Red Hat

redhat.com

8 tracked vendors name Red Hat as a subprocessor, including Microsoft, Mailgun and Deepgram. We have not found a subprocessor list published by Red Hat. We monitor 7 of its documents, which we last checked on Nov 11, 2026.

Subprocessors

None extracted.

Web TechnologiesCSV of Red Hat's web technologies · Atom feed of Red Hat's web technologies

Red Hat's homepage made 226 requests to 32 domains, 19 services controlled by another company, and 1 domain not identified.

Advertising (7): Google Cloud, MNTN, Inc., Basis Technologies (Basis; formerly Centro); reviewed: Claritas, LLC, FreeWheel; usually detected as Advertising: The Trade Desk, Inc., X Corp.Analytics (6): ZoomInfo, Contentsquare, LinkedIn, Meta, Cloudflare; usually detected as Analytics: BomboraMarketing automation (1): AdobeLive chat (1): Qualified.com, Inc.A/B Testing (1): UserTestingCookie compliance (1): TrustArcOther (2): usually detected as Issue trackers: Sentry; Surveys: Qualtrics

19 third parties by category: Advertising 7Analytics 6Marketing automation 1Live chat 1A/B Testing 1Cookie compliance 1Other 2

Third parties 19 · 118 requests
Adobe Marketo 14% of the page's requests 31
Qualified.com, Inc. Qualified 13% of the page's requests 30
Google Cloud DoubleClick Floodlight Google Analytics Google Tag Manager YouTube 7% of the page's requests 16
TrustArc TrustArc 4% of the page's requests 9
ZoomInfo Zoominfo 2% of the page's requests 5
MNTN, Inc. Mountain 2% of the page's requests 4
Contentsquare Contentsquare 1% of the page's requests 3
LinkedIn Linkedin Insight Tag 1% of the page's requests 3
Meta Facebook Pixel 2.9.435 1% of the page's requests 3
Qualtrics Qualtrics 1% of the page's requests 3
Basis Technologies (Basis; formerly Centro) Basis Technologies <1% of the page's requests 2
UserTesting UserZoom <1% of the page's requests 2
Bombora ml314.com <1% of the page's requests 1
Claritas, LLC trkn.us <1% of the page's requests 1
Cloudflare Cloudflare Browser Insights <1% of the page's requests 1
FreeWheel bidr.io <1% of the page's requests 1
Sentry sentry.io <1% of the page's requests 1
The Trade Desk, Inc. adsrvr.org <1% of the page's requests 1
X Corp. twitter.com <1% of the page's requests 1
Unknown 1 · 1 request

100.20.58.101

First party 1 · 107 requests
Red Hat Adobe Audience Manager Adobe Experience Platform Launch Akamai Akamai Bot Manager Apache HTTP Server Drupal 10 HSTS Open Graph PHP Priority Hints Sentry core-js 3.32.2 lit-element 4.2.1 lit-html 3.3.1 47% of the page's requests 107

12 tracked companies loaded by the homepage are not in Red Hat's subprocessor list. A website can use a service without it processing customer data.

Subprocessor of (8)CSV of the companies listing Red Hat · Atom feed of the companies listing Red Hat

8 companies
  • Adobe adobe.com Adobe leverages OpenShift on top of its cloud infrastructure to orchestrate, scale, and manage its services. OpenShift is an implementation of Kubernetes, which enables container orchestration, scaling, and service management.
  • Deepgram deepgram.com A security-focused and scalable private registry platform for managing content across globally distributed datacenter and cloud environments.
  • Mailgun mailgun.com OS, Support
  • Microsoft microsoft.com Deploying, operating, and troubleshooting Azure Red Hat OpenShift
  • Rackspace rackspace.com Products & Services – Storage
  • Sinch sinch.com OS, Support
  • Syndigo syndigo.com The duration of the Processing is generally determined by the services agreement with the Sub-Processor.; The nature of the Processing involves: collection, , organization, storage, retrieval for the purposes of delivering the API Infrastructure.; The subject matter of the Processing pertains to the provision of Application Programming Interface Infrastructure (3scale) services pursuant to the services agreement with the Sub-Processor.
  • TierPoint tierpoint.com Products & Services

ComplianceCSV of Red Hat's compliance · Atom feed of Red Hat's compliance

FedRAMP Marketplace

OfferingStatusImpactAgenciesSince
Red Hat OpenShift Service on AWS (ROSA)AuthorizedHigh4

FedRAMP status from the FedRAMP Marketplace (evidence)

Security recordCSV of Red Hat's security record · Atom feed of Red Hat's security record

What public security catalogs list for Red Hat, in their words.

Known exploited vulnerabilities

9 vulnerabilities in Red Hat's software that CISA lists as exploited in the wild.

CVEProductVulnerabilityListed
CVE-2015-3246LibuserRed Hat Libuser Race Condition Vulnerability
CVE-2015-5287Automatic Bug Reporting ToolRed Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
CVE-2018-14667JBoss RichFaces FrameworkRed Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
CVE-2021-3560PolkitRed Hat Polkit Incorrect Authorization Vulnerability
CVE-2021-4034PolkitRed Hat Polkit Out-of-Bounds Read and Write Vulnerability used by ransomware
CVE-2010-0738JBossRed Hat JBoss Authentication Bypass Vulnerability used by ransomware
CVE-2010-1428JBossRed Hat JBoss Information Disclosure Vulnerability used by ransomware
CVE-2010-1871JBoss Seam 2Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
CVE-2017-12149JBoss Application ServerRed Hat JBoss Application Server Remote Code Execution Vulnerability used by ransomware

Source: CISA Known Exploited Vulnerabilities catalog (evidence)

Service statusCSV of Red Hat's status page incidents · Atom feed of Red Hat's status page incidents

Aug 15: no incident reportedAug 16: no incident reportedAug 17: no incident reportedAug 18: 2 incidents (2 major)Aug 19: no incident reportedAug 20: no incident reportedAug 21: no incident reportedAug 22: no incident reportedAug 23: no incident reportedAug 24: no incident reportedAug 25: no incident reportedAug 26: no incident reportedAug 27: no incident reportedAug 28: no incident reportedAug 29: no incident reportedAug 30: no incident reportedAug 31: 1 incident (1 major)Sep 1: no incident reportedSep 2: no incident reportedSep 3: no incident reportedSep 4: no incident reportedSep 5: no incident reportedSep 6: no incident reportedSep 7: no incident reportedSep 8: no incident reportedSep 9: no incident reportedSep 10: no incident reportedSep 11: no incident reportedSep 12: 1 incident (1 major)Sep 13: no incident reportedSep 14: 3 incidents (1 critical, 2 major)Sep 15: 1 incident (1 minor)Sep 16: no incident reportedSep 17: 1 incident (1 major)Sep 18: no incident reportedSep 19: no incident reportedSep 20: 1 incident (1 critical)Sep 21: no incident reportedSep 22: 3 incidents (3 minor)Sep 23: no incident reportedSep 24: no incident reportedSep 25: 1 incident (1 major)Sep 26: no incident reportedSep 27: no incident reportedSep 28: no incident reportedSep 29: no incident reportedSep 30: no incident reportedOct 1: 1 incident (1 minor)Oct 2: no incident reportedOct 3: no incident reportedOct 4: no incident reportedOct 5: 1 incident (1 minor)Oct 6: no incident reportedOct 7: no incident reportedOct 8: no incident reportedOct 9: 10 incidents (10 minor)Oct 10: 1 incident (1 minor)Oct 11: no incident reportedOct 12: 1 incident (1 major)Oct 13: 1 incident (1 major)Oct 14: 2 incidents (2 major)Oct 15: no incident reportedOct 16: no incident reportedOct 17: no incident reportedOct 18: no incident reportedOct 19: 1 incident (1 minor)Oct 20: 1 incident (1 minor)Oct 21: 2 incidents (1 major, 1 no impact stated)Oct 22: no incident reportedOct 23: 3 incidents (2 major, 1 minor)Oct 24: 1 incident (1 major)Oct 25: no incident reportedOct 26: 1 incident (1 major)Oct 27: no incident reportedOct 28: no incident reportedOct 29: 2 incidents (1 critical, 1 minor)Oct 30: 1 incident (1 minor)Oct 31: no incident reportedNov 1: no incident reportedNov 2: no incident reportedNov 3: no incident reportedNov 4: no incident reportedNov 5: 1 incident (1 major)Nov 6: no incident reportedNov 7: no incident reportedNov 8: no incident reportedNov 9: no incident reportedNov 10: no incident reportedNov 11: 1 incident (1 no impact stated)Nov 12: no incident reported

90 days agotoday

  • 45 incidents in 90 days
  • 21 major or critical
  • 8 h 55 min typical time to resolve
  • 15 days longest major
BeganIncidentImpactLasted
access.redhat.com Community and Discussionsno impact statedongoing
Docs.redhat.com - Intermittent performance degradationmajor6 h 57 min
access.redhat.com - Community and Discussionsminor2 days
API errorscritical2 h 12 min
Red Hat Lightspeed Compliance Degraded Performanceminor4 days
Red Hat Connect Major Outage - Investigatingmajor1 h 48 min
Quayio Is Facing Intermittent 500s Due to a Service Maintenancemajor8 h 55 min
access.redhat.com - Security Pages - CVE Outagemajor12 days

Incidents per month

0 15 30 Dec 2025: 4 incidents (2 critical, 1 major, 1 minor) · typical time to resolve 1 h 6 min Jan 2026: 7 incidents (1 critical, 5 major, 1 no impact stated) · typical time to resolve 3 h 2 min Feb 2026: 5 incidents (2 critical, 2 major, 1 minor) · typical time to resolve 6 h Mar 2026: 4 incidents (3 major, 1 minor) · typical time to resolve 2 days Apr 2026: 3 incidents (2 major, 1 no impact stated) · typical time to resolve 13 days May 2026: 3 incidents (1 critical, 2 major) · typical time to resolve 3 h 5 min Jun 2026: 5 incidents (3 critical, 1 major, 1 minor) · typical time to resolve 3 h 4 min Jul 2026: 13 incidents (3 critical, 5 major, 5 minor) · typical time to resolve 3 h 16 min Aug 2026: 5 incidents (5 major) · typical time to resolve 2 h 59 min Sep 2026: 11 incidents (2 critical, 5 major, 4 minor) · typical time to resolve 20 h 18 min Oct 2026: 29 incidents (1 critical, 9 major, 18 minor, 1 no impact stated) · typical time to resolve 7 h 2 min Nov 2026: 2 incidents (1 major, 1 no impact stated) · typical time to resolve 6 h 57 min Dec 2025Jan 2026Feb Mar Apr May Jun Jul Aug Sep Oct Nov

critical major minor no impact stated

Components affected

ComponentIncidentsBar
API Manager11
Ask5
Registry4
Content3
Partner Container Certification Workflow3
Security Pages3
API2
Ansible Automation Platform - Automation Hub2

As Red Hat's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)

ChangesCSV of Red Hat's changes · Atom feed of Red Hat's changes

None since tracking began.

Rating badge for Red Hat's site

Red Hat transparency rating

It updates with the rating.

<a href="https://thirdpartyindex.com/vendors/red-hat"><img src="https://thirdpartyindex.com/badge/red-hat.svg" alt="Red Hat transparency rating on Third Party Index" height="20"></a>
[![Red Hat transparency rating on Third Party Index](https://thirdpartyindex.com/badge/red-hat.svg)](https://thirdpartyindex.com/vendors/red-hat)