What is the official website of CF Industries ?

The official website of CF Industries is http://www.cfindustries.com.

What is CF Industries's cybersecurity risk score?

CF Industries has an AI-generated cybersecurity risk score of 782 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has CF Industries experienced?

According to Rankiteo, CF Industries currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has CF Industries been affected by any supply chain cyber incidents ?

According to Rankiteo, CF Industries has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does CF Industries have SOC 2 Type 1 certification ?

According to Rankiteo, CF Industries is not certified under SOC 2 Type 1.

Does CF Industries have SOC 2 Type 2 certification ?

According to Rankiteo, CF Industries does not hold a SOC 2 Type 2 certification.

Does CF Industries comply with GDPR ?

According to Rankiteo, CF Industries is not listed as GDPR compliant.

Does CF Industries have PCI DSS certification ?

According to Rankiteo, CF Industries does not currently maintain PCI DSS compliance.

Does CF Industries comply with HIPAA ?

According to Rankiteo, CF Industries is not compliant with HIPAA regulations.

Does CF Industries have ISO 27001 certification ?

According to Rankiteo,CF Industries is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does CF Industries operate in ?

CF Industries operates primarily in the Chemical Manufacturing industry.

How many employees does CF Industries have ?

CF Industries employs approximately 2,623 people worldwide.

Does CF Industries own any subsidiaries ?

CF Industries presently has no subsidiaries across any sectors.

How many LinkedIn followers does CF Industries have ?

CF Industries's official LinkedIn profile has approximately 59,541 followers.

What is the NAICS classification code for CF Industries ?

CF Industries is classified under the NAICS code 325, which corresponds to Chemical Manufacturing.

Does CF Industries have a Crunchbase profile ?

Yes, CF Industries has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/cf-industries-holdings.

Does CF Industries have a LinkedIn profile ?

Yes, CF Industries maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/cf-industries.

How many cybersecurity incidents has CF Industries experienced ?

As of September 17, 2026, Rankiteo reports that CF Industries has experienced 1 cybersecurity incidents.

How many peer or competitor companies does CF Industries have ?

CF Industries has an estimated 4,417 peer or competitor companies worldwide.

What types of cybersecurity incidents has CF Industries faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CF Industries

Boost Score +25 with badge (5 left)

782

/1000

Fair

807

/1000

Good

CF Industries Vendor Cyber Rating & Cyber Score

cfindustries.com

cb in

Add Your Compliance Badge

At CF Industries, our mission is to provide clean energy to feed and fuel the world sustainably. The company is headquartered in Northbrook, Illinois, a suburb of Chicago. We operate manufacturing complexes in the United States, Canada, and the United Kingdom, which are among the most cost-advantaged, efficient, and flexible in the world and an unparalleled storage, transportation and distribution network in North America.

CF Industries

CF Industries CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

CF Industries

Cyber Attack

100

11/2025

CF-383223811062...

Loading…

A.I.

CF Industries Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CF Industries

Incidents vs Chemical Manufacturing Industry Avg (This Year)

No incidents recorded for CF Industries in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for CF Industries in 2026.

Incident Types CF Industries vs Chemical Manufacturing Industry Avg (This Year)

No incidents recorded for CF Industries in 2026.

Incident History - CF Industries (X = Date, Y = Severity)

Loading…

SUBSIDIARY

CF Industries Subsidiaries

Parent Company

CF Industries

Chemical Manufacturing

Website: http://www.cfindustries.com

Company Size: 1,001-5,000 employees

No subsidiary data available for this company.

Loading…

CF Industries Similar Companies

dsm-firmenich

dsm-firmenich.com

We are dsm-firmenich – innovators in nutrition, health, and beauty. We bring progress to life by combining the essential, the desirable, and the sustainable. From our master perfumers and flavorists to our expert nutritionists and scientists, our trailblazing teams work closely with customers, supporting their ambitions with 150+ years of R&D expertise. With a passionate and talented team of close to 30,000 employees, we are determined to be a force for good. And to work together to positively impact people and planet. #webringprogresstolife

LyondellBasell

lyondellbasell.com

We are LyondellBasell (NYSE: LYB) – a leader in the global chemical industry creating solutions for everyday sustainable living. Through advanced technology and focused investments, we are enabling a circular and low carbon economy. Across all we do, we aim to unlock value for our customers, investors and society. As one of the world's largest producers of polymers and a leader in polyolefin technologies, we develop, manufacture and market high-quality and innovative products for applications ranging from sustainable transportation and food safety to clean water and quality healthcare. For more information, please visit www.lyondellbasell.com.

BASF

basf.com

At BASF, we create chemistry for a sustainable future. Our ambition: We want to be the preferred chemical company to enable our customers’ green transformation. We combine economic success with environmental protection and social responsibility. Around 112,000 employees in the BASF Group contribute to the success of our customers in nearly all sectors and almost every country in the world. Our portfolio comprises, as core businesses, the segments Chemicals, Materials, Industrial Solutions, and Nutrition & Care; our standalone businesses are bundled in the segments Surface Technologies and Agricultural Solutions. BASF generated sales of €65.3 billion in 2024. BASF shares are traded on the stock exchange in Frankfurt (BAS) and as American Depositary Receipts (BASFY) in the United States. Credits: https://www.basf.com/global/en/legal/credits Data protection information: https://www.basf.com/global/en/legal/data-protection-at-basf.html

Linde

cb linde.com

Linde is a leading global industrial gases and engineering company with 2025 sales of $34 billion. We live our mission of making our world more productive every day by providing high-quality solutions, technologies and services which are making our customers more successful and helping to sustain, decarbonize and protect our planet. Linde serves a variety of end markets such as chemicals & energy, food & beverage, electronics, healthcare, manufacturing, metals and mining. Linde’s industrial gases and technologies are used in countless applications, enabling space exploration and launch technologies, delivering ultra-high-purity and specialty gases for semiconductor manufacturing, providing life-saving medical oxygen and enabling clean hydrogen production and carbon capture to reduce greenhouse gas emissions. Linde also delivers state-of-the-art gas processing solutions to support customer growth, efficiency improvements and emissions reductions. For more information about the company and its products and services, please visit www.linde.com. Visit our careers website www.lindecareers.com to take the next steps in your career with us. Legal Notice: https://www.linde.com/en/imprint Data Protection: https://dataprotection.linde.com/en/index.html

Givaudan

cb givaudan.com

Givaudan is a global leader in Fragrance & Beauty and Taste & Wellbeing. We celebrate the beauty of human experience by creating for happier, healthier lives with love for nature. Together with our customers we deliver food experiences, craft inspired fragrances, and develop beauty and wellbeing solutions that make people look and feel good. With over 163 locations in 52 countries and over 78 production sites, of which 31 are located in Europe, 22 in North America, 17 in Latin America, 8 in Asia-Pacific, and 1 across South Asia, the Middle East, and Africa, we are committed to driving purpose-led growth that makes a positive impact. Givaudan: Human by nature. www.givaudan.com

AkzoNobel

akzonobel.com

Since 1792, we’ve been supplying the innovative paints and coatings that help to color people’s lives and protect what matters most. Our world class portfolio of brands – including Dulux, International, Sikkens and Interpon – is trusted by customers around the globe. We’re active in more than 150 countries and use our expertise to sustain and enhance everyday life. Because we believe every surface is an opportunity. It’s what you’d expect from a pioneering and long-established paints company that’s dedicated to providing sustainable solutions and preserving the best of what we have today – while creating an even better tomorrow. Let’s paint the future together.

IFF

iff.com

At IFF, we make joy through science, creativity and heart. As the global leader in flavors, fragrances, food ingredients, health and biosciences, we deliver groundbreaking, sustainable innovations that elevate everyday products—advancing wellness, delighting the senses and enhancing the human experience. With ~22,000 employees across 65 countries, more than 110 manufacturing facilities, 100 R&D centers and 33,000 customers worldwide, we turn possibilities into reality by redefining the limits of science and nature to create a more positive, sustainable future for all. Visit us at www.iff.com to learn how our real-deal experts approach work with an entrepreneurial mindset, working lockstep to defy expectations and create industry-defining solutions that do more good for people and planet

Bayer

bayer.com

Bayer is a global enterprise with core competencies in the life science fields of healthcare and nutrition. We design our products and services to serve the most essential human needs of health and nutrition. At the same time, we strive to address some of the world’s biggest challenges presented by a growing and aging global population. At Bayer, we’re committed to driving sustainable development and generate a positive impact with our businesses. Through the power of science, we’re pioneering new possibilities that advance life for all of us. That means reimagining how we care for ourselves and one another by empowering everyday health, improving approaches to patient care, and finding better ways to nourish our communities around the world. Data Privacy Statement & Imprint: https://www.bayer.com/en/glob-li-bayer-en-dps-imprint

SABIC

sabic.com

SABIC is a global leader in chemicals headquartered in Riyadh, Saudi Arabia. From making cars and planes more fuel-efficient, to helping conserve the world’s water supply and enabling colorful smartphone cases, we find solutions to the challenges of today to help our customers achieve their ambitions and build a better tomorrow. We support our customers by identifying and developing opportunities in key end markets, such as Hygiene & Healthcare, Electrical & Electronics, Packaging, Agriculture, Consumer Products, and Building & Construction. The company has more than 31,000 employees worldwide, serving customers in more than 140 countries. Fostering innovation and a spirit of ingenuity, SABIC has 11,000 patents and pending applications, and has significant research resources with innovation hubs in five key geographies – Americas, Europe, Middle East, and Asia Pacific. At SABIC, we combine a rich track record of doing what others said couldn’t be done, with a deep understanding of our customers. But our true impact is as a partner who can help our customers achieve their ambitions by finding solutions to their challenges. We call this ‘Chemistry that Matters™’.

Loading…

NEWS

CF Industries CyberSecurity News

Global CVEs (Not Company-Specific)

CVE-2026-65388

SUMMARY

A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/apple/containerization/security/advisories/GHSA-mx96-5vvg-x2mg

CVE-2026-61599

SUMMARY

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling `__import__(module_path, ...)`. The module is imported — running its top-level code (import side effects) — before the framework checks that the resolved object is a `LiveView` subclass and before any per-view authentication. The `LIVEVIEW_ALLOWED_MODULES` allowlist that should contain this is fail-open (`if allowed_modules:` — skipped when the setting is unset, the framework default) and uses loose `startswith` matching. An unauthenticated WebSocket client (the WS handshake does not require auth; per-view auth runs only after import + instantiate) can therefore send a `mount` / `live_redirect_mount` / `url_change` frame (or an SSE mount) with `view = "<any.importable.module>.AnyName"` and cause the server to import — and execute the top-level code of — any importable Python module by name. Version 1.0.7 fixes the issue with a fail-closed resolution gate (`djust._view_resolution.is_view_import_allowed`): a client view path resolves only if (a) its module is already loaded (`sys.modules` — so resolving runs no new code; URL-routed views loaded by URLconf at startup keep working with zero config) or (b) it matches `LIVEVIEW_ALLOWED_MODULES` on a module-segment boundary (explicit opt-in for lazily-imported views). The gate runs before `__import__` at all three sinks (+ defense-in-depth inside `_instantiate_view`). As a workaround, set `LIVEVIEW_ALLOWED_MODULES` to the narrow list of modules that contain your mountable LiveView classes. (Note: pre-patch the allowlist is `startswith`-matched and the import still precedes the subclass check, so this is mitigation, not a complete fix.)

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: )

cvss4

Base Score: 8.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-61596

SUMMARY

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the WebSocket mount and event paths but not on three other render entry points: (a) the initial HTTP GET render, (b) SPA `url_change` navigation, and (c) `{% live_render %}` embedded child views. An authenticated user could therefore view (and on some paths act on) an object they are not authorized for by loading the page directly, navigating to it via SPA url-change, or composing it as an embedded child — a classic IDOR / broken object-level access control on object-scoped views. This is fixed in djust 1.0.7. All render entry points now route through a shared `enforce_object_permission` chokepoint: HTTP GET returns 403, `url_change` emits a `permission_denied` frame and skips the render, and `{% live_render %}` (eager + lazy) refuses the embed. Views without a custom `get_object` are unaffected (no-op). No reliable workaround short of upgrading. Do not expose object-scoped views through the HTTP-GET / url_change / live_render paths until patched.

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-61589

SUMMARY

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket `handle_mount` and `ViewRuntime._build_request` rebuild an `HttpRequest` via `RequestFactory().get(...)` with no `HTTP_HOST`, so `request.get_host()` defaulted to `"testserver"` on the live path. Host/subdomain/domain `TenantResolver`s then misresolved the tenant — `None` on the live path while the HTTP path resolved correctly. With `STRICT_MODE=False` the tenant-scoped managers returned unscoped rows (cross-tenant disclosure); with the default they returned an empty queryset (broken tenancy). This is fixed in djust 1.0.7. The handshake Host is extracted from the ASGI scope, validated against `ALLOWED_HOSTS` (the same logic as the CSWSH Origin gate, parsed with Django's `split_domain_port` so malformed Hosts are rejected at the boundary), and propagated — with the TLS scheme — into the reconstructed request, so live-path tenant resolution matches HTTP exactly. There is no known workaround on the live path short of upgrading. Users are most exposed when combined with `STRICT_MODE=False`.

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: 6.3)

cvss3

Base Score: 6.3

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Impact Score

Exploitability

1.8

REFERENCES

CVE-2026-61588

SUMMARY

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as `password` (the hash), privilege flags (e.g. `is_staff` / `is_superuser`), tokens, and other PII to the browser. Because exposing model objects to templates is a normal djust pattern, this could leak credentials/PII without the developer realizing the full object crossed the wire. This is fixed in djust 1.0.7. Model serialization applies a secure-by-default sensitive-field denylist (password/hash/token/secret-style fields and known privilege flags are withheld) with an identity-subset fallback. As a workaround, keep `Model` instances on `_private` attributes and expose only the specific fields needed, until patched.

Published

Date2026-09-16

Updated

Date2026-09-16

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

CF Industries Vendor Cyber Rating & Cyber Score

CF Industries A.I CyberSecurity Scoring

CF Industries CyberSecurity News & History

CF Industries Company Scoring based on AI Models