What is the official website of Aramex ?

The official website of Aramex is http://www.aramex.com.

What is Aramex's cybersecurity risk score?

Aramex has an AI-generated cybersecurity risk score of 792 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Aramex experienced?

According to Rankiteo, Aramex currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Aramex been affected by any supply chain cyber incidents ?

According to Rankiteo, Aramex has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Aramex have SOC 2 Type 1 certification ?

According to Rankiteo, Aramex is not certified under SOC 2 Type 1.

Does Aramex have SOC 2 Type 2 certification ?

According to Rankiteo, Aramex does not hold a SOC 2 Type 2 certification.

Does Aramex comply with GDPR ?

According to Rankiteo, Aramex is not listed as GDPR compliant.

Does Aramex have PCI DSS certification ?

According to Rankiteo, Aramex does not currently maintain PCI DSS compliance.

Does Aramex comply with HIPAA ?

According to Rankiteo, Aramex is not compliant with HIPAA regulations.

Does Aramex have ISO 27001 certification ?

According to Rankiteo,Aramex is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Aramex operate in ?

Aramex operates primarily in the Transportation, Logistics, Supply Chain and Storage industry.

How many employees does Aramex have ?

Aramex employs approximately 20,257 people worldwide.

Does Aramex own any subsidiaries ?

Aramex presently has no subsidiaries across any sectors.

How many LinkedIn followers does Aramex have ?

Aramex's official LinkedIn profile has approximately 733,378 followers.

What is the NAICS classification code for Aramex ?

Aramex is classified under the NAICS code 47, which corresponds to Transportation and Warehousing.

Does Aramex have a Crunchbase profile ?

No, Aramex does not have a profile on Crunchbase.

Does Aramex have a LinkedIn profile ?

Yes, Aramex maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/aramex.

How many cybersecurity incidents has Aramex experienced ?

As of August 2, 2026, Rankiteo reports that Aramex has not experienced any cybersecurity incidents.

How many peer or competitor companies does Aramex have ?

Aramex has an estimated 6,695 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Aramex

Boost Score +25 with badge (5 left)

792

/1000

Fair

817

/1000

Good

Aramex Vendor Cyber Rating & Cyber Score

aramex.com

Add Your Compliance Badge

Founded in 1982, Aramex has emerged as a global leader in logistics and transportation, renowned for its innovative services tailored to businesses and consumers. As a listed company on the Dubai Financial Market (since 2005) and headquartered in the UAE, our strategic location facilitates extensive customer reach worldwide, bridging the gap between East and West. With operations in 600+ cities across 70 countries, Aramex employs over 16,000 professionals. Our success is attributed to four distinct business products that provide scalable, diversified, and end-to- end services for customers. These products are: • International Express, encompassing Aramex's Parcel Forwarding Business (Shop & Ship and MyUS). • Domestic Express • Freight

Aramex A.I CyberSecurity Scoring

Scoring History

Aramex

Aramex CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Aramex Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Aramex

Incidents vs Transportation, Logistics, Supply Chain and Storage Industry Avg (This Year)

No incidents recorded for Aramex in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Aramex in 2026.

Incident Types Aramex vs Transportation, Logistics, Supply Chain and Storage Industry Avg (This Year)

No incidents recorded for Aramex in 2026.

Incident History - Aramex (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Aramex Subsidiaries

Parent Company

Aramex

Transportation, Logistics, Supply Chain and Storage

Website: http://www.aramex.com

Company Size: 10,000+ employees

No subsidiary data available for this company.

Loading…

Aramex Similar Companies

Lineage

onelineage.com

Lineage is one of the world’s leading temperature-controlled industrial REITs and integrated solutions providers with a global network of over 480 strategically located facilities, totaling nearly 2.9 billion cubic feet of capacity across countries in North America, Europe, and Asia-Pacific. Coupling industry-leading expertise in end-to-end logistical solutions and innovative technology, Lineage partners with the world’s largest food and beverage companies to increase distribution efficiency, advance sustainability, minimize supply chain waste, and, most importantly, help feed the world. In recognition of the company’s leading innovations and sustainability initiatives, Lineage has been named a CNBC Disruptor 50 Company for three consecutive years, twice named a US Best Managed Company, named the No. 1 Data Science company, and 23rd overall, on Fast Company’s list of The World’s Most Innovative Companies, and was included on Fortune’s Change the World list. Nasdaq: LINE

Ecom Express Limited

ecomexpress.in

Ecom Express: Delivering Over 1.9 Billion Reasons to Trust Us Based in Gurugram, Ecom Express was established in 2012 by veterans backed by 100+ years of collective logistics expertise. We aren't just a logistics provider—we're your partner in bridging distances and making connections. Our network reaches every corner, covering 27,000+ PIN codes in 2700+ towns, meticulously handled over 1.9 billion parcels in the past 10+ years. We're not just delivering; we're innovating with solutions like Ecom Magnum, comprehensive shipping services, fulfillment capabilities, Bulls.ai and drone technology—ensuring every package is delivered to the right location on time. Connect | Deliver| Grow https://bit.ly/4d0sHpV

Delhivery

delhivery.com

Delhivery is India’s largest fully-integrated logistics services provider. With a nationwide network spanning over 18,850 pin codes, the company offers a comprehensive range of logistics solutions — including express parcel transportation, partial-truckload (PTL) and full-truckload (FTL) freight, cross-border services, supply chain solutions, Delhivery Direct (national and local courier services) and technology-enabled logistics. Comprehensive Solutions for Every Need ➡️Express Parcel: Send shipments across India, including heavy goods, with value-added services like real-time tracking, NDR Management, WhatsApp based updates, RTO, Protect ➡️Delivery Direct: All-in-one courier service that lets you send anything within the city or anywhere in India ➡️Rapid: A sub-2-hour delivery service helping brands offer faster deliveries and a better customer experience ➡️Supply Chain Solutions: Store and manage inventory at optimized locations across India, fulfilling orders for both B2B and B2C channels with precision. ➡️Partial Truckload (PTL):Leverage India’s large PTL network for door-to-door or hub-to-hub delivery with multimodal freight and smart dashboards. ➡️Full Truckload (FTL): Handle high-volume shipments with speed and efficiency through our professional network of truckload partners and our own fleet. ➡️Cross-Border Services: Ship parcels and freight to 220+ countries with door-to-door and port-to-port logistics ➡️TransportOne: Delhivery’s AI‑powered TMS that gives enterprises end‑to‑end optimization, from intelligent sourcing and load stacking to agentic ePOD and automated billing Our Impact at Scale ✔️4 Billion+ parcels shipped since inception ✔️Coverage of 99.5% of India’s population ✔️Trusted by 48,000+ businesses ✔️Shipped over 4.7 Million tonnes of freight ✔️Managing 22.05 Million+ sqft of logistics infrastructure Start shipping: https://one.delhivery.com/register Download Delhivery Direct App: https://appdelhivery.go.link/5YuVn

DHL

dhl.com

DHL is the leading global brand in the logistics industry. Our divisions offer an unrivaled portfolio of logistics services ranging from national and international parcel delivery, e-commerce shipping and fulfillment solutions, international express, road, air and ocean transport to industrial supply chain management. With specialized solutions for growth markets and industries including technology, life sciences and healthcare, engineering, manufacturing & energy, auto-mobility and retail, DHL is decisively positioned as "The logistics company for the world". DHL is part of DHL Group. Privacy notice https://group.dhl.com/en/data-protection.html

ID Logistics Group

id-logistics.com

ID Logistics, headed by Eric Hémar, is an international contract logistics group with revenues of €3.3 billion in 2024. ID Logistics manages nearly 450 sites in 19 countries, representing more than 9 million m² operated in Europe, America, Asia and Africa, with 42,000 employees. With a customer portfolio balanced between distribution, e-commerce and consumer goods, ID Logistics is characterized by offers involving a high level of technology. Since its creation in 2001, the Group has developed a social and environmental approach through a number of original projects and is now firmly committed to an ambitious CSR policy. ID Logistics shares are listed on the Euronext regulated market in Paris and are included in the SBF 120 index (ISIN code: FR0010929125, Mnemo: IDL).

GEODIS

geodis.com

GEODIS is a leading global logistics provider acknowledged for its expertise across all aspects of the supply chain. As a growth partner to its clients, GEODIS specializes in four lines of business: Global Freight Forwarding, Global Contract Logistics, Distribution & Express Transport, and European Road Network. With a global network spanning nearly 170 countries and more than 49,400 employees, GEODIS is ranked no. 5 in its sector across the world. In 2022, GEODIS generated €13.7 billion in revenue. GEODIS is a company owned by SNCF group. 

Poste Italiane

posteitaliane.it

L'azienda opera in Italia e svolge un ruolo importante nel Paese, dando un forte contributo alla filiera produttiva e all'economia nazionale. Il Gruppo Poste Italiane rappresenta una realtà unica per dimensioni, riconoscibilità, capillarità e fiducia da parte della clientela, e fornisce un importante contributo al tessuto economico, sociale e produttivo del Paese. Quotata alla Borsa di Milano dal 2015, Poste Italiane ha un flottante di circa il 35%; il 65% circa delle azioni è poi ripartito tra il Ministero dell’Economia e delle Finanze, che ne detiene una quota del 29,26%, e da Cassa depositi e prestiti che possiede una quota del 35%. Da maggio 2023 Silvia Maria Rovere è Presidente. Da Aprile 2017 Matteo Del Fante Amministratore Delegato. Da febbraio 2024 Giuseppe Lasco è Direttore Generale. Poste Italiane è oggi la più grande realtà del comparto logistico in Italia ed è leader nel settore finanziario, assicurativo e dei servizi di pagamento. Il Gruppo opera esclusivamente in Italia ed è parte integrante del sistema economico, sociale e produttivo del Paese, in quanto realtà unica per dimensioni, riconoscibilità e capillarità. Le attività dell’Azienda generano quindi impatti significativi su tutto il territorio, anche in ottica di raggiungimento degli Obiettivi di Sviluppo Sostenibile (SDGs).” Il Purpose di Poste Italiane: Crescere responsabilmente grazie al decisivo contributo delle proprie persone per il successo sostenibile, l’innovazione, digitalizzazione e la coesione sociale del Paese. Info su: https://www.posteitaliane.it (Ultimo aggiornamento marzo 2024) Poste Italiane aderisce all’Arbitro Assicurativo (AAS), operativo dal 15 gennaio 2026. Maggiori informazioni su https://www.poste.it/assistenza/arbitro-assicurativo

PostNord

postnord.com

We make everyday life easier. PostNord is a leading provider of parcel and logistics services to, from, and within the Nordic region. We ensure the provision of a postal service to households and businesses in Sweden, regardless of where they live and work. PostNord connects companies, public authorities and consumers and enables business, trade and communication in the Nordic region. With our expertise and strong distribution network, we put in place the conditions for the e-commerce, distribution, logistics and communication solutions of tomorrow in the Nordic region. In 2023, the Group had around 24,500 employees and sales of SEK 39.3 billion. The Parent Company is a Swedish public limited company with Group headquarters in Solna, Sweden. Visit us at www.group.postnord.com

A.P. Moller - Maersk

maersk.com

A.P. Moller - Maersk is an integrated transport and logistics company; going all the way, together, for our customers and society. ALL THE WAY is our commitment to connect the world so that everyone has both the possibility and the ability to trade, grow and thrive. The company employs roughly 110.000 employees across operations in 130 countries.

Loading…

NEWS

Aramex CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 21, 2026 12:42 AM

Defining MENA’s economy: 30 iconic and influential companies

Country: Saudi Arabia. Headquartered in Riyadh, Tahaluf has rapidly emerged as a force redefining Saudi Arabia's global event footprint.

Read Article

March 14, 2026 07:03 AM

ADQ declares Aramex acquisition offer unconditional ahead of 25 July settlement

The transaction represents a significant milestone in ADQ's strategy to deepen its investment in global logistics and supply chains.

Read Article

October 08, 2025 07:00 AM

Digitally Secure Logistics in the Middle East: Trends and Technologies

As threats mount logistics companies in the region beefing up their cybersecurity measures.

Read Article

July 09, 2025 07:00 AM

IT leader Kevin Fredericks nominated for 2025 CIO Awards

Edward Snell & Co. head of technology Kevin Fredericks joins the list of IT leaders competing for the acclaimed CIO of the Year title.

Read Article

June 19, 2025 07:00 AM

Aramex launches AI-powered campaign to combat scam messages

The campaign uses a deliberately surreal, AI-style video to spotlight the growing issue of scam messages targeting Aramex customers.

Read Article

June 12, 2025 07:00 AM

Defining MENA’s economy: 30 iconic and influential companies

Country: UAE. Established in 1976 as Etisalat, e& has transformed from the UAE's first telecom operator into one of the MENA region's most...

Read Article

February 16, 2023 08:00 AM

Sheikh Hamdan inaugurates world’s largest solar-powered data centre in Dubai

The data centre was implemented by Moro Hub a subsidiary of Digital DEWA.

Read Article

July 13, 2022 07:00 AM

Up to 10,000 Students Targeted in Deakin University Cyberattack

Victoria's Deakin University was the subject of a cyberattack. Hackers used a staff member's username and password to access student contact data.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…