What is the official website of Amphos 21 ?

The official website of Amphos 21 is http://www.amphos21.com.

What is Amphos 21's cybersecurity risk score?

Amphos 21 has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Amphos 21 experienced?

According to Rankiteo, Amphos 21 currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Amphos 21 been affected by any supply chain cyber incidents ?

According to Rankiteo, Amphos 21 has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Amphos 21 have SOC 2 Type 1 certification ?

According to Rankiteo, Amphos 21 is not certified under SOC 2 Type 1.

Does Amphos 21 have SOC 2 Type 2 certification ?

According to Rankiteo, Amphos 21 does not hold a SOC 2 Type 2 certification.

Does Amphos 21 comply with GDPR ?

According to Rankiteo, Amphos 21 is not listed as GDPR compliant.

Does Amphos 21 have PCI DSS certification ?

According to Rankiteo, Amphos 21 does not currently maintain PCI DSS compliance.

Does Amphos 21 comply with HIPAA ?

According to Rankiteo, Amphos 21 is not compliant with HIPAA regulations.

Does Amphos 21 have ISO 27001 certification ?

According to Rankiteo,Amphos 21 is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Amphos 21 operate in ?

Amphos 21 operates primarily in the Environmental Services industry.

How many employees does Amphos 21 have ?

Amphos 21 employs approximately 426 people worldwide.

Does Amphos 21 own any subsidiaries ?

Amphos 21 presently has no subsidiaries across any sectors.

How many LinkedIn followers does Amphos 21 have ?

Amphos 21's official LinkedIn profile has approximately 17,444 followers.

What is the NAICS classification code for Amphos 21 ?

Amphos 21 is classified under the NAICS code 54162, which corresponds to Environmental Consulting Services.

Does Amphos 21 have a Crunchbase profile ?

No, Amphos 21 does not have a profile on Crunchbase.

Does Amphos 21 have a LinkedIn profile ?

Yes, Amphos 21 maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/amphos-21.

How many cybersecurity incidents has Amphos 21 experienced ?

As of June 14, 2026, Rankiteo reports that Amphos 21 has not experienced any cybersecurity incidents.

How many peer or competitor companies does Amphos 21 have ?

Amphos 21 has an estimated 8,482 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Amphos 21

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

Amphos 21 Vendor Cyber Rating & Cyber Score

amphos21.com

Add Your Compliance Badge

Founded in 1994, in Barcelona, Spain, Amphos21 includes three companies in Spain (1994), Chile (2009) and Peru (2012). Amphos 21 is part of RSK group since the end of 2020. We offer scientific and technical environmental consulting and engineering services in the following main business sectors: mining, nuclear, water, environment&infrastructures. sustainability&climate change to clients all over the world. We combine field and lab activities, expert desk work and development of tailored digital solutions to help our clients. Our team is highly qualified, multidisciplinary, multicultural and used to face difficult technical and scientific challenges. We have in-house conceptual and numerical capabilities and the team is internationally

Amphos 21 A.I CyberSecurity Scoring

Scoring History

Amphos 21

Amphos 21 CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Amphos 21 Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Amphos 21

Incidents vs Environmental Services Industry Avg (This Year)

No incidents recorded for Amphos 21 in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Amphos 21 in 2026.

Incident Types Amphos 21 vs Environmental Services Industry Avg (This Year)

No incidents recorded for Amphos 21 in 2026.

Incident History - Amphos 21 (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Amphos 21 Subsidiaries

Parent Company

Amphos 21

Environmental Services

Website: http://www.amphos21.com

Company Size: 201-500 employees

No subsidiary data available for this company.

Loading…

Amphos 21 Similar Companies

Veolia | Water Tech

veoliawatertechnologies.com

As the world leader in water technologies and services, Veolia relies on its 17,500 water technology experts to deliver innovative solutions that drive both performance and sustainability, without compromise. With over 4,400 technology patents and serving more than 14,000 customers worldwide, Veolia’s water technology activities generated 4.97 billion euros in revenue in 2024. These solutions are central to Veolia’s GreenUp strategic plan, accelerating the ecological transformation of cities and industries while safeguarding resources for the future

EQUANS

equans.com

Equans, a Bouygues group company, is a world leader in multi-technical services with offices in 20 country hubs. This brand expresses the desire to provide the right answer [ANS] to the equations [EQU] of our customers. We design and provide customised solutions to improve our customers’ buildings, technical equipment, systems and processes and to support them in optimising their use. With nearly 90,000 highly qualified employees and a strong geographic footprint through our historical local brands, we have excellent technical know-how in design, installation, maintenance and performance services, with a unique combination of skills as in HVAC, Cooling & Fire protection, Facility Management, Digital & ICT, Electrical, Mechanical & Robotics... Equans expertise and knowledge of our customers’ businesses now place us to support them in their transitions for modernisation and sustainable development.

Bureau Veritas Group

bureauveritas.com

Bureau Veritas is a world leader in Testing, Inspection and Certification. Our mission is at the heart of key challenges: quality, health and safety, environmental protection and social responsibility. Through our wide range of expertise, impartiality and independence, we foster confidence between companies, public authorities and clients. Bureau Veritas is a Business to Business to Society company, contributing to transform the world we live in. Driven by society, we are working ever more closely with our clients, addressing today’s crucial challenges and answering society’s aspirations. Bureau Veritas is listed on the Euronext Paris (Compartment A, code ISIN FR 0006174348, stock symbol: BVI).

Environment Agency

www.gov.uk

We are the Environment Agency. We are the biggest and most wide-ranging environmental regulator in Europe. We work with businesses and communities to protect and improve the environment, for people and wildlife. And the need for our work is becoming ever more important. We protect and improve the environment across England to: • reduce the risks to people and properties from flooding • help businesses and communities adapt to climate change • reduce pressures on biodiversity • help businesses to make sure they don’t harm the environment through pollution or taking too much water • issue licences and permits, and take action against people who don’t take their environmental responsibilities seriously. None of this is possible without a multi-talented team of professional and dedicated people. And just like the environment we help to care for, we’re home to an incredible diversity of skills and knowledge. Today, we employ more than 12,000 people throughout England in a wide range of roles. You’ll find leading scientists and prominent geologists alongside public relations professionals, planners and policy advisors. We employ lawyers, enforcement officers and engineers, conservation scientists and marine biologists. And of course we have a wide team of support staff. We employ people at all stages of their career, from recent graduates to experienced leaders and internationally-renowned experts. Find out how we manage our social media accounts at https://www.gov.uk/government/organisations/environment-agency/about/social-media-use

Grupo Tragsa

tragsa.es

Tragsa Group is a group of public companies, integrated in the State Industrial Ownership Corporation (SEPI), which has become a full service supplier and a reference company to Public Administrations. It is formed by four enterprises: Tragsa (1977) responsible for works and services' execution and Tragsatec (1989) which performs engineering works and technical assistance for every sections of the Group. By these companies, the Group is able to take part in every stage of any project, from its conception and design to its execution. 40 years of experience working for Public Administrations and at the service of society, have settle this business group at the front line of the various fields where it intervenes, from agricultural, forest, livestock and rural development services to environmental conservation and protection. Tragsa Group is represented in all the national territory, what makes it possible to give a quick and efficient response to any request that may be done from the central, autonomic and local administrations. Moreover, our collaboration in more than 120 projects of Spanish cooperation – in over 35 different countries of Northern Africa, Sub-Saharan Africa, Latin America and the Caribbean, Asia, Europe and the Middle East – has given the company international importance. In every field of activity, the differentiating factor of the Group stands in its proved experience, its capacity to give a fast-response and adapt its work to Administration’s needs, and its high I+D+I profile, what makes the group able to provide leading edge technology and the highest quality services

Dalkia

dalkia.fr

Dalkia : ensemble, relevons le défi climatique ! Depuis 85 ans, Dalkia, filiale du groupe EDF et leader dans les services énergétiques, investit et développe les énergies renouvelables et de récupération et accompagne ses clients dans la durée pour les aider à faire des économies d'énergie et à réduire leurs émissions de CO2. Plus de 20 000 salariés présents partout en France et à l'international assurent la maintenance et l'exploitation des installations de sites industriels, de bâtiments tertiaires, de collectivités, d'établissements de santé, de logements, avec des solutions innovantes et performantes, pour accélérer la décarbonation des sites et des territoires. Retrouvez nos solutions sur notre site écoresponsable www.dalkia.fr

WM

wm.com

WM is North America's leading provider of integrated environmental solutions. We partner with our customers and communities to manage and reduce waste from collection to disposal while recovering valuable resources and creating clean, renewable energy. We are on a quest for environmental performance, a mission to maximize resource value, while minimizing – and even eliminating – environmental impact so that both our economy and our environment can thrive. WM tailors its services to meet the needs of each customer group and to ensure consistent, superior service at the local level. Headquartered in Houston, the company serves nearly 20 million municipal, commercial, industrial, and residential customers through a network of 367 collection operations, 355 transfer stations, 273 active landfill disposal sites, 16 waste-to-energy plants, 104 recycling plants, and 111 beneficial-use landfill gas projects.

RSK Group

rskgroup.com

RSK Group is a global leader in the delivery of environmental and engineering solutions. We recognise the urgent need for sustainable change and know that this will be achieved by delivering meaningful action, not just words. We are committed to supporting our clients and societies as they navigate these complex challenges, while making a positive impact. The business was founded in 1989, originally focused on providing environmental consultancy services to global energy clients. Today, while we remain a leader in environmental consultancy, the business is significantly more diverse. RSK delivers an unrivalled breadth and depth of environmental and engineering services, either as stand-alone projects or as large and integrated multidisciplinary solutions. The group believes this emphasis on multidisciplinary collaboration is essential for successfully addressing complex global challenges. This is why we have brought together pragmatic advice, forward-thinking engineering, cutting-edge innovation, digital solutions, and best-in-class delivery services. The group continues to deliver its ambitious global growth strategy. It now comprises more than 200 companies and employs over 16,000 people.

Veolia

veolia.com

Veolia group aims to be the benchmark company for ecological transformation. With nearly 220,000 employees worldwide, the Group designs and provides game-changing solutions that are both useful and practical for water, waste and energy management. Through its three complementary business activities, Veolia helps to develop access to resources, preserve available resources, and replenish them. In 2021, the Veolia group supplied 79 million people with drinking water and 61 million people with wastewater service, produced nearly 48 million megawatt hours of energy and treated 48 million metric tons of waste. Veolia Environnement (listed on Paris Euronext: VIE) recorded consolidated revenue of €28.508 billion in 2021. ---- Le groupe Veolia a pour ambition de devenir l’entreprise de référence de la transformation écologique. Présent sur les cinq continents avec près de 220 000 salariés, le Groupe conçoit et déploie des solutions utiles et concrètes pour la gestion de l’eau, des déchets et de l’énergie qui participent à changer radicalement la donne. Au travers de ses trois activités complémentaires, Veolia contribue à développer l’accès aux ressources, à préserver les ressources disponibles et à les renouveler. En 2021, le groupe Veolia a servi 79 millions d’habitants en eau potable et 61 millions en assainissement, produit près de 48 millions de mégawattheures et valorisé 48 millions de tonnes de déchets. Veolia Environnement (Paris Euronext : VIE) a réalisé en 2021 un chiffre d’affaires consolidé de 28,508 milliards d’euros.

Loading…

NEWS

Amphos 21 CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 02, 2021 07:00 AM

Binnies returns to water sector as RSK Group completes acquisitions of UK and Asia Black & Veatch

RSK Group Limited (RSK) confirmed that it completed the acquisition of Black & Veatch's UK and Asia water businesses late January,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-12175

SUMMARY

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 4.7)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 4.7

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.2

REFERENCES

CVE-2026-12174

SUMMARY

A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-12183

SUMMARY

Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-6428

SUMMARY

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.6)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:N/A:P

cvss3

Base Score: 7.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

cvss4

Base Score: 5.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:X/U:Amber

Impact Score

4.7

Exploitability

2.8

REFERENCES

CVE-2026-5513

SUMMARY

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Impact Score

2.7

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…