Company Details
rocket-companies1
573
25,918
52
rocketcompanies.com
0
ROC_1704703
In-progress

Rocket Companies Company CyberSecurity Posture
rocketcompanies.comRocket Companies® is a Detroit-based company made up of businesses that provide simple, fast and trusted digital solutions for complex transactions. The name comes from our flagship business, now known as Rocket Mortgage®, which was founded in 1985. Today, we’re a publicly traded company involved in many different industries, including mortgages, fintech, real estate, automotive and more. We’re insistently different in how we look at the world and committed to an inclusive workplace where every voice is heard.
Company Details
rocket-companies1
573
25,918
52
rocketcompanies.com
0
ROC_1704703
In-progress
Between 800 and 849

Rocket Companies Global Score (TPRM)XXXX



No incidents recorded for Rocket Companies in 2025.
No incidents recorded for Rocket Companies in 2025.
No incidents recorded for Rocket Companies in 2025.
Rocket Companies cyber incidents detection timeline including parent company and subsidiaries

Rocket Companies® is a Detroit-based company made up of businesses that provide simple, fast and trusted digital solutions for complex transactions. The name comes from our flagship business, now known as Rocket Mortgage®, which was founded in 1985. Today, we’re a publicly traded company involved in many different industries, including mortgages, fintech, real estate, automotive and more. We’re insistently different in how we look at the world and committed to an inclusive workplace where every voice is heard.


At Synchrony, our driving force is to be essential to people's everyday lives by making it easier for the many millions of people who rely on us to access their essential needs and everyday wants with consumer financing that works for them – from their first credit card to a lifetime of flexibility.

LPL Financial Holdings Inc. (Nasdaq: LPLA) is among the fastest growing wealth management firms in the U.S. As a leader in the financial advisor-mediated marketplace, LPL supports over 29,000 financial advisors and the wealth management practices of approximately 1,100 financial institutions, servic

Motilal Oswal Financial Services Ltd. (MOFSL) was founded in 1987 as a small sub-broking unit, with just 2 people running the show. Focus on a customer-first attitude, ethical and transparent business practices, respect for professionalism, research-based value investing, and implementation of cutti

We are born collaborative We believe that change is only possible when everyone works together for the same purpose, after all, cooperativism is in our DNA. Besides this, we know that as important as it is to provide affordable financial solutions it is just as important to value growing together,

Nomura is a global financial services group with an integrated network spanning approximately 30 countries and regions. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its three business divisions: Wealth Management, Inves

Somos el grupo financiero líder en el Perú con una vasta experiencia en el mercado peruano. Contamos con una sólida plataforma de Banca Comercial reforzada por una importante presencia en Banca de Inversión en Latinoamérica destinada a desarrollar el potencial de la región y acompañar a nuestros cli

At Ameriprise Financial, we have been helping people feel more confident about their financial future for 130 years. With extensive investment advice, asset management and insurance capabilities and a nationwide network of approximately 10,000 financial advisors*, we have the strength and expertise
Manappuram Finance Ltd. is one of India’s largest and most trusted gold loan companies, with 4,199 branches across the length and breadth of the country. It currently has nearly Rs. 157.65 billion worth assets under management (AUM), and 20,185 employees. Promoted by Shri. V.P. Nandakumar, the curr

Max Group is a $7 billion diversified Indian conglomerate founded by Mr. Analjit Singh with a strong presence across Senior Care, Life Insurance, and Real Estate. Guided by a purpose-driven approach, we aim to create meaningful solutions that improve lives and deliver lasting value. Max India Lim
.png)
Defense companies get the bulk of their revenue from one customer -- the U.S. government. Fortunately, that customer has deep pockets and a...
A small satellite named Deloitte-1 is hunting for hackers in orbit. Launched in March, it's the first of nine spacecraft the consulting firm...
BRUSSELS — The United States has hit out at an upcoming EU space law that it says would place “unacceptable regulatory burdens” on American...
Key market opportunities in the space cybersecurity sector include increased reliance on satellite communications, heightened cyber threats,...
Deloitte has launched a satellite to serve as an on-orbit cybersecurity range to test out defenses against cyberattacks.
NASA has barred Chinese nationals from accessing its premises and assets, even those who hold visas that permit them to reside in the USA.
Washington's tech landscape has been reshaped by a whirlwind of political change, regulatory reversals, and an AI gold rush.
Though the Founding Fathers could not have anticipated today's global security landscape, they did navigate a complex threat environment...
Get a list of some of the market's best cybersecurity stocks. In this age of rampant hacking, most companies with a digital presence need...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Rocket Companies is http://rocketcompanies.com/.
According to Rankiteo, Rocket Companies’s AI-generated cybersecurity score is 814, reflecting their Good security posture.
According to Rankiteo, Rocket Companies currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Rocket Companies is not certified under SOC 2 Type 1.
According to Rankiteo, Rocket Companies does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Rocket Companies is not listed as GDPR compliant.
According to Rankiteo, Rocket Companies does not currently maintain PCI DSS compliance.
According to Rankiteo, Rocket Companies is not compliant with HIPAA regulations.
According to Rankiteo,Rocket Companies is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Rocket Companies operates primarily in the Financial Services industry.
Rocket Companies employs approximately 573 people worldwide.
Rocket Companies presently has no subsidiaries across any sectors.
Rocket Companies’s official LinkedIn profile has approximately 25,918 followers.
Rocket Companies is classified under the NAICS code 52, which corresponds to Finance and Insurance.
Yes, Rocket Companies has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/rocket-companies.
Yes, Rocket Companies maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/rocket-companies1.
As of December 11, 2025, Rankiteo reports that Rocket Companies has not experienced any cybersecurity incidents.
Rocket Companies has an estimated 30,346 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, Rocket Companies has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.