What is the official website of EcoVadis France ?

The official website of EcoVadis France is http://www.ecovadis.com/fr/.

What is EcoVadis France's cybersecurity risk score?

EcoVadis France has an AI-generated cybersecurity risk score of 756 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has EcoVadis France experienced?

According to Rankiteo, EcoVadis France currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has EcoVadis France been affected by any supply chain cyber incidents ?

According to Rankiteo, EcoVadis France has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does EcoVadis France have SOC 2 Type 1 certification ?

According to Rankiteo, EcoVadis France is not certified under SOC 2 Type 1.

Does EcoVadis France have SOC 2 Type 2 certification ?

According to Rankiteo, EcoVadis France does not hold a SOC 2 Type 2 certification.

Does EcoVadis France comply with GDPR ?

According to Rankiteo, EcoVadis France is not listed as GDPR compliant.

Does EcoVadis France have PCI DSS certification ?

According to Rankiteo, EcoVadis France does not currently maintain PCI DSS compliance.

Does EcoVadis France comply with HIPAA ?

According to Rankiteo, EcoVadis France is not compliant with HIPAA regulations.

Does EcoVadis France have ISO 27001 certification ?

According to Rankiteo,EcoVadis France is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does EcoVadis France operate in ?

EcoVadis France operates primarily in the Information Services industry.

How many employees does EcoVadis France have ?

EcoVadis France employs approximately None employees people worldwide.

Does EcoVadis France own any subsidiaries ?

EcoVadis France presently has no subsidiaries across any sectors.

How many LinkedIn followers does EcoVadis France have ?

EcoVadis France's official LinkedIn profile has approximately 5,457 followers.

What is the NAICS classification code for EcoVadis France ?

EcoVadis France is classified under the NAICS code 519, which corresponds to Other Information Services.

Does EcoVadis France have a Crunchbase profile ?

No, EcoVadis France does not have a profile on Crunchbase.

Does EcoVadis France have a LinkedIn profile ?

Yes, EcoVadis France maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ecovadis-france.

How many cybersecurity incidents has EcoVadis France experienced ?

As of July 7, 2026, Rankiteo reports that EcoVadis France has not experienced any cybersecurity incidents.

How many peer or competitor companies does EcoVadis France have ?

EcoVadis France has an estimated 2,646 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

EcoVadis France

Boost Score +25 with badge (5 left)

756

/1000

Fair

781

/1000

Fair

EcoVadis France Vendor Cyber Rating & Cyber Score

ecovadis.com

Add Your Compliance Badge

EcoVadis, entreprise à mission, est une plateforme d’évaluation des performances de développement durable des entreprises. Les entreprises de toutes tailles s’appuient sur la plateforme EcoVadis pour se conformer aux réglementations ESG, réduire leurs émissions de gaz à effet de serre et améliorer les performances en matière de durabilité de leur entreprise et de leur chaîne d’approvisionnement dans 220 industries et 180 pays. 130 000 entreprises utilisent les évaluations d'EcoVadis, les outils de gestion des risques et du carbone, ainsi que la plateforme d'apprentissage en ligne pour favoriser la résilience, la croissance durable et l’impact positif à l'échelle mondiale.

EcoVadis France A.I CyberSecurity Scoring

Scoring History

EcoVadis France

EcoVadis France CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

EcoVadis France Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for EcoVadis France

Incidents vs Information Services Industry Avg (This Year)

No incidents recorded for EcoVadis France in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for EcoVadis France in 2026.

Incident Types EcoVadis France vs Information Services Industry Avg (This Year)

No incidents recorded for EcoVadis France in 2026.

Incident History - EcoVadis France (X = Date, Y = Severity)

Loading…

SUBSIDIARY

EcoVadis France Subsidiaries

EcoVadis France

Information Services

Website: http://www.ecovadis.com/fr/

Company Size: 1,001-5,000 employees

EcoVadisInformation Services

#LifeAtEcoVadisInformation Services

EcoVadis D-A-CHInformationsdienste

EcoVadis España y LatamServicios y consultoría de TI

EcoVadis ItaliaTechnologies et services de l’information

Loading…

EcoVadis France Similar Companies

Springer Nature

springernature.com

Be Part of Progress - together we bring greater understanding to the world Springer Nature is one of the leading publishers of research in the world. We publish the largest number of journals and books and are a pioneer in open research. Through our leading brands, trusted for more than 180 years, we provide technology-enabled products, platforms and services that help researchers to uncover new ideas and share their discoveries, health professionals to stay at the forefront of medical science, and educators to advance learning. We are proud to be part of progress, working together with the communities we serve to share knowledge and bring greater understanding to the world. Global key facts: Established for over 180 years Nearly 10,000 colleagues 200 offices in 45 countries on all continents World’s largest academic book publisher Publisher of Nature, the world’s most influential journal First company to publish more than 1 million Open Access articles Key brands and imprints: Springer Nature is home to some of the best-known names in research, health, educational and professional publishing. Every day, around the globe, our brands reach millions of people. Nature Springer BMC Palgrave Macmillan Apress Macmillan Education Scientific American Springer Health+ Springer Medizin Research Square J.B. Metzler BSL Adis

Gartner

gtnr.it

We deliver actionable, objective business and technology insights. Our expert guidance and tools enable faster, smarter decisions and stronger performance on an organization’s mission-critical priorities. Our unrivaled combination of business and technology insights steers clients toward the right decisions on the issues that matter most. As a $6.3 Billion company, with 21,000 associates, and a member of the S&P 500, we are an objective partner with 14,000 client enterprises in 90 countries and territories — across every major function, geography, industry and market sector — and boast 45+ years of experience providing insights and expert guidance to client enterprises worldwide. To learn more about how we guide the leaders who shape the world. visit gartner.com. Gartner, Inc. (NYSE: IT) Community guidelines: https://gtnr.it/3tceMrU C-level Insights of the Week LinkedIn Newsletter: https://gtnr.it/4c56S97

Experian

experianplc.com

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, deliver digital marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to realise their financial goals and help them to save time and money. We operate across a range of markets, from financial services to healthcare, automotive, agrifinance, insurance, and many more industry segments. We invest in talented people and new advanced technologies to unlock the power of data and innovate. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com.

GLG

glginsights.com

GLG is the world’s largest insight network. We connect decision makers to the right experts so they can act with the confidence that comes from true clarity and have what it takes to get ahead. Our network of experts is the world’s largest source of first-hand expertise, and we recruit hundreds of new experts every day. We bring the power of insight to every great professional decision. Visit GLGinsights.com. For information regarding GLG’s practices with respect to personal information, please visit our privacy policy at https://glginsights.com/privacy-policy/

NielsenIQ

niq.com

NielsenIQ (NIQ) is the world’s leading consumer intelligence company, delivering the most complete understanding of consumer buying behavior and revealing new pathways to growth. NIQ combined with GfK in 2023, bringing together the two industry leaders with unparalleled global reach. Today NIQ has operations in 95+ countries representing 97% of the world’s GDP. With a holistic retail read and the most comprehensive consumer insights—delivered with advanced analytics through state-of-the-art platforms—NIQ delivers the Full View™.

CASA

casawealth.org

CASA is an industry leading association that can provide you with the edge you need to be an effective business owner with a substantial property portfolio and gives you the power to confidently manage your business and structures to enable you, the business owner, to later on become a member of our exclusive business and investment consortiums.

Loading…

NEWS

EcoVadis France CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 18, 2024 04:36 PM

CyberVadis raises €7 million

Spun off from EcoVadis last year, this French start-up specializes in supplier cyber risk assessment.

Read Article

May 23, 2023 07:00 AM

Paris-based Cybervadis secures €7 million Series A round to secure organizations’ global supply chain

CyberVadis, provider of a Third Party Cyber Risk Management platform embedding the most reliable cybersecurity ratings, has raised €7...

Read Article

May 23, 2023 07:00 AM

French startup CyberVadis drives innovation in third-party cyber risk, management with €7M funding led by Zobito

Paris-based company CyberVadis, a leading provider of Third-Party Cyber Risk Management solutions, has successfully raised €7 million in a...

Read Article

July 28, 2020 07:00 AM

Atos acquires sustainability consultancy and cybersecurity firm

Global IT services firm Atos has acquired two companies in its home market of France: EcoAct and digital.security.

Read Article

January 09, 2020 08:00 AM

CVC Earmarks $200 Million for ESG Ratings Provider EcoVadis

CVC Capital Partners investing $200 million in EcoVadis SAS through its growth investment arm.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-53646

SUMMARY

FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when a `ClientPasswordReset` record already exists for a client (from a previous unexpired reset request), subsequent calls to the `reset_password` guest API endpoint reuse the existing token instead of generating a new one. The 15-minute validity window is anchored to the first request's `created_at` timestamp, not the time of the most recent email. An attacker who obtained the original reset link remains able to use it even after the victim requests a new reset, because the original token is never invalidated or rotated. Version 0.8.0 patches the issue. Some workarounds are available. Configure a reverse proxy (e.g., Nginx, Apache, Cloudflare) to apply per-IP rate limiting to the `/client/reset-password` endpoint to minimize the window of opportunity, and/or manually clear expired `client_password_reset` records from the database after a client reports a suspected compromise.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 7.7

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-vp66-w6rc-x32p

CVE-2026-53645

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow a low-privileged staff account to grant arbitrary module permissions to itself through the admin API, resulting in persistent privilege escalation. A staff user that only has `staff.create_and_edit_staff` can call `/api/admin/staff/permissions_update` targeting their own account and write any permission structure, bypassing the intended role-based access control boundary. Version 0.8.0 patches the issue. Some workarounds are available. Restrict the `staff.create_and_edit_staff` permission to only highly trusted staff members and/or use a reverse proxy or WAF to restrict access to `/api/admin/staff/permissions_update` to specific trusted roles.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-4hf7-xxxw-64rm

CVE-2026-53644

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions 0.5.3 through 0.7.2 allow authenticated clients to both read and reset API key service secrets for orders that are no longer in an `active` state (e.g., `suspended`, `canceled`). The root cause is missing order-state validation in two client API endpoints, despite an `isActive()` helper already existing in the `Serviceapikey` module and the frontend UI correctly gating access on `order.status == 'active'`. Version 0.8.0 contains a fix. Some workarounds are available. If the `Serviceapikey` module is not needed, uninstall it to remove the affected endpoints. One may also use a reverse proxy or WAF to restrict access to `/api/client/order/service` and `/api/client/serviceapikey/reset` based on application-level order-state logic.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-qf6j-vq68-qmfh

CVE-2026-53643

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow low-privileged staff accounts to perform unauthorized actions via admin API endpoints. The root cause is a combination of the `can_always_access` module flag (which grants all staff access to certain modules) and insufficient permission checks or unsafe parameter handling on individual endpoints. Version 0.8.0 contains a fix. Some workarounds are available. Restrict staff accounts to only those who need access to sensitive settings and/or use a reverse proxy or WAF to restrict access to the affected endpoints to trusted IP addresses or higher-privilege roles.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-563q-g4r4-6f9m

CVE-2026-53642

SUMMARY

FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when the "Require Email Confirmation" setting is enabled, a logged-in client with an unverified email address (`email_approved = 0`) can access all client-area pages (e.g. `/client/balance`, `/client/order/list`, `/client/invoice`) and read real account data, including wallet balances and transaction history. The API-side enforcement correctly restricts unverified clients to only profile-related endpoints, but the page-side enforcement is overly permissive, allowing any request whose path starts with `/client`. Version 0.8.0 contains a fix. No known workarounds that don't involve modifying the source code are available.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-7v47-rh46-w923

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…