What is the official website of CROSSMARK ?

The official website of CROSSMARK is http://www.crossmark.com.

What is CROSSMARK's cybersecurity risk score?

CROSSMARK has an AI-generated cybersecurity risk score of 713 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has CROSSMARK experienced?

According to Rankiteo, CROSSMARK currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has CROSSMARK been affected by any supply chain cyber incidents ?

According to Rankiteo, CROSSMARK has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does CROSSMARK have SOC 2 Type 1 certification ?

According to Rankiteo, CROSSMARK is not certified under SOC 2 Type 1.

Does CROSSMARK have SOC 2 Type 2 certification ?

According to Rankiteo, CROSSMARK does not hold a SOC 2 Type 2 certification.

Does CROSSMARK comply with GDPR ?

According to Rankiteo, CROSSMARK is not listed as GDPR compliant.

Does CROSSMARK have PCI DSS certification ?

According to Rankiteo, CROSSMARK does not currently maintain PCI DSS compliance.

Does CROSSMARK comply with HIPAA ?

According to Rankiteo, CROSSMARK is not compliant with HIPAA regulations.

Does CROSSMARK have ISO 27001 certification ?

According to Rankiteo,CROSSMARK is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does CROSSMARK operate in ?

CROSSMARK operates primarily in the Business Consulting and Services industry.

How many employees does CROSSMARK have ?

CROSSMARK employs approximately 9,608 people worldwide.

Does CROSSMARK own any subsidiaries ?

CROSSMARK presently has no subsidiaries across any sectors.

How many LinkedIn followers does CROSSMARK have ?

CROSSMARK's official LinkedIn profile has approximately 66,844 followers.

What is the NAICS classification code for CROSSMARK ?

CROSSMARK is classified under the NAICS code 5416, which corresponds to Management, Scientific, and Technical Consulting Services.

Does CROSSMARK have a Crunchbase profile ?

No, CROSSMARK does not have a profile on Crunchbase.

Does CROSSMARK have a LinkedIn profile ?

Yes, CROSSMARK maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/crossmark.

How many cybersecurity incidents has CROSSMARK experienced ?

As of July 29, 2026, Rankiteo reports that CROSSMARK has experienced 2 cybersecurity incidents.

How many peer or competitor companies does CROSSMARK have ?

CROSSMARK has an estimated 19,627 peer or competitor companies worldwide.

What types of cybersecurity incidents has CROSSMARK faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CROSSMARK

Boost Score +25 with badge (5 left)

713

/1000

Moderate

738

/1000

Moderate

CROSSMARK Vendor Cyber Rating & Cyber Score

crossmark.com

Add Your Compliance Badge

Crossmark offers service-based solutions to help your brand grow in store and online. With the sales and marketing expertise at our disposal, we can provide you with the ultimate end-to-end service. That means better decision making, actionable insights, unearthing exciting new retail opportunities, and giving you an instant understanding of your current and future performance.

CROSSMARK A.I CyberSecurity Scoring

Scoring History

CROSSMARK

CROSSMARK CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

CROSSMARK

Cyber Attack

8/2024

MARCRO178421209...

CROSSMARK

Breach

3/2024

CRO418072825

Loading…

A.I.

CROSSMARK Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CROSSMARK

Incidents vs Business Consulting and Services Industry Avg (This Year)

No incidents recorded for CROSSMARK in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for CROSSMARK in 2026.

Incident Types CROSSMARK vs Business Consulting and Services Industry Avg (This Year)

No incidents recorded for CROSSMARK in 2026.

Incident History - CROSSMARK (X = Date, Y = Severity)

Loading…

SUBSIDIARY

CROSSMARK Subsidiaries

CROSSMARK

Business Consulting and Services

Website: http://www.crossmark.com

Company Size: 10,001+ employees

Acosta GroupBusiness Consulting and Services

Mosaic North AmericaAdvertising Services

IGNITE Sales ServicesBusiness Consulting and Services

Disrupt, a division of AcostaAdvertising Services

AcostaRetail

Premium Retail ServicesRetail

flexforce, a division of AcostaAdvertising Services

REappRetail

Premium Retail Services - CanadaRetail

Reach EuropeOutsourcing and Offshoring Consulting

Product ConnectionsAdvertising Services

Acosta EuropeAdvertising Services

ADWBusiness Consulting and Services

Tactical SolutionsRetail

Natural Specialty SalesBusiness Consulting and Services

FrontLine MarketingAdvertising Services

Acosta PetRetail

Acosta BentonvilleRetail

ShopSmartAdvertising Services

Acosta Group CanadaAdvertising Services

The Culinary EdgeFood and Beverage Services

Impact NaturalRetail

ActionLinkRetail

CORE FoodserviceFood and Beverage Services

Dee Set: Complete Retail SolutionsTransportation, Logistics, Supply Chain and Storage

Loading…

CROSSMARK Similar Companies

Capgemini Invent

capgemini.com

Capgemini Invent is the digital innovation, consulting and transformation brand of the Capgemini Group, a global business line that combines market leading expertise in strategy, technology, data science and creative design, to help CxOs envision and build what’s next for their businesses. For more information: http://www.capgemini.com/invent. Follow us on Twitter @CapgeminiInvent.

Applus+

cb applus.com

Applus+ is a worldwide leader in the testing, inspection, and certification sector. We are a trusted partner, enhancing the quality and safety of our clients’ assets and infrastructures while safeguarding their operations and improving their environmental performance. Our innovative approach, technical capabilities and highly-skilled and motivated workforce of over 25,000 employees assure operational excellence across multiple sectors in more than 65 countries. We offer a complete portfolio of solutions that address a range of needs, from asset integrity management to statutory compliance-based inspections. We place a strong emphasis on technological development, digitalisation and innovation, as well as having the latest knowledge of regulatory requirements.

EY-Parthenon

ey.com

Our unique combination of transformative strategy, transactions and corporate finance delivers real-world value – solutions that work in practice, not just on paper. Benefiting from EY’s full spectrum of services, we’ve reimagined strategic consulting to work in a world of increasing complexity. With deep functional and sector expertise, paired with innovative AI-powered technology and an investor mindset, we partner with CEOs, boards, private equity and governments every step of the way – enabling you to shape your future with confidence. EY-Parthenon is a brand under which a number of EY member firms across the globe provide strategy consulting services. For more information, please visit ey.com/parthenon.

Protiviti

protiviti.com

Protiviti (www.protiviti.com) is a global consulting firm that delivers deep expertise, objective insights, a tailored approach and unparalleled collaboration to help leaders confidently face the future. Protiviti and its independent and locally owned member firms provide clients with consulting and managed solutions in finance, technology, operations, data, digital, legal, HR, risk and internal audit through a network of more than 90 offices in over 25 countries. Named to the Fortune 100 Best Companies to Work For® list for the 11th consecutive year, Protiviti Inc. has served more than 80 percent of Fortune 100 and nearly 80 percent of Fortune 500 companies. The firm also works with government agencies and smaller, growing companies, including those looking to go public. Protiviti Inc. is a wholly owned subsidiary of Robert Half (NYSE: RHI).

Stefanini Group

stefanini.com

Global Tech Consulting Company All in One. Stefanini is a Brazilian multinational company with 37 years of experience and presence in 41 countries. With more than 35,000 employees, we co-create solutions for a better future, driving digital transformation with a focus on real results. We operate in an integrated way through 7 specialized business units: Consulting (Technology and Business Agility), Analytics & AI, Banking & Payments, Cybersecurity, Manufacturing 4.0, and Digital Marketing. Recognized as the most internationalized technology company in Brazil, according to the Fundação Dom Cabral (FDC) ranking, Stefanini is global by essence, collaborative by nature, and strategic by vocation. It is also a pioneer in applying Artificial Intelligence to transform businesses through an end-to-end AI-First approach.

KPMG UK

kpmg.com

Make growth happen. Make it trusted. Make bold moves. Make the future. KPMG makes the difference for our clients, people and communities. Make growth happen. Make it trusted. Make bold moves. Make the future. At KPMG, we’ve been making the difference for our clients, people and communities for over 150 years. We’re a leading UK provider of advisory, audit and tax services. Our clients have trusted us to make the difference for over 150 years. We work with them to overcome their biggest challenges and find new opportunities with our unique insights, fresh thinking and cutting-edge tech. KPMG. Make the Difference

Guidehouse

guidehouse.com

Guidehouse is a global AI-led professional services firm delivering advisory, technology, and managed services to the commercial and government sectors. With an integrated business technology approach, Guidehouse drives efficiency and resilience in the healthcare, financial services, energy, infrastructure, and national security markets. Built to help clients across industries outwit complexity, the firm brings together approximately 18,000 professionals to achieve lasting impact and shape a meaningful future.

Conduent

conduent.com

Conduent delivers digital business solutions and services spanning the commercial, government and transportation spectrum – creating valuable outcomes for its clients and the millions of people who count on them. We leverage cloud computing, artificial intelligence, machine learning, automation and advanced analytics to deliver mission-critical solutions. Through a dedicated global team of approximately 55,000 associates, process expertise and advanced technologies, our solutions and services digitally transform our clients’ operations to enhance customer experiences, improve performance, increase efficiencies and reduce costs. We drive progress in every process for our client including disbursing approximately $100 billion in government payments annually, enabling 2.3 billion customer service interactions annually, empowering millions of employees through HR services every year and processing nearly 13 million tolling transactions every day. Learn more at www.conduent.com

Boston Consulting Group (BCG)

bcg.com

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we work closely with clients to embrace a transformational approach aimed at benefiting all stakeholders—empowering organizations to grow, build sustainable competitive advantage, and drive positive societal impact. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives that question the status quo and spark change. BCG delivers solutions through leading-edge management consulting, technology and design, and corporate and digital ventures. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, fueled by the goal of helping our clients thrive and enabling them to make the world a better place. BCG Privacy Policy: https://www.bcg.com/about/privacy-policy.aspx

Loading…

NEWS

CROSSMARK CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 28, 2022 08:00 AM

Intel's Arc A370M Discrete GPU Gets Benchmarked

Entry-level dedicated silicon battles Intel's Iris Xe, but performance is still unclear.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66064

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection and block-list checks. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-66063

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-64863

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-62325

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allowed unauthenticated file access. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-59921

SUMMARY

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without validating or sanitizing CRLF characters (\r\n). Since MIME headers are delimited by CRLF, an attacker who controls the filename can inject arbitrary MIME headers into the multipart body part. The root cause is that neither the encoder nor the FileUpload implementations' setFilename() methods, which only check for null, neutralize CRLF characters before the filename is embedded into the header. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.1

REFERENCES

https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…