What is the official website of Afound ?

The official website of Afound is https://www.afound.com/.

What is Afound's cybersecurity risk score?

Afound has an AI-generated cybersecurity risk score of 766 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Afound experienced?

According to Rankiteo, Afound currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Afound been affected by any supply chain cyber incidents ?

According to Rankiteo, Afound has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Afound have SOC 2 Type 1 certification ?

According to Rankiteo, Afound is not certified under SOC 2 Type 1.

Does Afound have SOC 2 Type 2 certification ?

According to Rankiteo, Afound does not hold a SOC 2 Type 2 certification.

Does Afound comply with GDPR ?

According to Rankiteo, Afound is not listed as GDPR compliant.

Does Afound have PCI DSS certification ?

According to Rankiteo, Afound does not currently maintain PCI DSS compliance.

Does Afound comply with HIPAA ?

According to Rankiteo, Afound is not compliant with HIPAA regulations.

Does Afound have ISO 27001 certification ?

According to Rankiteo,Afound is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Afound operate in ?

Afound operates primarily in the Retail industry.

How many employees does Afound have ?

Afound employs approximately 19 people worldwide.

Does Afound own any subsidiaries ?

Afound presently has no subsidiaries across any sectors.

How many LinkedIn followers does Afound have ?

Afound's official LinkedIn profile has approximately 9,766 followers.

What is the NAICS classification code for Afound ?

Afound is classified under the NAICS code 43, which corresponds to Retail Trade.

Does Afound have a Crunchbase profile ?

No, Afound does not have a profile on Crunchbase.

Does Afound have a LinkedIn profile ?

Yes, Afound maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/afound.

How many cybersecurity incidents has Afound experienced ?

As of August 2, 2026, Rankiteo reports that Afound has not experienced any cybersecurity incidents.

How many peer or competitor companies does Afound have ?

Afound has an estimated 15,934 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Afound

Boost Score +25 with badge (5 left)

766

/1000

Fair

791

/1000

Fair

Afound Vendor Cyber Rating & Cyber Score

afound.com

Add Your Compliance Badge

Welcome to Afound, The Fashion Outlet. We're part of H&M Group and offer great deals on past and present collections from H&M, H&M HOME, ARKET, COS, Monki, Weekday, & Other Stories as well as from many other popular fashion and lifestyle brands. That way, we can make great garments come to use and our customers can score a great deal – always at up to 70% off. Afound was founded in Sweden in June 2018. Since then, Afound has launched in the Netherlands, Germany, Austria, Denmark, Norway and Finland.

Afound A.I CyberSecurity Scoring

Scoring History

Afound

Afound CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Afound Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Afound

Incidents vs Retail Industry Avg (This Year)

No incidents recorded for Afound in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Afound in 2026.

Incident Types Afound vs Retail Industry Avg (This Year)

No incidents recorded for Afound in 2026.

Incident History - Afound (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Afound Subsidiaries

Afound

Retail

Website: https://www.afound.com/

Company Size: 19

H&M GroupRetail

Loading…

Afound Similar Companies

Ace Hardware Corporation

acehardware.com

Ace Hardware is the largest retailer-owned hardware cooperative in the world with over 5,800 locally owned and operated hardware stores in approximately 70 countries. Headquartered in Oak Brook, Ill., Ace and its subsidiaries operate an expansive network of distribution centers in the U.S. and have distribution capabilities in Ningbo, China; and Santa Catarina, Mexico. Since 1924, Ace has become a part of local communities around the world and known as the place with the helpful hardware folks. For more information, visit acehardware.com or newsroom.acehardware.com.

Abercrombie & Fitch Co.

abercrombie.com

Abercrombie & Fitch Co. (NYSE: ANF) is a global, digitally led omnichannel specialty retailer of apparel and accessories catering to kids through millennials with assortments curated for their specific lifestyle needs. The company operates a family of brands, including Abercrombie brands and Hollister brands, each sharing a commitment to offer products of enduring quality and exceptional comfort that support global customers on their journey to being and becoming who they are. Abercrombie & Fitch Co. operates over 800 stores under these brands across North America, Europe, Asia and the Middle East, as well as the e-commerce sites abercrombie.com, abercrombiekids.com, and hollisterco.com. To apply for jobs and learn more about our hiring process, visit corporate.abercrombie.com/careers/ If you are emailed by an A&F Co. recruiter at any point in the hiring process, it will come from an email address ending in @anfcorp.com, @stores.anfcorp.com or @smartrecruiters.com.

Target

cb target.com

Target is one of the world’s most recognized brands — and one of America’s leading retailers — known for bringing joy to everyday life. We create meaningful experiences for our guests by combining value, inspiration and innovation in ways no one else can. Beyond our stores and digital experiences, we’re committed to making a difference through responsible business practices, environmental care and community giving. Since 1946, Target has donated 5% of our profits (in cash, product and work with the Target Foundation) to strengthen the communities where we live and work. Together, we act as one team to deliver on our purpose — helping all families discover the joy of everyday life. For more information, visit corporate.target.com. Beware of Hiring Scams: Target will never ask you to submit personal information via a text message for a position. Target will only ask you to apply for positions through corporate.target.com/careers, or Workday, our applicant tracking system.

Morrisons

morrisons.jobs

Our team of friendly faces works as one to provide shopping trips and a career experience you won’t find anywhere else. Together we work the Morrisons way. Constantly looking to do things even better, we work in partnership with our communities, colleagues, suppliers and British farmers to provide our customers with the freshest food at great value for money. Our people ‘Make Morrisons’. Our team spirit really is hard to beat. At the top of our game in all kinds of roles, we work as one team in our stores, distribution centres, manufacturing sites and Head office. In return for looking after our customers, we look after our people with great perks, lots of career opportunities and the training and support everyone needs to be the best they can be.

Landmark Group

landmarkgroup.com

For over five decades, Landmark Group has shaped the region’s retail and hospitality landscape-growing from a single store in Bahrain to one of the largest and most successful omnichannel and hospitality groups across the Middle East, Asia and Africa. Rooted in purpose and powered by innovation, we bring together 21 trusted brands — including own brands like Centrepoint, Max, Home Centre, Babyshop, Splash, Shoemart, Lifestyle, VIVA, Citymax and more- spanning fashion, home, fitness, and hospitality. With over 2,500 stores across 15 countries, we live our purpose every day: creating exceptional value for all the lives we touch. Driven by a customer-first philosophy, we place strong emphasis on enriching every interaction. Through our portfolio of loyalty programmes, Shukran and Landmark Rewards, we connect with over 35 million active members, offering exclusive rewards and meaningful experiences across our brands and partners. At Landmark, we believe our greatest strength lies in our people. Our success is powered by talented and passionate Landmarkers who bring diverse perspectives, creativity, and expertise to everything they do. With over 53,000 employees from almost 100 nationalities, we continue to build a culture of growth, innovation, and shared purpose, living the group's values collectively of listening, empowering, adapting and delivering with integrity.

Tupperware

tupperware.com

Founded in 1946, Tupperware's signature container created the modern food storage category that revolutionized the way the world stores, serves and prepares food. Today, we continue to innovate for the benefit of people and our planet by designing innovative, functional and environmentally responsible products that people love and trust. With a purpose to nurture a better future, Tupperware products are alternatives to single-use items - meant to reduce food waste and single-use plastic waste. We distribute our products into nearly 80 countries primarily through independent representatives around the world.

The TJX Companies, Inc.

tjx.com

TJX is the leading off-price apparel and home fashions retailer in the U.S. and worldwide, with four global home offices, seven brands, nearly 4,700 stores in nine countries, and five distinctive branded e-commerce sites. As Associates, we make a difference with our contributions—collaborating in delighting shoppers with hidden treasures.

Intermarché

carrieres-mousquetaires.com

Reconnue pour son combat contre la vie chère, Intermarché s'appuie sur un réseau de 2 328 points de vente en Europe (France, Belgique, Pologne, Portugal). Spécialiste des produits frais, l’enseigne propose différents formats de points de vente pour répondre aux attentes de ses clients : - Intermarché Hyper : un format offrant une gamme complète en alimentaire et en non-alimentaire. - Intermarché Super : deux déclinaisons existent selon la localisation. . Le supermarché généraliste qui propose une offre équilibrée entre alimentaire et non-alimentaire. . Le supermarché alimentaire dont 90 % des produits sont consacrés à l’alimentaire. - Intermarché Contact : un format qui associe l'esprit convivial et le confort d'un commerce de proximité essentiellement en zone rurale. - Intermarché Express : un concept spécialement étudié pour les centres-ville des grandes agglomérations.

Esselunga

esselungajob.it

Esselunga è una delle principali catene italiane nel settore della grande distribuzione. La sua storia inizia nel 1957 con l'apertura a Milano del primo supermercato in Italia; oggi, attraverso una rete di oltre 180 negozi, il gruppo è presente in Lombardia, Toscana, Emilia Romagna, Piemonte, Veneto, Liguria e Lazio con 25.000 dipendenti. Oltre a essere retailer, Esselunga è anche produttore diretto per i suoi clienti, qualificandosi come una vera e propria Food Company. Nei primi anni ’60 sono state avviate le linee di pasta fresca e prodotti da forno e oggi l’attività si è ulteriormente ampliata nei centri di produzione in provincia di Milano, Novara e Parma, dove ogni giorno vengono realizzate specialità gastronomiche, prodotti da forno, pasta fresca e dove vengono lavorate carni e linee di prodotti ittici tra cui il sushi. Inoltre da qualche anno è attivo un laboratorio artigianale di pasticceria di altissima qualità, in collaborazione con il ristorante stellato Da Vittorio dei Fratelli Cerea, che oggi si fregia del marchio Elisenda. Tra i primi a lanciare in Italia la spesa on line, oggi Esselunga è leader in Italia e impegnata a potenziare sempre più la strategia omnicanale. L’azienda è costantemente impegnata nell’innovazione di prodotto, nella salvaguardia dell’ambiente e nella tutela del consumatore e lavora ogni giorno per offrire prodotti di qualità accuratamente selezionati e controllati, vantaggiose politiche di prezzo e tutela dell'ecosostenibilità. Dal 2018 Esselunga ospita al suo interno anche la Parafarmacia, a oggi presente in 35 negozi. Fanno parte del gruppo Esselunga anche i Bar Atlantic, realtà consolidata della ristorazione presente con 110 Ristoranti, ed eb beauty store, catena di profumerie con 45 beauty boutique. Anche per il 2022 abbiamo conseguito la certificazione Top Employers Italia che premia le aziende che si distinguono per l’impegno nel fornire le migliori condizioni di lavoro ai propri dipendenti.

Loading…

NEWS

Afound CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 24, 2025 08:00 AM

City of Attleboro continues to work around cybersecurity incident

topics: ... (WJAR) — The city of Attleboro continues to work around a cybersecurity incident that was disclosed last week. The city said Monday...

Read Article

November 12, 2025 08:00 AM

Bitdefender Releases 2025 Consumer Cybersecurity Survey

Bitdefender's latest Consumer Cybersecurity Survey reveals that convenience and complacency are colliding with unprecedented cyber risk.

Read Article

October 31, 2025 07:00 AM

How to determine your appetite for cybersecurity risk

Risk appetite defines how much cyber loss organizations accept to meet goals. Learn why quantifying it helps strategic decisions.

Read Article

October 16, 2025 07:00 AM

Why cybersecurity still needs a physical layer

The conversation around cybersecurity usually centres on networks, cloud services, and software defences. Yet even as businesses rush to...

Read Article

September 21, 2025 07:00 AM

'Hands-on learning': Interactive escape rooms bring cyber threats to life

A new local initiative aims to offer an escape room experience built around cybersecurity. Launched by Compu-SOLVE Technologies and siberX,...

Read Article

September 05, 2025 07:00 AM

“We’re Not Waiting Around:” New York Cyber Chief on Regulation, Harmonization, and Urgency

The SIPA Cyber Regulations Watch newsletter sat down with Colin Ahern to discuss how New York approaches cybersecurity regulation.

Read Article

August 27, 2025 07:00 AM

Cybersecurity threats leading to ‘burnout’ among PHL staff, degrading productivity

MANY Philippine organizations are experiencing staff burnout from dealing with cybersecurity threats, British cybersecurity firm Sophos said...

Read Article

August 05, 2025 07:00 AM

Many UK consumers likely to reduce or stop shopping online due to cyberattack concerns, GlobalData

Concerns around cybersecurity are prompting a shift in online shopping behaviour, particularly among younger consumers in the UK.

Read Article

August 01, 2025 07:00 AM

Germany’s new cybersecurity law expands scope and increases obligations—with new sanctions

On 30 July 2025, the German federal government adopted the draft law “NIS-2 Implementation and Cybersecurity Strengthening Act.” The law...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…