What is the official website of Zoho Flow ?

The official website of Zoho Flow is http://www.zoho.com/flow.

What is Zoho Flow's cybersecurity risk score?

Zoho Flow has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Zoho Flow experienced?

According to Rankiteo, Zoho Flow currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Zoho Flow been affected by any supply chain cyber incidents ?

According to Rankiteo, Zoho Flow has been affected by a supply chain cyber incident involving Wondershare Technology, with the incident ID ZOHWON1776076134.

Does Zoho Flow have SOC 2 Type 1 certification ?

According to Rankiteo, Zoho Flow is not certified under SOC 2 Type 1.

Does Zoho Flow have SOC 2 Type 2 certification ?

According to Rankiteo, Zoho Flow does not hold a SOC 2 Type 2 certification.

Does Zoho Flow comply with GDPR ?

According to Rankiteo, Zoho Flow is not listed as GDPR compliant.

Does Zoho Flow have PCI DSS certification ?

According to Rankiteo, Zoho Flow does not currently maintain PCI DSS compliance.

Does Zoho Flow comply with HIPAA ?

According to Rankiteo, Zoho Flow is not compliant with HIPAA regulations.

Does Zoho Flow have ISO 27001 certification ?

According to Rankiteo,Zoho Flow is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Zoho Flow operate in ?

Zoho Flow operates primarily in the Software Development industry.

How many employees does Zoho Flow have ?

Zoho Flow employs approximately None employees people worldwide.

Does Zoho Flow own any subsidiaries ?

Zoho Flow presently has no subsidiaries across any sectors.

How many LinkedIn followers does Zoho Flow have ?

Zoho Flow's official LinkedIn profile has approximately 4,660 followers.

What is the NAICS classification code for Zoho Flow ?

Zoho Flow is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Zoho Flow have a Crunchbase profile ?

No, Zoho Flow does not have a profile on Crunchbase.

Does Zoho Flow have a LinkedIn profile ?

Yes, Zoho Flow maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/zoho-flow.

How many cybersecurity incidents has Zoho Flow experienced ?

As of August 5, 2026, Rankiteo reports that Zoho Flow has experienced 3 cybersecurity incidents.

How many peer or competitor companies does Zoho Flow have ?

Zoho Flow has an estimated 30,554 peer or competitor companies worldwide.

What types of cybersecurity incidents has Zoho Flow faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Zoho Flow

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

Zoho Flow Vendor Cyber Rating & Cyber Score

zoho.com

Add Your Compliance Badge

Zoho Flow is an integration platform from Zoho. With Zoho Flow, you can automate business workflows and save your valuable time that's otherwise spent on manual tasks. Connect your favourite apps together, build smart integrations, and set yourself free!

Zoho Flow A.I CyberSecurity Scoring

Scoring History

Zoho Flow

Zoho Flow CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Zoho

Cyber Attack

100

12/2025

Wondershare Tec...

ZOHWON177607613...

Zoho

Cyber Attack

10/2025

ZOH1776249079

Zoho Flow

Vulnerability

3/2025

ZOH411030525

Loading…

A.I.

Zoho Flow Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Zoho Flow

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for Zoho Flow in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Zoho Flow in 2026.

Incident Types Zoho Flow vs Software Development Industry Avg (This Year)

No incidents recorded for Zoho Flow in 2026.

Incident History - Zoho Flow (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Zoho Flow Subsidiaries

Zoho Flow

Software Development

Website: http://www.zoho.com/flow

Company Size: 10,001+ employees

Zoho CreatorSoftware Development

ZohoSoftware Development

Zoho CRMIT Services and IT Consulting

Zoho RecruitSoftware Development

Zoho PeopleHuman Resources Services

Loading…

Zoho Flow Similar Companies

Databricks

databricks.com

Databricks is the Data and AI company. More than 20,000 organizations worldwide — including adidas, AT&T, Bayer, Block, Mastercard, Rivian, Unilever, and over 60% of the Fortune 500 — rely on Databricks to build and scale data and AI apps, analytics and agents. Headquartered in San Francisco with 30+ offices around the globe, Databricks offers a unified Data Intelligence Platform that includes Agent Bricks, Lakeflow, Lakehouse, Lakebase and Unity Catalog. --- Databricks applicants Please apply through our official Careers page at databricks.com/company/careers. All official communication from Databricks will come from email addresses ending with @databricks.com or @goodtime.io (our meeting tool).

ServiceNow

cb servicenow.com

ServiceNow (NYSE: NOW) makes the world work better for everyone. Our cloud-based platform and solutions help digitize and unify organizations so that they can find smarter, faster, better ways to make work flow. So employees and customers can be more connected, more innovative, and more agile. And we can all create the future we imagine. The world works with ServiceNow. For more information, visit www.servicenow.com.

Baidu, Inc.

cb baidu.com

Baidu is a leading AI company with strong Internet foundation, driven by our mission to “make the complicated world simpler through technology”. Founded in 2000 as a search engine platform, we were an early adopter of artificial intelligence in 2010. Since then, we have established a full AI stack, from deep learning frameworks to models and applications, with industry-leading self-developed technology at every level. Over the past two decades, we have built a diversified portfolio of products and services, spanning an ecosystem of hundreds of millions of users, millions of developers, and hundreds of thousands of enterprises. We have now integrated our leading AI capabilities into our offerings, driving innovative use cases. Join us to shape the future of AI and technology. For media inquiries, contact us at [email protected]. For career opportunities, visit https://talent.baidu.com/static/index.html

linkedin.com

Founded in 2003, LinkedIn connects the world's professionals to make them more productive and successful. With more than 1 billion members worldwide, including executives from every Fortune 500 company, LinkedIn is the world's largest professional network. The company has a diversified business model with revenue coming from Talent Solutions, Marketing Solutions, Sales Solutions and Premium Subscriptions products. Headquartered in Silicon Valley, LinkedIn has offices across the globe.

NiCE

nice.com

NiCE is transforming the world with AI that puts people first. Our purpose-built AI-powered platforms automate engagements into proactive, safe, intelligent actions, empowering individuals and organizations to innovate and act, from interaction to resolution. Trusted by organizations throughout 150+ countries worldwide, NiCE’s platforms are widely adopted across industries connecting people, systems, and workflows to work smarter at scale, elevating performance across the organization, delivering proven measurable outcomes.

DiDi

didiglobal.com

DiDi Global Inc. is a leading mobility technology platform. It offers a wide range of app-based services across Asia Pacific, Latin America, and other global markets, including ride hailing, taxi hailing, designated driving, hitch and other forms of shared mobility as well as certain energy and vehicle services, food delivery, and intra-city freight services. DiDi provides car owners, drivers, and delivery partners with flexible work and income opportunities. It is committed to collaborating with policymakers, the taxi industry, the automobile industry, and the communities to solve the world’s transportation, environmental, and employment challenges through the use of AI technology and localized smart transportation innovations. DiDi strives to create better life experiences and greater social value, by building a safe, inclusive, and sustainable transportation and local services ecosystem for cities of the future.

Lazada

lazada.com

About Lazada Group Founded in 2012, Lazada Group is the leading eCommerce platform in Southeast Asia. We are accelerating progress in Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam through commerce and technology. With the largest logistics and payments networks in the region, Lazada is a part of our consumers’ daily lives in the region and we aim to serve 300 million shoppers by 2030. Since 2016, Lazada is the Southeast Asia flagship platform of the Alibaba Group powered by its cutting-edge technology infrastructure.

Zoho

zoho.com

Zoho offers beautifully smart software to help you grow your business. With over 100 million users worldwide, Zoho's 55+ products aid your sales and marketing, support and collaboration, finance, and recruitment needs—letting you focus only on your business. Zoho respects user privacy and does not have an ad-revenue model in any part of its business, including its free products. Zoho Corporation is privately held and profitable, with its headquarters in Chennai, India, and offices across the globe.

Loading…

NEWS

Zoho Flow CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 27, 2026 08:00 AM

North Korean APT37 Hackers Leverages Zoho WorkDrive to Infect Air‑Gapped Systems

APT37 launches Ruby Jumper malware to breach air-gapped systems, showing North Korean hackers can bypass physical security.

Read Article

October 08, 2025 07:00 AM

Zoholics lands in France showcasing Vani -

Zoho continues to host Zoholics events across Europe. This week, it is hosting an event in Paris, France. The firm has seen strong growth in...

Read Article

July 21, 2025 07:00 AM

Cybercriminals Use Zoho WorkDrive Folders to Spread Obfuscated PureRAT Malware

A targeted attack against a U.S.-based certified public accounting firm was discovered in May 2025 by cybersecurity experts.

Read Article

May 11, 2025 07:00 AM

Zoho Projects Integrations to Improve Your Workflow in 2026

Learn to optimize your workflow with Zoho Projects integrations. Streamline tasks and collaborate seamlessly with the right add-ons.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-45537

SUMMARY

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the construct_uri() function concatenates multiple URI components (protocol, username, domain, port, params) into a fixed 1024-byte global BSS buffer without any bounds checking. When a routing script calls construct_uri() with an attacker-controlled username, a combined component length exceeding 1024 bytes overflows the buffer, corrupting adjacent global data with attacker-controlled content. The overflow reaches disable_503_translation, a global flag controlling SIP 503 response handling, allowing an attacker to deterministically set the flag via the URI username and alter the server's routing behavior for subsequent messages. Because the same buffer is shared with contact_builder(), the overflow also corrupts that function's data, and without a memory sanitizer the adjacent globals are silently overwritten on every request containing a long username. This issue has been fixed in versions 3.6.6 and 4.0.0-rc1.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-18819

SUMMARY

A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project maintainer confirms: "[I]t seems plausible, in that RackTables does not at this time have any CSRF prevention. You may assign a CVE ID to this, but there is no guarantee it will be handled in urgent, or even timely, manner, or at all."

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 4.3)

cvss2

Base Score: 5.0

Complexity: LOW

AV:N/AC:L/Au:N/C:N/I:P/A:N

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-18818

SUMMARY

A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-70620

SUMMARY

Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attackers to direct the server to probe internal network resources by supplying arbitrary URLs to the embedding endpoint configuration without scheme, host, IP range, or DNS rebind validation. Attackers can submit loopback addresses, RFC 1918 ranges, or link-local addresses through the embedding endpoint API to partially read responses from cloud instance metadata services, internal APIs, and other hosts reachable from the server.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 6.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.3

REFERENCES

CVE-2026-70619

SUMMARY

Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend configuration by invoking endpoint management routes that verify session authentication but omit the admin authorization guard. Attackers can supply an attacker-controlled URL to overwrite the embedding backend persisted in the endpoint configuration file and process environment, causing all subsequent embedding operations including chat messages, RAG queries, memory entries, and vault text to be transmitted in plaintext to the attacker-controlled destination, or delete the endpoint configuration to deny embedding service to all users.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Zoho Flow Vendor Cyber Rating & Cyber Score

Zoho Flow A.I CyberSecurity Scoring

Zoho Flow CyberSecurity News & History

Zoho Flow Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Zoho Flow

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Zoho Flow vs Software Development Industry Avg (This Year)

Incident History - Zoho Flow (X = Date, Y = Severity)

Zoho Flow Subsidiaries

Zoho Flow

Zoho Flow Similar Companies

Databricks

ServiceNow

Meta

Baidu, Inc.

LinkedIn

NiCE

DiDi

Lazada

Zoho

Zoho Flow CyberSecurity News

North Korean APT37 Hackers Leverages Zoho WorkDrive to Infect Air‑Gapped Systems

Zoholics lands in France showcasing Vani -

Cybercriminals Use Zoho WorkDrive Folders to Spread Obfuscated PureRAT Malware

Zoho Projects Integrations to Improve Your Workflow in 2026

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Zoho Flow CyberSecurity News & History

Zoho Flow Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Zoho Flow

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Zoho Flow vs Software Development Industry Avg (This Year)

Incident History - Zoho Flow (X = Date, Y = Severity)

Zoho Flow Subsidiaries

Zoho Flow

Zoho Flow Similar Companies

Databricks

ServiceNow

Meta

Baidu, Inc.

LinkedIn

NiCE

DiDi

Lazada

Zoho

Zoho Flow CyberSecurity News

North Korean APT37 Hackers Leverages Zoho WorkDrive to Infect Air‑Gapped Systems

Zoholics lands in France showcasing Vani -

Cybercriminals Use Zoho WorkDrive Folders to Spread Obfuscated PureRAT Malware

Zoho Projects Integrations to Improve Your Workflow in 2026

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo