AJ Engineering and Construction Services Company CyberSecurity Posture
ajengineering.co.uk
AJ Engineering & Construction Services Ltd was established in 1999 and has developed a reputation as one of the region’s foremost steel fabrication, steel erection and cladding specialists. Whatever the project, we aim to provide on-time and on-budget delivery of high quality products and services. We provide services to major contractors including Balfour Beatty, Forth Road Bridge Constructors, BAM Nuttall, Corrie Construction, Robertson Construction as well as directly to clients such as NHS Highland, Diageo, and Historic Scotland. We are an ISO 9001 and OHSAS 18001 accredited company offering a premier service to our customers both new and old. AJE are certified by SCCS (part of the BCSA) to provide fabricated structural steel and aluminium up to and including Execution Class 4 CE standard
Company Details
aj-engineering-and-construction-services
57
3,768
None
ajengineering.co.uk
0
AJ _1806459
In-progress
AECS Risk Score (AI oriented)Between 750 and 799
AECS Global Score (TPRM)XXXX
No incidents recorded for AJ Engineering and Construction Services in 2025.
No incidents recorded for AJ Engineering and Construction Services in 2025.
No incidents recorded for AJ Engineering and Construction Services in 2025.
AECS cyber incidents detection timeline including parent company and subsidiaries
AJ Engineering & Construction Services Ltd was established in 1999 and has developed a reputation as one of the region’s foremost steel fabrication, steel erection and cladding specialists. Whatever the project, we aim to provide on-time and on-budget delivery of high quality products and services. We provide services to major contractors including Balfour Beatty, Forth Road Bridge Constructors, BAM Nuttall, Corrie Construction, Robertson Construction as well as directly to clients such as NHS Highland, Diageo, and Historic Scotland. We are an ISO 9001 and OHSAS 18001 accredited company offering a premier service to our customers both new and old. AJE are certified by SCCS (part of the BCSA) to provide fabricated structural steel and aluminium up to and including Execution Class 4 CE standard
Scanivalve is recognized as the world’s leading supplier of state-of-the-art Intelligent Pressure and Temperature instrumentation. Systems totaling 1,500,000 channels have been delivered worldwide. These systems include off-the-shelf products as well as custom manufactured systems. We have been prov
Established in 1991, we are a distributor and manufacturer of valves, controls and accessories. Our installed base ranges from high volume OEMs to major Cities and Municipalities with abilities to manage major supply contracts in Canada. Stealth Valve & Controls Ltd. designs and manufactures Dam
Skyland Grain, LLC, with cooperative roots from 1915, is headquartered in Ulysses, Kansas. Today, Skyland Grain operates grain receiving facilities at 65 locations across Kansas, Oklahoma, Colorado, and Texas, with total licensed grain storage capacity of over 174 million bushels. Skyland Grain oper
Orotex is a successful global company. Our parent company, lida Industry Co., was founded in 1954 in the city of Nagoya, Japan. Novi, Michigan serves as the U.S. Headquarters with solid roots here for over 20 years. Our other offices operate in China, India, Mexico, and Thailand. Orotex custom
Temple Allen Industries (TAI) designs and manufactures Smart Automation™ and 100% pneumatic EMMA™ (Easily Manipulated Mechanical Arm) and SAM (Standup Abrading Machine) for a variety of surface preparation tasks (sanding, grinding, polishing, cleaning). We routinely collaborate with clients to solve
Filiale française du groupe Motovario SpA, fabricant de moteur et de réducteur depuis plus de 50 ans. Motovario France représente aujourd'hui 20 personnes à votre service, dans des locaux de 3500m², permettant un stock important et une réactivité élevée. Nous sommes situé proche de Lyon ce qui nous
.png)
Information relating to Australian military programs has been compromised in cyber attacks on defence industry contractors,...
Stay in touch with the things that matter most — in your industry or on your projects.
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of AJ Engineering and Construction Services is http://ajengineering.co.uk.
According to Rankiteo, AJ Engineering and Construction Services’s AI-generated cybersecurity score is 754, reflecting their Fair security posture.
According to Rankiteo, AJ Engineering and Construction Services currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, AJ Engineering and Construction Services is not certified under SOC 2 Type 1.
According to Rankiteo, AJ Engineering and Construction Services does not hold a SOC 2 Type 2 certification.
According to Rankiteo, AJ Engineering and Construction Services is not listed as GDPR compliant.
According to Rankiteo, AJ Engineering and Construction Services does not currently maintain PCI DSS compliance.
According to Rankiteo, AJ Engineering and Construction Services is not compliant with HIPAA regulations.
According to Rankiteo,AJ Engineering and Construction Services is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
AJ Engineering and Construction Services operates primarily in the Mechanical Or Industrial Engineering industry.
AJ Engineering and Construction Services employs approximately 57 people worldwide.
AJ Engineering and Construction Services presently has no subsidiaries across any sectors.
AJ Engineering and Construction Services’s official LinkedIn profile has approximately 3,768 followers.
No, AJ Engineering and Construction Services does not have a profile on Crunchbase.
Yes, AJ Engineering and Construction Services maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/aj-engineering-and-construction-services.
As of November 28, 2025, Rankiteo reports that AJ Engineering and Construction Services has not experienced any cybersecurity incidents.
AJ Engineering and Construction Services has an estimated 2,058 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, AJ Engineering and Construction Services has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.
Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rapid