Cyber Insurer’s Inaugural List Based on Technology Providers Whose Products Were Vulnerable to Exploitation by Threat Actors

Coalition, the world's first Active Insurance provider¹ designed to prevent digital risk before it strikes, today released the Risky Tech Ranking to increase public awareness of the technology providers whose products were vulnerable to exploitation by threat actors.

Designed to help businesses make better-informed decisions about the technologies they adopt, the Risky Tech Ranking was created by applying publicly available data to a proprietary methodology formulated by Coalition. Updated quarterly, the Ranking scores vendors by multiplying the number of vulnerabilities impacting a vendor’s products by the average Coalition Exploit Scoring System (Coalition ESS) score.

The top 10 riskiest vendors for Q1 2025, according to Coalition’s ranking scores, are:

1. Microsoft (98.3)
2. Google (32.2)
3. Apple (30.9)
4. Linux (30.3)
5. Adobe (25.5)
6. Cisco (24.7)
7. Oracle (23.6)
8. Apache (21.5)
9. D-Link (20.6)
10. Ivanti (20.2)

“The severity of today’s cyber landscape warrants greater visibility across technology providers selling to businesses globally,” said Tiago Henriques, Chief Underwriting Officer at Coalition. “The Risky Tech Ranking is meant to serve as an educational tool for businesses and an impetus for technology providers to make popular technologies more secure. We hope this not only provides businesses worldwide with greater peace of mind when making enterprise purchasing decisions, but also contributes to a safer digital environment for everyone.”

With Coalition’s Risky Tech Ranking, the company also released the second iteration of its patented vulnerability scoring system, Coalition ESS, to help risk managers mitigate potential cyber threats. Coalition ESS is a security risk prioritization scoring system that leverages real-time monitoring and dynamic scoring to enable businesses of all sizes to efficiently understand which vulnerabilities to patch first.

“One cannot mention the severity of cyber threats without discussing the frequency: we are seeing more vulnerabilities and exploitations materialize than ever before,” continued Henriques. “Between issuing a modernized Scoring System and releasing a risk ranking of vendors that is data-driven, it is our aim to equip businesses with everything they need to select a secure technology stack that won’t expose them to undue risk."

To view the full Risky Tech Ranking, visit: https://rtr.coalitioninc.com/. For a full breakdown of the Risky Tech Ranking methodology, visit: https://rtr.coalitioninc.com/methodology.

About Coalition

Coalition is the world's first Active Insurance provider designed to help prevent digital risk before it strikes. By combining comprehensive insurance coverage and cybersecurity tools, Coalition helps businesses manage and mitigate potential cyber attacks. Leveraging its relationships with leading global insurers and capacity providers, including Coalition Insurance Company, Coalition offers Active Insurance products to businesses in the United States, the United Kingdom, Canada, Australia, and Germany. Policyholders can receive automated cyber alerts and access expert advice and global third-party risk management tools through Coalition's cyber risk management platform, Coalition Control^®.

¹ In the U.S., cyber insurance is provided by Coalition Insurance Solutions, Inc. (CA License #0L761550) on behalf of a number of insurers, including Coalition Insurance Company (NY License #29530). Both Coalition Insurance Solutions, Inc. and Coalition Insurance Company are wholly-owned subsidiaries of Coalition, Inc., a Delaware corporation.

View source version on businesswire.com: https://www.businesswire.com/news/home/20250408484138/en/