What is the official website of energieagence (Agence de l'Energie S.A.) ?

The official website of energieagence (Agence de l'Energie S.A.) is http://www.energieagence.lu.

What is energieagence (Agence de l'Energie S.A.)'s cybersecurity risk score?

energieagence (Agence de l'Energie S.A.) has an AI-generated cybersecurity risk score of 750 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has energieagence (Agence de l'Energie S.A.) experienced?

According to Rankiteo, energieagence (Agence de l'Energie S.A.) currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has energieagence (Agence de l'Energie S.A.) been affected by any supply chain cyber incidents ?

According to Rankiteo, energieagence (Agence de l'Energie S.A.) has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does energieagence (Agence de l'Energie S.A.) have SOC 2 Type 1 certification ?

According to Rankiteo, energieagence (Agence de l'Energie S.A.) is not certified under SOC 2 Type 1.

Does energieagence (Agence de l'Energie S.A.) have SOC 2 Type 2 certification ?

According to Rankiteo, energieagence (Agence de l'Energie S.A.) does not hold a SOC 2 Type 2 certification.

Does energieagence (Agence de l'Energie S.A.) comply with GDPR ?

According to Rankiteo, energieagence (Agence de l'Energie S.A.) is not listed as GDPR compliant.

Does energieagence (Agence de l'Energie S.A.) have PCI DSS certification ?

According to Rankiteo, energieagence (Agence de l'Energie S.A.) does not currently maintain PCI DSS compliance.

Does energieagence (Agence de l'Energie S.A.) comply with HIPAA ?

According to Rankiteo, energieagence (Agence de l'Energie S.A.) is not compliant with HIPAA regulations.

Does energieagence (Agence de l'Energie S.A.) have ISO 27001 certification ?

According to Rankiteo,energieagence (Agence de l'Energie S.A.) is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does energieagence (Agence de l'Energie S.A.) operate in ?

energieagence (Agence de l'Energie S.A.) operates primarily in the Environmental Services industry.

How many employees does energieagence (Agence de l'Energie S.A.) have ?

energieagence (Agence de l'Energie S.A.) employs approximately 36 people worldwide.

Does energieagence (Agence de l'Energie S.A.) own any subsidiaries ?

energieagence (Agence de l'Energie S.A.) presently has no subsidiaries across any sectors.

How many LinkedIn followers does energieagence (Agence de l'Energie S.A.) have ?

energieagence (Agence de l'Energie S.A.)'s official LinkedIn profile has approximately 30,498 followers.

What is the NAICS classification code for energieagence (Agence de l'Energie S.A.) ?

energieagence (Agence de l'Energie S.A.) is classified under the NAICS code 54162, which corresponds to Environmental Consulting Services.

Does energieagence (Agence de l'Energie S.A.) have a Crunchbase profile ?

No, energieagence (Agence de l'Energie S.A.) does not have a profile on Crunchbase.

Does energieagence (Agence de l'Energie S.A.) have a LinkedIn profile ?

Yes, energieagence (Agence de l'Energie S.A.) maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/energieagence-s-a-.

How many cybersecurity incidents has energieagence (Agence de l'Energie S.A.) experienced ?

As of July 2, 2026, Rankiteo reports that energieagence (Agence de l'Energie S.A.) has not experienced any cybersecurity incidents.

How many peer or competitor companies does energieagence (Agence de l'Energie S.A.) have ?

energieagence (Agence de l'Energie S.A.) has an estimated 8,495 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

750

/1000

Fair

775

/1000

Fair

energieagence (Agence de l'Energie S.A.) Vendor Cyber Rating & Cyber Score

energieagence.lu

Add Your Compliance Badge

L’energieagence propose des services dans les domaines de l’efficacité énergétique et des sources d’énergie renouvelables avec un accent sur le conseil et la formation. energieagence est l'enseigne commerciale sous laquelle l'Agence de l'Energie S.A. exerce ses activités économiques. Les actionnaires de l'energieagence sont l'Etat du Grand-Duché de Luxembourg, représenté par le ministère de l'Economie et par le ministère de l'Environnement, ainsi que Enovos Luxembourg S.A.. L'energieagence est partenaire de MyClimateLux et du fonds nova naturstroum ainsi qu'actionnaire des parcs éoliens "Gemeng Hengischt", "Kehmen-Heischent" et "Burer Bierg". services energieagence conseil en énergie (Energieberodung) - audits énergétiques

E A.I CyberSecurity Scoring

Scoring History

energieagence (Agence de l'Energie S.A.) CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

E Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for E

Incidents vs Environmental Services Industry Avg (This Year)

No incidents recorded for energieagence (Agence de l'Energie S.A.) in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for energieagence (Agence de l'Energie S.A.) in 2026.

Incident Types E vs Environmental Services Industry Avg (This Year)

No incidents recorded for energieagence (Agence de l'Energie S.A.) in 2026.

Incident History - E (X = Date, Y = Severity)

Loading…

SUBSIDIARY

energieagence (Agence de l'Energie S.A.) Subsidiaries

Parent Company

E

Environmental Services

Website: http://www.energieagence.lu

Company Size: 36

No subsidiary data available for this company.

Loading…

energieagence (Agence de l'Energie S.A.) Similar Companies

WM

wm.com

WM is North America's leading provider of integrated environmental solutions. We partner with our customers and communities to manage and reduce waste from collection to disposal while recovering valuable resources and creating clean, renewable energy. We are on a quest for environmental performance, a mission to maximize resource value, while minimizing – and even eliminating – environmental impact so that both our economy and our environment can thrive. WM tailors its services to meet the needs of each customer group and to ensure consistent, superior service at the local level. Headquartered in Houston, the company serves nearly 20 million municipal, commercial, industrial, and residential customers through a network of 367 collection operations, 355 transfer stations, 273 active landfill disposal sites, 16 waste-to-energy plants, 104 recycling plants, and 111 beneficial-use landfill gas projects.

Environment Agency

www.gov.uk

We are the Environment Agency. We are the biggest and most wide-ranging environmental regulator in Europe. We work with businesses and communities to protect and improve the environment, for people and wildlife. And the need for our work is becoming ever more important. We protect and improve the environment across England to: • reduce the risks to people and properties from flooding • help businesses and communities adapt to climate change • reduce pressures on biodiversity • help businesses to make sure they don’t harm the environment through pollution or taking too much water • issue licences and permits, and take action against people who don’t take their environmental responsibilities seriously. None of this is possible without a multi-talented team of professional and dedicated people. And just like the environment we help to care for, we’re home to an incredible diversity of skills and knowledge. Today, we employ more than 12,000 people throughout England in a wide range of roles. You’ll find leading scientists and prominent geologists alongside public relations professionals, planners and policy advisors. We employ lawyers, enforcement officers and engineers, conservation scientists and marine biologists. And of course we have a wide team of support staff. We employ people at all stages of their career, from recent graduates to experienced leaders and internationally-renowned experts. Find out how we manage our social media accounts at https://www.gov.uk/government/organisations/environment-agency/about/social-media-use

Rentokil Initial

cb rentokil-initial.com

Rentokil Initial plc employs c.68,500 people across 89 countries - offering the experience and expertise of a multi-national organisation, whilst delivering services with the agility and characteristics of a local business. As world leaders in Pest Control and Hygiene & Well-being services, we deliver services that protect people and enhance lives, to commercial and private customers worldwide. Rentokil Initial plc is listed on the London Stock Exchange (FTSE 100).

Bureau Veritas Group

bureauveritas.com

Bureau Veritas is a world leader in Testing, Inspection and Certification. Our mission is at the heart of key challenges: quality, health and safety, environmental protection and social responsibility. Through our wide range of expertise, impartiality and independence, we foster confidence between companies, public authorities and clients. Bureau Veritas is a Business to Business to Society company, contributing to transform the world we live in. Driven by society, we are working ever more closely with our clients, addressing today’s crucial challenges and answering society’s aspirations. Bureau Veritas is listed on the Euronext Paris (Compartment A, code ISIN FR 0006174348, stock symbol: BVI).

EQUANS

equans.com

Equans, a Bouygues group company, is a world leader in multi-technical services with offices in 20 country hubs. This brand expresses the desire to provide the right answer [ANS] to the equations [EQU] of our customers. We design and provide customised solutions to improve our customers’ buildings, technical equipment, systems and processes and to support them in optimising their use. With nearly 90,000 highly qualified employees and a strong geographic footprint through our historical local brands, we have excellent technical know-how in design, installation, maintenance and performance services, with a unique combination of skills as in HVAC, Cooling & Fire protection, Facility Management, Digital & ICT, Electrical, Mechanical & Robotics... Equans expertise and knowledge of our customers’ businesses now place us to support them in their transitions for modernisation and sustainable development.

Eiffage Énergie Systèmes

eiffageenergiesystemes.com

Rejoindre Eiffage, c’est rejoindre une entreprise animée d’un esprit de famille unique. Nous recherchons des talents qui valorisent l’esprit d’équipe et l’entraide et qui souhaitent découvrir, progresser, innover dans un collectif engagé pour construire un avenir à taille humaine. Nous avons besoin de vos différences et de vos singularités car elles sont la richesse d’un Groupe qui donne sa chance à chacun. Rejoindre Eiffage, c’est rejoindre une grande entreprise qui a tous les atouts d’une petite ! _ Eiffage Énergie Systèmes est la marque des métiers de l’énergie du groupe Eiffage. Eiffage Énergie Systèmes conçoit, réalise, exploite et maintient des systèmes d'énergie. Experte en génies électrique, industriel, climatique et énergétique, Eiffage Énergie Systèmes propose des solutions innovantes portées par de nouvelles marques expertises: 👉 Clemessy, la marque dédiée à l’industrie 👉 Dorsalys, la marque dédiée aux infrastructures et réseaux 👉 Expercité, la marque dédiée aux villes et collectivités 👉 Terceo, la marque dédiée aux bâtiments tertiaires. ➡️ Eiffage Énergie Systèmes, c’est : 38 250 collaborateurs 7.2 Mds€ de chiffre d’affaires total 2.8 Mds€ de chiffre d’affaires en Europe 170 M€ de chiffre d’affaires Grand international (hors Europe) ➡️ Eiffage : 21.8 Mds € de chiffre d’affaires 78 200 salariés CA : 21,8 milliards d’euros 78 200 salariés 🌍 Présente dans plus de 50 pays, Eiffage Énergie Systèmes tisse une relation de proximité avec ses clients et offre ses expertises pointues afin de répondre au plus juste aux besoins énergétiques. Rejoindre Eiffage Énergie Systèmes c’est prendre part à des projets d’envergure et concevoir des solutions énergétiques respectueuses des Hommes et de l’environnement. C’est aussi évoluer dans un milieu professionnel d’avenir et participer à créer un avenir à taille humaine.

Dalkia

dalkia.fr

Dalkia : ensemble, relevons le défi climatique ! Depuis 85 ans, Dalkia, filiale du groupe EDF et leader dans les services énergétiques, investit et développe les énergies renouvelables et de récupération et accompagne ses clients dans la durée pour les aider à faire des économies d'énergie et à réduire leurs émissions de CO2. Plus de 20 000 salariés présents partout en France et à l'international assurent la maintenance et l'exploitation des installations de sites industriels, de bâtiments tertiaires, de collectivités, d'établissements de santé, de logements, avec des solutions innovantes et performantes, pour accélérer la décarbonation des sites et des territoires. Retrouvez nos solutions sur notre site écoresponsable www.dalkia.fr

Grupo Tragsa

tragsa.es

Tragsa Group is a group of public companies, integrated in the State Industrial Ownership Corporation (SEPI), which has become a full service supplier and a reference company to Public Administrations. It is formed by four enterprises: Tragsa (1977) responsible for works and services' execution and Tragsatec (1989) which performs engineering works and technical assistance for every sections of the Group. By these companies, the Group is able to take part in every stage of any project, from its conception and design to its execution. 40 years of experience working for Public Administrations and at the service of society, have settle this business group at the front line of the various fields where it intervenes, from agricultural, forest, livestock and rural development services to environmental conservation and protection. Tragsa Group is represented in all the national territory, what makes it possible to give a quick and efficient response to any request that may be done from the central, autonomic and local administrations. Moreover, our collaboration in more than 120 projects of Spanish cooperation – in over 35 different countries of Northern Africa, Sub-Saharan Africa, Latin America and the Caribbean, Asia, Europe and the Middle East – has given the company international importance. In every field of activity, the differentiating factor of the Group stands in its proved experience, its capacity to give a fast-response and adapt its work to Administration’s needs, and its high I+D+I profile, what makes the group able to provide leading edge technology and the highest quality services

RSK Group

rskgroup.com

RSK Group is a global leader in the delivery of environmental and engineering solutions. We recognise the urgent need for sustainable change and know that this will be achieved by delivering meaningful action, not just words. We are committed to supporting our clients and societies as they navigate these complex challenges, while making a positive impact. The business was founded in 1989, originally focused on providing environmental consultancy services to global energy clients. Today, while we remain a leader in environmental consultancy, the business is significantly more diverse. RSK delivers an unrivalled breadth and depth of environmental and engineering services, either as stand-alone projects or as large and integrated multidisciplinary solutions. The group believes this emphasis on multidisciplinary collaboration is essential for successfully addressing complex global challenges. This is why we have brought together pragmatic advice, forward-thinking engineering, cutting-edge innovation, digital solutions, and best-in-class delivery services. The group continues to deliver its ambitious global growth strategy. It now comprises more than 200 companies and employs over 16,000 people.

Loading…

NEWS

energieagence (Agence de l'Energie S.A.) CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55790

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50284

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50283

SUMMARY

Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14440

SUMMARY

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.6

Complexity: HIGH

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14422

SUMMARY

Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…