Is Ally safe?
Review Ally security risks.

Nudge Security provides security profiles for thousands of SaaS apps, including Ally. This public profile has the basics you’ll need for a vendor risk assessment. For more details on Ally, including breach history, start a free trial of Nudge Security.
Try it free
Explore demos
Try it free
Explore demo
Security ProfilesPersonal FinanceAlly
Ally Security Profile

CATEGORY

Personal Finance

Organization Details

What is

Ally

?

Ally is a financial services company that provides a variety of products and services, including banking, investing, home loans, and auto finance.

HEADQUARTERS

HOSTING

HOSTING LOCATION

Who's Using Ally in your org?

Nudge Security discovers every user for every SaaS app within minutes of starting a free trial.

Learn more

Security Program

SECURITY CERTIFICATIONS

SOC2 Compliance
PCI Compliant
HIPAA Compliant
SOC2 Compliance
SOC 2 Compliant
GDPR Compliant
ISO 27001 Compliant
FedRamp Compliant
CSA Star Level 1
Compliant

SECURITY PAGE

https://ally.com/security/

SECURITY PORTAL

BUG BOUNTY

VULNERABILITY DISCLOSURE

TERMS OF SERVICE

https://ally.com/legal/

STATUS PAGE

SUBDOMAINS

  • www.ally.com
  • static-assets-p.invest.akst.ally.com
  • ccm-otp-qa-h-scrt.dark.hgiebqv1vafp.services.ally.com
  • secure-cit3.ally.com
  • secure-fix.ally.com
  • ccm-otp-cap-h-57602.dark.hgiebqv1vafp.services.ally.com
  • explore.ally.com
  • video-dev.ally.com
  • ccm-otp-dev-f-testj.live.atjdlrrthwan.services.ally.com
  • secure.akst.ally.com
  • community.ally.com
  • staging.ally.com
  • www.akst.ally.com
  • link.ally.com
  • cap.securedealer.ally.com
  • autodiscover.ally.com
  • mobile-dr.invest.akst.ally.com
  • securemail.ally.com
  • video.ally.com
  • ideas.ally.com
  • ccm-otp-cap-h-redep.live.hgiebqv1vafp.services.ally.com
  • secure-qa3.akst.ally.com
  • www-staging.ally.com
  • ccm-otp-cap-h-57602.live.hgiebqv1vafp.services.ally.com
  • metrics.ally.com
  • mi.ally.com
  • secure-staging.ally.com
  • explore-products-rates.ally.com
  • secure-prodsupt.akst.ally.com
  • secure-qa2.akst.ally.com
  • ccm-otp-qa-h-redep.dark.hgiebqv1vafp.services.ally.com
  • tapi-dr.invest.akst.ally.com
  • research.ally.com
  • ccm-otp-cap-h-dns.live.hgiebqv1vafp.services.ally.com
  • mre-shebang-dev-f-apic-1168.oea7t488o3np.services.ally.com
  • secure-qa2.ally.com
  • ccm-otp-cap-h-dns.dark.hgiebqv1vafp.services.ally.com
  • media.ally.com
  • securefiles-portal.ally.com
  • secure-cit1.ally.com
  • securedealer.ally.com
  • secure-uat2.akst.ally.com
  • static-assets.invest.akst.ally.com
  • smetrics.ally.com
  • static-assets-q.invest.akst.ally.com
  • secure.ally.com
  • ccm-otp-dev-f-reg.live.atjdlrrthwan.services.ally.com
  • uat-securesmartcash.ally.com
  • secure-qa1.akst.ally.com
  • community.akst.ally.com
  • jobs.akst.ally.com
  • secure-uat2.ally.com
  • video-staging.ally.com
  • secure-prodsupt.ally.com
  • ccm-otp-qa-r-qa1.dark.hgiebqv1vafp.services.ally.com
  • secure-cit2.ally.com
  • secure-cap.ally.com
  • go.ally.com
  • my.ally.com
  • m.ally.com
  • ccm-otp-qa-r-qa1.live.hgiebqv1vafp.services.ally.com
  • ccm-otp-qa-h-57602.live.hgiebqv1vafp.services.ally.com
  • api-dr.invest.akst.ally.com
  • ccm-otp-qa-h-57602.dark.hgiebqv1vafp.services.ally.com
  • image.email.ally.com
  • secure-qa3.ally.com
  • mre-shebang-dev-f-demo.oea7t488o3np.services.ally.com
  • sit.securedealer.ally.com
  • jobs.ally.com
  • ccm-otp-cap-r-qa1.dark.hgiebqv1vafp.services.ally.com
  • secure-dev.ally.com
  • securesmartcash.ally.com
  • secure-qa1.ally.com
  • forms.ally.com
  • ccm-otp-cap-h-redep.dark.hgiebqv1vafp.services.ally.com
  • hec1.ally.com
  • chat.ally.com
  • image.alerts.ally.com
  • ccm-otp-qa-h-redep.live.hgiebqv1vafp.services.ally.com
  • go.akst.ally.com
  • ccm-otp-qa-h-scrt.live.hgiebqv1vafp.services.ally.com
  • ccm-otp-cap-r-qa1.live.hgiebqv1vafp.services.ally.com
  • dealerbeyond.ally.com
Ally breach history
Has Ally experienced a recent breach? Start a free trial of Nudge Security for a full breach history and other security program details.
Try Nudge free

Authentication

AUTHENTICATION / SSO

Supported Okta Features
  • SWA
Login with Google support
Login with Microsoft support
Supports SSO
Two-factor authentication via SMS
Two-factor authentication via E-mail
Two-factor authentication via Hardware
Two-factor authentication via Software
Two-factor authentication via TOTP
Two-factor authentication via U2F

oauth details

Ally OAuth Grants
Is Ally connected to your other business apps? Start a free trial of Nudge Security to see all app-to-app OAuth grants.
Get started

Supply Chain

Apps in Ally's supply chain
  • HubSpot
  • Amazon Web Services (AWS)
  • Salesforce.com
  • Akamai
  • Adobe Experience Cloud
  • Microsoft Azure
  • PR Newswire
  • SAP
  • Bazaarvoice
  • Proofpoint
  • Apple Business Manager
  • Google Analytics
  • Webex
  • LiveRamp
  • Adobe
  • Apigee API Management
  • Okta
  • Fiserv
Ally supply chain breach history
Has Ally experienced a recent supply chain breach? Start a free trial of Nudge Security for a full breach history and other security program details.
Start your trial

Regain control of SaaS security.

Nudge Security discovers all SaaS accounts ever created by anyone in your org within minutes of starting a free trial. Get a full SaaS inventory today, along with insights and automation to improve your SaaS security posture.

Try it free
Explore demos
Try it free
Explore demos

Let’s stay in touch.

Sign up for product updates, resources, and news. We promise we'll never send you spam. Or boring emails. Ever.
Product
Resources
Company
Assurance

Use Cases

SaaS Security
SSPMAudit & ComplianceSaaS Attack SurfaceAccount Takeover Detection
SaaS Management
Shadow ITSaaS SpendCloud GovernanceAI Security
Third-Party Risk Management
Supply Chain SecurityOAuth Risk Management
Identity Governance
User Access ReviewsEmployee OffboardingSSO Onboarding
© {year}, Nudge Security