Torque Data is a data services company. The organization's specific products and service offerings are currently under redevelopment and not publicly detailed at this time. UpGuard continuously monitors the security posture of Torque Data using open-source, commercial, and proprietary threat intelligence feeds. Our analysis is centered on objective, externally verifiable information.
Torque Data's security rating is based on the analysis of their external attack surface. The higher the rating, the better their security posture. Start a free trial to get a more in-depth risk assessment for Torque Data.
Last updated April 9, 2026
This vendor risk report is based on UpGuard's continuous monitoring of Torque Data's security posture using open-source, commercial, and proprietary threat intelligence feeds. The results are summarized into a security rating based on the analysis of hundreds of individual checks across five risk categories: website security, email security, phishing & malware, brand & reputation risk, and network security.
When secure cookies are not used, there is an increased risk of third parties intercepting information contained in these cookies. The website configuration should be changed so that all 'Set-Cookie' headers include 'secure'.
Browsers may display this website's content in frames. This can lead to clickjacking attacks.
No valid Content Security Policy is implemented. This increases the risk of XSS and clickjacking attacks.
Browsers may interpret files as a different MIME type than what is specified in the Content-Type HTTP header. This can lead to MIME confusion attacks.
Ensuring the server information header is not exposed reduces the ability of attackers to exploit certain vulnerabilities.
Information about specific technology used on the server is obscured.
Using HttpOnly cookies reduces the risk of client side script attacks, by preventing cookies being read on the client.
The website's Referrer Policy is not configured to allow unsafe information to be sent in the referrer header.
Ensuring the ASP.NET version header is not exposing a specific version makes it harder for attackers to exploit certain vulnerabilities.
Ensuring the ASP.NET version header is not exposed makes it harder for attackers to exploit certain vulnerabilities.
The page appears to be maintained.
DMARC policy is p=none. This provides no protection against fraudulent emails. The DMARC policy should be migrated to p=quarantine, and eventually p=reject.
DMARC protects against fraudulent emails being sent from a domain.
Sender Policy Framework (SPF) records prevent spammers from sending messages with forged addresses.
Sender Policy Framework (SPF) record strictly enforces specific domains allowed to send email on its behalf.
Sender Policy Framework (SPF) record passes basic syntax checks.
Sender Policy Framework (SPF) record does not include the ptr mechanism.
The 'FTP' service is running and exposed to the internet. The configuration of the server should be reviewed and unnecessary ports closed.
The 'IMAP' service is running and exposed to the internet. The configuration of the server should be reviewed and unnecessary ports closed.
The 'POP3' service is running and exposed to the internet. The configuration of the server should be reviewed and unnecessary ports closed.
The 'SMTP' service is running and exposed to the internet. The configuration of the server should be reviewed and unnecessary ports closed.
The 'SSH' service is running and exposed to the internet. The configuration of the server should be reviewed and unnecessary ports closed.
The 'DNS' service is running and exposed to the internet. The configuration of the server should be reviewed and unnecessary ports closed.
The 'HTTP' service is running and exposed to the internet. The configuration of the server should be reviewed and unnecessary ports closed.
The 'HTTPS' service is running and exposed to the internet. The configuration of the server should be reviewed and unnecessary ports closed.
DNSSEC records prevent third parties from forging the records that guarantee a domain's identity. DNSSEC should be configured for this domain.
The domain does not contain a valid Certification Authority Authorization (CAA) record. A CAA record indicates which Certificate Authorities (CAs) are authorized to issue certificates for a domain.
No unregistered MX records that could lead to receiving mail on behalf of the target organization were detected.
No dangling DNS records that could lead to subdomain takeover were detected.
SSL is the standard encryption method for browsing websites. Enabling SSL requires installing an SSL certificate on the site.
The domain is still accessible over HTTP. All HTTP requests should be redirected to HTTPS.
The site's hostname does not match the SSL certificate. The domain name should be added to the certificate, either as a Subject Alternative Name or as the Common Name.
SSL certificate has expired. The certificate will need to be renewed for connections to your domain to be trusted.
Without HSTS enforced, people browsing this site are more susceptible to man-in-the-middle attacks. The server should be configured to support HSTS.
Weak cipher suites can potentially be broken by a well resourced attacker, and should not be supported by the server unless very old devices or browsers must be supported.
The site's certificate chain was checked against our list of revoked certificates.
The certificate presented by this domain was issued by a trusted certificate authority.
No insecure SSL/TLS versions are available for this site.
A complete SSL certificate chain was presented by the server for this domain.
SSL intermediate and root certificates do not expire within 20 days.
The SSL certificate presented by the server has an expiration period shorter than 398 days.
SSL certificate does not expire in less than 20% of its total valid period.
Industry standard SHA-256 encryption in use.
TLS connections to the site use a strong Diffie-Hellman prime during key exchange.
The site's public certificate provides at least 112 bits of security strength.
No cloud storage service configured to allow anonymous file listing was detected.
The domain index is not a listable directory.
This website does not appear to contain malicious code.
This IP/domain has not been reported as a source of botnet activity in the last 30 days.
This IP/domain did not appear on any list of IPs and domains known to perform brute force login attempts in the last 30 days.
This IP/domain has been reported for distributing malware in the last 30 days.
This IP/domain has not been reported for performing unsolicited scanning in the last 30 days.
This website does not appear to be attempting to install unwanted software.
This site does not appear to be a forgery or imitation of another website.
This IP/domain has not been reported as a phishing site in the last 30 days.
This IP/domain has not been reported as a source of botnet activity in the last 90 days.
This IP/domain did not appear on any list of IPs and domains known to perform brute force login attempts in the last 90 days.
This IP/domain has been reported for distributing malware in the last 90 days.
This IP/domain has not been reported for performing unsolicited scanning in the last 90 days.
This IP/domain has not been reported as a phishing site in the last 90 days.
Exim Internet Mailer 4.96.2 has vulnerabilities which might be exploitable under certain conditions. Affected domains should be checked to determine which vulnerabilities might pose a risk.
Exim Internet Mailer 4.98.2 has vulnerabilities which might be exploitable under certain conditions. Affected domains should be checked to determine which vulnerabilities might pose a risk.
Jquery 1.11.1 has vulnerabilities which might be exploitable under certain conditions. Affected domains should be checked to determine which vulnerabilities might pose a risk.
OpenSSH 5.3 has vulnerabilities which might be exploitable under certain conditions. Affected domains should be checked to determine which vulnerabilities might pose a risk.
A bug in OpenSSL's implementation of the TLS heartbeat extension allows access to portions of memory on the targeted host e.g. cryptographic keys and passwords.
The server does not support SSLv3, and is not vulnerable to the POODLE attack.
The server does not offer RSA_EXPORT cipher suites, so clients are not vulnerable to the FREAK attack.
The server is using strong Diffie-Hellman parameters and is not vulnerable to the Logjam attack.
Compare Torque Data's security performance with other companies in their industry.
Amazon.com operates an online retail platform offering a wide range of consumer products, including electronics, books, clothing, and household goods. The company also provides cloud computing services through Amazon Web Services and operates digital streaming and subscription services.
Commonwealth Bank provides financial services including personal and business banking accounts, credit cards, home loans, insurance products, and investment services. The company operates retail branches and digital banking platforms across Australia, offering foreign exchange services and institutional banking solutions.
Salesforce provides cloud-based customer relationship management (CRM) software and applications that help businesses manage sales, customer service, marketing, commerce, and data operations. The company offers AI-powered tools and autonomous agents that automate workflows, analyze customer data, and enable teams across different departments to collaborate on a unified platform.
Yahoo! operates an internet media platform providing web portal services including email, news aggregation, search functionality, weather information, and financial data. The company delivers content across multiple categories such as sports, entertainment, lifestyle, and politics to users in various international markets.
YouTube operates an online video-sharing platform where users can upload, view, rate, share, and comment on content. The service hosts a wide variety of user-generated and corporate media videos, including music videos, educational content, and entertainment programming.
Verizon provides wireless telecommunications services, home internet connectivity, and digital television offerings to consumer and business customers. The company operates mobile networks and fiber-optic infrastructure to deliver voice, data, and video services across the United States.
The ultimate guide to attack surface and third-party risk management – actionable advice for security teams, managers, and executives.
Security research and global news about data breaches.
Explore resourcesArticles, news, and research on third-party risk management.
Explore resourcesArticles, news, and research on attack surface management.
Explore resourcesArticles, news, and research on cybersecurity.
Explore resources