Company Details
axaxl
10,464
232,068
524
axaxl.com
0
AXA_1339030
In-progress

AXA XL Company CyberSecurity Posture
axaxl.comWe are a leading provider of insurance and reinsurance offering innovative risk management solutions for businesses worldwide. We partner with those who move the world forward, navigating complex risks and working across diverse industries to support and empower our clients. Note: We are currently experiencing some technical issues with our recruitment platform which we hope to resolve shortly, please be patient with us, thank you for your interest in jobs at AXA XL.
Company Details
axaxl
10,464
232,068
524
axaxl.com
0
AXA_1339030
In-progress
Between 750 and 799

AXA XL Global Score (TPRM)XXXX



No incidents recorded for AXA XL in 2025.
No incidents recorded for AXA XL in 2025.
No incidents recorded for AXA XL in 2025.
AXA XL cyber incidents detection timeline including parent company and subsidiaries

We are a leading provider of insurance and reinsurance offering innovative risk management solutions for businesses worldwide. We partner with those who move the world forward, navigating complex risks and working across diverse industries to support and empower our clients. Note: We are currently experiencing some technical issues with our recruitment platform which we hope to resolve shortly, please be patient with us, thank you for your interest in jobs at AXA XL.


Suncorp offers insurance products and services through some of Australia and New Zealand’s most recognised brands. Our purpose is to build futures and protect what matters – the focus of our company for more than 100 years. With the passion of our people, and our portfolio of brands including AAM

At Canada Life, we’re focused on improving the financial, physical and mental well-being of Canadians. Whether handling policy claims, help growing and protecting clients’ retirement and investment savings, providing workplace mental health support for all employers or helping build stronger communi

RGS operates nationwide with over 2,500 branches, agencies and over 400 claims-handling offices covering every one of Russia's 86 regions - from Kaliningrad on the Baltic Sea in the West to Kamchatka on the Pacific Ocean in the Far East, and from Murmansk on the Barents Sea to Sochi (2014 Winter Oly

SURA es una compañía que integra en diferentes empresas soluciones en seguros y seguridad social. Su marca se presenta a los clientes como Seguros SURA, ARL SURA y EPS SURA. Existen otras marcas y empresas, especialmente de prestación de servicios, que hacen parte de la Compañía. Nuestra experienc
At Allstate, we're advocates for peace of mind and a good life. And that comes through in everything we do. From building innovative teams that truly understand our customers' needs, to challenging each other to develop our careers in a meaningful way, and finally to the incredible results we're a

The Life Insurance Corporation of India (LIC) is a state-owned Life Insurance Company of India. Founded in 1956, it operates as a Government-Owned Corporation, headquartered in Mumbai, Maharashtra, and is a key player in the life insurance sector in India. LIC offers a wide range of insurance produ

Axis Max Life Insurance Limited (earlier known as Max Life Insurance Company Limited) is a Joint Venture between Max Financial Services Limited and Axis Bank Limited. Max Financial Services Ltd. is a part of the Max Group, an Indian multi-business corporation. Axis Max Life Insurance Limited has an

CNO Financial Group, Inc. (NYSE: CNO) secures the future of middle-income America. CNO provides life and health insurance, annuities, financial services, and workforce benefits solutions through our family of brands, including Bankers Life, Colonial Penn, Optavise and Washington National. Our cus

Hi, we’re HUB. We advise businesses and individuals on how to reach their goals. When you partner with us, you’re at the center of a vast network of risk, insurance, employee benefits, retirement and wealth management specialists that bring clarity to a changing world with tailored solutions and un
.png)
PRNewswire/ -- AXA XL has promoted Rob Malone to U.S. Head of Cyber, effective immediately. In this role, Mr. Malone will lead the company's...
AXA XL announced the launch of a new insurance solution for museums and private collectors of exclusive car collections in Switzerland.
AXA XL announced the launch of a new cyber solution designed to provide construction firms in Europe, Asia and Australia with enhanced...
AXA XL launches a new cyber solution designed to provide enhanced protection for construction firms across Europe, Asia, and Australia.
Cyber incidents continue to escalate in frequency and cost as organizations across industries embrace digital transformation.
AXA XL has appointed Donnacha Smyth as Global Chief Underwriting Officer, Casualty, effective November 3. Currently Head of Casualty for the...
Shutterstock.com_2137304159/Thapana_Studio. 16 September 2025Insurance. Invision Cyber partners with US cybersecurity giant Trend Micro.
... large cyber claims: Axa XL. Shutterstock.com_1639068349/Andrey_Popov. 15 September 2025Technology. Ransomware behind half of large cyber claims: Axa XL.
AXA XL, an insurance and risk management solutions provider, has appointed Donnacha Smyth as its new global chief underwriting officer (CUO)...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of AXA XL is http://www.axaxl.com.
According to Rankiteo, AXA XL’s AI-generated cybersecurity score is 775, reflecting their Fair security posture.
According to Rankiteo, AXA XL currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, AXA XL is not certified under SOC 2 Type 1.
According to Rankiteo, AXA XL does not hold a SOC 2 Type 2 certification.
According to Rankiteo, AXA XL is not listed as GDPR compliant.
According to Rankiteo, AXA XL does not currently maintain PCI DSS compliance.
According to Rankiteo, AXA XL is not compliant with HIPAA regulations.
According to Rankiteo,AXA XL is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
AXA XL operates primarily in the Insurance industry.
AXA XL employs approximately 10,464 people worldwide.
AXA XL presently has no subsidiaries across any sectors.
AXA XL’s official LinkedIn profile has approximately 232,068 followers.
AXA XL is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.
No, AXA XL does not have a profile on Crunchbase.
Yes, AXA XL maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/axaxl.
As of November 27, 2025, Rankiteo reports that AXA XL has not experienced any cybersecurity incidents.
AXA XL has an estimated 14,862 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, AXA XL has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.