Company Details
bolt-eu
13,687
298,460
5112
bolt.eu
0
BOL_1334512
In-progress

Bolt Company CyberSecurity Posture
bolt.euAt Bolt, we're building a future where people don’t need to own personal cars to move around safely and conveniently. A future where people have the freedom to use transport on demand, choosing whatever vehicle's best for each occasion — be it a car, scooter, or e-bike. We're helping over 200 million customers move around in more than 600 cities globally while also supporting more than 4.5 million drivers and couriers to earn a living. The best bit? We're only just getting started. Read more at bolt.eu
Company Details
bolt-eu
13,687
298,460
5112
bolt.eu
0
BOL_1334512
In-progress
Between 750 and 799

Bolt Global Score (TPRM)XXXX



No incidents recorded for Bolt in 2025.
No incidents recorded for Bolt in 2025.
No incidents recorded for Bolt in 2025.
Bolt cyber incidents detection timeline including parent company and subsidiaries

At Bolt, we're building a future where people don’t need to own personal cars to move around safely and conveniently. A future where people have the freedom to use transport on demand, choosing whatever vehicle's best for each occasion — be it a car, scooter, or e-bike. We're helping over 200 million customers move around in more than 600 cities globally while also supporting more than 4.5 million drivers and couriers to earn a living. The best bit? We're only just getting started. Read more at bolt.eu


Zoho offers beautifully smart software to help you grow your business. With over 100 million users worldwide, Zoho's 55+ products aid your sales and marketing, support and collaboration, finance, and recruitment needs—letting you focus only on your business. Zoho respects user privacy and does not h
As a global leader in business cloud software specialized by industry. Infor develops complete solutions for its focus industries, including industrial manufacturing, distribution, healthcare, food & beverage, automotive, aerospace & defense, hospitality, and high tech. Infor’s mission-critical ente

At Agoda, we bridge the world through travel. We aim to make it easy and rewarding for more travelers to explore and experience the amazing world we live in. We do so by enabling more people to see the world for less – with our best-value deals across our 4,700,000+ hotels and holiday properties, 13

UKG is the Workforce Operating Platform that puts workforce understanding to work. With the world's largest collection of workforce insights, and people-first AI, our ability to reveal unseen ways to build trust, amplify productivity, and empower talent, is unmatched. It's this expertise that equips

We’re the delivery market leader in Latin America. Our platform connects over 77.000 restaurants, supermarkets, pharmacies and stores with millions of users. Nowadays we operate in more than 500 cities in Latinamerica. And we are now over 3.400 employees. PedidosYa is available for iOS, Android and

NiCE is transforming the world with AI that puts people first. Our purpose-built AI-powered platforms automate engagements into proactive, safe, intelligent actions, empowering individuals and organizations to innovate and act, from interaction to resolution. Trusted by organizations throughout 150
The Bosch Group is a leading global supplier of technology and services. It employs roughly 417,900 associates worldwide (as of December 31, 2024). According to preliminary figures, the company generated sales of 90.5 billion euros in 2024. Its operations are divided into four business sectors: Mobi
We help those who build the future to make it amazing. In an era where new technologies are born every minute, and the demand for meaningful digital experiences has never been so intense, we unlock our customers’ innovative potential, empowering them to transform their boldest ideas into reality, an

More than one billion people around the world use Instagram, and we’re proud to be bringing them closer to the people and things they love. Instagram inspires people to see the world differently, discover new interests, and express themselves. Since launching in 2010, our community has grown at a r
.png)
Wyze Lock Bolt v2 - The Wyze Lock Bolt v2 smart lock has been announced by the brand as the latest version of its accessible smart home...
In the real-time cybersecurity race, having different, concurrent approaches and unique talents to spot patterns can make the difference between winning and...
Independent insurance agents face a crossroads. Traditional insurance products such as auto, home, renters, and even small commercial are...
Security tools are best understood not by acronyms but by where they disrupt the cyber kill chain, which maps defenses directly to attacker...
Dubai Wi-Fi Safety: Learn how to protect your data on public networks with tips from Dubai Police. Stay secure while using free Wi-Fi in the...
Boise State University is pleased to announce that Brian Bolt, deputy chief information officer in the Office of Information Technology,...
College is an exciting time for everyone, including scammers. Here are some basic, easy-to-follow tips for college students.
IronCircle, a new AI cybersecurity workforce platform, today announced its official company launch. As part of the announcement,...
Channel partners must tackle cybersecurity complexity to drive outcomes and build trust.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Bolt is http://bolt.eu.
According to Rankiteo, Bolt’s AI-generated cybersecurity score is 781, reflecting their Fair security posture.
According to Rankiteo, Bolt currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Bolt is not certified under SOC 2 Type 1.
According to Rankiteo, Bolt does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Bolt is not listed as GDPR compliant.
According to Rankiteo, Bolt does not currently maintain PCI DSS compliance.
According to Rankiteo, Bolt is not compliant with HIPAA regulations.
According to Rankiteo,Bolt is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Bolt operates primarily in the Software Development industry.
Bolt employs approximately 13,687 people worldwide.
Bolt presently has no subsidiaries across any sectors.
Bolt’s official LinkedIn profile has approximately 298,460 followers.
Bolt is classified under the NAICS code 5112, which corresponds to Software Publishers.
Yes, Bolt has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/mtakso.
Yes, Bolt maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bolt-eu.
As of November 27, 2025, Rankiteo reports that Bolt has not experienced any cybersecurity incidents.
Bolt has an estimated 26,613 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, Bolt has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.