Company Details
evonik
14,155
581,310
325
evonik.com
162
EVO_1343942
Completed

Evonik Company CyberSecurity Posture
evonik.comEvonik is one of the world’s leading specialty chemicals companies. While we don’t produce electric cars, aircraft, medications or 3D printers, Evonik is part and parcel of these and many other end products. That’s because we contribute the small things that make a big difference. We make electric car batteries perform better, aircraft greener, medications more effective and 3D printers more efficient. In short: We think beyond the bounds of chemistry to make the world a better place. Today and tomorrow. We are an international group with a workforce of over 32,000 people spread across more than one hundred locations. Our daily work is shaped by global concerns, such as sustainability, diversity and digitalization. In all our business decisions, we take the present and future generations into consideration. After all, being ready for tomorrow is our business. Interested in joining our global team? Our wide range of opportunities extends from creative and innovative research through international management all the way to production. Whether you’re studying, starting out in your career or a seasoned professional, come help us make the world a better place. For more information about careers at Evonik, go to: www.careers.evonik.com. #HumanChemistry Find our netiquette on: www.evonik.com/netiquette
Company Details
evonik
14,155
581,310
325
evonik.com
162
EVO_1343942
Completed
Between 750 and 799

Evonik Global Score (TPRM)XXXX



No incidents recorded for Evonik in 2025.
No incidents recorded for Evonik in 2025.
No incidents recorded for Evonik in 2025.
Evonik cyber incidents detection timeline including parent company and subsidiaries

Evonik is one of the world’s leading specialty chemicals companies. While we don’t produce electric cars, aircraft, medications or 3D printers, Evonik is part and parcel of these and many other end products. That’s because we contribute the small things that make a big difference. We make electric car batteries perform better, aircraft greener, medications more effective and 3D printers more efficient. In short: We think beyond the bounds of chemistry to make the world a better place. Today and tomorrow. We are an international group with a workforce of over 32,000 people spread across more than one hundred locations. Our daily work is shaped by global concerns, such as sustainability, diversity and digitalization. In all our business decisions, we take the present and future generations into consideration. After all, being ready for tomorrow is our business. Interested in joining our global team? Our wide range of opportunities extends from creative and innovative research through international management all the way to production. Whether you’re studying, starting out in your career or a seasoned professional, come help us make the world a better place. For more information about careers at Evonik, go to: www.careers.evonik.com. #HumanChemistry Find our netiquette on: www.evonik.com/netiquette

Covestro is one of the world’s leading manufacturers of high-quality polymer materials and their components. With its innovative products, processes and methods, the company helps enhance sustainability and the quality of life in many areas. Covestro supplies customers around the world in key indust
We’re one of the world’s leading materials science companies, serving customers in high-growth markets such as packaging, infrastructure, mobility and consumer applications. Our global breadth, asset integration and scale, focused innovation, leading business positions and commitment to sustainabi

Sasol is a global chemicals and energy company. We harness our knowledge and expertise to integrate sophisticated technologies and processes into world-scale operating facilities. We safely and sustainably source, produce and market a range of high-quality products in 22 countries, creating value

UralChem is a leading producer of nitrogen and phosphate fertilizers in Russia/CIS with production capacities of over 2.7 million tonnes of ammonium nitrate, 2.2 million tonnes of ammonia, 0.8 million tonnes of MAP and DAP, 0.8 million tonnes of complex fertilizers and 0.5 million tonnes of urea. Ur

We're the global market leader in full-line range of chemical & ingredient products and value-added services. Our more than 17,500 employees provide tailor-made application, marketing and supply chain solutions. Our full-line portfolio comprises specialty and industrial chemicals and ingredients of

Meet IFF: We boldly bring together science and creativity to create what the world needs. An industry leader in food, beverage, scent, health and biosciences, we create essential solutions – from global icons to unexpected innovations and experiences. Equal parts outspoken and analytical, our inte

Airgas, an Air Liquide company, is a leading U.S. supplier of industrial, medical and specialty gases, as well as hardgoods and related products; one of the largest U.S. suppliers of safety products; and a leading U.S. supplier of ammonia products and process chemicals. Dedicated to improving the

Sika is a specialty chemicals company with a globally leading position in the development and production of systems and products for bonding, sealing, damping, reinforcing, and protection in the building sector and industrial manufacturing. Sika has subsidiaries in 102 countries around the world and

Founded in 1920, Eastman is a global specialty materials company that produces a broad range of products found in items people use every day. With the purpose of enhancing the quality of life in a material way, Eastman works with customers to deliver innovative products and solutions while maintaini
.png)
Evonik presented the next stage of its strategic development at its Capital Markets Day in Essen. The chemical company focuses on four...
Effective January 1, 2025, Evonik has launched Smart Effects, a new entity counting 3,500 employees worldwide, born from the strategic...
October 3, 2024 | People. Dr Dharmesh Chotalia Associate Director–Business Development, Evonik India. Dr Dharmesh Chotalia is associate director – business...
Evonik Oxeno is significantly expanding its production capacities for the INA-based plasticizers, Elatur CH and Elatur DINCD.
Evonik has announced the expansion of its sodium methylate production capacity at its Rosario plant, located in the Sante Fé Province in...
Yann d'Hervé takes over responsibility for the Health Care business at Evonik, effective July 1.
Evonik has added Ancamine 2844, a novel epoxy cure hardener designed for plural component spray applications to its curing agent portfolio.
Evonik grants Fuhua license for 200-kiloton hydrogen peroxide plant in Leshan, Sichuan Province.
Investor acquires entire site and associated cyanuric chloride business in Wesseling, Germany.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Evonik is http://www.evonik.com.
According to Rankiteo, Evonik’s AI-generated cybersecurity score is 776, reflecting their Fair security posture.
According to Rankiteo, Evonik currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Evonik is not certified under SOC 2 Type 1.
According to Rankiteo, Evonik does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Evonik is not listed as GDPR compliant.
According to Rankiteo, Evonik does not currently maintain PCI DSS compliance.
According to Rankiteo, Evonik is not compliant with HIPAA regulations.
According to Rankiteo,Evonik is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Evonik operates primarily in the Chemical Manufacturing industry.
Evonik employs approximately 14,155 people worldwide.
Evonik presently has no subsidiaries across any sectors.
Evonik’s official LinkedIn profile has approximately 581,310 followers.
Evonik is classified under the NAICS code 325, which corresponds to Chemical Manufacturing.
Yes, Evonik has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/evonik-industries.
Yes, Evonik maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/evonik.
As of November 27, 2025, Rankiteo reports that Evonik has not experienced any cybersecurity incidents.
Evonik has an estimated 4,121 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, Evonik has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.