What is the official website of APi Group ?

The official website of APi Group is http://www.apigroupinc.com.

What is APi Group's cybersecurity risk score?

APi Group has an AI-generated cybersecurity risk score of 797 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has APi Group experienced?

According to Rankiteo, APi Group currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has APi Group been affected by any supply chain cyber incidents ?

According to Rankiteo, APi Group has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does APi Group have SOC 2 Type 1 certification ?

According to Rankiteo, APi Group is not certified under SOC 2 Type 1.

Does APi Group have SOC 2 Type 2 certification ?

According to Rankiteo, APi Group does not hold a SOC 2 Type 2 certification.

Does APi Group comply with GDPR ?

According to Rankiteo, APi Group is not listed as GDPR compliant.

Does APi Group have PCI DSS certification ?

According to Rankiteo, APi Group does not currently maintain PCI DSS compliance.

Does APi Group comply with HIPAA ?

According to Rankiteo, APi Group is not compliant with HIPAA regulations.

Does APi Group have ISO 27001 certification ?

According to Rankiteo,APi Group is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does APi Group operate in ?

APi Group operates primarily in the Facilities Services industry.

How many employees does APi Group have ?

APi Group employs approximately 975 people worldwide.

Does APi Group own any subsidiaries ?

APi Group presently has no subsidiaries across any sectors.

How many LinkedIn followers does APi Group have ?

APi Group's official LinkedIn profile has approximately 29,295 followers.

What is the NAICS classification code for APi Group ?

APi Group is classified under the NAICS code 5612, which corresponds to Facilities Support Services.

Does APi Group have a Crunchbase profile ?

No, APi Group does not have a profile on Crunchbase.

Does APi Group have a LinkedIn profile ?

Yes, APi Group maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/api-group-inc-.

How many cybersecurity incidents has APi Group experienced ?

As of September 3, 2026, Rankiteo reports that APi Group has not experienced any cybersecurity incidents.

How many peer or competitor companies does APi Group have ?

APi Group has an estimated 4,991 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

APi Group

Boost Score +25 with badge (5 left)

797

/1000

Fair

822

/1000

Good

APi Group Vendor Cyber Rating & Cyber Score

apigroupinc.com

Add Your Compliance Badge

APi Group is a global, market-leading business services provider of safety and specialty services in over 500 locations worldwide. APi provides statutorily mandated and other contracted services to a strong base of long-standing customers across industries. We have a winning leadership culture driven by entrepreneurial business leaders to deliver innovative solutions for our customers.

APi Group A.I CyberSecurity Scoring

Scoring History

APi Group

APi Group CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

APi Group Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for APi Group

Incidents vs Facilities Services Industry Avg (This Year)

No incidents recorded for APi Group in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for APi Group in 2026.

Incident Types APi Group vs Facilities Services Industry Avg (This Year)

No incidents recorded for APi Group in 2026.

Incident History - APi Group (X = Date, Y = Severity)

Loading…

SUBSIDIARY

APi Group Subsidiaries

APi Group

Facilities Services

Website: http://www.apigroupinc.com

Company Size: 10,000+ employees

APi Construction CompanyConstruction

Loading…

APi Group Similar Companies

Verzani & Sandrini

cb verzani.com.br

Com uma história sólida de sucesso desde sua fundação em 1967, a Verzani & Sandrini se destaca como líder nacional em diversos serviços terceirizados. Presente em todo o Brasil com mais de 71 mil colaboradores, atendemos setores como shopping centers, indústrias, hospitais, aeroportos e mais. Oferecemos soluções que vão desde conservação e limpeza até desinfecção, segurança patrimonial, vigilância eletrônica e gestão de ativos. Unimos tecnologia, inovação e capacitação profissional para fornecer soluções de alta qualidade e desenvolvimento contínuo.

Onet SA

groupeonet.com

Onet is a family service group, born in Marseille around 1860. Our 74,000 employees are spread over more than 500 locations in 8 countries. The global business volume in 2019 is 2 billion euros. Our vision: We know that human beings are never better than several people and that the intelligence of the collective is the greatest source of wealth. We always go further and take up greater challenges when we move forward together. Our ambition: We want to assert ourselves as the benchmark service company. The one that enables all its employees, through their role and mission, to bring value to each customer and to society as a whole. Our mission: Onet deploys its energies and resources to help create ever healthier, safer and more reliable environments. Onet aims to bring value to its customers through a combined "services and engineering" approach, and a perfect mastery of all its businesses. As a result, we operate our own businesses, guaranteeing control and performance. In total, we deploy more than 80 areas of expertise at our customers' sites. > Cleaning & Associated Services & Waste Management > Human and electronic security > Nuclear engineering and services > Airport assistance > Logistics > Reception > Delegation of human resources > Training > Technical maintenance of buildings

Rete Ferroviaria Italiana

rfi.it

Rete Ferroviaria Italiana (RFI) is the Company of the Ferrovie dello Stato Group with the public role of Infrastructure Manager. As the body responsible for the track, the stations and the installations, RFI ensures to Italian railway undertakings the access to the railway network, performs the maintenance and the safe circulation on the whole network, manages the investments for the upgrading and improvement of railway lines and installations and it develops the technology of systems and materials.

ABM Industries

cb abm.com

ABM is one of the world’s largest providers of integrated facility, engineering, and infrastructure solutions. Every day, our over 100,000 team members deliver essential services that make spaces cleaner, safer, and efficient, enhancing the overall occupant experience. ABM serves a wide range of market sectors including commercial real estate, aviation, education, mission critical, and manufacturing and distribution. With over $8 billion in annual revenue and a blue-chip client base, ABM delivers innovative technologies and sustainable solutions that enhance facilities and empower clients to achieve their goals. Committed to creating smarter, more connected spaces, ABM is investing in the future to meet evolving challenges and build a healthier, thriving world. ABM: Driving possibility, together. For more information, visit www.ABM.com

Sodexo

sodexo.com

Founded in Marseille in 1966 by Pierre Bellon, Sodexo is the leader in Food and Services, shaping better everyday experiences at every moment in life: work, heal, learn and play. The Group stands out for its independence, its founding family shareholding and its responsible business model. With its services, Sodexo meets all the challenges of everyday life with a dual goal: to improve the quality of life of our employees and those we serve, and contribute to the economic, social and environmental progress in the communities where we operate. For Sodexo, growth and social commitment go hand in hand. Our purpose is to create a better everyday for everyone to build a better life for all. Sodexo is included in the CAC Next 20, Bloomberg France 40, CAC SBT 1.5, FTSE 4 Good and DJSI indices. Sodexo Key figures: 24.1 billion euros Fiscal 2025 consolidated revenues 426,000 employees as at August 31, 2025 #2 France-based private employer worldwide 43 countries 80 million consumers served daily 8.3 billion euros in market capitalization (as at October 22, 2025)

Grupo GPS

cb gpssa.com.br

Fundado em 1962, em Salvador, o Grupo GPS é um grupo empresarial composto por empresas atuantes no mercado brasileiro de serviços indoor: GPS – Gerenciamento de segurança patrimonial Predial – Soluções em infra serviços In-Haus – Logística flexível traduzida em resultados Ecopolo – Referência para empresas ecoeficientes Com atuação nacional, o Grupo GPS sabe como servir e atender com eficiência todos os seus clientes. São mais de 1.000 clientes atendidos, por cerca de 50.000 colaboradores treinados e motivados. E o resultado disso está na excelência em servir.

Mitie

mitie.com

Founded in 1987, Mitie is the UK’s leading facilities management and professional services company. We offer a range of specialist services including Security, Engineering Services, Cleaning, Landscaping, Energy and Property Consultancy, Property Maintenance, and Custody Support Services. Mitie employs 77,500 people across the country, looking after a large, diverse, blue-chip customer base, from banks and retailers, to hospitals, schools and government offices. We take care of our customers’ people and buildings, by delivering the basics brilliantly and by deploying advanced technology. We are pioneers in the Connected Workspace, using smart analytics to provide valuable insight and deliver efficiencies to create outstanding work environments for customers.

Ambius United Kingdom

ambius.co.uk

Ambius us the world's largest provider of plants, replica foliage and flowers for commercial environments. We not only specialise in designing, installing and servicing acclimatised, interior plants and pots, but also offer additional services such as exterior landscaping, flowers, artificial plants, Christmas trees and decorations and stunning rental art for commercial businesses.

Loading…

NEWS

APi Group CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 28, 2026 12:39 PM

Market Reaction Hits Cybersecurity Stocks After Anthropic AI Leak Details Emerge

Key Points. US cybersecurity stocks fell sharply on March 27 following leaked documents about Anthropic's Claude Mythos AI model124.

Read Article

March 04, 2026 08:00 AM

Top Ethical Hacking Tools With Starter Toolkits (2026)

Explore the top ethical hacking tools for validation, scanning, analysis, and more. Learn what each tool does and how it supports effective...

Read Article

March 02, 2026 08:00 AM

⚡ Weekly Recap: SD-WAN 0-Day, Critical CVEs, Telegram Probe, Smart TV Proxy SDK and More

Weekly cybersecurity recap covering active exploits, AI abuse, exposed cloud assets, critical CVEs, and evolving threat trends.

Read Article

February 25, 2026 08:00 AM

China-linked hackers breached dozens of telecoms, government agencies

The cyberattacks used a clever technique: malware that hid in plain sight on Google Sheets.

Read Article

February 22, 2026 08:00 AM

Multiple Hacking Groups Exploit OpenClaw Instances to Steal API key and Deploy Malware

A widespread exploitation of OpenClaw, formerly known as MoltBot and ClawdBot, by multiple hacking groups to deploy malicious payloads.

Read Article

February 19, 2026 08:00 AM

OpenAI’s Sam Altman Says Every Company is Now an API Company, as Wallarm Finds APIs are the Single Most Exploited Attack Surface

In an interview this month, OpenAI CEO Sam Altman shared that one phrase has been stuck in his mind: “Every company is now an API company,...

Read Article

February 12, 2026 08:00 AM

Google Reports State-Backed Hackers Using Gemini AI for Recon and Attack Support

Google finds nation-state hackers abusing Gemini AI for target profiling, phishing kits, malware staging, and model extraction attacks.

Read Article

February 09, 2026 08:00 AM

TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure

Cybersecurity researchers have called attention to a "massive campaign" that has systematically targeted cloud native environments to set up...

Read Article

February 07, 2026 08:00 AM

BridgePay Payment Gateway Hit by Ransomware, Causing Nationwide Outages

BridgePay Network Solutions, a major U.S. payment gateway provider, confirmed a ransomware attack caused a widespread outage,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-84857

SUMMARY

A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file src/serve.rs of the component API Endpoint. This manipulation causes uncontrolled memory allocation. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-09-02

Updated

Date2026-09-02

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 5.0

Complexity: LOW

AV:N/AC:L/Au:N/C:N/I:N/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-84856

SUMMARY

A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.json of the file apps/rowboat/app/api/composio/webhook/route.ts of the component Composio Webhook Endpoint. The manipulation results in denial of service. It is possible to launch the attack remotely. The exploit is now public and may be used. Upgrading to version 0.9.2 is sufficient to resolve this issue. Upgrading the affected component is recommended. The legacy Next.js app was deleted at 0.9.2 rather than patched, leaving no security control behind.

Published

Date2026-09-02

Updated

Date2026-09-02

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 5.0

Complexity: LOW

AV:N/AC:L/Au:N/C:N/I:N/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-84852

SUMMARY

A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew.handleDeeplink of the component File Handler. The manipulation of the argument _display_name leads to path traversal. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-09-02

Updated

Date2026-09-02

RISK INFORMATION (Score: 4.4)

cvss2

Base Score: 3.2

Complexity: LOW

AV:L/AC:L/Au:S/C:N/I:P/A:P

cvss3

Base Score: 4.4

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

1.8

REFERENCES

CVE-2026-84452

SUMMARY

Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models for Windows ML. Prior to 0.4.0, the src/winml/modelkit/serve/cli_api.py component exposes WinML CLI commands through a localhost HTTP API without authentication and configures the allow_origins setting as a wildcard in both src/winml/modelkit/serve/cli_api.py and src/winml/modelkit/serve/app.py. A malicious website loaded by a user can send cross-origin requests to /v1/cli/build or /v1/cli/config and set the trust_remote_code parameter to true, which is converted to the --trust-remote-code command-line flag without validation. This reaches AutoConfig.from_pretrained with trust_remote_code=True in src/winml/modelkit/loader/_autoconfig.py and imports Python code from an attacker-controlled model repository, resulting in arbitrary code execution as the server user. This issue is fixed in version 0.4.0.

Published

Date2026-09-02

Updated

Date2026-09-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-84292

SUMMARY

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can inject authority delimiters, demoting the intended host to userinfo and pointing the authority at an attacker-controlled host. Both fast-uri and Node's URL read the result back as the attacker's host with no error, so re-validating the built URI does not catch it. This affects applications that build URIs from parts and assign untrusted data to the port component through the serialize, normalize, or equal functions in their object forms. The issue affects fast-uri versions before 2.4.6, from 3.0.0 before 3.1.7, and from 4.0.0 before 4.1.4. It is fixed in 2.4.6, 3.1.7, and 4.1.4, where recomposeAuthority rejects any port that is not a digit sequence per RFC 3986.

Published

Date2026-09-02

Updated

Date2026-09-02

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…