Kentico
Kentico declares 5 subprocessors in its subprocessor list, which we last checked on Nov 11, 2026 (evidence). They include Microsoft, Cloudflare and SendGrid. No published changes since we first read it on Sep 27, 2026.
Not listed by any tracked vendor.
Not loaded by any published homepage.
Subprocessors CSV of Kentico's subprocessors · Atom feed of Kentico's subprocessors DORA draft CSV of Kentico's subprocessors as declared by Kentico what's this? ·
5 third parties.
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Auth0 | |||
| Cloudflare | |||
| Freshworks Inc | |||
| Microsoft | Please search for the keywords “Data Center” to find the complete list of available locations. | ||
| SendGrid |
Web TechnologiesCSV of Kentico's web technologies · Atom feed of Kentico's web technologies
Kentico's homepage made 101 requests to 7 domains, and 4 services controlled by another company.
4 third parties by category: CDN 2Analytics 1Other 1
3 tracked companies loaded by the homepage are not in Kentico's subprocessor list. A website can use a service without it processing customer data.
ComplianceCSV of Kentico's compliance · Atom feed of Kentico's compliance
- Certified
- Says it complies with
Certifications as Kentico's trust center lists them; reports are usually shared on request (evidence)
Security recordCSV of Kentico's security record · Atom feed of Kentico's security record
What public security catalogs list for Kentico, in their words.
Known exploited vulnerabilities
4 vulnerabilities in Kentico's software that CISA lists as exploited in the wild.
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2025-2749 | Kentico Xperience | Kentico Xperience Path Traversal Vulnerability | |
| CVE-2025-2746 | Xperience CMS | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | |
| CVE-2025-2747 | Xperience CMS | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability | |
| CVE-2019-10068 | Xperience | Kentico Xperience Deserialization of Untrusted Data Vulnerability |
Source: CISA Known Exploited Vulnerabilities catalog (evidence)
Incidents reported by Kentico's subprocessorsCSV of incidents reported by vendors Kentico lists · Atom feed of incidents reported by vendors Kentico lists
190 reported incidents in the last 30 days, by 1 of the vendors Kentico lists as a subprocessor.
A subprocessor list names a company, not the service an incident touched. This does not show that Kentico was involved.
And 165 more. All of them: CSV · Who is around them.
ChangesCSV of Kentico's changes · Atom feed of Kentico's changes
See the list as we read it on any date: Time machine
None since tracking began.