What is the official website of Zillow Home Loans, LLC ?

The official website of Zillow Home Loans, LLC is https://www.zillowhomeloans.com/.

What is Zillow Home Loans, LLC's cybersecurity risk score?

Zillow Home Loans, LLC has an AI-generated cybersecurity risk score of 747 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Zillow Home Loans, LLC experienced?

According to Rankiteo, Zillow Home Loans, LLC currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Zillow Home Loans, LLC been affected by any supply chain cyber incidents ?

According to Rankiteo, Zillow Home Loans, LLC has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Zillow Home Loans, LLC have SOC 2 Type 1 certification ?

According to Rankiteo, Zillow Home Loans, LLC is not certified under SOC 2 Type 1.

Does Zillow Home Loans, LLC have SOC 2 Type 2 certification ?

According to Rankiteo, Zillow Home Loans, LLC does not hold a SOC 2 Type 2 certification.

Does Zillow Home Loans, LLC comply with GDPR ?

According to Rankiteo, Zillow Home Loans, LLC is not listed as GDPR compliant.

Does Zillow Home Loans, LLC have PCI DSS certification ?

According to Rankiteo, Zillow Home Loans, LLC does not currently maintain PCI DSS compliance.

Does Zillow Home Loans, LLC comply with HIPAA ?

According to Rankiteo, Zillow Home Loans, LLC is not compliant with HIPAA regulations.

Does Zillow Home Loans, LLC have ISO 27001 certification ?

According to Rankiteo,Zillow Home Loans, LLC is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Zillow Home Loans, LLC operate in ?

Zillow Home Loans, LLC operates primarily in the Financial Services industry.

How many employees does Zillow Home Loans, LLC have ?

Zillow Home Loans, LLC employs approximately 668 people worldwide.

Does Zillow Home Loans, LLC own any subsidiaries ?

Zillow Home Loans, LLC presently has no subsidiaries across any sectors.

How many LinkedIn followers does Zillow Home Loans, LLC have ?

Zillow Home Loans, LLC's official LinkedIn profile has approximately 3,776 followers.

What is the NAICS classification code for Zillow Home Loans, LLC ?

Zillow Home Loans, LLC is classified under the NAICS code 52, which corresponds to Finance and Insurance.

Does Zillow Home Loans, LLC have a Crunchbase profile ?

No, Zillow Home Loans, LLC does not have a profile on Crunchbase.

Does Zillow Home Loans, LLC have a LinkedIn profile ?

Yes, Zillow Home Loans, LLC maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/zillow-home-loans.

How many cybersecurity incidents has Zillow Home Loans, LLC experienced ?

As of July 1, 2026, Rankiteo reports that Zillow Home Loans, LLC has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Zillow Home Loans, LLC have ?

Zillow Home Loans, LLC has an estimated 32,186 peer or competitor companies worldwide.

What types of cybersecurity incidents has Zillow Home Loans, LLC faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

ZHLL

Boost Score +25 with badge (5 left)

747

/1000

Moderate

772

/1000

Fair

Zillow Home Loans, LLC Vendor Cyber Rating & Cyber Score

zillowhomeloans.com

Add Your Compliance Badge

Zillow Home Loans, LLC is a rapidly growing national provider of online mortgage lending services. We are committed to delivering best-in-class service and local market expertise, with communication every step of the way. We have offices located in Overland Park, Kansas, Seattle, Washington as well as Irvine, California. NMLS ID#: 10287 Equal Housing Lender (NASDAQ: Z and ZG). Licensing Information: https://www.zillowhomeloans.com/licensing Additional licensing information: www.nmlsconsumeraccess.com

ZHLL A.I CyberSecurity Scoring

Scoring History

ZHLL

Zillow Home Loans, LLC CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Zillow Home Loans, ...

Breach

5/2017

ZIL036091825

Loading…

A.I.

ZHLL Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for ZHLL

Incidents vs Financial Services Industry Avg (This Year)

No incidents recorded for Zillow Home Loans, LLC in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Zillow Home Loans, LLC in 2026.

Incident Types ZHLL vs Financial Services Industry Avg (This Year)

No incidents recorded for Zillow Home Loans, LLC in 2026.

Incident History - ZHLL (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Zillow Home Loans, LLC Subsidiaries

Parent Company

ZHLL

Financial Services

Website: https://www.zillowhomeloans.com/

Company Size: 201-500 employees

No subsidiary data available for this company.

Loading…

Zillow Home Loans, LLC Similar Companies

Morgan Stanley

morganstanley.com

Morgan Stanley (NYSE: MS) is a leading global financial services firm providing a wide range of investment banking, securities, wealth management and investment management services. With offices in 42 countries, our firm's employees serve clients worldwide including corporations, governments, institutions and individuals. We are committed to maintaining the first-class service and high standard of excellence that have always defined the firm and everything we do is guided by our five core values: Do the right thing, put clients first, lead with exceptional ideas, commit to diversity and inclusion, and give back. All interactions on/with this account are subject to the Social Media Important Information https://www.morganstanley.com/disclosures/social-media-important-information which includes Morgan Stanley’s Privacy Pledge and relevant disclaimers/disclosures. By interacting with this account, you consent to the retention and monitoring of your interactions.

Fannie Mae

fanniemae.com

Fannie Mae creates opportunities for people to buy, refinance, or rent a home. We are a leading source of mortgage financing in all markets and at all times. We ensure the availability of affordable mortgage loans. The financing solutions we develop make homeownership and workforce rental housing a reality for millions of people. The work we do helps maintain the 30-year fixed-rate mortgage, which has dominated the housing market since the 1950s. This popular mortgage loan makes committing to purchasing a home easier. It gives homeowners stability and peace of mind by providing predictable mortgage payments over the life of the loan. Fannie Mae provides a reliable source of affordable mortgage credit that supports homebuyers and renters across the country. We continue to innovate and promote a stronger, safer, and more efficient housing finance system to support more opportunities for homebuyers and renters in communities throughout the nation. Join us to help shape the future of housing: http://fanniemae.com/careers. This LinkedIn company page is moderated. Before joining the conversation, please review our Social Media Guidelines: https://www.fanniemae.com/stay-connected.

Danske Bank

danskebank.com

Danske Bank – A driver of growth and development For more than a 150 years, Danske Bank has strived to be a driver of growth and development in society. We have developed in tandem with the societies we are part of, and our advisory services, expertise and financial solutions have helped individuals, families, businesses and organisations to realise their ambitions and potential. With long-term sustainable development as our ambition, we will continue to work every day to be the best possible bank, for the benefit of our customers, employees, shareholders and the societies we are part of. Follow us for relevant content and insights You will receive the latest news, insights and information that can inspire and help you with your everyday financial needs. On our company page, you can also read more about life as an employee at Danske Bank and be sure to check our current job openings if you are interested in joining our international community of 22,000 people and help us build an even more innovative, agile and truly customer-centric culture.

Piramal Finance

piramalfinance.com

Piramal Finance Limited (Formerly known as Piramal Capital & Housing Finance Limited), is engaged in financial services business. It provides both wholesale and retail funding opportunities within real estate and non-real estate sectors. We value your feedback, queries, and requests and always look for ways to enhance your experience. Our team is here to support you from Monday to Saturday between 10 AM to 7 PM. Feel free to call us at 1800 266 6444. Disclaimer: Please be cautious of fraudulent messages claiming to offer jobs or loans while impersonating Piramal Group on messaging platforms. It's important to note that we exclusively communicate through official channels. Should you encounter any suspicious messages, kindly disregard them and block the sender.

ICE

ice.com

ICE (NYSE: ICE) connects people to data, technology and expertise that create opportunity and inspire innovation. For terms of use, visit www.ice.com/privacy-security-center/terms-of-use

Westpac Group

westpac.com.au

From rescue helicopters to signing the Equator Principles, from paying super during parental leave to adding 'Touch ID' biometric technology to our banking apps and being first on the scene with a helping hand in times of crisis... we have a proud history of stepping up to be first for our customers, communities and people. As Australia’s first bank and Australia’s first company we put service at the heart of everything we do and our people are our priority. We've grown up as a company and expanded both in Australia and throughout Asia, the United Kingdom and the United States. Now we are made up of your favourite financial institution names including Westpac, BankSA, St.George Bank, BT Financial Group, RAMs and Bank of Melbourne, a change of job doesn’t mean a change of employer at Westpac Group. We've made a commitment to put our customers first in everything we do. This means creating fundamentally superior customer experiences for each customer, every time. We promise that when you meet with someone from Westpac Group, you'll be touched by their genuine dedication to helping our customers prosper and grow. Westpac Group acknowledges the traditional owners as the custodians of this land, recognising their connection to land, waters and community. We pay our respects to Australia's First Peoples, and to their Elders, past and present.

Credicorp

grupocredicorp.com

Somos el grupo financiero líder en el Perú con una vasta experiencia en el mercado peruano. Contamos con una sólida plataforma de Banca Comercial reforzada por una importante presencia en Banca de Inversión en Latinoamérica destinada a desarrollar el potencial de la región y acompañar a nuestros clientes en su crecimiento. Ofrecemos un modelo de servicios financieros completo y diversificado en países como Perú, Bolivia, Estados Unidos, Panamá, Chile y Colombia; y desarrollamos operaciones esencialmente a través de nuestras seis principales subsidiarias: Banco de Crédito del Perú, BCP Bolivia, Mibanco, Pacífico Compañía de Seguros y Reaseguros, Prima AFP, Atlantic Security Bank y Credicorp Capital. El negocio de Credicorp se concentra principalmente en cuatro líneas de negocio: Banca Universal, Microfinanzas, Seguros y Pensiones, y Asesoría y Gestión de Inversiones.

Lloyds Banking Group

lloydsbankinggroup.com

Our purpose is Helping Britain Prosper. We do this by creating a more sustainable and inclusive future for people and businesses, shaping finance as a force for good. We're part of an ever-changing industry and are currently on a journey to shape the financial services of the future, whilst supporting our customers’ changing needs. The scale and reach of our Group means we can offer a broad range of opportunities to learn, grow and develop. Our values-led culture and approach to inclusion and diversity means we can all make a real difference together.

Edward Jones

edwardjones.com

Edward Jones is a leading North American financial services firm in the U.S. and through its affiliate in Canada. The firm’s more than 20,000 financial advisors throughout North America serve more than 9 million clients with a total of $2.2 trillion in client assets under care as of December 31, 2024. Edward Jones' purpose is to partner for positive impact to improve the lives of its clients and colleagues, and together, better our communities and society. Through the dedication of the firm's approximately 54,000 associates and our branch presence in 68% of U.S. counties and most Canadian provinces and territories, the firm is committed to helping more people achieve financially what is most important to them. The Edward Jones website is at www.edwardjones.com, and its recruiting website is www.careers.edwardjones.com. Member SIPC.

Loading…

NEWS

Zillow Home Loans, LLC CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 17, 2026 01:00 PM

Zillow will show 'coming soon' homes before they hit the market

Pre-market listings from Keller Williams, REMAX and more will appear on Zillow Preview, giving buyers earlier access and sellers broader...

Read Article

March 05, 2026 08:00 AM

Zillow Group commits another $1.25B to its stock buyback program

Zillow Group (Nasdaq: Z) authorized an additional $1.25 billion for share repurchases on March 5, 2026, raising its remaining buyback...

Read Article

March 04, 2026 01:00 PM

Lower mortgage rates hand buyers $30K more room, Zillow finds

First home-value gain in 7 months, lower mortgage payments and 1.8% higher sales show a thawing U.S. housing market after three slow years,...

Read Article

February 23, 2026 08:00 AM

Zillow pitches AI-powered home buying at March 24 investor summit

Investors get a March 24 look at how Zillow uses AI across search, touring, financing and closing, via a half-day New York summit streamed...

Read Article

February 20, 2026 08:00 AM

Zillow Fights Class Claims It Pushed Buyers Into Pricey Loans

Real estate marketplace Zillow urged a Seattle federal judge Friday to throw out homebuyers' accusations it violated a Washington consumer...

Read Article

February 19, 2026 08:00 AM

Zillow Group to present at Bernstein 4th Annual TMT Forum

Zillow Group, Inc. (Nasdaq: Z and ZG), which is transforming the way people buy, sell, rent and finance homes, today announced Zillow Group...

Read Article

February 19, 2026 08:00 AM

Planning to buy a home? Zillow’s guidance is now built into Google’s AI

Audio Overviews turn Zillow's buying guides into conversations inside Google NotebookLM, giving first-time buyers faster, cited answers to...

Read Article

February 18, 2026 08:00 AM

Rent burden eases: typical U.S. tenant now pays 26.4% of income

U.S. asking rent is $1895 while households spend 26.4% of income, the lowest share since Aug. 2021, and Zillow sees single-family rents up...

Read Article

February 17, 2026 08:00 AM

Zillow launches Zillow for Warcraft®, a new way to explore World of Warcraft® homes

As player housing debuts in Blizzard Entertainment®'s World of Warcraft, Zillow introduces a custom experience in which fans can explore...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-8023

SUMMARY

Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that serves files from a configured root directory. Before this fix, both the HTTP/1 and HTTP/2 front-ends placed the raw, attacker-controlled request path into client-url_buffer (assembled in on_url() for HTTP/1 and copied verbatim from the :path pseudo-header for HTTP/2) without resolving ./.. segments. The static-FS handler then built the on-disk filename by directly concatenating the configured root with that raw URL (snprintk(fname, ..., "%s%s", static_fs_detail-fs_path, client-url_buffer) at http_server_http1.c:603 and http_server_http2.c:490) and opened it with fs_open(fname, FS_O_READ). Because the handler is reached via wildcard/leading-dir (fnmatch FNM_LEADING_DIR) or fallback resource matching, a request such as GET /<prefix/../../<file is dispatched to the handler and, after the underlying filesystem (e.g. LittleFS/FAT) resolves the .. segments, escapes the configured web root, letting an unauthenticated remote client read arbitrary readable files on the mounted volume (information disclosure). The HTTP server requires no TLS or authentication to reach this path. The fix adds http_server_remove_dot_segments(), which canonicalizes the path portion of the URL before resource lookup in both protocol handlers, neutralizing the traversal. Affects releases v4.0.0 through v4.4.0 for deployments that register a static-filesystem resource.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-7656

SUMMARY

The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) used an incorrect boolean expression that combined the RFC 4861 validity checks with the ICMPv6 code check using the wrong operator precedence: the form was '((length/hop/source/target checks) && (icmp_hdr-code != 0))'. Because every legitimate ND message carries ICMPv6 code 0, an attacker setting code == 0 (the normal value) caused the entire predicate to evaluate false, so the packet was never dropped and all of the other checks were silently skipped. The bypassed checks include the mandatory Hop Limit == 255 verification (which proves an ND packet originated on-link and was not forwarded) and, for Router Advertisements, the requirement that the source be a link-local address, as well as multicast-target sanity checks. As a result, an adjacent on-link attacker — and, because the Hop-Limit-255 guard is bypassed, potentially a remote/off-link attacker whose packets would otherwise be rejected — can have forged Router Advertisement, Neighbor Solicitation, and Neighbor Advertisement messages accepted. A forged RA lets the attacker reconfigure the victim's default router, on-link prefixes (SLAAC), MTU, reachable/retransmit timers, and (with CONFIG_NET_IPV6_RA_RDNSS) DNS servers, while forged NS/NA enable neighbor-cache poisoning, enabling man-in-the-middle, traffic redirection, and denial of service. The flaw is an input-validation/authentication weakness rather than a memory-safety issue: the underlying packet-parsing primitives (net_pkt_get_data, net_pkt_read, net_pkt_skip) are independently bounds-safe and the validated 'length' is the true buffer length, so skipping the length check causes no out-of-bounds access. The defect has existed since the logic was introduced in 2018 and shipped in all releases through v4.4.0; it is fixed by splitting the condition so any failing check drops the packet.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

2.8

REFERENCES

CVE-2026-51219

SUMMARY

A heap buffer overflow in the HighPriorityASDUQueue_hasUnconfirmedIMessages function of lib60870 v2.3.3 to v2.3.6 allows attackers to cause a Denial of Service (DoS) via a crafted payload.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-51218

SUMMARY

A heap buffer overflow in the TS7Worker::PerformFunctionWrite() function (/core/s7_server.cpp) of snap7 v1.4.3 allows attackers to cause a Denial of Service (DoS) via a crafted packet.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-10648

SUMMARY

mcumgr_serial_process_frag() in subsys/mgmt/mcumgr/transport/src/serial_util.c calls net_buf_reset() on the result of smp_packet_alloc() before checking it for NULL. smp_packet_alloc() uses net_buf_alloc(K_NO_WAIT) against the shared MCUmgr packet pool (CONFIG_MCUMGR_TRANSPORT_NETBUF_COUNT, default 4), which returns NULL when the pool is exhausted. In default builds the __ASSERT_NO_MSG in net_buf_reset is a no-op, so net_buf_simple_reset writes through the NULL pointer (buf->len = 0; buf->data = buf->__buf), causing a fault/crash. The fragment data reaches this code from attacker-controlled bytes on the MCUmgr serial/UART/shell-console transports (smp_uart.c, smp_raw_uart.c, smp_shell.c), and a fresh buffer is allocated at the start of essentially every new packet. An attacker on the serial/console link can flood the transport to drive the 4-entry buffer pool to exhaustion and induce the NULL dereference, crashing the device (denial of service). The defect was introduced after the original MCUmgr rework and shipped in Zephyr v4.4.0. The fix moves the NULL check ahead of net_buf_reset.

Published

Date2026-06-29

Updated

Date2026-06-29

RISK INFORMATION (Score: 6.2)

cvss3

Base Score: 6.2

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.5

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…