What is the official website of DEFACTUM ?

The official website of DEFACTUM is http://www.DEFACTUM.dk/.

What is DEFACTUM's cybersecurity risk score?

DEFACTUM has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has DEFACTUM experienced?

According to Rankiteo, DEFACTUM currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has DEFACTUM been affected by any supply chain cyber incidents ?

According to Rankiteo, DEFACTUM has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does DEFACTUM have SOC 2 Type 1 certification ?

According to Rankiteo, DEFACTUM is not certified under SOC 2 Type 1.

Does DEFACTUM have SOC 2 Type 2 certification ?

According to Rankiteo, DEFACTUM does not hold a SOC 2 Type 2 certification.

Does DEFACTUM comply with GDPR ?

According to Rankiteo, DEFACTUM is not listed as GDPR compliant.

Does DEFACTUM have PCI DSS certification ?

According to Rankiteo, DEFACTUM does not currently maintain PCI DSS compliance.

Does DEFACTUM comply with HIPAA ?

According to Rankiteo, DEFACTUM is not compliant with HIPAA regulations.

Does DEFACTUM have ISO 27001 certification ?

According to Rankiteo,DEFACTUM is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does DEFACTUM operate in ?

DEFACTUM operates primarily in the Research industry.

How many employees does DEFACTUM have ?

DEFACTUM employs approximately 99 people worldwide.

Does DEFACTUM own any subsidiaries ?

DEFACTUM presently has no subsidiaries across any sectors.

How many LinkedIn followers does DEFACTUM have ?

DEFACTUM's official LinkedIn profile has approximately 7,940 followers.

Does DEFACTUM have a Crunchbase profile ?

No, DEFACTUM does not have a profile on Crunchbase.

Does DEFACTUM have a LinkedIn profile ?

Yes, DEFACTUM maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/defactum.

How many cybersecurity incidents has DEFACTUM experienced ?

As of July 22, 2026, Rankiteo reports that DEFACTUM has not experienced any cybersecurity incidents.

How many peer or competitor companies does DEFACTUM have ?

DEFACTUM has an estimated 1,395 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

DEFACTUM

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

DEFACTUM Vendor Cyber Rating & Cyber Score

defactum.dk

Add Your Compliance Badge

@DEFACTUM er et forsknings- og konsulenthus i @regionmidtjylland, som beskæftiger sig med områderne #social #sundhed og #arbejdsmarkedet. Vi arbejder for at forbedre den offentlige #velfærdssektor ved udvikling af anvendelsesorienteret viden og individuelt tilpassede indsatser til gavn for #borgerne.

DEFACTUM A.I CyberSecurity Scoring

Scoring History

DEFACTUM

DEFACTUM CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

DEFACTUM Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for DEFACTUM

Incidents vs Research Industry Avg (This Year)

No incidents recorded for DEFACTUM in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for DEFACTUM in 2026.

Incident Types DEFACTUM vs Research Industry Avg (This Year)

No incidents recorded for DEFACTUM in 2026.

Incident History - DEFACTUM (X = Date, Y = Severity)

Loading…

SUBSIDIARY

DEFACTUM Subsidiaries

DEFACTUM

Research

Website: http://www.DEFACTUM.dk/

Company Size: 99

Region MidtjyllandGovernment Administration

Aarhus UniversitetshospitalHospitals and Health Care

Klinisk Farmakologi, AUHHospitals

Department of Oncology, Aarhus University HospitalHospitaler og sundhedspleje

Aarhus Comprehensive Cancer CentreHospitals and Health Care

Department of Haematology, Aarhus University HospitalHospitals and Health Care

Socialområdet i Region MidtjyllandPolitical Organizations

IKH - Institut for Kommunikation og HandicapHospitaler og sundhedspleje

Specialområde Udviklingshandicap, Region MidtjyllandHospitaler og sundhedspleje

Specialområde Autisme, Region MidtjyllandHospitaler og sundhedspleje

Specialområde Børn og Unge, Region MidtjyllandHospitals and Health Care

Udviklingshandicap+ Viden fra Specialområde UdviklingshandicapGovernment Administration

Specialområde Hjerneskade, Region MidtjyllandHospitals and Health Care

Health Innovation AarhusPublic Health

Circular Economy Beyond Waste (CEBW)Air, Water, and Waste Program Management

Regionshospitalet RandersHospitals and Health Care

Regional Udvikling, Region MidtjyllandPublic Policy Offices

Center for Bæredygtige HospitalerHospitals and Health Care

DIGI-LINGO: An Erasmus+ projectGovernment Administration

Ung i uddannelse - Ung i jobPolitical Organizations

Grønne kompetencer til et grønt arbejdsmarkedEducation

Koncern HR, Udvikling, Region MidtjyllandHR

Regionshospitalet HorsensHospitals and Health Care

Terapiafdelingen, Hospitalsenheden HorsensHospitals and Health Care

Regionsapoteket MidtjyllandHospitals and Health Care

Psykiatri og Social, Region MidtjyllandHospitals and Health Care

Indkøb & Medicoteknik, Region MidtjyllandGovernment Administration

Hospitalsenhed MidtHospitals and Health Care

Uddannelsescentret Hammel NeurocenterHospitaler

Regionshospitalet Hammel NeurocenterHospitaler og sundhedspleje

ViC - Vestdansk Videnscenter for NeurorehabiliteringHospitals and Health Care

Regionshospitalet GødstrupHospitals and Health Care

Arbejdsmedicin, Regionshospitalet GødstrupHospitaler og sundhedspleje

Socialmedicin og Rehabilitering, Regionshospitalet GødstrupHospitals and Health Care

AmbuFlex - Center for Patientrapporterede OplysningerHospitals and Health Care

Akutafdelingen GødstrupHospitals and Health Care

Urinvejskirurgisk Afdeling, Regionshospitalet GødstrupHospitals and Health Care

Operation & Intensiv, Regionshospitalet GødstrupHospitals

Medicinsk Afdeling, Regionshospitalet GødstrupHospitals and Health Care

Hjertesygdomme, Regionshospitalet GødstrupHospitals and Health Care

Ernæring, Regionshospitalet GødstrupHospitals and Health Care

Ortopædkirurgi, Regionshospitalet GødstrupHospitals and Health Care

Center for KompetenceudviklingEducation

Coast to Coast Climate ChallengeOffentlig politik

RÅSTOF-INITIATIVETHighway, Street, and Bridge Construction

BioScapeMiljømæssige tjenester

MidtSimEducation

Præhospitalet, Region MidtjyllandHospitals and Health Care

Psykiatrien i Region MidtjyllandHospitals and Health Care

Loading…

DEFACTUM Similar Companies

Aarhus University

au.dk

About Aarhus University Aarhus University is a leading international research university covering all scientific areas with a staff of 11.000 employees and 44.500 students, the majority are post-graduate students enrolled on Master’s and PhD programmes. Aarhus University is among the top 100 universities in the world. The aim of the university is to sustain and enhance a high standard in both research and education, which has placed it among the international elite. Aarhus University was established in 1928 as a small private initiative. It has since grown to become a leading public research university with international reach covering all academic fields and address basic, applied and strategic research as well as the research-based consultancy provided to public authorities and private business. One of Aarhus University’s focus areas is talent development. An activity considered so important that it is singled out as one of the four core activities in the Aarhus University strategy alongside excellent research, world-class education and inspiring research-based consultancy. Research at Aarhus University is both organised in traditional departments under the four faculties and in interdisciplinary research centres. In addition, Aarhus University researchers engage in research collaboration under the auspices of Knowledge Management Centres with external partners such as government organisations, private enterprises, NGOs and Aarhus University’s wide range of international partner universities.

Københavns Universitet - University of Copenhagen

ku.dk

PRIVACY POLICY at the University of Copenhagen: https://informationssikkerhed.ku.dk/english/protection-of-information-privacy/privacy-policy/ With over 40,000 students and more than 9,000 employees, the University of Copenhagen is the largest institution of research and education in Denmark. The purpose of the University – to quote the University Statute – is to ’conduct research and provide further education to the highest academic level’. Approximately one hundred different institutes, departments, laboratories, centres, museums, etc., form the nucleus of the University, where professors, lecturers and other academic staff, as well as most of the technical and administrative personnel, carry out their daily work, and where teaching takes place. These activities take place in various environments ranging from the plant world of the Botanical Gardens, through high-technology laboratories and auditoriums, to the historic buildings and lecture rooms of Frue Plads and other locations.

Loading…

NEWS

DEFACTUM CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-63261

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can send a specially crafted request to a Kibana machine learning feature, causing the server to exhaust available memory and become unavailable to all users.

Published

Date2026-07-21

Updated

Date2026-07-21

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-72/388575

CVE-2026-63260

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege access can trigger a denial of service condition in Kibana by sending a specially crafted, oversized request payload. Processing this user-supplied input requires resource-intensive memory allocation that can exhaust the available heap memory in the Kibana process, causing it to crash and become unavailable to all users.

Published

Date2026-07-21

Updated

Date2026-07-21

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-71/388574

CVE-2026-63259

SUMMARY

Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplied identifiers that reference scheduled query result data from Kibana Spaces the requester is not authorized to access.

Published

Date2026-07-21

Updated

Date2026-07-21

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

https://discuss.elastic.co/t/kibana-9-4-4-security-update-esa-2026-70/388573

CVE-2026-63145

SUMMARY

Incorrect Authorization (CWE-863) in Kibana can lead to integrity compromise of Machine Learning audit and notification records via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). A vulnerability exists in Kibana's Machine Learning functionality where a Machine Learning management endpoint performs an insufficient authorization check. The endpoint validates only a coarse privilege level but does not verify that the requesting user has access to the specific Machine Learning job or notification resources provided in the request. As a result, a low-privileged user with Machine Learning access in any Kibana space can manipulate Machine Learning audit and notification records for arbitrary jobs—including jobs in other spaces or belonging to other users—by leveraging Kibana's internally elevated credentials to write to restricted Machine Learning system indices that the user cannot access directly.

Published

Date2026-07-21

Updated

Date2026-07-21

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-69/388572

CVE-2026-63144

SUMMARY

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index access can submit a request that triggers unbounded recursive processing within the Elasticsearch query evaluation component, causing a fatal error that terminates the affected node. In single-node deployments, this results in complete service outage; in multi-node clusters, it causes repeated node restarts and sustained availability degradation.

Published

Date2026-07-21

Updated

Date2026-07-21

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-security-update-esa-2026-68/388571

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…