COOEY // HUBcompliance · community · intelligence

FAIL // hall of shame

The security failures of FedRAMP vendors, their competitors, and the hardware they ship — ranked by zero-days, remote code execution, active exploitation, sheer embarrassment, and False-Claims-Act recoveries. A dex.sgc.ai RAG curator writes each event's summary and scores how avoidable the failure was; every name links to its dossier.

722
on the board
1
zero-days
235
RCEs
101
exploited
544
assessed
$82M
FCA recovered
Overview☣ Most embarrassing◐ Most zero-days⚡ Most RCEs⌖ Most exploited⚖ Biggest FCA recoveries
All playersCompaniesVendorsProducts / HW ◧ FedRAMP only

⚡ Most RCEs

Remote/arbitrary code-execution flaws — full-compromise class bugs.

  1. 01
    Microsoft FedRAMP company
    ⚡ 11 ⌖ 17 ☣ 2 shame 85
    11RCEs
  2. 02
    Adobe FedRAMP company
    ◐ 1 ⚡ 4 ⌖ 4 shame 85
    4RCEs
  3. 03
    Google FedRAMP company
    ⚡ 4 ⌖ 4 shame 85
    4RCEs
  4. 04
    Cisco Systems Inc. FedRAMP company
    ⚡ 4 ⌖ 9 ☣ 1 shame 85
    4RCEs
  5. 05
    IBM FedRAMP company
    ⚡ 3 shame 40
    3RCEs
  6. 06
    Ivanti FedRAMP company
    ⚡ 3 ⌖ 4 shame 85
    3RCEs
  7. 07
    Oracle FedRAMP company
    ⚡ 1 ⌖ 2 ☣ 1 shame 85
    1RCEs
  8. 08
    BMC Software FedRAMP company
    ⚡ 1 shame 50
    1RCEs
  9. 09
    Palo Alto Networks, Inc. FedRAMP company
    ⚡ 1 ⌖ 2 shame 85
    1RCEs
  10. 10
    ESRI FedRAMP company
    ⚡ 1 shame 35
    1RCEs
  11. 11
    PTC FedRAMP company
    ⚡ 1 ⌖ 1 shame 85
    1RCEs
◄ prev page 1 / 1 next ► · 11 total