What is the official website of CTIS ?

The official website of CTIS is https://www.sonda.com/pt-br/.

What is CTIS's cybersecurity risk score?

CTIS has an AI-generated cybersecurity risk score of 762 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has CTIS experienced?

According to Rankiteo, CTIS currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has CTIS been affected by any supply chain cyber incidents ?

According to Rankiteo, CTIS has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does CTIS have SOC 2 Type 1 certification ?

According to Rankiteo, CTIS is not certified under SOC 2 Type 1.

Does CTIS have SOC 2 Type 2 certification ?

According to Rankiteo, CTIS does not hold a SOC 2 Type 2 certification.

Does CTIS comply with GDPR ?

According to Rankiteo, CTIS is not listed as GDPR compliant.

Does CTIS have PCI DSS certification ?

According to Rankiteo, CTIS does not currently maintain PCI DSS compliance.

Does CTIS comply with HIPAA ?

According to Rankiteo, CTIS is not compliant with HIPAA regulations.

Does CTIS have ISO 27001 certification ?

According to Rankiteo,CTIS is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does CTIS operate in ?

CTIS operates primarily in the IT Services and IT Consulting industry.

How many employees does CTIS have ?

CTIS employs approximately 2,818 people worldwide.

Does CTIS own any subsidiaries ?

CTIS presently has no subsidiaries across any sectors.

How many LinkedIn followers does CTIS have ?

CTIS's official LinkedIn profile has approximately 73,245 followers.

What is the NAICS classification code for CTIS ?

CTIS is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does CTIS have a Crunchbase profile ?

No, CTIS does not have a profile on Crunchbase.

Does CTIS have a LinkedIn profile ?

Yes, CTIS maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ctis.

How many cybersecurity incidents has CTIS experienced ?

As of August 15, 2026, Rankiteo reports that CTIS has not experienced any cybersecurity incidents.

How many peer or competitor companies does CTIS have ?

CTIS has an estimated 41,350 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CTIS

Boost Score +25 with badge (5 left)

762

/1000

Fair

787

/1000

Fair

CTIS Vendor Cyber Rating & Cyber Score

sonda.com

Add Your Compliance Badge

CTIS, a SONDA Group company, is recognized as one of the largest and most important Brazilian information technology companies. For 34 years in the market, the pillars are the End User Support, Software Factory, Managed Device Services, Professional Services, Printing Center, Visual Solutions and Escola Modelo business lines. For combining innovation, performance, quality and reliability, CTIS is your best option in outsourcing IT services.

CTIS A.I CyberSecurity Scoring

Scoring History

CTIS

CTIS CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

CTIS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CTIS

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for CTIS in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for CTIS in 2026.

Incident Types CTIS vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for CTIS in 2026.

Incident History - CTIS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

CTIS Subsidiaries

CTIS

IT Services and IT Consulting

Website: https://www.sonda.com/pt-br/

Company Size: 2,818

SONDAInformation Technology & Services

Loading…

CTIS Similar Companies

NCS Group

ncs.co

NCS, a subsidiary of Singtel Group, is a leading technology services firm with presence in Asia Pacific and partners with governments and enterprises to advance communities through technology. Combining the experience and expertise of its 14,000-strong team across 56 specialisations, NCS provides differentiated and end-to-end technology services to clients with its NEXT capabilities in digital, data, cloud and platforms, as well as core offerings in application, infrastructure, engineering and cybersecurity. NCS also believes in building a strong partner ecosystem with leading technology players, research institutions and start-ups to support open innovation and co-creation. For more information, visit ncs.co.

NTT DATA North America

nttdata.com

NTT DATA, Inc. is a trusted global innovator of business and technology services. We're committed to helping clients innovate, optimize and transform for long-term success. Our R&D investments help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity.

TEKsystems

teksystems.com

We’re TEKsystems and TEKsystems Global Services. We accelerate business transformation for our customers, so they can capitalize on change and master the momentum of technology. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We’re building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies.

ITC Infotech

itcinfotech.com

ITC Infotech is a global technology solution and services leader providing business-friendly solutions, that enable future-readiness for clients. We seamlessly bring together digital expertise, strong industry-specific alliances, and deep domain expertise from ITC Group businesses. Our solutions and services are focused on Banking and financial Services, Healthcare, Manufacturing, Consumer Goods, Travel and Hospitality. ITC Infotech is a wholly-owned subsidiary of ITC Ltd, one of India’s most admired companies.

Zebra Technologies

zebra.com

Zebra provides the foundation for intelligent operations with an award-winning portfolio of connected frontline, asset visibility and automation solutions. Organizations globally across retail, manufacturing, transportation, logistics, healthcare, and other industries rely on us to deliver outcomes today while driving innovation for what’s next. Together with our partners, we create new ways of working that improve productivity and empower organizations to be better every day. Learn more at www.zebra.com.

Zoom

zoom.com

Bring teams together, reimagine workspaces, engage new audiences, and delight your customers –– all on the Zoom AI-first work platform you know and love. 💙 Zoomies help people stay connected so they can get more done together. We set out on a mission to make video communications frictionless and secure by building the world’s best video product for the enterprise, but we didn’t stop there. With products like AI Companion, Team Chat, Contact Center, Phone, Events, Rooms, Webinar, Contact Center and more, we bring innovation to a wide variety of customers, from the conference room to the classroom, from doctor’s offices to financial institutions to government agencies, from global brands to small businesses. We do what we do because of our core value of Care: care for our community, our customers, our company, our teammates, and ourselves. Our global employees help our customers meet happier, communicate better, and create meaningful connections the world over. Zoomies are problem-solvers and self-starters, working hard to get results and moving quickly to design solutions with our customers and users in mind. Here, you'll find room to grow with opportunities to stretch your skills and advance your career in a collaborative, growth-focused environment. Learn more about careers at Zoom by visiting our careers site: https://careers.zoom.us/home

EPAM Systems

epam.com

Since 1993, EPAM Systems, Inc. (NYSE: EPAM) has used its software engineering expertise to become a leading global provider of digital engineering, cloud and AI-enabled transformation services, and a leading business and experience consulting partner for global enterprises and ambitious startups. We address our clients’ transformation challenges by fusing EPAM Continuum’s integrated strategy, experience and technology consulting with our 30+ years of engineering execution to speed our clients’ time to market and drive greater value from their innovations and digital investments. We leverage AI and GenAI to deliver transformative solutions that accelerate our clients’ digital innovation and enhance their competitive edge. Through platforms like EPAM AI/RUN™ and initiatives like DIALX Lab, we integrate advanced AI technologies into tailored business strategies, driving significant industry impact and fostering continuous innovation. We deliver globally, but engage locally with our expert teams of consultants, architects, designers and engineers, making the future real for our clients, our partners and our people around the world. We believe the right solutions are the ones that improve people’s lives and fuel competitive advantage for our clients across diverse industries. Our thinking comes to life in the experiences, products and platforms we design and bring to market. Added to the S&P 500 and the Forbes Global 2000 in 2021 and recognized by Glassdoor and Newsweek as Most Loved Workplace, our multidisciplinary teams serve customers across six continents. We are proud to be among the top 15 companies in Information Technology Services in the Fortune 1000 and to be recognized as a leader in the IDC MarketScapes for Worldwide Experience Build Services, Worldwide Experience Design Services and Worldwide Software Engineering Services. Learn more at www.epam.com.

Virtusa

cb virtusa.com

Virtusa is a global product and platform engineering services company that makes experiences better with technology. We help organizations grow faster, more profitably, and more sustainably by reimagining enterprises through domain-driven solutions. We combine strategy, design, and engineering, backed by unmatched expertise at the intersection of industry, business, and technology to generate real-world business impact for clients. Headquartered in Massachusetts with global delivery centers, Virtusa provides a broad range of services, solutions, and assets, including strategy and design, AI advisory and services, digital engineering, data and analytics, digital assurance, cloud and security, cx transformation and managed services across industries such as financial services, healthcare, communications, media, entertainment, travel, manufacturing, and technology.

Carelon Global Solutions India

carelonglobal.in

Carelon Global Solutions makes healthcare operations more practical, effective, and efficient. Our global team of more than 25K innovators drives growth, delivers exceptional support, and develops digital tools specifically for health plans, providers, and systems. Each day, our partners and experts from across the globe implement new ways to save time and money — so doctors can focus on care. Formerly known as Legato Health Technologies, Carelon Global Solutions is part of the Carelon family of brands and is a fully owned subsidiary of Elevance Health. Headquartered in the United States, Carelon Global Solutions has talented teams in India, Ireland, the Philippines, and Puerto Rico. Want to be part of something meaningful? Join our growing team. We believe that when bold talent meets limitless thinking, the possibilities are endless. As part of our India team, you’ll work alongside some of the best minds in the business to solve healthcare’s most complex challenges. You’ll be part of an exciting, fast-paced, and supportive company culture, where all associates receive: • Competitive pay. • Generous benefits. • Training, mentorship, and growth. • Hybrid workplace flexibility. • The opportunity to help others and make a difference. Follow our Carelon Global Solutions India LinkedIn page for the latest job postings and timely company news.

Loading…

NEWS

CTIS CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 13, 2025 08:00 AM

Exclusive: Splunk reveals why only 4% of organisations are cyber ready

Only 4% of organisations are fully cyber ready, according to the 2025 Cisco Cybersecurity Readiness Index, highlighting persistent gaps in...

Read Article

October 02, 2025 07:00 AM

DHS OIG finds CISA falling short on AIS participation and outreach despite surge in shared cyber threat data

The U.S. Department of Homeland Security Inspector General's latest review of the Cybersecurity and Infrastructure Security Agency (CISA)...

Read Article

September 30, 2025 07:00 AM

Watchdog: Cyber threat information-sharing program’s future uncertain with expected expiration of 2015 law

A DHS inspector general report found that CISA doesn't have plans for what to do with AIS if the Cybersecurity Information Sharing Act...

Read Article

September 30, 2025 07:00 AM

CISA: Sunset of Cyber Threat Info-Sharing Law Won’t End Info-Sharing Program (Sep 30, 2025)

By Tom Leithauser The Cybersecurity and Infrastructure Security Agency intends to continue operating a cyber threat information-sharing...

Read Article

September 25, 2025 07:00 AM

Splunk partners with ASD to boost cyber intelligence sharing

Splunk teams with Australian Signals Directorate to integrate cyber intelligence sharing, aiding government and private sectors in boosting...

Read Article

September 25, 2025 07:00 AM

Splunk and Australian Signals Directorate commence Cyber Threat Intelligence Sharing

Splunk has partnered with the Australian Signals Directorate (ASD) to deliver a new plug-in that integrates Splunk Enterprise Security with...

Read Article

August 29, 2025 07:00 AM

Cyberattack event and arguments extraction based on feature interaction and few-shot learning

Cyber Threat Intelligence (CTI) serves as a crucial indicator of cybersecurity events, providing critical evidence for analyzing...

Read Article

January 15, 2025 08:00 AM

Stop wasting money on ineffective threat intelligence: 5 mistakes to avoid

To prevent overspending in the wrong areas of cybersecurity and support ROI, here are five mistakes CISOs should avoid.

Read Article

November 26, 2024 08:00 AM

The changing cyber landscape

From ransomware threats to large-scale data breaches, most Australians are now unfortunately aware that the cybersecurity landscape is becoming increasingly...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-74250

SUMMARY

In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 6.3)

cvss3

Base Score: 6.3

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Impact Score

Exploitability

1.8

REFERENCES

https://bugs.launchpad.net/ossa/+bug/2163017

CVE-2026-74247

SUMMARY

A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-Side Request Forgery (SSRF) vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network addresses. Such an action could lead to the disclosure of sensitive internal information.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 4.2)

cvss3

Base Score: 4.2

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

1.6

REFERENCES

CVE-2026-74245

SUMMARY

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to information disclosure, potentially exposing sensitive data such as usernames, email addresses, IP addresses, and action-specific metadata.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-74244

SUMMARY

A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unauthenticated attacker to forge billing events by sending crafted JSON requests to the `/webhooks/stripe` endpoint without validating the Stripe-Signature header. Successful exploitation can lead to the unauthorized resetting of a namespace's build quota to its maximum and trigger unsolicited billing emails to namespace administrators.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-74243

SUMMARY

A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not set, a remote unauthenticated attacker can send POST requests to the security scanner notification endpoint. This allows the attacker to flood the notification queue and inject path traversal characters into Clair API URL paths. The primary consequence is worker resource exhaustion and blind path manipulation on the configured Clair host, potentially leading to a denial of service.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Impact Score

2.5

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…