Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download

Comparison Overview

EcopetrolEcopetrol
VS
aramcoaramco
Ecopetrol

Ecopetrol

Cra. 13 No. 36-24, Bogotá, ----, CO

Last Update: 20/07/2026

View Profile
Between 650 and 699
http://www.ecopetrol.com.co
664/1000Weak

Ecopetrol (NYSE: EC) es la compañía más grande en Colombia y uno de los principales grupos de energía de Latinoamérica. Cuenta con más de 18.000 empleados y es responsable del 60% de la producción de hidrocarburos en Colombia. Es propietaria de las dos refinerías del Co...

NAICS:211
NAICS Definition:Oil and Gas Extraction
Employees:12,683
Subsidiaries:3
12-month incidents
2
Known data breaches
1
Attack type number
2
aramco

aramco

P.O. Box 5000, Dhahran, SA, 31311

Last Update: 19/07/2026

View Profile
Between 800 and 849
https://www.aramco.com
822/1000Good

We’re a leading producer of the energy and chemicals that drive global commerce and enhance the daily lives of people around the globe by continuing delivering an uninterrupted supply of energy to the world. Our resilience and agility has built one of the world’s large...

NAICS:211
NAICS Definition:Oil and Gas Extraction
Employees:167,507
Subsidiaries:0
12-month incidents
0
Known data breaches
0
Attack type number
2

Compliance Ranges Comparison

Based On Specific Ai Models Category
Ecopetrol

Ecopetrol

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA
aramco

aramco

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA

Benchmark & Cyber Underwriting Signals

Incidents vs Oil and Gas Industry Avg (This Year)

Ecopetrol has 10.31% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents

Incidents vs Oil and Gas Industry Avg (This Year)

No incidents recorded for aramco in 2026.

Incidents

Incident History - Ecopetrol (X = Date, Y = Severity)

Ecopetrol cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Incident History - aramco (X = Date, Y = Severity)

aramco cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...
Ecopetrol

Ecopetrol

Incidents
🔒 Incident : Ransomware
ECO1784557630
🔒 Incident : Breach
ECO1784348677
aramco

aramco

Incidents
🔒 Incident : Ransomware
ARA182216322
🔒 Incident : Cyber Attack
SAU507050724

FAQ

Between Ecopetrol company and aramco company, which one has the best AI Cybersecurity Score ?
Between Ecopetrol company and aramco company, which one has experienced more cyber incidents in the past ?
Between Ecopetrol company and aramco company, which one has experienced more cyber incidents this year ?
Between Ecopetrol company and aramco company, which one has experienced at least one ransomware attack ?
Between Ecopetrol company and aramco company, which one has experienced at least one data breach ?
Between Ecopetrol company and aramco company, which one has experienced at least one targeted cyberattack ?
Between Ecopetrol company and aramco company, which one has experienced at least one vulnerability ?
Between Ecopetrol company and aramco company, which one holds the most compliance certifications ?
Between Ecopetrol company and aramco company, which one holds the fewest compliance certifications ?
Between Ecopetrol company and aramco company, which one has the most subsidiaries ?
Between Ecopetrol company and aramco company, which one has the largest number of employees ?
Between Ecopetrol and aramco, which company holds both SOC 2 Type 1 certifications ?
Between Ecopetrol and aramco, which company holds both SOC 2 Type 2 certifications ?
Which company is ISO 27001 certified - Ecopetrol or aramco ?
Which company is PCI DSS compliant - Ecopetrol or aramco ?
Between Ecopetrol and aramco, which company complies with HIPAA regulations for healthcare data ?
Between Ecopetrol and aramco, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-50044
SUMMARY

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an attacker to steal admin credentials via weak hash or a pass-the-hash attack.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 6.8)
CVSS3
Base Score: 6.8
Complexity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS4
Base Score: 7.6
Complexity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
5.2
EXPLOITABILITY
1.6
CVE-2026-44955
SUMMARY

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 5.3)
CVSS3
Base Score: 5.3
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS4
Base Score: 6.9
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
1.4
EXPLOITABILITY
3.9
CVE-2026-42933
SUMMARY

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 10)
CVSS3
Base Score: 10.0
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS4
Base Score: 10.0
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
6
EXPLOITABILITY
3.9
CVE-2026-40430
SUMMARY

Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 7.5)
CVSS3
Base Score: 7.5
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS4
Base Score: 8.7
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
3.6
EXPLOITABILITY
3.9
CVE-2026-28698
SUMMARY

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 8.6)
CVSS3
Base Score: 8.6
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS4
Base Score: 9.2
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
4
EXPLOITABILITY
3.9