What is the official website of Companhia Paulista de Obras e Serviços ?

The official website of Companhia Paulista de Obras e Serviços is http://www.cpos.sp.gov.br.

What is Companhia Paulista de Obras e Serviços's cybersecurity risk score?

Companhia Paulista de Obras e Serviços has an AI-generated cybersecurity risk score of 820 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has Companhia Paulista de Obras e Serviços experienced?

According to Rankiteo, Companhia Paulista de Obras e Serviços currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Companhia Paulista de Obras e Serviços been affected by any supply chain cyber incidents ?

According to Rankiteo, Companhia Paulista de Obras e Serviços has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Companhia Paulista de Obras e Serviços have SOC 2 Type 1 certification ?

According to Rankiteo, Companhia Paulista de Obras e Serviços is not certified under SOC 2 Type 1.

Does Companhia Paulista de Obras e Serviços have SOC 2 Type 2 certification ?

According to Rankiteo, Companhia Paulista de Obras e Serviços does not hold a SOC 2 Type 2 certification.

Does Companhia Paulista de Obras e Serviços comply with GDPR ?

According to Rankiteo, Companhia Paulista de Obras e Serviços is not listed as GDPR compliant.

Does Companhia Paulista de Obras e Serviços have PCI DSS certification ?

According to Rankiteo, Companhia Paulista de Obras e Serviços does not currently maintain PCI DSS compliance.

Does Companhia Paulista de Obras e Serviços comply with HIPAA ?

According to Rankiteo, Companhia Paulista de Obras e Serviços is not compliant with HIPAA regulations.

Does Companhia Paulista de Obras e Serviços have ISO 27001 certification ?

According to Rankiteo,Companhia Paulista de Obras e Serviços is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Companhia Paulista de Obras e Serviços operate in ?

Companhia Paulista de Obras e Serviços operates primarily in the Civil Engineering industry.

How many employees does Companhia Paulista de Obras e Serviços have ?

Companhia Paulista de Obras e Serviços employs approximately 74 people worldwide.

Does Companhia Paulista de Obras e Serviços own any subsidiaries ?

Companhia Paulista de Obras e Serviços presently has no subsidiaries across any sectors.

How many LinkedIn followers does Companhia Paulista de Obras e Serviços have ?

Companhia Paulista de Obras e Serviços's official LinkedIn profile has approximately followers.

What is the NAICS classification code for Companhia Paulista de Obras e Serviços ?

Companhia Paulista de Obras e Serviços is classified under the NAICS code 237, which corresponds to Heavy and Civil Engineering Construction.

Does Companhia Paulista de Obras e Serviços have a Crunchbase profile ?

No, Companhia Paulista de Obras e Serviços does not have a profile on Crunchbase.

Does Companhia Paulista de Obras e Serviços have a LinkedIn profile ?

Yes, Companhia Paulista de Obras e Serviços maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/companhia-paulista-de-obras-e-servi-os.

How many cybersecurity incidents has Companhia Paulista de Obras e Serviços experienced ?

As of June 27, 2026, Rankiteo reports that Companhia Paulista de Obras e Serviços has not experienced any cybersecurity incidents.

How many peer or competitor companies does Companhia Paulista de Obras e Serviços have ?

Companhia Paulista de Obras e Serviços has an estimated 5,922 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CPDOES

Boost Score +25 with badge (5 left)

820

/1000

Good

845

/1000

Good

Companhia Paulista de Obras e Serviços Vendor Cyber Rating & Cyber Score

sp.gov.br

Add Your Compliance Badge

A Companhia Paulista de Obras e Serviços - CPOS é uma empresa de economia mista, vinculada a Secretaria Estadual de Economia e Planejamento, responsável pelas soluções de engenharia elaboradas para os órgãos da administração direta e indireta do Governo do Estado de São Paulo. Desde a sua criação, em 1991, a companhia prima pela qualidade dos serviços e preocupa-se em atender as necessidades do cidadão. Entre as atividades da CPOS destacam-se: gerenciamento de obras e contratos, conservação e ampliação de edifícios, reformas, desenvolvimento de projetos, vistoria de terrenos, laudos de avaliação, regularização imobiliária, processamento de licitações.

CPDOES A.I CyberSecurity Scoring

Scoring History

CPDOES

Companhia Paulista de Obras e Serviços CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

CPDOES Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CPDOES

Incidents vs Civil Engineering Industry Avg (This Year)

No incidents recorded for Companhia Paulista de Obras e Serviços in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Companhia Paulista de Obras e Serviços in 2026.

Incident Types CPDOES vs Civil Engineering Industry Avg (This Year)

No incidents recorded for Companhia Paulista de Obras e Serviços in 2026.

Incident History - CPDOES (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Companhia Paulista de Obras e Serviços Subsidiaries

CPDOES

Civil Engineering

Website: http://www.cpos.sp.gov.br

Company Size: 51-200 employees

Governo do Estado de São PauloGovernment Administration

Universidade de São PauloEducação superior

Centro de Tecnologia da Informação de São CarlosInformation Technology & Services

Agência USP de InovaçãoResearch Services

Faculdade de Medicina de São José do Rio Preto - FAMERPResearch Services

ARTESP - Agência Reguladora de Serviços Públicos Delegados de Transporte do Estado de São PauloTransportation Programs

Centro Paula SouzaGovernment Administration

Faculdade de Medicina de Marília - FamemaHigher Education

Fundação SeadePublic Policy Offices

Subsecretaria de Parcerias do Estado de São PauloAdministração pública, defesa e seguridade social

Fundação Pró-Sangue Hemocentro de São PauloHealth, Wellness & Fitness

EMAE - Empresa Metropolitana de Águas e Energia S.A.Utilities

Porto de São SebastiãoTransportation, Logistics, Supply Chain and Storage

Instituto de Pesos e Medidas - IpemGovernment Administration

CEDAB-Centro de Estudos Desportivos e Artísticos do BrasilEntertainment Providers

Metrô de São PauloRail Transportation

FUNDAP GuatemalaCivic and Social Organizations

DERSACivil Engineering

SabespEnvironmental Services

CETESB - Companhia Ambiental do Estado de São PauloGovernment Administration

EMPRESA METROPOLITANA DE TRANSPORTES URBANOS DE SÃO PAULO – EMTU/SPTruck Transportation

DER - Departamento de Estradas de Rodagem do Estado de São PauloGovernment Administration

Desenvolve SPFinancial Services

Secretaria de Desenvolvimento Econômico do Estado de São PauloGovernment Administration

Universidade Estadual de CampinasPesquisa e desenvolvimento cientifico

IPENGovernment Administration

FAPESPResearch Services

IAMSPE - Instituto de Assistência Médica ao Servidor Público EstadualHuman Resources

Hospital das Clínicas da Fac. de Medicina de Rib. Preto da Univ. de São Paulo - USPHospitals and Health Care

Secretaria de Estado da Saúde de São PauloUtilities

Loading…

Companhia Paulista de Obras e Serviços Similar Companies

Mott MacDonald

mottmac.com

We are an engineering, management and development consultancy and one of the largest wholly employee-owned firms of our kind. We plan, design, deliver and maintain the transport, energy, water, defence and security, and buildings infrastructure that is integral to people's daily lives. Our core strength is using our expertise to overcome complex challenges to deliver benefits for our clients and the communities they serve.

AECOM

aecom.com

AECOM is the global infrastructure leader, committed to delivering a better world. As a trusted professional services firm powered by deep technical abilities, we solve our clients’ complex challenges in water, environment, energy, transportation and buildings. Our teams partner with public- and private-sector clients to create innovative, sustainable and resilient solutions throughout the project lifecycle – from advisory, planning, design and engineering to program and construction management. AECOM is a Fortune 500 firm that had revenue of $16.1 billion in fiscal year 2024. Learn more at aecom.com.

Ferrovial

ferrovial.com

Ferrovial is a leading global infrastructure company transforming highways, airports, and energy around the world. Its distinctive integrated business model supports the entire lifecycle of complex projects, from design and financing to construction, operation and maintenance. The company has a global presence and employs more than 22,500 people worldwide. North America is Ferrovial’s growth engine, where it developed and is currently operating five Express Lanes across Texas, North Carolina and Virginia, and is managing the 407 ETR highway in Toronto, Canada. The company is also leading the development of the New Terminal One at JFK International Airport. Ferrovial shares trade under the ticker symbol FER on three stock markets: U.S. (Nasdaq‑100 Index), Spain (IBEX‑35), and the Netherlands. The company is included in globally recognized sustainability indices such as the Dow Jones Best in Class Index.

GHD

cb ghd.com

We are committed to addressing the world’s biggest challenges in the areas of water, energy and communities. GHD is a global network of multi-disciplinary professionals providing clients with integrated solutions through engineering, environmental, design and construction expertise. Our future-focused, innovative approaches connect and support communities around the world, resiliency and sustainability for generations to come. Established in 1928, we remain wholly owned by our people. We are 10,000+ diverse and skilled individuals connected by over 200 offices, across five continents – Asia, Australia, Europe, North and South America, and the Pacific region. See our list of office locations and contact numbers in ghd.com/en/about-ghd/office-locations ---------------------------------------------------------------------------------------- GHD reconnaît et comprend que le monde est en constante évolution. Nous sommes engagés à résoudre les plus grands défis mondiaux dans les secteurs de l’eau, de l’énergie et de l’urbanisation. Nous sommes une entreprise de services professionnels dotée d’une expertise de pointe en ingénierie, en construction et en architecture. Nos démarches avant-gardistes et innovatrices rapprochent et soutiennent les communautés à l’échelle mondiale. En livrant d’excellents résultats sociaux et économiques, nous visons à bâtir des relations durables avec nos partenaires et nos clients. Fondée en 1928, GHD appartient entièrement à ses employés Nous sommes plus de 10 000 employés diversifiés et qualifiés dans plus de 200 bureaux et sur cinq continents : Amérique du Nord et Amérique du Sud, Asie, Australie et Europe, ainsi que dans la région du Pacifique. Apprenez-en davantage sur nous à ghd.com

Fugro

cb fugro.com

We are the world’s leading Geo-data specialist, collecting and analysing comprehensive information about the Earth and the structures built upon it. Through integrated data acquisition, analysis and advice, we unlock insights from Geo-data to help our clients design, build and operate their assets in a safe, sustainable and efficient manner. Learn more about us: https://www.youtube.com/fugro https://www.facebook.com/fugro https://twitter.com/fugro https://www.instagram.com/fugro/

Downer

downergroup.com

Enabling communities to thrive. It’s what we’ve done for more than 150 years. Solving problems. Making the extraordinary run smoothly every day. We’re keeping the lights on and the water flowing. Running the hospitals that take care of us. Delivering the transport that takes us from A to B. Maintaining communication networks that keep people connected. Helping our Government and Defence customers keep them protected. Delivering train fleets. Building bridges, roads and streets. Now we’re building momentum too. Moving forward even faster. Across Australia and New Zealand, we’re transforming the way we work. Unlocking our potential to lead by example. Using our passion and expertise to deliver complex projects and turn fresh ideas into solutions that make society a better place. Creating opportunities for our people, growth and value for our shareholders, and world-class solutions for our customers. Imagining. Innovating. Engineering. Enabling.

SNC-Lavalin

snclavalin.com

SNC Lavalin is now AtkinsRéalis. Please follow AtkinsRéalis on LinkedIn. We are a world-class engineering services and nuclear organization. We connect people, data and technology to transform the world’s infrastructure and energy systems. Together, with our industry partners and clients, and our global team of consultants, designers, engineers and project managers, we can change the world. Follow our AtkinsRéalis page for new info: https://www.linkedin.com/company/atkinsrealis

Parsons Corporation

parsons.com

Founded in 1944, Parsons Corporation, a digitally enabled solutions provider, is focused on creating the future of the defense, intelligence, and critical infrastructure markets. From Earth to outer space, we deliver tomorrow’s solutions today. Equipped with the capabilities required to take on any defense, intelligence, or critical infrastructure challenge, our agile, innovative, and disruptive approach enables us to deliver solutions at the speed of relevance. Our people are our greatest asset. We strive to be an employer of choice that engages employees in the community and creates rewarding career paths to cultivate a resilient workforce that is ready for the future. #WeAreParsons Disclaimer: Parsons is aware of recruitment scams where individuals posing as Parsons representatives offer fraudulent job opportunities to steal personal information or solicit money. To avoid these scams, remember that Parsons will never ask for money or sensitive personal details, and all legitimate job openings are listed on https://jobs.parsons.com/; report any suspicious activity to local law enforcement or [email protected].

Tetra Tech

cb tetratech.com

Tetra Tech is the leader in water, environment, and sustainable infrastructure, providing high-end consulting and engineering services for projects worldwide. With 25,000 employees working together, Tetra Tech provides clear solutions to complex problems by Leading with Science® to address the entire water cycle, protect and restore the environment, and design sustainable and resilient infrastructure. Tetra Tech est un chef de file mondial dans le domaine de l'eau, de l'environnement et des infrastructures durables, offrant des services de génie-conseil et d'ingénierie de qualité supérieure pour des projets à l'échelle mondiale. À travers nos 25 000 associés, Tetra Tech propose des solutions optimales aux problèmes les plus complexes en utilisant la science d’abord pour répondre aux besoins en matière de cycle de l'eau, en protection et restauration de l'environnement ainsi qu’en conception d’infrastructures durables et résilientes.

Loading…

NEWS

Companhia Paulista de Obras e Serviços CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-56414

SUMMARY

A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content to fixed, persistent filesystem locations without validating file type, structure, or size. This design omission enables the placement of unexpected or malformed data in locations intended for trusted certificate material, which could affect system integrity or behavior even after reboot.

Published

Date2026-06-26

Updated

Date2026-06-26

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

1.2

REFERENCES

CVE-2026-55975

SUMMARY

A vulnerability exists in H.View IP cameras that could allow an authenticated user to supply unsanitized XML fields to the device's certificate generation interface, which are incorporated into a backend certificate creation command without proper input validation. This may allow for command execution with elevated privileges during certificate generation.

Published

Date2026-06-26

Updated

Date2026-06-26

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

1.2

REFERENCES

CVE-2026-33560

SUMMARY

The DMP-5000 file service exposes authenticated arbitrary file upload functionality. There are exposed endpoints which allows authenticated users to upload files of any type without validation. No file extension filtering or content inspection is enforced which allows executable binaries and scripts to be accepted and written directly to the server.

Published

Date2026-06-26

Updated

Date2026-06-26

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

cvss4

Base Score: 8.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-31928

SUMMARY

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.

Published

Date2026-06-26

Updated

Date2026-06-26

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

2.8

REFERENCES

CVE-2026-28701

SUMMARY

Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote users to escape the intended directory and enumerate arbitrary file system paths.

Published

Date2026-06-26

Updated

Date2026-06-26

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…