COOEY // HUBcompliance · community · intelligence

FAIL // hall of shame

The security failures of FedRAMP vendors, their competitors, and the hardware they ship — ranked by zero-days, remote code execution, active exploitation, sheer embarrassment, and False-Claims-Act recoveries. A dex.sgc.ai RAG curator writes each event's summary and scores how avoidable the failure was; every name links to its dossier.

722
on the board
1
zero-days
235
RCEs
101
exploited
544
assessed
$82M
FCA recovered
Overview☣ Most embarrassing◐ Most zero-days⚡ Most RCEs⌖ Most exploited⚖ Biggest FCA recoveries
All playersCompaniesVendorsProducts / HW ◧ FedRAMP only

⌖ Most exploited

Count of their CVEs on CISA's Known-Exploited-Vulnerabilities catalog — actively used against defenders.

  1. 01
    Microsoft FedRAMP company
    ⚡ 11 ⌖ 17 ☣ 2 shame 85
    17on KEV
  2. 02
    Cisco Systems Inc. FedRAMP company
    ⚡ 4 ⌖ 9 ☣ 1 shame 85
    9on KEV
  3. 03
    Google FedRAMP company
    ⚡ 4 ⌖ 4 shame 85
    4on KEV
  4. 04
    Ivanti FedRAMP company
    ⚡ 3 ⌖ 4 shame 85
    4on KEV
  5. 05
    Adobe FedRAMP company
    ◐ 1 ⚡ 4 ⌖ 4 shame 85
    4on KEV
  6. 06
    Oracle FedRAMP company
    ⚡ 1 ⌖ 2 ☣ 1 shame 85
    2on KEV
  7. 07
    Palo Alto Networks, Inc. FedRAMP company
    ⚡ 1 ⌖ 2 shame 85
    2on KEV
  8. 08
    Citrix FedRAMP company
    ⌖ 1 shame 45
    1on KEV
  9. 09
    Splunk FedRAMP company
    ⌖ 1 shame 65
    1on KEV
  10. 10
    Trend Micro Inc. FedRAMP company
    ⌖ 1 shame 45
    1on KEV
  11. 11
    PTC FedRAMP company
    ⚡ 1 ⌖ 1 shame 85
    1on KEV
◄ prev page 1 / 1 next ► · 11 total