. CACI is a member of the Fortune 500™ Largest Companies, the Russell 1000 Index, and the S&P MidCap 400 Index. For more information, visit us at www.caci.com. CACI is an Equal Opportunity Employer - Females/Minorities/Protected Veterans/Individuals with Disabilities

inDrive

cb inDrive.com

inDrive is a global mobility and urban services platform. The inDrive app has been downloaded over 400 million times, and has been the second most downloaded mobility app for the third consecutive year. In addition to ride-hailing, inDrive provides an expanding list of urban services, including intercity transportation and delivery. In 2023, inDrive launched New Ventures, a venture and M&A arm. inDrive operates in 1065 cities in 48 countries. Driven by its mission of challenging social injustice, the company is committed to having a positive impact on the lives of one billion people by 2030. It pursues this goal both through its core business, which supports local communities via a fair pricing model; and through the work of inVision, its non-profit arm. inVision’s community empowerment programs help to advance education, sports, arts and sciences, gender equality and other vital initiatives. For more information visit www.inDrive.com

AlmavivA Experience

almavivaexperience.com.br

Líder em transformação digital nos mercados de Customer Experience e Debt Collection na América Latina. Combinamos tecnologia, inteligência e excelência operacional para entregar soluções completas que antecipam as necessidades dos nossos Clientes. São mais de 530 milhões de interações anuais, metade em canais digitais, para um portfólio de 60+ clientes. Siga-nos e acompanhe como transformamos experiências em resultados.

SoftServe

softserveinc.com

SoftServe is a premier IT consulting and digital services provider. We expand the horizon of new technologies to solve today's complex business challenges and achieve meaningful outcomes for our clients. Our boundless curiosity drives us to explore and reimagine the art of the possible. Clients confidently rely on SoftServe to architect and execute mature and innovative capabilities, such as digital engineering, data and analytics, cloud, and AI/ML. Our global reputation is gained from more than 30 years of experience delivering superior digital solutions at exceptional speed by top-tier engineering talent to enterprise industries, including high tech, financial services, healthcare, life sciences, retail, energy, and manufacturing. At SoftServe, we live by our values. Trust, teamwork, growth, innovation, willingness to help, and exceeding expectations are engrained in everything we do. We partner with major technology players, such as Google Cloud Platform, Amazon Web Services, Microsoft Azure, Salesforce, NVIDIA, MuleSoft, VMware, and Odoo, to give clients a competitive advantage in the market. Founded in 1993, our global firm is headquartered in Austin, Texas, USA, and Lviv, Ukraine. Visit our website, blog, media, and news pages for more information. Blog: softserveinc.com/blog Media: softserveinc.com/media News: softserveinc.com/news

Minsait

minsait.com

We are one of the world's leading consultancies in technological services for companies and the public sector. With headquarters in Spain and presence in more than 100 countries, we combine experience in AI, data, cloud and cybersecurity to help companies and organizations generate a positive impact on society. Tech for impact #Minsait

Cognizant

cognizant.ai

Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value. We build full-stack AI solutions powered by deep industry, process and engineering expertise — embedding an organization's unique context into technology systems that amplify human potential and drive tangible outcomes. From strategy to deployment, we help global enterprises move from AI ambition to AI impact and stay ahead in a fast-changing world. See how at cognizant.ai | Follow us @cognizant

Mastercard

mastercard.com

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re building a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Globant

cb globant.link

At Globant, we create the digitally-native products that people love. We bridge the gap between businesses and consumers through technology and creativity, leveraging our experience as an AI powerhouse. We dare to digitally transform organizations and strive to delight their customers. - We have more than 30,000 employees and are present in 33 countries across 5 continents, working for companies like Google, Electronic Arts, and Santander, among others. - We were named a Worldwide Leader in AI Services (2023) and a Worldwide Leader in CX Improvement Services (2020) by IDC MarketScape report. - We are the fastest-growing IT brand and the 5th strongest IT brand globally (2024), according to Brand Finance. - We were featured as a business case study at Harvard, MIT, and Stanford. - We are active members of The Green Software Foundation (GSF) and the Cybersecurity Tech Accord. For more information, visit https://bit.ly/globant_com Follow us: http://www.twitter.com/globant http://www.youtube.com/Globant http://www.facebook.com/Globant https://instagram.com/Globant https://www.tiktok.com/@globant

LTIMindtree

ltimindtree.com

LTIMindtree is a global technology consulting and digital solutions company that partners with enterprises across industries to reimagine business models, accelerate innovation, and drive AI-centric growth. Trusted by more than 700 clients worldwide, we use advanced technologies to enable operational excellence, elevated customer experiences, and long-term value creation. With a workforce of more than 86,000 talented and entrepreneurial professionals across over 40 countries, LTIMindtree — a Larsen & Toubro Group company — is dedicated to solving complex business challenges and delivering transformation at scale. LTIMindtree is proud to be an equal opportunity employer. We are committed to providing equal employment opportunities regardless of race, ethnicity, nationality, gender, gender identity, gender expression, language, age, sexual orientation, religion, marital status, veteran status, socio-economic status, disability, or any other characteristic protected by applicable law. Please note that neither LTIMindtree nor any of its authorized recruitment agencies/partners charge candidates any registration fees or other fees for appearing in interviews or securing employment/internships. Candidates are solely responsible for verifying the credentials of any agency or consultant claiming to work with LTIMindtree for recruitment purposes. Please note that anyone relying on representations made by fraudulent employment agencies/consultant does so at their own risk. LTIMindtree disclaims any liability for loss or damage suffered as a result of such actions. For more info, please visit www.ltimindtree.com.

Loading…

NEWS

Storm Reply CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 09, 2025 10:04 AM

Reply Achieves the AWS Agentic AI Specialization and Is Named an Implementation Partner for Amazon Bedrock AgentCore

TURIN, Italy–(BUSINESS WIRE)–Reply [EXM, STAR: REY] announced that it has achieved the Amazon Web Services (AWS) Agentic AI Specialization,...

Read Article

October 30, 2025 02:46 PM

Frank Reply at the Service & Sales Summit 2025

Meet Frank Reply at the Service Summit 2025 in Hamburg at Booth SE09, showcasing how conversational AI, voice, and chatbot solutions can optimize customer...

Read Article

October 17, 2025 09:44 PM

Storm Reply at the ecoCompute Conference 2025

At the ecoCompute Conference 2025 at bUm Berlin, Storm Reply will show how AI can be made more efficient and sustainable in its workshop “How to start with...

Read Article

October 01, 2025 03:52 PM

Breakfast Briefing: Ransomware, Resilience and Reality

Ransomware is evolving. Are your recovery plans keeping up? Join industry leaders for a strategic breakfast on attacks and resilience.

Read Article

September 30, 2025 07:00 AM

Smart Country Convention (SCCON) 2025

The Smart Country Convention 2025 will take place in Berlin from September 30 to October 2. Go Reply, Arlanis Reply, and Frank Reply will...

Read Article

September 16, 2025 07:00 AM

Reply Achieves the AWS Advertising and Marketing Technology Competency Thanks to the Contribution of the Data Reply and Storm Reply Teams

TURIN, Italy, September 16, 2025--Reply [EXM, STAR: REY] has achieved the AWS Advertising and Marketing Technology Competency, the official...

Read Article

June 03, 2025 08:02 AM

Devbot: Audi’s intelligent multi-agent system for smarter and safer cloud use

Developed by Audi and Storm Reply, devbot is an advanced Agentic AI solution that intelligently optimizes Audi's cloud infrastructure – quickly, securely,...

Read Article

April 16, 2025 03:10 AM

AWS Deep Dive Days – Generative AI 2025

Storm Reply and Data Reply will be present at the AWS Deep Dive Days - Generative AI in Munich on April 29, 2025. Visit us on site and discover practical...

Read Article

March 21, 2025 07:00 AM

NASA email storm strikes space agencies worldwide

An insecure email distribution list accidentally spamming space agencies across the planet is undoubtedly one for the record books.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-111865

SUMMARY

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kpt_shape results in improper neutralization of directives in dynamically evaluated code. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-111934

SUMMARY

Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts the leftmost, client-supplied X-Forwarded-For value instead of the client IP appended by a reverse proxy. Attackers can send forged X-Forwarded-For values through appending proxies to bypass per-IP rate limits on login, one-time passcode, and password validation endpoints, enabling brute-force attacks, and to falsify IP addresses recorded in audit logs.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-111933

SUMMARY

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration vulnerability because userpassword.Compare() substitutes a placeholder hash derived from the string "hunter2" when a stored password hash is empty. Unauthenticated attackers can submit logins with the password "hunter2" and distinguish HTTP 403 from 401 responses to enumerate valid accounts and reveal the authentication provider of SSO-only users.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 6.3

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-111932

SUMMARY

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML injection vulnerability because the ApplicationName and LogoURL appearance settings are rendered into HTML output without sufficient escaping. Attackers with the Owner role can store HTML markup in these settings that renders in the Coder dashboard and in SMTP notification emails sent to other deployment users.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 3.4)

cvss3

Base Score: 3.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

1.7

REFERENCES

CVE-2026-111931

SUMMARY

Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to redirect users externally via unsanitized r.URL.Path values. Attackers can craft links on trusted workspace app subdomains with paths beginning with double slashes, which become scheme-relative redirects to attacker sites for phishing.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Storm Reply Vendor Cyber Rating & Cyber Score

Storm Reply A.I CyberSecurity Scoring

Storm Reply CyberSecurity News & History

Storm Reply Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Storm Reply

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Storm Reply vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - Storm Reply (X = Date, Y = Severity)

Storm Reply Subsidiaries

Storm Reply

Storm Reply Similar Companies

CACI International Inc

inDrive

AlmavivA Experience

SoftServe

Minsait

Cognizant

Mastercard

Globant

LTIMindtree

Storm Reply CyberSecurity News

Reply Achieves the AWS Agentic AI Specialization and Is Named an Implementation Partner for Amazon Bedrock AgentCore

Frank Reply at the Service & Sales Summit 2025

Storm Reply at the ecoCompute Conference 2025

Breakfast Briefing: Ransomware, Resilience and Reality

Smart Country Convention (SCCON) 2025

Reply Achieves the AWS Advertising and Marketing Technology Competency Thanks to the Contribution of the Data Reply and Storm Reply Teams

Devbot: Audi’s intelligent multi-agent system for smarter and safer cloud use

AWS Deep Dive Days – Generative AI 2025

NASA email storm strikes space agencies worldwide

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Storm Reply CyberSecurity News & History

Storm Reply Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Storm Reply

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Storm Reply vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - Storm Reply (X = Date, Y = Severity)

Storm Reply Subsidiaries

Storm Reply

Storm Reply Similar Companies

CACI International Inc

inDrive

AlmavivA Experience

SoftServe

Minsait

Cognizant

Mastercard

Globant

LTIMindtree

Storm Reply CyberSecurity News

Reply Achieves the AWS Agentic AI Specialization and Is Named an Implementation Partner for Amazon Bedrock AgentCore

Frank Reply at the Service & Sales Summit 2025

Storm Reply at the ecoCompute Conference 2025

Breakfast Briefing: Ransomware, Resilience and Reality

Smart Country Convention (SCCON) 2025

Reply Achieves the AWS Advertising and Marketing Technology Competency Thanks to the Contribution of the Data Reply and Storm Reply Teams

Devbot: Audi’s intelligent multi-agent system for smarter and safer cloud use

AWS Deep Dive Days – Generative AI 2025

NASA email storm strikes space agencies worldwide

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo