Kentico

kentico.com

Kentico declares 5 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Microsoft, Cloudflare and SendGrid. No published changes since we first read it on Sep 27, 2026.

Subprocessors CSV of Kentico's subprocessors · Atom feed of Kentico's subprocessors DORA draft CSV of Kentico's subprocessors as declared by Kentico what's this? · 

5 third parties.

NamePurposeLocationListed since
Auth0
Cloudflare
Freshworks Inc
Microsoft Please search for the keywords “Data Center” to find the complete list of available locations.
SendGrid

Web TechnologiesCSV of Kentico's web technologies · Atom feed of Kentico's web technologies

Kentico's homepage made 101 requests to 7 domains, and 4 services controlled by another company.

CDN (2): UNPKG, jsDelivrAnalytics (1): Google CloudOther (1): reviewed as Digital asset management: Cloudinary

4 third parties by category: CDN 2Analytics 1Other 1

Third parties 4 · 50 requests
Cloudinary cloudinary.com 34% of the page's requests 34
Google Cloud Google Analytics Google Tag Manager 11% of the page's requests 11
UNPKG Unpkg 4% of the page's requests 4
jsDelivr jsDelivr <1% of the page's requests 1
First party 1 · 51 requests
Kentico Amazon CloudFront Amazon Web Services Cloudinary IIS 10.0 Kentico CMS Microsoft ASP.NET Open Graph PWA Priority Hints Windows Server core-js 3.41.0 jQuery 3.5.1 lit-element 4.2.0 lit-html 3.3.0 50% of the page's requests 51

3 tracked companies loaded by the homepage are not in Kentico's subprocessor list. A website can use a service without it processing customer data.

ComplianceCSV of Kentico's compliance · Atom feed of Kentico's compliance

Certified
Says it complies with

Certifications as Kentico's trust center lists them; reports are usually shared on request (evidence)

Security recordCSV of Kentico's security record · Atom feed of Kentico's security record

What public security catalogs list for Kentico, in their words.

Known exploited vulnerabilities

4 vulnerabilities in Kentico's software that CISA lists as exploited in the wild.

CVEProductVulnerabilityListed
CVE-2025-2749Kentico XperienceKentico Xperience Path Traversal Vulnerability
CVE-2025-2746Xperience CMSKentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2025-2747Xperience CMSKentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2019-10068XperienceKentico Xperience Deserialization of Untrusted Data Vulnerability

Source: CISA Known Exploited Vulnerabilities catalog (evidence)

Incidents reported by Kentico's subprocessorsCSV of incidents reported by vendors Kentico lists · Atom feed of incidents reported by vendors Kentico lists

190 reported incidents in the last 30 days, by 1 of the vendors Kentico lists as a subprocessor.

A subprocessor list names a company, not the service an incident touched. This does not show that Kentico was involved.

DateCompanyIncidentImpactLasted
SendGridMMS Delivery Failures from Twilio to GCI United States minor3 min
SendGridSMS Delivery Failures from Twilio 10DLC to AT&T United States minor4 h 3 min
SendGridSMS Delivery Failures from Twilio to Orange Sierra Leone minorongoing
SendGridSMS Delivery Failures From Long Code Numbers to AT&T in the US minor1 h 19 min
SendGridSMS Delivery Delays from Twilio to MTS Kazakhstan minorongoing
SendGridSMS Delivery Failures from a Subset of Twilio Phone Numbers to Tcell Tajikistan minorongoing
SendGridMMS Delivery Delays from a Subset of Twilio Long Codes to Multiple Small Networks in United States minorongoing
SendGridSMS Delivery Failures from a Subset of Twilio Phone Numbers to K-Cell Kazakhstan minor7 h 23 min
SendGridVoice Call Failures in JP1 minor3 h 51 min
SendGridSMS Delivery Failures from Twilio to Turkcell Turkey minor3 h 54 min
SendGridRetroactive Incident Impacting Twilio Usage APIs no impact stated1 min
SendGridIssue resolved minor1 h 43 min
SendGridSMS Delivery Receipt Delays from Twilio Phone Numbers to Movistar Venezuela minor3 h 26 min
SendGridGateway API (Lookup API) Failure Increase on Verizon in United States minor10 h 23 min
SendGridWhatsApp Business API Message Send Failures minor16 h 29 min
SendGridVoice Call Failures from a Subset of Twilio Phone Numbers to Chile minor19 h 20 min
SendGridVoice Call Audio Quality Degradation, Silent and One-Way Audio between Twilio and Multiple Networks in United Kingdom minor5 h 18 min
SendGridSMS Delivery Delays and Failures from a Subset of Twilio Alphanumeric Sender IDs and Long Codes to Multiple Networks in Italy minor3 h 14 min
SendGridSMS Delivery Delays and Failures from Twilio to Spusu United Kingdom minor3 h 26 min
SendGridSMS Delivery Receipt Delays from Twilio to Bouygues Telecom France minor13 h 31 min
SendGridSMS Delivery Failures from Network Subscribers in Germany to a Subset of Twilio Long Codes minor8 h 40 min
SendGridSMS Delivery Failures from Twilio to ETL Laos minor16 h 8 min
SendGridSMS Delivery Failures from Twilio to MTN Nigeria minor6 h
SendGridSilent Network Authentication (SNA) Failure Increase and Gateway API (Lookup API) Failure Increase on EnStream in Canada minor14 h 12 min
SendGridSMS Delivery Receipt Delays from Twilio to Globe Philippines minor13 h 16 min

And 165 more. All of them: CSV · Who is around them.

ChangesCSV of Kentico's changes · Atom feed of Kentico's changes

See the list as we read it on any date: Time machine

None since tracking began.

Rating badge for Kentico's site

Kentico transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/kentico"><img src="https://thirdpartyindex.com/badge/kentico.svg" alt="Kentico transparency rating on Third Party Index" height="20"></a>
[![Kentico transparency rating on Third Party Index](https://thirdpartyindex.com/badge/kentico.svg)](https://thirdpartyindex.com/vendors/kentico)