What is the official website of CRIF ?

The official website of CRIF is http://www.crif.com.

What is CRIF's cybersecurity risk score?

CRIF has an AI-generated cybersecurity risk score of 770 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has CRIF experienced?

According to Rankiteo, CRIF currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has CRIF been affected by any supply chain cyber incidents ?

According to Rankiteo, CRIF has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does CRIF have SOC 2 Type 1 certification ?

According to Rankiteo, CRIF is not certified under SOC 2 Type 1.

Does CRIF have SOC 2 Type 2 certification ?

According to Rankiteo, CRIF does not hold a SOC 2 Type 2 certification.

Does CRIF comply with GDPR ?

According to Rankiteo, CRIF is not listed as GDPR compliant.

Does CRIF have PCI DSS certification ?

According to Rankiteo, CRIF does not currently maintain PCI DSS compliance.

Does CRIF comply with HIPAA ?

According to Rankiteo, CRIF is not compliant with HIPAA regulations.

Does CRIF have ISO 27001 certification ?

According to Rankiteo,CRIF is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does CRIF operate in ?

CRIF operates primarily in the IT Services and IT Consulting industry.

How many employees does CRIF have ?

CRIF employs approximately 5,211 people worldwide.

Does CRIF own any subsidiaries ?

CRIF presently has no subsidiaries across any sectors.

How many LinkedIn followers does CRIF have ?

CRIF's official LinkedIn profile has approximately 195,094 followers.

What is the NAICS classification code for CRIF ?

CRIF is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does CRIF have a Crunchbase profile ?

Yes, CRIF has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/crif.

Does CRIF have a LinkedIn profile ?

Yes, CRIF maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/crif.

How many cybersecurity incidents has CRIF experienced ?

As of July 9, 2026, Rankiteo reports that CRIF has not experienced any cybersecurity incidents.

How many peer or competitor companies does CRIF have ?

CRIF has an estimated 40,954 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CRIF

Boost Score +25 with badge (5 left)

770

/1000

Fair

795

/1000

Fair

CRIF Vendor Cyber Rating & Cyber Score

crif.com

cb in

Add Your Compliance Badge

CRIF is a global company specializing in credit bureau and business information systems, analytics, outsourcing and processing services, as well as advanced digital and open banking solutions. Founded in Bologna (Italy) in 1988, today CRIF has an international presence, covering 37 countries across 4 continents with over 6,600 professionals. CRIF aims to create value for consumers, businesses and financial institutions by providing information and solutions that enable more powerful decision-making, improve access to credit and accelerate digital innovation. CRIF also offers fraud prevention and cybersecurity services to consumers and SMEs. CRIF Ratings, a credit rating agency registered with ESMA and an External Credit Assessment

CRIF A.I CyberSecurity Scoring

Scoring History

CRIF

CRIF CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

CRIF Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CRIF

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for CRIF in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for CRIF in 2026.

Incident Types CRIF vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for CRIF in 2026.

Incident History - CRIF (X = Date, Y = Severity)

Loading…

SUBSIDIARY

CRIF Subsidiaries

CRIF

IT Services and IT Consulting

Website: http://www.crif.com

Company Size: 5,211

CRIF IndiaFinancial Services

CRIBISInformation Services

StrandsSoftware Development

CRIF GULF (Dun & Bradstreet)Information Services

CRIF Egypt (Dun & Bradstreet)Information Services

Loading…

CRIF Similar Companies

Accenture in India

accenture.com

Accenture is a global professional services company with leading capabilities in digital, cloud and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Interactive, Technology and Operations services — all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 699,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities. Visit us at accenture.com.

Unisys

unisys.com

Unisys is a global technology solutions company that powers breakthroughs for the world’s leading organizations. Our solutions – cloud, AI, digital workplace, logistics and enterprise computing – help our clients challenge the status quo and unlock their full potential. To learn how we have been helping clients push what’s possible for more than 150 years, visit unisys.com.

inDrive

cb inDrive.com

inDrive is a global mobility and urban services platform. The inDrive app has been downloaded over 400 million times, and has been the second most downloaded mobility app for the third consecutive year. In addition to ride-hailing, inDrive provides an expanding list of urban services, including intercity transportation and delivery. In 2023, inDrive launched New Ventures, a venture and M&A arm. inDrive operates in 1065 cities in 48 countries. Driven by its mission of challenging social injustice, the company is committed to having a positive impact on the lives of one billion people by 2030. It pursues this goal both through its core business, which supports local communities via a fair pricing model; and through the work of inVision, its non-profit arm. inVision’s community empowerment programs help to advance education, sports, arts and sciences, gender equality and other vital initiatives. For more information visit www.inDrive.com

Ingram Micro

ingrammicro.com

Ingram Micro is a leading technology company for the global information technology ecosystem. With the ability to reach nearly 90% of the global population, we play a vital role in the worldwide IT sales channel, bringing products and services from technology manufacturers and cloud providers to a highly diversified base of business-to-business technology experts. Through Ingram Micro Xvantage™, our AI-powered digital platform, we offer what we believe to be the industry’s first comprehensive business-to-consumer-like experience, integrating hardware and cloud subscriptions, personalized recommendations, instant pricing, order tracking, and billing automation. We also provide a broad range of technology services, including financing, specialized marketing, and lifecycle management, as well as technical pre- and post-sales professional support. Learn more at www.ingrammicro.com.

EPAM Systems

epam.com

Since 1993, EPAM Systems, Inc. (NYSE: EPAM) has used its software engineering expertise to become a leading global provider of digital engineering, cloud and AI-enabled transformation services, and a leading business and experience consulting partner for global enterprises and ambitious startups. We address our clients’ transformation challenges by fusing EPAM Continuum’s integrated strategy, experience and technology consulting with our 30+ years of engineering execution to speed our clients’ time to market and drive greater value from their innovations and digital investments. We leverage AI and GenAI to deliver transformative solutions that accelerate our clients’ digital innovation and enhance their competitive edge. Through platforms like EPAM AI/RUN™ and initiatives like DIALX Lab, we integrate advanced AI technologies into tailored business strategies, driving significant industry impact and fostering continuous innovation. We deliver globally, but engage locally with our expert teams of consultants, architects, designers and engineers, making the future real for our clients, our partners and our people around the world. We believe the right solutions are the ones that improve people’s lives and fuel competitive advantage for our clients across diverse industries. Our thinking comes to life in the experiences, products and platforms we design and bring to market. Added to the S&P 500 and the Forbes Global 2000 in 2021 and recognized by Glassdoor and Newsweek as Most Loved Workplace, our multidisciplinary teams serve customers across six continents. We are proud to be among the top 15 companies in Information Technology Services in the Fortune 1000 and to be recognized as a leader in the IDC MarketScapes for Worldwide Experience Build Services, Worldwide Experience Design Services and Worldwide Software Engineering Services. Learn more at www.epam.com.

Swisscom

swisscom.ch

As No. 1, we inspire people in the connected world. With the latest technologies and innovations, together we have the opportunity to shape the future. To do this, we are and act trustworthy, committed and curious. Are you with us? Join us on this exciting journey and work with us or in one of the DevOps Centres in Riga or Rotterdam in different business areas on the latest technological trends. Find out more about us and our vacancies on our careers page: www.swisscom.ch/career We look forward to hearing from you!

NEC Corporation

cb nec.com

NEC Corporation has established itself as a leader in the integration of IT and network technologies while promoting the brand statement of “Orchestrating a brighter world.” NEC enables businesses and communities to adapt to rapid changes taking place in both society and the market as it provides for the social values of safety, security, fairness and efficiency to promote a more sustainable world where everyone has the chance to reach their full potential. For more information, visit NEC at http://www.nec.com NEC's Strengths and Competencies ・Named "2017 Global 100 Most Sustainable Corporations in the World" an Index Listing the World’s 100 Most Sustainable Corporations ・Named one of the "World's Top 100 Most Innovative Organizations for 2016" by Thomson Reuters ・Face recognition technology achieved No. 1 in the recent Face in Video Evaluation (FIVE, *1) testing performed by the U.S. National Institute of Standards and Technology (NIST) (*2) (*1) https://www.nist.gov/programs-projects/face-video-evaluation-five (*2) Results shown from the Face In Video Evaluation (FIVE), the Multiple Biometric Grand Challenge (MBGC), the Multiple Biometric Evaluation (MBE) and the Face Recognition Vendor Test (FRVT) do not constitute endorsement of any particular product by the U.S. Government. ** Please note that we reserve the right to delete any comments posted on NEC Corporation’s LinkedIn page that are deemed extremely defamatory or libelous to any company or individual, or that may be offensive to others.

Gainwell Technologies

gainwelltechnologies.com

For 50 years, our nation’s federal Medicaid program has worked to improve the health, safety and well-being of America’s most vulnerable populations: low-income families, women and children, seniors, and those with disabilities. With positive health and cost outcomes that pierce inequities and impact economies, the success of these programs is inextricably tied to the prosperity of communities, individual states and the nation as a whole. We think that demands respect and, more importantly, is deserving of a lifetime commitment from innovators who can help those who operate within and around health and human services evolve — in any market at any stage. At Gainwell Technologies, that’s our sole focus. Built across more than five decades, Gainwell has intentionally seized opportunities to advance its digitally enabled services to meet agencies, health plans and MCOs where they are on their modernization journeys and propel them into the future of public health. Our commitment to innovation, deep experience and ability to leverage insights from customers across 50 states has allowed us to expand on next-generation, cloud-enabled technologies. Today, Gainwell offers one of the most comprehensive suites of scalable services and solutions on the market — all proven to deliver cost savings, better patient outcomes and an improved provider experience. Equally important to our expanding technologies and results: We bring ideas that bring policies to life.

Globant

cb globant.link

At Globant, we create the digitally-native products that people love. We bridge the gap between businesses and consumers through technology and creativity, leveraging our experience as an AI powerhouse. We dare to digitally transform organizations and strive to delight their customers. - We have more than 30,000 employees and are present in 33 countries across 5 continents, working for companies like Google, Electronic Arts, and Santander, among others. - We were named a Worldwide Leader in AI Services (2023) and a Worldwide Leader in CX Improvement Services (2020) by IDC MarketScape report. - We are the fastest-growing IT brand and the 5th strongest IT brand globally (2024), according to Brand Finance. - We were featured as a business case study at Harvard, MIT, and Stanford. - We are active members of The Green Software Foundation (GSF) and the Cybersecurity Tech Accord. For more information, visit https://bit.ly/globant_com Follow us: http://www.twitter.com/globant http://www.youtube.com/Globant http://www.facebook.com/Globant https://instagram.com/Globant https://www.tiktok.com/@globant

Loading…

NEWS

CRIF CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 26, 2026 01:15 PM

Security and AI news from the week beginning 19th January 2025 -

Last week, malicious attackers stepped up their game on several fronts. Fortinet was forced to admit that, despite a patch in December.

Read Article

October 14, 2025 07:00 AM

UK leads Europe in fears of rising bank fraud and cyberattacks by 2030

A new CRIF report reveals UK consumers are the most concerned in Europe about rising financial fraud and cyber risks, highlighting growing...

Read Article

October 08, 2025 07:00 AM

Four in Five Brits Expect Bank Fraud and Cyber-Attacks to Become a Bigger Issue by 2030 – the Highest in Europe

UK consumers are the most likely to think that fraud will become a bigger issue for banks and insurers in the next five years,...

Read Article

October 08, 2025 07:00 AM

Britons expect surge in bank and insurance fraud by 2030 – CRIF

UK consumers are more likely than their European counterparts to believe that fraud will become a greater issue for banks and insurers over...

Read Article

July 04, 2025 07:00 AM

Fondazione Golinelli, CRIF and G-Factor open applications for the I-Tech Innovation Program 2025/2026

Aimed at a total of 12 teams and young innovative companies, the program focuses on six strategic areas and will run from January to May 2026.

Read Article

March 28, 2022 07:00 AM

Concerns raised about access to ECJ data

Cybersecurity expert Trevor Forrest says that the arrangements between the Electoral Commission of Jamaica and Tax Administration Jamaica...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-59723

SUMMARY

Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. Prior to 3.0.30, the Cline Hub dashboard server launched by the cline dashboard command accepts WebSocket connections on the /browser endpoint without validating the Origin header, and when ROOM_SECRET is unset for local 127.0.0.1 binds, isAuthorizedBrowserRequest() allows attacker-controlled websites to send desktopCommand frames that read workspace state, mutate MCP and provider settings, and trigger command execution when a provider or model is configured. This issue is fixed in version 3.0.30.

Published

Date2026-07-08

Updated

Date2026-07-08

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Impact Score

Exploitability

2.1

REFERENCES

CVE-2026-54784

SUMMARY

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. In version 1.9.0, CoreWCF SPNEGO SecurityContextToken negotiation can expose the proof key recovered from the RSTR when TransportWithMessageCredential with Windows client credentials and session establishment are used, allowing an observer to impersonate the authenticated Windows principal and decrypt or forge WS-SecureConversation traffic. This issue is fixed in version 1.9.1.

Published

Date2026-07-08

Updated

Date2026-07-08

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

2.2

REFERENCES

CVE-2026-54783

SUMMARY

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF WS-Security endorsing and supporting signature verification does not ensure the selected ds:Signature covers the expected Security header target, allowing an attacker with one captured signed SOAP envelope to replay arbitrary service operations as the victim principal. This issue is fixed in versions 1.8.1 and 1.9.1.

Published

Date2026-07-08

Updated

Date2026-07-08

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

2.2

REFERENCES

CVE-2026-54782

SUMMARY

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML 1.1 and SAML 2.0 token validation does not correctly resolve the issuer signing key or require signed tokens when IdentityConfiguration is used with federated bindings, allowing an unauthenticated remote attacker to impersonate any principal the trusted STS could issue. This issue is fixed in versions 1.8.1 and 1.9.1.

Published

Date2026-07-08

Updated

Date2026-07-08

RISK INFORMATION (Score: 10)

cvss3

Base Score: 10.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Impact Score

5.8

Exploitability

3.9

REFERENCES

CVE-2026-54781

SUMMARY

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML token validation does not enforce SubjectConfirmation method URIs or holder-of-key proof keys in SamlSecurityTokenHandler, allowing holder-of-key downgrade or custom confirmation method assertions to authenticate a subject without proving authority over the assertion. This issue is fixed in versions 1.8.1 and 1.9.1.

Published

Date2026-07-08

Updated

Date2026-07-08

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…