What is the official website of CDES ?

The official website of CDES is https://http://www.cdes.pro.

What is CDES's cybersecurity risk score?

CDES has an AI-generated cybersecurity risk score of 714 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has CDES experienced?

According to Rankiteo, CDES currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has CDES been affected by any supply chain cyber incidents ?

According to Rankiteo, CDES has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does CDES have SOC 2 Type 1 certification ?

According to Rankiteo, CDES is not certified under SOC 2 Type 1.

Does CDES have SOC 2 Type 2 certification ?

According to Rankiteo, CDES does not hold a SOC 2 Type 2 certification.

Does CDES comply with GDPR ?

According to Rankiteo, CDES is not listed as GDPR compliant.

Does CDES have PCI DSS certification ?

According to Rankiteo, CDES does not currently maintain PCI DSS compliance.

Does CDES comply with HIPAA ?

According to Rankiteo, CDES is not compliant with HIPAA regulations.

Does CDES have ISO 27001 certification ?

According to Rankiteo,CDES is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does CDES operate in ?

CDES operates primarily in the Civil Engineering industry.

How many employees does CDES have ?

CDES employs approximately 96 people worldwide.

Does CDES own any subsidiaries ?

CDES presently has no subsidiaries across any sectors.

How many LinkedIn followers does CDES have ?

CDES's official LinkedIn profile has approximately 2,234 followers.

What is the NAICS classification code for CDES ?

CDES is classified under the NAICS code 237, which corresponds to Heavy and Civil Engineering Construction.

Does CDES have a Crunchbase profile ?

No, CDES does not have a profile on Crunchbase.

Does CDES have a LinkedIn profile ?

Yes, CDES maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/curages-dragages-et-systemes.

How many cybersecurity incidents has CDES experienced ?

As of October 7, 2026, Rankiteo reports that CDES has experienced 1 cybersecurity incidents.

How many peer or competitor companies does CDES have ?

CDES has an estimated 5,958 peer or competitor companies worldwide.

What types of cybersecurity incidents has CDES faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CDES

Boost Score +25 with badge (5 left)

714

/1000

Moderate

739

/1000

Moderate

CDES Vendor Cyber Rating & Cyber Score

cdes.pro

Add Your Compliance Badge

𝗟𝗲𝗮𝗱𝗲𝗿 𝗳𝗿𝗮𝗻𝗰̧𝗮𝗶𝘀 𝗱𝗲𝘀 𝘁𝗿𝗮𝘃𝗮𝘂𝘅 𝗲𝗻 𝗺𝗶𝗹𝗶𝗲𝘂𝘅 𝗮𝗾𝘂𝗮𝘁𝗶𝗾𝘂𝗲𝘀. CDES, c’est 100 experts engagés et passionnés, qui mettent chaque jour leur savoir-faire au service de la préservation et la valorisation des milieux aquatiques. Avec nos 3 agences implantées en Région Parisienne, en Bretagne – Pays de la Loire et en Nouvelle-Aquitaine, nous intervenons efficacement et rapidement, au plus près des besoins de nos clients. Depuis plus de 30 ans, CDES allie expérience et technicité pour relever les défis de vos projets aquatiques, valoriser les territoires et préserver les écosystèmes. Notre activité s’articule autour de 4 solutions : 💧 Entretien des voies d’eau : dragage, curage, défenses des berges,

CDES

CDES CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

CDES

Ransomware

100

6/2022

CUR326092125

Loading…

A.I.

CDES Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CDES

Incidents vs Civil Engineering Industry Avg (This Year)

No incidents recorded for CDES in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for CDES in 2026.

Incident Types CDES vs Civil Engineering Industry Avg (This Year)

No incidents recorded for CDES in 2026.

Incident History - CDES (X = Date, Y = Severity)

Loading…

SUBSIDIARY

CDES Subsidiaries

Parent Company

CDES

Civil Engineering

Website: https://http://www.cdes.pro

Company Size: 96

No subsidiary data available for this company.

Loading…

CDES Similar Companies

Ventia

ventia.com

Ventia provides essential services to make infrastructure work for communities in Australia and New Zealand. We pride ourselves on safe and sustainable services for our corporate and government clients across a broad range of sectors, including transport, telecommunications, utilities, defence, water, energy, resources and social infrastructure. In July 2020, Ventia acquired Broadspectrum. In November 2021, Ventia listed on the ASX and NXZ under the ticker VNT.

Parsons Corporation

parsons.com

Founded in 1944, Parsons Corporation, a digitally enabled solutions provider, is focused on creating the future of the defense, intelligence, and critical infrastructure markets. From Earth to outer space, we deliver tomorrow’s solutions today. Equipped with the capabilities required to take on any defense, intelligence, or critical infrastructure challenge, our agile, innovative, and disruptive approach enables us to deliver solutions at the speed of relevance. Our people are our greatest asset. We strive to be an employer of choice that engages employees in the community and creates rewarding career paths to cultivate a resilient workforce that is ready for the future. #WeAreParsons Disclaimer: Parsons is aware of recruitment scams where individuals posing as Parsons representatives offer fraudulent job opportunities to steal personal information or solicit money. To avoid these scams, remember that Parsons will never ask for money or sensitive personal details, and all legitimate job openings are listed on https://jobs.parsons.com/; report any suspicious activity to local law enforcement or [email protected].

Mott MacDonald

mottmac.com

We are an engineering, management and development consultancy and one of the largest wholly employee-owned firms of our kind. We plan, design, deliver and maintain the transport, energy, water, defence and security, and buildings infrastructure that is integral to people's daily lives. Our core strength is using our expertise to overcome complex challenges to deliver benefits for our clients and the communities they serve.

AECOM

aecom.com

AECOM is the global infrastructure leader, committed to delivering a better world. As a trusted professional services firm powered by deep technical abilities, we solve our clients’ complex challenges in water, environment, energy, transportation and buildings. Our teams partner with public- and private-sector clients to create innovative, sustainable and resilient solutions throughout the project lifecycle – from advisory, planning, design and engineering to program and construction management. AECOM is a Fortune 500 firm that had revenue of $16.1 billion in fiscal year 2024. Learn more at aecom.com.

Civil Engineer

civil-engineer.co

A civil engineer is a person who practices civil engineering – the application of planning, designing, constructing, maintaining, and operating infrastructures while protecting the public and environmental health, as well as improving existing infrastructures that have been neglected. Civil engineering is one of the oldest engineering disciplines because it deals with constructed environment including planning, designing, and overseeing construction and maintenance of building structures, and facilities, such as roads, railroads, airports, bridges, harbors, channels, dams, irrigation projects, pipelines, power plants, and water and sewage systems. ------------------------------------------------------------------- If you want you, your company or products/content to be featured on our page, fill up this 𝗚𝗼𝗼𝗴𝗹𝗲 𝗙𝗼𝗿𝗺 (https://forms.gle/jCqprbdF9yyvKTWc7) in detail or 𝗿𝗲𝗮𝗰𝗵 𝘂𝘀 𝗮𝘁 [email protected].

Fugro

cb fugro.com

We are the world’s leading Geo-data specialist, collecting and analysing comprehensive information about the Earth and the structures built upon it. Through integrated data acquisition, analysis and advice, we unlock insights from Geo-data to help our clients design, build and operate their assets in a safe, sustainable and efficient manner. Learn more about us: https://www.youtube.com/fugro https://www.facebook.com/fugro https://twitter.com/fugro https://www.instagram.com/fugro/

SNC-Lavalin

snclavalin.com

SNC Lavalin is now AtkinsRéalis. Please follow AtkinsRéalis on LinkedIn. We are a world-class engineering services and nuclear organization. We connect people, data and technology to transform the world’s infrastructure and energy systems. Together, with our industry partners and clients, and our global team of consultants, designers, engineers and project managers, we can change the world. Follow our AtkinsRéalis page for new info: https://www.linkedin.com/company/atkinsrealis

GHD

cb ghd.com

We are committed to addressing the world’s biggest challenges in the areas of water, energy and communities. GHD is a global network of multi-disciplinary professionals providing clients with integrated solutions through engineering, environmental, design and construction expertise. Our future-focused, innovative approaches connect and support communities around the world, resiliency and sustainability for generations to come. Established in 1928, we remain wholly owned by our people. We are 10,000+ diverse and skilled individuals connected by over 200 offices, across five continents – Asia, Australia, Europe, North and South America, and the Pacific region. See our list of office locations and contact numbers in ghd.com/en/about-ghd/office-locations ---------------------------------------------------------------------------------------- GHD reconnaît et comprend que le monde est en constante évolution. Nous sommes engagés à résoudre les plus grands défis mondiaux dans les secteurs de l’eau, de l’énergie et de l’urbanisation. Nous sommes une entreprise de services professionnels dotée d’une expertise de pointe en ingénierie, en construction et en architecture. Nos démarches avant-gardistes et innovatrices rapprochent et soutiennent les communautés à l’échelle mondiale. En livrant d’excellents résultats sociaux et économiques, nous visons à bâtir des relations durables avec nos partenaires et nos clients. Fondée en 1928, GHD appartient entièrement à ses employés Nous sommes plus de 10 000 employés diversifiés et qualifiés dans plus de 200 bureaux et sur cinq continents : Amérique du Nord et Amérique du Sud, Asie, Australie et Europe, ainsi que dans la région du Pacifique. Apprenez-en davantage sur nous à ghd.com

Downer

downergroup.com

Enabling communities to thrive. It’s what we’ve done for more than 150 years. Solving problems. Making the extraordinary run smoothly every day. We’re keeping the lights on and the water flowing. Running the hospitals that take care of us. Delivering the transport that takes us from A to B. Maintaining communication networks that keep people connected. Helping our Government and Defence customers keep them protected. Delivering train fleets. Building bridges, roads and streets. Now we’re building momentum too. Moving forward even faster. Across Australia and New Zealand, we’re transforming the way we work. Unlocking our potential to lead by example. Using our passion and expertise to deliver complex projects and turn fresh ideas into solutions that make society a better place. Creating opportunities for our people, growth and value for our shareholders, and world-class solutions for our customers. Imagining. Innovating. Engineering. Enabling.

Loading…

NEWS

CDES CyberSecurity News

Global CVEs (Not Company-Specific)

CVE-2026-97626

SUMMARY

Requesting a user or organization profile page (`GET /{username}`) with an `Accept: application/rss+xml` or `Accept: application/atom+xml` header returned the owner's activity feed without the visibility check that the profile page and the `.rss` and `.atom` routes apply. Anonymous users, restricted users and non-members could confirm the existence of limited or private users and private organizations and read their profile details and public activity, also when `[other] ENABLE_FEED` was disabled. Activity in private repositories was not included.

Published

Date2026-10-06

Updated

Date2026-10-06

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-97208

SUMMARY

The Gitea API endpoint for creating push mirrors (`POST /api/v1/repos/{owner}/{repo}/push_mirrors`) checked only whether mirroring was enabled and not the `[mirror] DISABLE_NEW_PUSH` setting that the web interface enforces. A repository administrator could therefore create new push mirrors on instances where the site administrator had disabled them. A push mirror pushes all refs of the repository to a remote chosen by the caller, on each commit or on a schedule.

Published

Date2026-10-06

Updated

Date2026-10-06

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-96594

SUMMARY

The Gitea API endpoint `GET /api/v1/repos/{owner}/{repo}/media/{filepath}` wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without the content type and disposition headers Gitea uses for user content. An HTML file committed to a repository was therefore rendered by the browser on the Gitea origin. A user who can push to a repository could run JavaScript in the session of a victim who opens the media URL and act with the victim's permissions.

Published

Date2026-10-06

Updated

Date2026-10-06

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-89182

SUMMARY

With `[repository] FORCE_PRIVATE = true`, Gitea creates new repositories as private, but the post-receive hook still applied the `repo.private=false` push option to an empty repository created by push. Any user who can create repositories could make their new repository public in violation of the instance policy. The default configuration is not affected.

Published

Date2026-10-06

Updated

Date2026-10-06

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-86684

SUMMARY

The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with `[security] IMPORT_LOCAL_PATHS = true`, a repository administrator who is not allowed to import local paths could add a push mirror to a local path on the server when the repository owner has that permission. Gitea then pushed the repository's refs into an existing Git repository at that path with the permissions of the Gitea process.

Published

Date2026-10-06

Updated

Date2026-10-06

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

CDES Vendor Cyber Rating & Cyber Score

CDES A.I CyberSecurity Scoring

CDES CyberSecurity News & History

CDES Company Scoring based on AI Models