What is the official website of Python Software Foundation ?

The official website of Python Software Foundation is https://www.python.org/psf/.

What is Python Software Foundation's cybersecurity risk score?

Python Software Foundation has an AI-generated cybersecurity risk score of 722 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Python Software Foundation experienced?

According to Rankiteo, Python Software Foundation currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Python Software Foundation been affected by any supply chain cyber incidents ?

According to Rankiteo, Python Software Foundation has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: GitHub Security Lab (Incident ID: STRGITTHE1773750273) Python Software Foundation (Incident ID: THEPYT1782476902)

Does Python Software Foundation have SOC 2 Type 1 certification ?

According to Rankiteo, Python Software Foundation is not certified under SOC 2 Type 1.

Does Python Software Foundation have SOC 2 Type 2 certification ?

According to Rankiteo, Python Software Foundation does not hold a SOC 2 Type 2 certification.

Does Python Software Foundation comply with GDPR ?

According to Rankiteo, Python Software Foundation is not listed as GDPR compliant.

Does Python Software Foundation have PCI DSS certification ?

According to Rankiteo, Python Software Foundation does not currently maintain PCI DSS compliance.

Does Python Software Foundation comply with HIPAA ?

According to Rankiteo, Python Software Foundation is not compliant with HIPAA regulations.

Does Python Software Foundation have ISO 27001 certification ?

According to Rankiteo,Python Software Foundation is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Python Software Foundation operate in ?

Python Software Foundation operates primarily in the Software Development industry.

How many employees does Python Software Foundation have ?

Python Software Foundation employs approximately 870 people worldwide.

Does Python Software Foundation own any subsidiaries ?

Python Software Foundation presently has no subsidiaries across any sectors.

How many LinkedIn followers does Python Software Foundation have ?

Python Software Foundation's official LinkedIn profile has approximately 157,833 followers.

What is the NAICS classification code for Python Software Foundation ?

Python Software Foundation is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Python Software Foundation have a Crunchbase profile ?

No, Python Software Foundation does not have a profile on Crunchbase.

Does Python Software Foundation have a LinkedIn profile ?

Yes, Python Software Foundation maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/thepsf.

How many cybersecurity incidents has Python Software Foundation experienced ?

As of August 10, 2026, Rankiteo reports that Python Software Foundation has experienced 5 cybersecurity incidents.

How many peer or competitor companies does Python Software Foundation have ?

Python Software Foundation has an estimated 30,585 peer or competitor companies worldwide.

What types of cybersecurity incidents has Python Software Foundation faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

PSF

Boost Score +25 with badge (5 left)

722

/1000

Moderate

747

/1000

Moderate

Python Software Foundation Vendor Cyber Rating & Cyber Score

python.org

Add Your Compliance Badge

The Python Software Foundation (PSF) is a 501(c)(3) non-profit corporation that holds the intellectual property rights behind the Python programming language. We manage the open source licensing for Python version 2.1 and later and own and protect the trademarks associated with Python. We also run the North American PyCon conference annually, support other Python conferences around the world, and fund Python related development with our grants program and by funding special projects.

PSF A.I CyberSecurity Scoring

Scoring History

PSF

Python Software Foundation CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Python Software Fou...

Vulnerability

100

6/2026

THECLOGOOTHE178...

Python Software Fou...

Vulnerability

4/2026

THE1777019202

Python Software Fou...

Cyber Attack

3/2026

GitHub Security...

STRGITTHE177375...

Python Software Fou...

Vulnerability

100

2/2026

Python Software...

THEPYT178247690...

Python Software Fou...

Cyber Attack

8/2023

THE349263409182...

Loading…

A.I.

PSF Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for PSF

Incidents vs Software Development Industry Avg (This Year)

Python Software Foundation has 280.95% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Python Software Foundation has 288.35% more incidents than the average of all companies with at least one recorded incident.

Incident Types PSF vs Software Development Industry Avg (This Year)

Python Software Foundation reported 4 incidents this year: 1 cyber attacks, 0 ransomware, 3 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - PSF (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Python Software Foundation Subsidiaries

Parent Company

PSF

Software Development

Website: https://www.python.org/psf/

Company Size: 2-10 employees

No subsidiary data available for this company.

Loading…

Python Software Foundation Similar Companies

NiCE

nice.com

NiCE is transforming the world with AI that puts people first. Our purpose-built AI-powered platforms automate engagements into proactive, safe, intelligent actions, empowering individuals and organizations to innovate and act, from interaction to resolution. Trusted by organizations throughout 150+ countries worldwide, NiCE’s platforms are widely adopted across industries connecting people, systems, and workflows to work smarter at scale, elevating performance across the organization, delivering proven measurable outcomes.

Instagram

instagram.com

More than one billion people around the world use Instagram, and we’re proud to be bringing them closer to the people and things they love. Instagram inspires people to see the world differently, discover new interests, and express themselves. Since launching in 2010, our community has grown at a rapid pace. Our teams are growing fast, too, and we’re looking for talent across engineering, product management, design, research, analytics, technical program management, operations, and more. In addition to our headquarters in Menlo Park, we have thriving offices in New York City and San Francisco where teams are doing impactful work every day.

Siemens Digital Industries Software

siemens.com

We help organizations of all sizes digitally transform using software, hardware and services from the Siemens Xcelerator business platform. Our software and the comprehensive digital twin enable companies to optimize their design, engineering and manufacturing processes to turn today's ideas into the sustainable products of the future. From chips to entire systems, from product to process, across all industries. We help transform the everyday as part of @Siemens, To learn more, visit http://sw.siemens.com.

Airbnb

airbnb.com

Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays, experiences and services that make it possible for guests to connect with communities in a more authentic way.

Xiaomi Technology

mi.com

Xiaomi Corporation was founded in April 2010 and listed on the Main Board of the Hong Kong Stock Exchange on July 9, 2018 (1810.HK). Xiaomi is a consumer electronics and smart manufacturing company with smartphones and smart hardware connected by an IoT platform at its core. Embracing our vision of “Make friends with users and be the coolest company in the users’ hearts”, Xiaomi continuously pursues innovations, high-quality user experience and operational efficiency. The company relentlessly builds amazing products with honest prices to let everyone in the world enjoy a better life through innovative technology. Xiaomi is one of the world's leading smartphone companies. In December 2025, global monthly active users ( "MAU") reached 754.1 million. The company has also established the world’s leading consumer AIoT (AI+IoT) platform, reached 1079.2 million smart devices connected to its platform (excluding smartphones, laptops and tablets) as of December 31, 2025. Xiaomi products are present in more than 100 countries and regions around the world. In July 2025, Xiaomi was included in the Fortune Global 500 list for the seventh year in a row. Xiaomi is a constituent of the Hang Seng Index, Hang Seng China Enterprises Index, Hang Seng TECH Index and Hang Seng China 50 Index.

Cox Automotive Inc.

coxautoinc.com

Cox Automotive is the world’s largest automotive services and technology provider. Fueled by the largest breadth of first-party data fed by 2.3 billion online interactions a year, Cox Automotive tailors leading solutions for car shoppers, auto manufacturers, dealers, lenders and fleets. The company has 29,000+ employees on five continents and a portfolio of industry-leading brands that include Autotrader®, Kelley Blue Book®, Manheim®, vAuto®, Dealertrack®, NextGear Capital™, CentralDispatch® and FleetNet America®. Cox Automotive is a subsidiary of Cox Enterprises Inc., a privately-owned, Atlanta-based company with $22 billion in annual revenue.

Zoho

zoho.com

Zoho offers beautifully smart software to help you grow your business. With over 100 million users worldwide, Zoho's 55+ products aid your sales and marketing, support and collaboration, finance, and recruitment needs—letting you focus only on your business. Zoho respects user privacy and does not have an ad-revenue model in any part of its business, including its free products. Zoho Corporation is privately held and profitable, with its headquarters in Chennai, India, and offices across the globe.

Intuit

intuit.com

Intuit is a global technology platform that helps our customers and communities overcome their most important financial challenges. Serving millions of customers worldwide with TurboTax, QuickBooks, Credit Karma and Mailchimp, we believe that everyone should have the opportunity to prosper and we work tirelessly to find new, innovative ways to deliver on this belief. We encourage conversations on this page and will not delete comments that follow our terms of use. In order to keep this a safe community, the below posts may be removed: Repeated posts of the same content, spam or posts from fake accounts or profiles, offensive language or material, threats to others in the community, posts deliberately aimed to have a negative effect on the community or conversations.

Nielsen

cb nlsn.co

Nielsen shapes the world’s media and content as a global leader in audience insights, data and analytics. Through our understanding of people and their behaviors across all channels and platforms, we empower our clients with independent and actionable intelligence so they can connect and engage with their audiences—now and into the future. Nielsen operates around the world in more than 55 countries. Learn more at http://nlsn.co/6006JMfty and connect with us on social media (LinkedIn, Twitter, Facebook and Instagram).

Loading…

NEWS

Python Software Foundation CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 05, 2026 08:00 AM

A Comprehensive Python Tutorial for Beginners

This comprehensive Python tutorial covers the basics and advanced topics, including attributes, object-oriented programming (OOP), scripting, threading, and...

Read Article

February 18, 2026 08:00 AM

Cyber Security vs. Data Science: Which Career is Best for You?

TL;DR: Cybersecurity focuses on defending systems, data, and infrastructure from attacks, while data science uses statistics and machine...

Read Article

February 03, 2026 03:28 PM

Q&A: How Can Trust be Built in Open Source Security?

Christopher “Crob” Robinson, Chief Technology Officer and Chief Security Architect at the Open Source Security Foundation (OpenSSF),...

Read Article

February 03, 2026 08:00 AM

Critical Django Vulnerabilities Enables DoS and SQl injection Attacks

The Django Software Foundation has issued emergency security patches addressing six critical vulnerabilities affecting multiple versions of...

Read Article

January 18, 2026 08:00 AM

Week in review: PoC for FortiSIEM flaw released, Rakuten Viber CISO/CTO on messaging risks

Here's an overview of some of last week's most interesting news, articles, interviews and videos: What security teams can learn from torrent...

Read Article

January 14, 2026 08:00 AM

Anthropic backs Python Software Foundation security work with $1.5 million

Anthropic has signed a two-year partnership with the Python Software Foundation (PSF), committing a total of $1.5 million.

Read Article

January 14, 2026 08:00 AM

Anthropic invests $1.5 million in Python Software Foundation for ecosystem security | brief | SC Media

As reported by The Register, the Python Software Foundation (PSF) has received a significant financial boost of $1.5 million from AI company...

Read Article

January 14, 2026 08:00 AM

Anthropic finds $1.5 million to help Python Foundation improve security

The Python Software Foundation (PSF) has an extra $1.5 million heading its way, after AI upstart Anthropic entered into a partnership aimed...

Read Article

January 09, 2026 08:00 AM

Top 10 AI certifications and courses for 2026

As AI adoption accelerates, AI certifications and courses are surging. Explore 10 programs designed to deepen your knowledge in this...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…