DEKRA
Company Details
Linkedin ID:
dekra
Website:
Employees number:
10,096
Number of followers:
103,693
NAICS:
92219
Industry Type:
Homepage:
dekra.com
IP Addresses:
0
Company ID:
DEK_2561597
Scan Status:
In-progress
DEKRA Company CyberSecurity Posture
dekra.com
For 100 years, DEKRA has been a trusted name in safety. Founded in 1925 with the original goal of improving road safety through vehicle inspections, DEKRA has grown to become the world's largest independent, non-listed expert organization in the field of testing, inspection, and certification. Today, as a global partner, the company supports its customers with comprehensive services and solutions to drive safety and sustainability forward—fully aligned with DEKRA’s anniversary motto, "Securing the Future." In 2024, DEKRA generated revenue of 4.3 billion euros. Around 48,000 employees are providing qualified and independent expert services in approximately 60 countries across five continents. DEKRA holds a Platinum rating from EcoVadis, placing it among the top 1% of the world’s most sustainable companies. IMPRINT / PRIVACY STATEMENT: https://www.dekra.com/en/data-protection-social-media/
DEKRA A.I CyberSecurity Scoring
DEKRA Risk Score (AI oriented)Between 750 and 799
DEKRA
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
DEKRA Global Score (TPRM)XXXX
DEKRA
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
DEKRA Company CyberSecurity News & History
Past Incidents
0
Attack Types
0
No data available
DEKRA Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for DEKRA
Incidents vs Public Safety Industry Average (This Year)
No incidents recorded for DEKRA in 2026.
Incidents vs All-Companies Average (This Year)
No incidents recorded for DEKRA in 2026.
Incident Types DEKRA vs Public Safety Industry Avg (This Year)
No incidents recorded for DEKRA in 2026.
Incident History — DEKRA (X = Date, Y = Severity)
DEKRA cyber incidents detection timeline including parent company and subsidiaries
DEKRA Company Subsidiaries
For 100 years, DEKRA has been a trusted name in safety. Founded in 1925 with the original goal of improving road safety through vehicle inspections, DEKRA has grown to become the world's largest independent, non-listed expert organization in the field of testing, inspection, and certification. Today, as a global partner, the company supports its customers with comprehensive services and solutions to drive safety and sustainability forward—fully aligned with DEKRA’s anniversary motto, "Securing the Future." In 2024, DEKRA generated revenue of 4.3 billion euros. Around 48,000 employees are providing qualified and independent expert services in approximately 60 countries across five continents. DEKRA holds a Platinum rating from EcoVadis, placing it among the top 1% of the world’s most sustainable companies. IMPRINT / PRIVACY STATEMENT: https://www.dekra.com/en/data-protection-social-media/
Loading...
DEKRA Similar Companies
TÜV SÜD
TÜV SÜD is the trusted partner of choice for safety, security and sustainability solutions. Our community of experts is passionate about technology and united by the belief that technology should better people’s lives. We work alongside our customers to anticipate and capitalize on technological d
DNV is the independent expert in risk management and assurance, operating in more than 100 countries. Through its broad experience and deep expertise DNV advances safety and sustainable performance, sets industry benchmarks, and inspires and invents solutions. Whether assessing a new ship design,
TÜV Rheinland Group
Neutral, independent third party For more than 150 years, TÜV Rheinland has stood for ensuring quality, safety, and efficiency in conjunction with people, the environment, and technology. As a neutral, independent third party, we test, accompany, develop, promote and certify products, plants, proc
.png)
DEKRA CyberSecurity News
December 24, 2025 08:00 AM
FIH Scores dual automotive safety & cybersecurity certifications from DEKRA
ISO 26262 is widely recognized as the global standard for automotive functional safety, while ISO/SAE 21434 establishes a comprehensive...
December 23, 2025 08:00 AM
FIH Achieves ISO 26262 and ISO/SAE 21434 Dual Certifications from DEKRA, Strengthening Automotive Safety and Cybersecurity Capabilities
NEW TAIPEI CITY, Dec. 23, 2025 /PRNewswire/ — FIH, a subsidiary of Hon Hai Technology Group (Foxconn), announced that its key automotive...
December 04, 2025 08:00 AM
DEKRA Performs Testing to Confirm East Asia's First CCC Digital Key™ Certification for Ingeek
PRNewswire/ -- DEKRA, a global leader in testing and certification, performed the Car Connectivity Consortium (CCC)-required testing that...
December 03, 2025 08:00 AM
DEKRA reflects on its anniversary year: A stable foundation today, a clear direction for tomorrow
PRNewswire/ -- As DEKRA concludes the year marking its 100th anniversary, the organization looks back on a period of particular significance...
September 16, 2025 07:00 AM
Easee achieves EU cybersecurity compliance across its full charger range
EV charging technology company Easee has announced that its portfolio of smart EV chargers has fulfilled the EU Radio Equipment Directive...
September 08, 2025 07:00 AM
Automakers join organization to standardize vehicle cybersecurity
Stellantis has joined GlobalPlatform, a growing community of automakers, cybersecurity firms, silicon vendors, and academic institutions...
August 14, 2025 07:00 AM
Google Announces That Android’s pKVM Framework Achieves SESIP Level 5 Certification
Android's pKVM earns SESIP Level 5, setting a new mobile security benchmark after rigorous Dekra testing under EN-17927 standards.
August 13, 2025 07:00 AM
Android’s pKVM Framework Earns Top-Tier SESIP Level 5 Certification from Google
Android pKVM SESIP - Google has achieved a significant milestone in mobile security by securing SESIP Level 5 certification for its...
August 13, 2025 07:00 AM
Google’s Android pKVM Framework Achieves SESIP Level 5 Certification
Google has revealed that protected KVM (pKVM), the hypervisor that powers the Android Virtualization Framework (AVF), has achieved.
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
DEKRA CyberSecurity History Information
Official Website of DEKRA
The official website of DEKRA is http://www.dekra.com.
DEKRA’s AI-Generated Cybersecurity Score
According to Rankiteo, DEKRA’s AI-generated cybersecurity score is 779, reflecting their Fair security posture.
How many security badges does DEKRA’ have ?
According to Rankiteo, DEKRA currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Has DEKRA been affected by any supply chain cyber incidents ?
According to Rankiteo, DEKRA has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
Does DEKRA have SOC 2 Type 1 certification ?
According to Rankiteo, DEKRA is not certified under SOC 2 Type 1.
Does DEKRA have SOC 2 Type 2 certification ?
According to Rankiteo, DEKRA does not hold a SOC 2 Type 2 certification.
Does DEKRA comply with GDPR ?
According to Rankiteo, DEKRA is not listed as GDPR compliant.
Does DEKRA have PCI DSS certification ?
According to Rankiteo, DEKRA does not currently maintain PCI DSS compliance.
Does DEKRA comply with HIPAA ?
According to Rankiteo, DEKRA is not compliant with HIPAA regulations.
Does DEKRA have ISO 27001 certification ?
According to Rankiteo,DEKRA is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of DEKRA
DEKRA operates primarily in the Public Safety industry.
Number of Employees at DEKRA
DEKRA employs approximately 10,096 people worldwide.
Subsidiaries Owned by DEKRA
DEKRA presently has no subsidiaries across any sectors.
DEKRA’s LinkedIn Followers
DEKRA’s official LinkedIn profile has approximately 103,693 followers.
NAICS Classification of DEKRA
DEKRA is classified under the NAICS code 92219, which corresponds to Other Justice, Public Order, and Safety Activities.
DEKRA’s Presence on Crunchbase
No, DEKRA does not have a profile on Crunchbase.
DEKRA’s Presence on LinkedIn
Yes, DEKRA maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/dekra.
Cybersecurity Incidents Involving DEKRA
As of January 24, 2026, Rankiteo reports that DEKRA has not experienced any cybersecurity incidents.
Number of Peer and Competitor Companies
DEKRA has an estimated 2,093 peer or competitor companies worldwide.
DEKRA CyberSecurity History Information
How many cyber incidents has DEKRA faced ?
Total Incidents: According to Rankiteo, DEKRA has faced 0 incidents in the past.
What types of cybersecurity incidents have occurred at DEKRA ?
Incident Types: The types of cybersecurity incidents that have occurred include .
Incident Details
What are the most common types of attacks the company has faced ?
Additional Questions
.png)
Latest Global CVEs (Not Company-Specific)
Description
Typemill is a flat-file, Markdown-based CMS designed for informational documentation websites. A reflected Cross-Site Scripting (XSS) exists in the login error view template `login.twig` of versions 2.19.1 and below. The `username` value can be echoed back without proper contextual encoding when authentication fails. An attacker can execute script in the login page context. This issue has been fixed in version 2.19.2.
Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Description
A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the unsafe innerHTML property to render domain search results.
Description
A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save process. This allows an unauthenticated attacker to upload arbitrary PHP code by spoofing the MIME type as an image, leading to full system compromise.
Description
A UNIX symbolic link following issue in the jailer component in Firecracker version v1.13.1 and earlier and 1.14.0 on Linux may allow a local host user with write access to the pre-created jailer directories to overwrite arbitrary host files via a symlink attack during the initialization copy at jailer startup, if the jailer is executed with root privileges. To mitigate this issue, users should upgrade to version v1.13.2 or 1.14.1 or above.
Risk Information
cvss3
Base: 6.0
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
cvss4
Base: 6.0
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description
An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28. This unauthenticated endpoint returns a list of cashier accounts, including names, email addresses, usernames, and passwords hashed using MD5. As MD5 is a broken cryptographic function, the hashes can be easily reversed using public tools, exposing user credentials in plaintext. This allows remote attackers to perform unauthorized logins and potentially gain access to sensitive POS operations or backend functions.
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=dekra' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
