Comparison Overview

EDAG Group

VS

ALTEN

EDAG Group

EDAG Engineering Group AG, Wiesbaden, 65205, DE
Last Update: 2025-12-01
View Profile
Between 750 and 799
http://www.edag.com

About the EDAG Group The EDAG Group is a globally leading, independent engineering service provider to the mobility industry which, with experts in mobility, industry and public solutions, combines excellent engineering with the latest technology trends. With an interdisciplinary team of some 9,000 experts, the EDAG Group, in its global network spanning approximately 80 sites, realizes projects for the automotive industry and other industrial sectors including semiconductors, chemicals, defence and medical devices. With over 55 years of engineering experience and its own 360-degree development approach, the EDAG Group covers the entire spectrum of modern mobility, combining innovative technologies and future-oriented concepts. Working across all industries, the EDAG Group develops products and production plants and facilities that take all manufacturing-relevant processes into full account and integrate them into a holistic network. Innovative strategies, data networking and a digital infrastructure are also at the center of the company's cross-industry engineering solutions, for the public sector, for example. The interdisciplinary approach and a strong partner network provide an optimal customer experience for a customer base of global market leaders. The company has been listed on the stock exchange since 2015 and generated sales of € 822 million in 2024. For more information, see the EDAG Group website: http://www.edag.com

NAICS: 54139
NAICS Definition: Engineering Services
Employees: 6,124
Subsidiaries: 2
12-month incidents
0
Known data breaches
0
Attack type number
1
View Profile

ALTEN

221 bis boulevard Jean jaurès, Boulogne-Billancourt Cedex, Ile-de-France, 92514, FR
Last Update: 2025-12-01
Between 750 and 799
https://www.alten.com/

𝐀 𝐰𝐨𝐫𝐥𝐝 𝐥𝐞𝐚𝐝𝐞𝐫 𝐢𝐧 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 𝐚𝐧𝐝 𝐈𝐓 𝐒𝐞𝐫𝐯𝐢𝐜𝐞𝐬 ALTEN is committed to meeting the expectations of its stakeholders and anticipating their requirements in the fields of innovation, R&D, and technological information systems. Founded in 1988 and present in 30+ countries, the Group has established itself as the global leader in Engineering and IT Services. ALTEN operates with major players in the Aeronautics, Space, Defence, Naval & Security, Automotive, Rail & Mobility, Energy & Environment, Life Sciences – Health, Industrial Equipment & Electronics, Telecoms, Banking, Finance & Insurance, Retail & Services, Public Services & Government sectors.    OUR VISION: BUILDING TOMORROW’S WORLD TODAY We are convinced that engineers are the architects who build tomorrow’s world today. As a global leader in Engineering and IT Services, we support businesses in their technological and sustainable transformation. We commit to making a positive impact over time and on people, pushing the boundaries of innovation, and always staying one step ahead. We are driven by one ambition: to think about the future in the present. A LEADING GLOBAL TECHNOLOGY PARTNER ALTEN is involved in all projects with a technological dimension for the Technical, Research & Development Divisions and IT Systems Divisions of major corporate, telecoms and service clients, requiring the involvement of high-level Consultant-Engineers. To achieve this, the Group has put in place a world-renowned technical organization of excellence. 🔹 12 Industries covered 🔹 21 Delivery Centers 🔹 6,500+ Clients FULL COVERAGE OF TECHNOLOGIES The Group covers a wide range of expertise in Engineering and IT Services in order to meet our clients’ needs. We bring together and coordinate at the transnational level, specialists and consultants, experts in their profession who support our clients in their issues of digital transformation, innovation, product development, supply chain, etc.

NAICS: 54139
NAICS Definition: Engineering Services
Employees: 38,719
Subsidiaries: 38
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/edaggroup.jpeg
EDAG Group
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/alten.jpeg
ALTEN
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
EDAG Group
100%
Compliance Rate
0/4 Standards Verified
ALTEN
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Engineering Services Industry Average (This Year)

No incidents recorded for EDAG Group in 2025.

Incidents vs Engineering Services Industry Average (This Year)

No incidents recorded for ALTEN in 2025.

Incident History — EDAG Group (X = Date, Y = Severity)

EDAG Group cyber incidents detection timeline including parent company and subsidiaries

Incident History — ALTEN (X = Date, Y = Severity)

ALTEN cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/edaggroup.jpeg
EDAG Group
Incidents

Date Detected: 3/2021
Type:Cyber Attack
Blog: Blog
https://images.rankiteo.com/companyimages/alten.jpeg
ALTEN
Incidents

No Incident

FAQ

EDAG Group company demonstrates a stronger AI Cybersecurity Score compared to ALTEN company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

EDAG Group company has historically faced a number of disclosed cyber incidents, whereas ALTEN company has not reported any.

In the current year, ALTEN company and EDAG Group company have not reported any cyber incidents.

Neither ALTEN company nor EDAG Group company has reported experiencing a ransomware attack publicly.

Neither ALTEN company nor EDAG Group company has reported experiencing a data breach publicly.

EDAG Group company has reported targeted cyberattacks, while ALTEN company has not reported such incidents publicly.

Neither EDAG Group company nor ALTEN company has reported experiencing or disclosing vulnerabilities publicly.

Neither EDAG Group nor ALTEN holds any compliance certifications.

Neither company holds any compliance certifications.

ALTEN company has more subsidiaries worldwide compared to EDAG Group company.

ALTEN company employs more people globally than EDAG Group company, reflecting its scale as a Engineering Services.

Neither EDAG Group nor ALTEN holds SOC 2 Type 1 certification.

Neither EDAG Group nor ALTEN holds SOC 2 Type 2 certification.

Neither EDAG Group nor ALTEN holds ISO 27001 certification.

Neither EDAG Group nor ALTEN holds PCI DSS certification.

Neither EDAG Group nor ALTEN holds HIPAA certification.

Neither EDAG Group nor ALTEN holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. Prior to 2.9.8, there is a security issue exists in the exec_in_pod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string format is provided, it is passed directly to shell interpretation (sh -c) without input validation, allowing shell metacharacters to be interpreted. This vulnerability can be exploited through direct command injection or indirect prompt injection attacks, where AI agents may execute commands without explicit user intent. This vulnerability is fixed in 2.9.8.

Published
Date
2025-12-03
Updated
Date
2025-12-03
Risk Information
cvss3
Base: 6.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
References
Description

XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request.

Published
Date
2025-12-03
Updated
Date
2025-12-03
References
Description

An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g. file upload, firmware update, reboot...) via a crafted authentication bypass.

Published
Date
2025-12-03
Updated
Date
2025-12-03
References
Description

Cal.com is open-source scheduling software. Prior to 5.9.8, A flaw in the login credentials provider allows an attacker to bypass password verification when a TOTP code is provided, potentially gaining unauthorized access to user accounts. This issue exists due to problematic conditional logic in the authentication flow. This vulnerability is fixed in 5.9.8.

Published
Date
2025-12-03
Updated
Date
2025-12-03
Risk Information
cvss4
Base: 9.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed() function, it might lead to high CPU consumption and a potential Denial of Service. Small numbers go through this call stack: NativeNumber.numTo > DToA.JS_dtostr > DToA.JS_dtoa > DToA.pow5mult where pow5mult attempts to raise 5 to a ridiculous power. This vulnerability is fixed in 1.8.1, 1.7.15.1, and 1.7.14.1.

Published
Date
2025-12-03
Updated
Date
2025-12-03
Risk Information
cvss4
Base: 5.5
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References