FAIL // HALL OF SHAME
3556 players ranked
Security failures of FedRAMP vendors, their competitors, and the hardware they ship — ranked by zero-days, RCE, active exploitation, sheer embarrassment, and False-Claims-Act recoveries. A dex.sgc.ai RAG curator writes each event's summary and scores how avoidable it was; every name links to its dossier.
On the board
3556
players
Zero-days
118
tracked
RCEs
2290
assessed
Exploited
1753
in the wild
Assessed
3736
events
FCA recovered
$82M
DOJ CCFI
☣ Most embarrassing
Ranked by how avoidable and reputation-shredding their worst failure was — the dex curator's grounded 0–100 verdict.
◐ Most zero-days
Vulnerabilities exploited before a patch existed — the worst kind to ship.
⚡ Most RCEs
Remote/arbitrary code-execution flaws — full-compromise class bugs.
⌖ Most exploited
Count of their CVEs on CISA's Known-Exploited-Vulnerabilities catalog — actively used against defenders.
⚖ Biggest FCA recoveries
Dollars recovered from contractors who misrepresented their cybersecurity — DOJ Civil Cyber-Fraud settlements.