What is the official website of Vercel ?

The official website of Vercel is https://vercel.com.

What is Vercel's cybersecurity risk score?

Vercel has an AI-generated cybersecurity risk score of 437 out of 1000, indicating a Critical security posture according to Rankiteo's assessment.

How many security incidents has Vercel experienced?

According to Rankiteo, Vercel currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Vercel been affected by any supply chain cyber incidents ?

According to Rankiteo, Vercel has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Google (Incident ID: CANADOGOONETVER1777660893) Instructure (Incident ID: MCGVERHARUDE1777034314) The Context Company (Incident ID: THEVER1776690400) Vercel (Incident ID: VER1776623025) Vercel (Incident ID: AMAVERGITSTR1775204764) Vercel (Incident ID: DROVER1770065567) The Context Company (Incident ID: VER1776772360)

Does Vercel have SOC 2 Type 1 certification ?

According to Rankiteo, Vercel is not certified under SOC 2 Type 1.

Does Vercel have SOC 2 Type 2 certification ?

According to Rankiteo, Vercel does not hold a SOC 2 Type 2 certification.

Does Vercel comply with GDPR ?

According to Rankiteo, Vercel is not listed as GDPR compliant.

Does Vercel have PCI DSS certification ?

According to Rankiteo, Vercel does not currently maintain PCI DSS compliance.

Does Vercel comply with HIPAA ?

According to Rankiteo, Vercel is not compliant with HIPAA regulations.

Does Vercel have ISO 27001 certification ?

According to Rankiteo,Vercel is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Vercel operate in ?

Vercel operates primarily in the Software Development industry.

How many employees does Vercel have ?

Vercel employs approximately 873 people worldwide.

Does Vercel own any subsidiaries ?

Vercel presently has no subsidiaries across any sectors.

How many LinkedIn followers does Vercel have ?

Vercel's official LinkedIn profile has approximately 200,744 followers.

What is the NAICS classification code for Vercel ?

Vercel is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Vercel have a Crunchbase profile ?

No, Vercel does not have a profile on Crunchbase.

Does Vercel have a LinkedIn profile ?

Yes, Vercel maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/vercel.

How many cybersecurity incidents has Vercel experienced ?

As of July 8, 2026, Rankiteo reports that Vercel has experienced 8 cybersecurity incidents.

How many peer or competitor companies does Vercel have ?

Vercel has an estimated 30,274 peer or competitor companies worldwide.

What types of cybersecurity incidents has Vercel faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability, Breach and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Vercel

Boost Score +25 with badge (5 left)

437

/1000

Critical

462

/1000

Critical

Vercel Vendor Cyber Rating & Cyber Score

vercel.com

Add Your Compliance Badge

Vercel provides the developer tools and cloud infrastructure to build, scale, and secure a faster, more personalized web. Customers like Under Armour, Nintendo, The Washington Post, and Zapier use Vercel to build dynamic user experiences on the web.

Vercel A.I CyberSecurity Scoring

Scoring History

Vercel

Vercel CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Vercel

Cyber Attack

5/2026

Google

CANADOGOONETVER...

Vercel

Breach

100

4/2026

Instructure

MCGVERHARUDE177...

Vercel

Breach

4/2026

The Context Com...

THEVER177669040...

Vercel

Breach

4/2026

Vercel

VER1776623025

Vercel

Cyber Attack

4/2026

Vercel

AMAVERGITSTR177...

Vercel

Cyber Attack

2/2026

Vercel

DROVER177006556...

Vercel

Vulnerability

5/2025

NETVERDLITHE178...

Vercel

Breach

1/2025

The Context Com...

VER1776772360

Loading…

A.I.

Vercel Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Vercel

Incidents vs Software Development Industry Avg (This Year)

Vercel has 460.75% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Vercel has 466.04% more incidents than the average of all companies with at least one recorded incident.

Incident Types Vercel vs Software Development Industry Avg (This Year)

Vercel reported 6 incidents this year: 3 cyber attacks, 0 ransomware, 0 vulnerabilities, 3 data breaches, compared to industry peers with at least 1 incident.

Incident History - Vercel (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Vercel Subsidiaries

Vercel

Software Development

Website: https://vercel.com

Company Size: 501-1,000 employees

AI SDKSoftware Development

v0 by VercelSoftware Development

TurborepoSoftware Development

Next.jsSoftware Development

Loading…

Vercel Similar Companies

PedidosYa

pedidosya.com

We’re the delivery market leader in Latin America. Our platform connects over 77.000 restaurants, supermarkets, pharmacies and stores with millions of users. Nowadays we operate in more than 500 cities in Latinamerica. And we are now over 3.400 employees. PedidosYa is available for iOS, Android and Windows Phone operating systems and downloads are now over 20 million.

Thomson Reuters

tr.com

Thomson Reuters (TSX/NDAQ: TRI) informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions. We serve professionals across legal, tax, accounting, compliance, government, and media. Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency. Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news. For more information on Thomson Reuters, visit tr.com and for the latest world news, reuters.com.

KPIT

kpit.com

About KPIT KPIT is reimagining the future of mobility, forging ahead with group companies and partners to shape a world that is cleaner, smarter, and safer. With over 25 years of specialized expertise in Mobility, KPIT is accelerating the transformation towards Software and AI-Defined Vehicles through its advanced solutions, platforms, and products—propelled by mobility-infused AI frameworks, software craftsmanship, and systems integration mastery. Vision in Motion Fueled by 2000+ vehicle production programs and powering 20+ million vehicles on the road with KPIT software, our experience in unmatched. At the same time, we push boundaries, developing solutions that enable Mobility OEMs to innovate at speed and scale. For more details, visit www.kpit.com

Amazon

cb aboutamazon.com

Amazon is guided by four principles: customer obsession rather than competitor focus, passion for invention, commitment to operational excellence, and long-term thinking. We are driven by the excitement of building technologies, inventing products, and providing services that change lives. We embrace new ways of doing things, make decisions quickly, and are not afraid to fail. We have the scope and capabilities of a large company, and the spirit and heart of a small one. Together, Amazonians research and develop new technologies from Amazon Web Services to Alexa on behalf of our customers: shoppers, sellers, content creators, and developers around the world. Our mission is to be Earth's most customer-centric company. Our actions, goals, projects, programs, and inventions begin and end with the customer top of mind. You'll also hear us say that at Amazon, it's always "Day 1." What do we mean? That our approach remains the same as it was on Amazon's very first day - to make smart, fast decisions, stay nimble, invent, and focus on delighting our customers.

Groupon

cb greenhouse.io

Groupon is an experiences marketplace that brings people more ways to get the most out of their city or wherever they may be. By enabling real-time mobile commerce across local businesses, live events and travel destinations, Groupon helps people find and discover experiences––big and small, new and familiar––that make for a full, fun and rewarding life. Groupon helps local businesses grow and strengthen customer relationships––resulting in strong, vibrant communities. E-commerce never stands still, our transformation strategy, combined with our strong brand, customer base, and marketplace expertise, ensures we are constantly adapting to the evolving market landscape while delivering value for our customers and merchant partners. Groupon is on a radical journey to transform our business. To meet our aggressive goals we are in the process of building a culture that prioritises fast decisions, open communication, and relentless pursuit of results. In the spirit of transparency, things aren't perfect, there are still processes to change and bureaucracy to break so we need people who want to be on this journey with us. Check out our current opportunities with #TeamGroupon and join us on our exciting mission to become The Ultimate Destination For Local Experiences and Services.

Agoda

careersatagoda.com

At Agoda, we bridge the world through travel. We aim to make it easy and rewarding for more travelers to explore and experience the amazing world we live in. We do so by enabling more people to see the world for less – with our best-value deals across our 6,000,000+ hotels and holiday properties, 130,000+ flight routes, 360,000+ activities, and more. Agoda was founded in 2005 in Thailand by two lifelong friends with a shared passion for travel. Today, Agoda is part of Booking Holdings [BKNG], and we have more than 7,000 employees from 90 nationalities in offices across Asia Pacific, the Middle East, Europe, and the Americas. In every department – from engineering to customer support – you’ll find that data and technology are at the heart of our culture. There’s never a boring day at Agoda as we aim to make travel hassle-free for everyone. If you’re ready to begin your best journey with us and help us build travel for the world, join us. For properties seeking partnership with Agoda, visit https://connect.agoda.com

Nielsen

cb nlsn.co

Nielsen shapes the world’s media and content as a global leader in audience insights, data and analytics. Through our understanding of people and their behaviors across all channels and platforms, we empower our clients with independent and actionable intelligence so they can connect and engage with their audiences—now and into the future. Nielsen operates around the world in more than 55 countries. Learn more at http://nlsn.co/6006JMfty and connect with us on social media (LinkedIn, Twitter, Facebook and Instagram).

DiDi

didiglobal.com

DiDi Global Inc. is a leading mobility technology platform. It offers a wide range of app-based services across Asia Pacific, Latin America, and other global markets, including ride hailing, taxi hailing, designated driving, hitch and other forms of shared mobility as well as certain energy and vehicle services, food delivery, and intra-city freight services. DiDi provides car owners, drivers, and delivery partners with flexible work and income opportunities. It is committed to collaborating with policymakers, the taxi industry, the automobile industry, and the communities to solve the world’s transportation, environmental, and employment challenges through the use of AI technology and localized smart transportation innovations. DiDi strives to create better life experiences and greater social value, by building a safe, inclusive, and sustainable transportation and local services ecosystem for cities of the future.

Dassault Systèmes

3ds.com

Dassault Systèmes is a catalyst for human progress. Since 1981, the company has pioneered virtual worlds to improve real life for consumers, patients and citizens. With Dassault Systèmes’ 3DEXPERIENCE platform, 370,000 customers of all sizes, in all industries, can collaborate, imagine and create sustainable innovations that drive meaningful impact. For more information, visit: https://www.3ds.com

Loading…

NEWS

Vercel CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 31, 2026 12:13 PM

One of JavaScript's most popular libraries compromised by hackers — Axios npm package hit in supply chain attack that deployed a cross-platform RAT

The hijacked maintainer account was used to publish two malicious versions of one of JavaScript's most popular libraries.

Read Article

March 23, 2026 07:00 AM

North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware

The North Korean threat actors behind the Contagious Interview campaign, also tracked as WaterPlum, have been attributed to a malware family...

Read Article

March 02, 2026 08:00 AM

North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross-Platform RAT

North Korean-linked campaign publishes 26 malicious npm packages hiding C2 in Pastebin, deploying credential stealers & RAT via 31 Vercel...

Read Article

February 26, 2026 08:00 AM

Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware

A "coordinated developer-targeting campaign" is using malicious repositories disguised as legitimate Next.js projects and technical...

Read Article

February 25, 2026 08:00 AM

Microsoft Warns of Hackers Attacking Developers with Malicious Next.js Repositories

Malicious Next.js repos pose as job tests, tricking devs into running code that opens C2 access and steals sensitive data.

Read Article

February 24, 2026 08:00 AM

Developer-targeting campaign using malicious Next.js repositories

A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard build workflows...

Read Article

February 24, 2026 08:00 AM

OpenClaw Releases 2026.2.23 Released With Security Updates and New AI features

OpenClaw, the open-source personal AI assistant with over 215000 GitHub stars, has released version 2026.2.23, emphasizing robust security...

Read Article

February 24, 2026 08:00 AM

Malicious OpenClaw Skills Used to Trick Users into Manual Password Entry for AMOS Infection

Atomic macOS Stealer spreads via malicious OpenClaw skills, stealing credentials, wallets, chats, and keychain data.

Read Article

February 22, 2026 08:00 AM

Gen Digital (GEN) Partners With Vercel

Gen Digital Inc. (NASDAQ:GEN) is one of the Most Promising Stocks to Invest In Before They Take Off. On February 17, Gen Digital Inc.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-59705

SUMMARY

mem0's openmemory/api component contains an unauthenticated access vulnerability that allows unauthenticated attackers to read, write, and delete arbitrary user memories by accessing API routers registered without authentication middleware. Attackers can supply arbitrary user_id parameters or directly access memory retrieval endpoints to expose private memory content, or invoke pause endpoints with global_pause=true to cause denial-of-service across all users.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-59704

SUMMARY

Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticated attackers can supply arbitrary video IDs to read sensitive AI-generated content and trigger unauthorized AI generation that consumes the video owner's credits without consent.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-55078

SUMMARY

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `POST /api/v2/files` converts zip uploads to tar in memory via `CreateTarFromZip`, which enforced a per-entry size limit but no aggregate limit on total decompressed output, writing to an unbounded in-memory buffer. Exploitation requires authenticated file-upload access and the impact is limited to availability (denial of service). The fix in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 adds a metadata preflight check that sums projected entry sizes and a streaming writer that enforces the aggregate limit during decompression. As a workaround, restrict file-upload permissions to trusted users or place a reverse proxy with request-body size limits in front of `coderd`.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-55077

SUMMARY

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `PUT /api/v2/users/{user}/password` endpoint authorized only `ActionUpdatePersonal` and did not prevent a `user-admin` from resetting an `owner` account's password. It also did not require the current password when an admin reset another user's password. Exploitation requires the privileged `user-admin` role so practical risk is limited to deployments that grant `user-admin` to less trusted operators. The fix in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 prevents non-owner users from resetting the password of an account that holds the `owner` role. As a workaround, restrict the `user-admin` role to trusted administrators.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

1.2

REFERENCES

CVE-2026-55076

SUMMARY

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, Coder's OIDC callback checked `email_verified` with a direct Go `bool` type assertion. When an IdP returned the claim as a non-boolean (for example the string `"false"`) or omitted it, the assertion failed open and the email was treated as verified. Combined with an unconditional email-based account fallback, this enabled account takeover. The fix in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 coerces `email_verified` across bool, string and numeric types (fail-closed) and blocks the email fallback when the matched user already has a different linked IdP subject. As a workaround, ensure the IdP returns `email_verified` as a native JSON boolean. The email-fallback linking issue has no configuration workaround; upgrading is required.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…