What is Epassi's cybersecurity risk score?

Epassi has an AI-generated cybersecurity risk score of 758 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Epassi experienced?

According to Rankiteo, Epassi currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Epassi been affected by any supply chain cyber incidents ?

According to Rankiteo, Epassi has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Epassi have SOC 2 Type 1 certification ?

According to Rankiteo, Epassi is not certified under SOC 2 Type 1.

Does Epassi have SOC 2 Type 2 certification ?

According to Rankiteo, Epassi does not hold a SOC 2 Type 2 certification.

Does Epassi comply with GDPR ?

According to Rankiteo, Epassi is not listed as GDPR compliant.

Does Epassi have PCI DSS certification ?

According to Rankiteo, Epassi does not currently maintain PCI DSS compliance.

Does Epassi comply with HIPAA ?

According to Rankiteo, Epassi is not compliant with HIPAA regulations.

Does Epassi have ISO 27001 certification ?

According to Rankiteo,Epassi is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Epassi operate in ?

Epassi operates primarily in the Financial Services industry.

How many employees does Epassi have ?

Epassi employs approximately 775 people worldwide.

Does Epassi own any subsidiaries ?

Epassi presently has no subsidiaries across any sectors.

How many LinkedIn followers does Epassi have ?

Epassi's official LinkedIn profile has approximately 13,771 followers.

What is the NAICS classification code for Epassi ?

Epassi is classified under the NAICS code 52, which corresponds to Finance and Insurance.

Does Epassi have a Crunchbase profile ?

No, Epassi does not have a profile on Crunchbase.

Does Epassi have a LinkedIn profile ?

Yes, Epassi maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/epassi.

How many cybersecurity incidents has Epassi experienced ?

As of June 9, 2026, Rankiteo reports that Epassi has not experienced any cybersecurity incidents.

How many peer or competitor companies does Epassi have ?

Epassi has an estimated 32,025 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Epassi

Boost Score +25 with badge (5 left)

758

/1000

Fair

783

/1000

Fair

Epassi Vendor Cyber Rating & Cyber Score

epassi.com

Add Your Compliance Badge

Founded in Helsinki in 2007, Epassi is a pioneer in digital employee benefits and payments, and the leading global multi-benefits platform with a strong presence in the Nordics, Germany, the Netherlands, Italy, the UK, Ireland, Spain, Portugal, and France. Epassi’s innovative, unique and scalable solution combines all benefits into one mobile app-centric, user-friendly digital service, providing a digital marketplace for employee benefits. Epassi Group serves more than 50,000 employers and their over 30 million employees, with a partner network of more than 100,000 service providers. Epassi is a leading fintech company, recognized by the Financial Times as one of the fastest growing companies in Europe in 2022, 2023, 2024 and 2025, and

Epassi A.I CyberSecurity Scoring

Scoring History

Epassi

Epassi CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Epassi Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Epassi

Incidents vs Financial Services Industry Avg (This Year)

No incidents recorded for Epassi in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Epassi in 2026.

Incident Types Epassi vs Financial Services Industry Avg (This Year)

No incidents recorded for Epassi in 2026.

Incident History - Epassi (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Epassi Subsidiaries

Epassi

Financial Services

Website: https://www.epassi.com/locations?utm_campaign=267073762-linkedin_page&utm_source=linkedin&utm_medium=social&utm_content=locations

Company Size: 775

YourWellnessHubHealth, Wellness & Fitness

ZestIT Services and IT Consulting

I-GB // Initiative - Gesunder Betrieb GmbHWellness and Fitness Services

HansefitWellness and Fitness Services

Vip DistrictInformation Technology & Services

Bedrijfsfitness NederlandWellness and Fitness Services

EudaimonHuman Resources Services

Loading…

Epassi Similar Companies

NN Group

nn-group.com

NN Group is an international financial services company, active in 10 countries, with a strong presence in a number of European countries and Japan. We are rooted in the Netherlands and have a rich history spanning 180 years. With our 16,000 colleagues, NN Group provides retirement services, pensions, insurance, banking and investments to approximately 19 million customers. NN Group includes Nationale-Nederlanden, NN, ABN AMRO Insurance, Movir, AZL, BeFrank, OHRA and Woonnu. NN Group opened for trading on 2 July 2014 on Euronext Amsterdam under the symbol ‘NN’ after its initial public offering (IPO). Throughout our history, we have merged, grown and changed, but the core of who we are has remained the same. At NN Group, we put our resources, expertise, and networks to use for the well-being of our customers, the advancement of our communities, the preservation of our planet, and for the promotion of a stable, inclusive, and sustainable economy. Our purpose is to help people care for what matters most to them. Because what matters to them matters to us.

Northern Trust

northerntrust.com

As a global leader in innovative wealth management, asset servicing and investment solutions, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families and institutions by remaining true to our enduring principles of service, expertise and integrity. A globally recognized Fortune 500 Company in continuous operation since 1889, we’ve built a legacy of empowering clients to reach their goals with confidence. Since our roots as a trust bank, we’ve grown to a global presence with more than 24,000 employees in more than 20 countries and across five core business units: Wealth Management Asset Management Asset Servicing Technology Corporate Functions Join a Team That’s Made for Greater At Northern Trust, we refer to our employees as partners – with good reason. We understand that relationships are the key to our success. Here you’ll join a diverse and inclusive team of innovators with the drive to challenge the way things have always been done. Instead of choosing between a dynamic career and work-life balance, enjoy working with a team that supports your goals in the office and at home. We’ll help you get where you want to go without sacrificing what matters most to you. As of December 31, 2025, Northern Trust Corporation had: $18.7 trillion assets under custody/administration $14.9 trillion in assets under custody $1.8 trillion in assets under management $177 billion in banking assets

Marsh McLennan

marsh.com

Marsh (NYSE: MRSH) is a global leader in risk, strategy and people, advising clients in 130 countries across four businesses: Marsh Risk, Guy Carpenter, Mercer and Oliver Wyman. With annual revenue over $24 billion and more than 90,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective

Morningstar

morningstar.com

Morningstar, Inc. is a leading provider of independent investment insights in North America, Europe, Australia, and Asia. The Company offers an extensive line of products and services for individual investors, financial advisors, asset managers and owners, retirement plan providers and sponsors, institutional investors in the debt and private capital markets, and alliances and redistributors. Morningstar provides data and research insights on a wide range of investment offerings, including managed investment products, publicly listed companies, private capital markets, debt securities, and real-time global market data. Morningstar also offers investment management services through its investment advisory subsidiaries, with approximately $369 billion in AUMA as of Sept. 30, 2025. The Company operates through wholly-owned subsidiaries in 32 countries.

KKR

kkr.com

KKR is a leading global investment firm that offers alternative asset management as well as capital markets and insurance solutions. KKR aims to generate attractive investment returns by following a patient and disciplined investment approach, employing world-class people, and supporting growth in its portfolio companies and communities. KKR sponsors investment funds that invest in private equity, credit and real assets and has strategic partners that manage hedge funds. KKR’s insurance subsidiaries offer retirement, life and reinsurance products under the management of Global Atlantic Financial Group. References to KKR’s investments may include the activities of its sponsored funds and insurance subsidiaries. For additional information about KKR (NYSE: KKR), please visit www.kkr.com. For additional information about Global Atlantic Financial Group, please visit www.globalatlantic.com. KKR will never request personal information, account details, payments and transfers over digital chat applications, social media, email or through SMS: https://www.kkr.com/security-and-fraud-awareness

Sanlam

sanlam.co.za

We’ve finally given a name to that special something a person exudes when they have a plan for their finances. It’s called The F Factor – and now that you know its name, it’s time you feel it too. Let's unlock your financial confidence, together. Our team is online weekdays 8:30 – 16:00

Postal Savings Bank of China Co., Ltd.

psbc.com

Postal Savings Bank of China Co., Ltd. also known as PSBC is a commercial retail bank founded in 2007 and headquartered in Beijing. It provides basic financial services, especially to small and medium enterprises, rural[1] and low income customers. As of December 31, 2017, PSBC has 39,798[2] branches covering all regions of China. PSBC was set up with an initial capital of RMB20 billion in 2007 from the State Post Bureau. Today it has RMB1.5 trillion in deposits and the second largest number of branches, after the Agricultural Bank of China. During the Global Financial Crisis, the government took several measures to spread its national economic stimulus plan specifically to rural areas. This included using microfinance services provided by the Postal Savings Bank as a tool for national development and poverty reduction. The bank with its extremely broad reach also assists China’s credit cooperatives in their microcredit schemes. On December 8, 2015, China Postal Savings Bank, through issuing pro-float stock, received an injection of investment from the Temasek Holdings of Singapore, UBS, the Canada Pension Plan Investment Board, the International Finance Corporation, Morgan Stanley, DBS Bank, Tencent, Ant Financial Services Group, China Life and China Telecom, with a total investment of 45.1 billion yuan. These "strategic investors" together held a 16.92% stake in the company at the time of purchase. The stock was listed through an initial public offering on the Stock Exchange of Hong Kong on September 30, 2016. Prior to its listing, it was the largest unlisted Chinese bank.[3] Xuewen Zhang and Hong Lao serve as Vice Presidents of the bank and co-executive directors.

Discovery Limited

discovery.co.za

Imagine a world where people live healthier, more enhanced and protected lives… A world in which each organisation is a powerful influencer and responsible corporate citizen, committed to being a force for social good. As a leading innovator in healthcare, wellness, insurance, investments, financial and life planning, Discovery works ceaselessly to make this vision a reality. Fuelled by our passion for enhancing lives and our desire to innovate, Discovery consistently sets global standards, creating shared value through shared intellectual capital. A testament to this is our Vitality programme, which is both a platform to incentivise people to live healthier lives as well as a channel through which shared value is delivered. We are a proudly South African-born, global company with health, life and short term insurance operations in South Africa and the United Kingdom, and a presence in Germany, France, the United States, Canada, Australia, Singapore, Hong Kong, Philippines, Thailand, Malaysia, China and Japan through our Global Vitality Network. We uphold our promise of shared value by being a positive disruptor that focusses on bringing about sustainable change in the lives of the people and communities we serve across the globe. Our Vitality Shared-Value Insurance model has received international recognition, including being ranked 17th in Fortune’s index of 51 companies “changing the world” in August 2015, and named a leading health innovator at the World Economic Forum in January 2017. Our values of leadership, honesty, innovation and fairness act as our compass, directing our business practices to take advantage of every opportunity while looking for ways to dazzle clients. With an unwavering commitment to being the best shared value insurance organisation in the world, Discovery is a powerful force for social good.

Manappuram Finance Limited

cb manappuram.com

Manappuram Finance Ltd. is one of India’s largest and most trusted gold loan companies, with 4,199 branches across the length and breadth of the country. It currently has nearly Rs. 157.65 billion worth assets under management (AUM), and 20,185 employees. Promoted by Shri. V.P. Nandakumar, the current MD & CEO, the company was founded in the modest coastal village of Valapad (Thrissur District) by his late father Mr. V.C. Padmanabhan in 1949. The first non-banking financial company (NBFC) in Kerala to receive a Certificate of Registration issued by the RBI, it was also among the earliest to go for an IPO in 1995. In 2007 Sequoia Capital invested Rs.700 million along with Hudson Equity Holdings, heralding a period of accelerated growth, and in 2010 it became the first NBFC in Kerala to obtain the highest short term credit rating of A1+ from ICRA. In 2010, it became the first Kerala-based NBFC to offer ESOPs (Employee Stock Option Plan) to its middle and senior management functionaries. As a pioneer and trailblazer, Manappuram Finance Ltd. has always been an innovator par excellence in the gold loan product and the adoption of technology. Besides focus on the business, the cause of the wider community is central to the vision of the company. The Manappuram Foundation was established in October 2009 to drive the company’s initiatives in Corporate Social Responsibility (CSR). In recent years, the company has diversified into new business areas like micro-finance, vehicle and housing finance, and SME lending through the subsidiaries Manappuram Home Finance Ltd, Manappuram Insurance Brokers Ltd, and Asirvad Microfinance Limited. Our mission is to make life easy for common people of India with instant and easy loans, with a vision of unlocking the value of their savings in gold jewellery.

Loading…

NEWS

Epassi CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

August 09, 2023 07:00 AM

Bregal Milestone Announces the Sale of Epassi to TA Associates and Warburg Pincus

Bregal Milestone, a leading pan-European technology growth private equity firm, today announced the sale of Epassi Group (“Epassi”),...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-44541

SUMMARY

Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fides_description override. This issue has been patched in version 2.84.5.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: )

cvss4

Base Score: 7.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-49141

SUMMARY

WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticated attackers to access and modify contacts belonging to other tenants by supplying an arbitrary caller-controlled contact_id in the POST request body without tenant ownership verification. Attackers can exploit the service-role client that bypasses row-level security to modify victim contact fields including name, email, and company across tenant boundaries using only a known contact UUID.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N

cvss4

Base Score: 5.1

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

4.7

Exploitability

1.8

REFERENCES

CVE-2026-47345

SUMMARY

Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: )

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-47344

SUMMARY

When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., </style\t>) are not recognized by the sanitizer but accepted by browsers as valid end tags, allowing subsequent content to escape sanitization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: )

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-46484

SUMMARY

Headplane is a feature-complete Web UI for Headscale. Prior to versions 0.6.3 and 0.7.0-beta.3, Headplane was vulnerable to a path traversal / authorization bypass in the Headscale API client used by node and user rename operations. This issue has been patched in versions 0.6.3 and 0.7.0-beta.3.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…