What is the official website of Arrowhead Programs ?

The official website of Arrowhead Programs is https://arrowheadprograms.com/.

What is Arrowhead Programs's cybersecurity risk score?

Arrowhead Programs has an AI-generated cybersecurity risk score of 750 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Arrowhead Programs experienced?

According to Rankiteo, Arrowhead Programs currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Arrowhead Programs been affected by any supply chain cyber incidents ?

According to Rankiteo, Arrowhead Programs has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Arrowhead Programs have SOC 2 Type 1 certification ?

According to Rankiteo, Arrowhead Programs is not certified under SOC 2 Type 1.

Does Arrowhead Programs have SOC 2 Type 2 certification ?

According to Rankiteo, Arrowhead Programs does not hold a SOC 2 Type 2 certification.

Does Arrowhead Programs comply with GDPR ?

According to Rankiteo, Arrowhead Programs is not listed as GDPR compliant.

Does Arrowhead Programs have PCI DSS certification ?

According to Rankiteo, Arrowhead Programs does not currently maintain PCI DSS compliance.

Does Arrowhead Programs comply with HIPAA ?

According to Rankiteo, Arrowhead Programs is not compliant with HIPAA regulations.

Does Arrowhead Programs have ISO 27001 certification ?

According to Rankiteo,Arrowhead Programs is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Arrowhead Programs operate in ?

Arrowhead Programs operates primarily in the Insurance industry.

How many employees does Arrowhead Programs have ?

Arrowhead Programs employs approximately 32 people worldwide.

Does Arrowhead Programs own any subsidiaries ?

Arrowhead Programs presently has no subsidiaries across any sectors.

How many LinkedIn followers does Arrowhead Programs have ?

Arrowhead Programs's official LinkedIn profile has approximately 2,730 followers.

What is the NAICS classification code for Arrowhead Programs ?

Arrowhead Programs is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Does Arrowhead Programs have a Crunchbase profile ?

No, Arrowhead Programs does not have a profile on Crunchbase.

Does Arrowhead Programs have a LinkedIn profile ?

Yes, Arrowhead Programs maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/arrowhead-programs.

How many cybersecurity incidents has Arrowhead Programs experienced ?

As of August 9, 2026, Rankiteo reports that Arrowhead Programs has not experienced any cybersecurity incidents.

How many peer or competitor companies does Arrowhead Programs have ?

Arrowhead Programs has an estimated 15,667 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Arrowhead Programs

Boost Score +25 with badge (5 left)

750

/1000

Fair

775

/1000

Fair

Arrowhead Programs Vendor Cyber Rating & Cyber Score

arrowheadprograms.com

Add Your Compliance Badge

Arrowhead Programs offers one of the largest portfolios of insurance program business worldwide, spanning commercial, personal, professional liability, public entity and specialty insurance. In collaboration with top-rated insurance companies, our managing general underwriters and program administrators deliver a portfolio of niche offerings to address the specialized needs of policyholders. Proud to be part of the Brown & Brown family of companies, named one of the 2025 Best Workplaces in Financial Services & Insurance™ by Fortune and Great Place To Work for the sixth consecutive year.

Arrowhead Programs A.I CyberSecurity Scoring

Scoring History

Arrowhead Programs

Arrowhead Programs CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Arrowhead Programs Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Arrowhead Programs

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for Arrowhead Programs in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Arrowhead Programs in 2026.

Incident Types Arrowhead Programs vs Insurance Industry Avg (This Year)

No incidents recorded for Arrowhead Programs in 2026.

Incident History - Arrowhead Programs (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Arrowhead Programs Subsidiaries

Arrowhead Programs

Insurance

Website: https://arrowheadprograms.com/

Company Size: 32

Brown & BrownInsurance

Arrowhead General Insurance Agency, Inc.Insurance

Bridge Specialty GroupInsurance

Big Sky Underwriters a Division of Hull & Company, LLCInsurance

Brown & Brown Mergers & AcquisitionsInsurance

Smith Insurance Associates, A Division of Brown & Brown Metro, LLCInsurance

The Professional Protector Plan® for DentistsInsurance

Irving Weber Associates, Inc.Insurance

Brown & Brown Absence Services GroupInsurance

Aevo ServicesInsurance

Lawyer's Protector Plan®Insurance

BELLINGHAM UNDERWRITERSInsurance

Parcel Insurance PlanInsurance

Halcyon UnderwritersInsurance

Professional Services Plans (PSP)Insurance

National Risk SolutionsInsurance

Loading…

Arrowhead Programs Similar Companies

Generali Italia

generali.it

Generali Italia è la grande realtà assicurativa nata dalla fusione di Generali, Ina Assitalia, Toro, Lloyd Italico e Augusta. Dall’unione di persone e competenze che hanno fatto la storia dell’assicurazione in Italia, è nata una Compagnia con radici solide che guarda al futuro, in grado di offrire soluzioni sempre più innovative ed efficaci. Coniughiamo l’attenzione alle esigenze degli assicurati, alla solidità patrimoniale, all’esperienza e all’eccellenza tecnica del Gruppo Generali per accompagnare e proteggere i tuoi progetti di vita. Essere più grandi vuol dire anche diventare più forti: con l’esperienza di oltre 40 mila Agenti presenti capillarmente su tutto il territorio italiano oggi proteggiamo oltre 10 milioni di clienti. La sede principale di Generali Italia S.p.A. è in Via Marocchesa 14, 31021 Mogliano, Veneto, Italia

Bajaj Life

bajajlifeinsurance.com

Bajaj Life Insurance is among the fastest-growing life insurance companies in India, offering a wide range of plans, from ULIPs and term insurance to retirement and child policies, helping you secure your future and achieve your life goals. With over 3.85 crore policyholders, an AUM of ₹1.3 Lakh Crores, a 99.29% claim settlement ratio, and a 343% solvency margin, we are committed to delivering financial protection, wealth creation, and peace of mind at every stage of life. Our Popular Life Insurance Products: ULIPs (Unit Linked Insurance Plans): Zero Allocation Charge ULIP designed for long-term wealth creation, with return of mortality charges. Term Insurance Plans: Includes India’s first Term Plan for Diabetics, offering affordable protection for all. SISO (Systematic In/Systematic Out): A smart investment approach for disciplined wealth building. Bajaj Life ACE: A flexible plan that lets you choose income options as per your financial needs. Bajaj Superwoman Term: A term protection solution specifically designed for women. Our extensive service on WhatsApp Conversational Platform ensures convenience and easy accessibility to our customer right at their fingertips. With a strong distribution network of 597 branches, over 1.62 lakh insurance consultants, and partnerships with India’s leading banks, Bajaj Life ensures easy access and customer-first service. We pride ourselves in creating a culture that fosters an innovative mindset and collaboration among our 25K+ employees who have made Bajaj Life a Great Place to Work for. Recent Accolades: 1. World’s Digital Insurance Award 2025 for Innovative Smart Assist Platform 2. Best Employer India by Kincentric, 2023, 2022, 2021 3. India’s No. 1 Top Riser Brand by Kantar BrandZ, 2022 Reach out to: 020-6712 1212| For complaints/queries: [email protected] To buy, call 18002094040 or Visit our website: https://www.bajajlifeinsurance.com

IAG

iag.com.au

IAG is Australia and New Zealand's largest general insurance company with a purpose to make your world a safer place, whether you are a customer, partner, employee, shareholder or part of the communities IAG serves across Australia and New Zealand. Our businesses have helped people recover from natural disasters, accidents and loss since 1851. In Australia and New Zealand we provide insurance under many leading brands, including NRMA Insurance, CGU, SGIO, SGIC and WFI; and NZI, State, AMI and Lumley Insurance (New Zealand). We also have interests in general insurance joint ventures in Malaysia and India. Increasingly, we see our role extending beyond paying claims to increasing awareness of risk, and helping communities reduce and prevent risk. We believe it is our responsibility as an industry leader to use our influence and role as a major investor, purchaser and employer for the good of everyone. For further information please visit www.iag.com.au.

Prudential Indonesia (PT Prudential Life Assurance)

prudential.co.id

Listening. Understanding. Delivering. At Prudential Indonesia we deliver excellence by consistently innovating, creating new opportunities and growing our business to cater all of our customers' needs. With a vision of becoming truly world class, Prudential Indonesia provides quality services and proven track record of market leadership in the country. Working at Prudential Indonesia gives you many opportunities to develop yourself and explore what you’re really capable of, as well as the perfect environment to collaborate, listen and care for others. Ask around. The more you find out about us, the more you’ll learn that we’re an insurance company that understands you. We are here to listen.

Anthem Blue Cross and Blue Shield

anthem.com

At Anthem Blue Cross and Blue Shield we understand our health connects us to each other. What we all do impacts those around us. So Anthem is dedicated to delivering better care to our members, providing greater value to our customers and helping improve the health of our communities. Independent licensees of the Blue Cross and Blue Shield Association. ANTHEM is a registered trademark of Anthem Insurance Companies, Inc. Products vary by state. Learn more about our plans and legal information at www.anthem.com

Porto

porto.vc

A Porto é mais que uma seguradora, é um ecossistema de soluções de serviços de proteção com tecnologia embarcada, para melhorar e facilitar a experiência do cliente. Com mais de 70 anos de mercado, a atuação da companhia se concentra hoje em quatro pilares estratégicos de negócio: Seguros, Saúde, Produtos Financeiros e Serviços. Além de 15.8 milhões de clientes únicos, 13 mil funcionários, 12 mil prestadores e 35 mil corretores parceiros, a empresa conta ainda com 101 sucursais e escritórios regionais em todo o Brasil. Ao todo 27 empresas fazem parte do universo Porto – entre elas: Porto Bank, Porto Saúde, Porto Seguro, Porto Serviço, Porto Seguro Uruguai, Azul Seguros, Itaú Seguros de Auto e Residência.

Assurant

cb assurant.com

Assurant is a leading global business services company that supports, protects, and connects major consumer purchases. A Fortune 500 company with a presence in 21 countries, Assurant supports the advancement of the connected world by partnering with the world’s leading brands to develop innovative solutions and deliver an enhanced customer experience through mobile device solutions, extended service contracts, vehicle protection services, renters insurance, lender-placed insurance products, and other specialty products. Thank you for visiting Assurant’s LinkedIn community. Before posting, please review our guidelines at https://www.assurant.com/social-community-guidelines.

Chubb

cb chubb.com

Chubb is a world leader in insurance. With operations in 54 countries and territories, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. As an underwriting company, we assess, assume and manage risk with insight and discipline. We service and pay our claims fairly and promptly. The company is also defined by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength and local operations globally. Parent company Chubb Limited is listed on the New York Stock Exchange (NYSE: CB) and is a component of the S&P 500 index. Chubb maintains executive offices in Zurich, New York, London, Paris and other locations, and employs approximately 40,000 people worldwide. Read our Social Media Guidelines here: https://www.chubb.com/us-en/about-chubb/chubbs-social-media-guidelines.aspx Notre section « À propos » est également disponible en français, ici: https://www.chubb.com/ca-fr/about-chubb-in-canada/a-propos-de-chubb-au-canada.aspx

Groupama

cb groupama-gan-recrute.com

« Etre là pour les autres, j'ai décidé d'en faire mon métier. » Portée par nos 32 000 collaborateurs, notre campagne de communication employeur souligne ce qui nous rassemble et nous rend fiers au quotidien : notre métier, le point de départ de belles histoires, humaines avant tout. Cette campagne met l’accent sur ce qui nous différencie de nos concurrents : notre ADN mutualiste. Au sein du Groupe Groupama, l’humain et le sens sont privilégiés. Nous recrutons des personnes et pas des diplômes, de belles personnalités qui seront demain au service de nos sociétaires et clients. La signature de cette campagne « Etre là pour les autres, j’ai décidé d’en faire mon métier » résonne avec notre raison d’être « Nous sommes là pour permettre au plus grand nombre de construire leur vie en confiance. » et notre positionnement de marque. Etre là pour les autres, c'est le point de départ de notre métier. Et c'est aussi le point de départ de belles histoires qui font notre Groupe et notre identité en tant qu'employeur. Des histoires vraies pleines d'humanité. Nos collaborateurs en ont plein à raconter ! Découvrez leurs belles histoires sur www.groupama-gan-recrute.com ! Vous aussi, vous voulez donner du sens à vos compétences ? Rejoignez nous ! Et sinon, le Groupe Groupama c'est plus de 50 entreprises dans 10 pays. Vous nous connaissez au travers de nos 2 marques commerciales Groupama et Gan. Nous accompagnons nos 12 millions de sociétaires et clients à chaque moment de leur vie grâce à nos experts et à notre savoir-faire.

Loading…

NEWS

Arrowhead Programs CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 16, 2026 08:00 AM

The Middle Seat Suits Arrowhead Intermediaries

SAN DIEGO – When facing new and unusual situations — such as the financial risks associated with the emergence of artificial intelligence...

Read Article

February 12, 2026 08:00 AM

BROWN & BROWN, INC. SEC 10-K Report

Brown & Brown, Inc., a leading insurance brokerage firm, has released its 2025 10-K report, showcasing robust financial growth,...

Read Article

January 22, 2026 08:00 AM

Babcock Enters Initial Agreement with Indonesia for Arrowhead 140 Licences under Maritime Partnership Programme

Babcock International has announced its first agreement under the £4 billion Maritime Partnership Programme with Indonesia, focusing on the...

Read Article

August 12, 2025 07:00 AM

One80 Intermediaries officially joins Arrowhead Programs and Bridge Specialty Group

New structure, leadership team and brand unveiled to deliver greater valueSAN DIEGO, Aug. 12, 2025 (GLOBE NEWSWIRE) -- Arrowhead...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-71983

SUMMARY

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized parameters to execute arbitrary commands on the affected device and obtain root privileges.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71502

SUMMARY

CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vue template expression delimiters in server-rendered user-controlled data. An unauthenticated attacker can create a public conversion whose name or description contains a malicious Vue expression using the application's configured [[ ... ]] delimiters. User profile names may provide an additional injection vector. Although Jinja HTML escaping is applied, the resulting value is subsequently included in a DOM region compiled by Vue. Vue interprets the attacker-controlled value as a template expression rather than ordinary text. By accessing the JavaScript Function constructor from within the expression, an attacker can execute arbitrary JavaScript in the security context of the CTI-Transmute origin. The application's nonce-based Content Security Policy does not prevent exploitation because the Vue runtime compiler requires the unsafe-eval policy exception. The malicious payload is stored by the application and executed whenever another user opens an affected page, such as the public conversion detail page. The victim may be a normal user or an administrator. Successful exploitation could allow the attacker to: * Access data available to the victim through the application. * Extract API keys, tokens, or other sensitive information exposed to the page. * Perform authenticated actions using the victim's session. * Modify conversions or other application data. * Escalate the impact by targeting an administrator. A demonstrated payload can use [].constructor.constructor(...) to obtain the JavaScript Function constructor and execute arbitrary code. The regression tests also show that a short first-stage payload could retrieve an uncapped conversion description and evaluate a larger second-stage payload. The patch addresses the vulnerability by registering a global Jinja finalize hook that inserts a zero-width Unicode word joiner inside every Vue delimiter found in server-rendered values. This prevents Vue from recognizing the values as template expressions while preserving their visible representation.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: )

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-71958

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71957

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist[].name field and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71956

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst field, resulting in command execution with root privileges.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…