What is the official website of FTI Consulting ?

The official website of FTI Consulting is http://www.fticonsulting.com.

What is FTI Consulting's cybersecurity risk score?

FTI Consulting has an AI-generated cybersecurity risk score of 769 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has FTI Consulting experienced?

According to Rankiteo, FTI Consulting currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has FTI Consulting been affected by any supply chain cyber incidents ?

According to Rankiteo, FTI Consulting has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does FTI Consulting have SOC 2 Type 1 certification ?

According to Rankiteo, FTI Consulting is not certified under SOC 2 Type 1.

Does FTI Consulting have SOC 2 Type 2 certification ?

According to Rankiteo, FTI Consulting does not hold a SOC 2 Type 2 certification.

Does FTI Consulting comply with GDPR ?

According to Rankiteo, FTI Consulting is not listed as GDPR compliant.

Does FTI Consulting have PCI DSS certification ?

According to Rankiteo, FTI Consulting does not currently maintain PCI DSS compliance.

Does FTI Consulting comply with HIPAA ?

According to Rankiteo, FTI Consulting is not compliant with HIPAA regulations.

Does FTI Consulting have ISO 27001 certification ?

According to Rankiteo,FTI Consulting is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does FTI Consulting operate in ?

FTI Consulting operates primarily in the Business Consulting and Services industry.

How many employees does FTI Consulting have ?

FTI Consulting employs approximately 10,364 people worldwide.

Does FTI Consulting own any subsidiaries ?

FTI Consulting presently has no subsidiaries across any sectors.

How many LinkedIn followers does FTI Consulting have ?

FTI Consulting's official LinkedIn profile has approximately 421,568 followers.

What is the NAICS classification code for FTI Consulting ?

FTI Consulting is classified under the NAICS code 5416, which corresponds to Management, Scientific, and Technical Consulting Services.

Does FTI Consulting have a Crunchbase profile ?

No, FTI Consulting does not have a profile on Crunchbase.

Does FTI Consulting have a LinkedIn profile ?

Yes, FTI Consulting maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/fti-consulting.

How many cybersecurity incidents has FTI Consulting experienced ?

As of July 14, 2026, Rankiteo reports that FTI Consulting has not experienced any cybersecurity incidents.

How many peer or competitor companies does FTI Consulting have ?

FTI Consulting has an estimated 19,567 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

FTI Consulting

Boost Score +25 with badge (5 left)

769

/1000

Fair

794

/1000

Fair

FTI Consulting Vendor Cyber Rating & Cyber Score

fticonsulting.com

Add Your Compliance Badge

FTI Consulting is the leading global expert firm for organizations facing crisis and transformation, with more than 8,100 employees in 32 countries and territories. Our professionals work closely with clients to anticipate, illuminate and overcome complex business challenges and make the most of opportunities.

FTI Consulting A.I CyberSecurity Scoring

Scoring History

FTI Consulting

FTI Consulting CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

FTI Consulting Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for FTI Consulting

Incidents vs Business Consulting and Services Industry Avg (This Year)

No incidents recorded for FTI Consulting in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for FTI Consulting in 2026.

Incident Types FTI Consulting vs Business Consulting and Services Industry Avg (This Year)

No incidents recorded for FTI Consulting in 2026.

Incident History - FTI Consulting (X = Date, Y = Severity)

Loading…

SUBSIDIARY

FTI Consulting Subsidiaries

FTI Consulting

Business Consulting and Services

Website: http://www.fticonsulting.com

Company Size: 5,001-10,000 employees

Compass LexeconBusiness Consulting and Services

FTI Consulting EUPublic Policy Offices

FTI DeltaBusiness Consulting and Services

FTI-AnderschBusiness Consulting and Services

FTI TechnologyLegal Services

Loading…

FTI Consulting Similar Companies

Deloitte

deloitte.com

Deloitte drives progress. Our firms around the world help clients become leaders wherever they choose to compete. Deloitte invests in outstanding people of diverse talents and backgrounds and empowers them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities. DTTL (also referred to as “Deloitte Global”) and each of its member firms are legally separate and independent entities. DTTL does not provide services to clients. Please see www.deloitte.com/about to learn more. The content on this page contains general information only, and none of Deloitte Touche Tohmatsu Limited, its member firms, or their related entities (collectively the “Deloitte Network”) is, by means of this publication, rendering professional advice or services. Before making any decision or taking any action that may affect your finances or your business, you should consult a qualified professional adviser. No entity in the Deloitte Network shall be responsible for any loss whatsoever sustained by any person who relies on content from this page.

Bain & Company

bain.com

Bain & Company is a global consultancy that helps the world’s most ambitious change makers define the future. Across 65 cities in 40 countries, we work alongside our clients as one team with a shared ambition to achieve extraordinary results, outperform the competition, and redefine industries. We complement our tailored, integrated expertise with a vibrant ecosystem of digital innovators to deliver better, faster, and more enduring outcomes. Our 10-year commitment to invest more than $1 billion in pro bono services brings our talent, expertise, and insight to organizations tackling today’s urgent challenges in education, racial equity, social justice, economic development, and the environment. We earned a platinum rating from EcoVadis, the leading platform for environmental, social, and ethical performance ratings for global supply chains, putting us in the top 1% of all companies. Since our founding in 1973, we have measured our success by the success of our clients, and we proudly maintain the highest level of client

McKinsey & Company

mckinsey.com

McKinsey & Company is a global management consulting firm. We are the trusted advisor to the world's leading businesses, governments, and institutions. We work with leading organizations across the private, public and social sectors. Our scale, scope, and knowledge allow us to address problems that no one else can. We have deep functional and industry expertise as well as breadth of geographical reach. We are passionate about taking on immense challenges that matter to our clients and, often, to the world. We work with our clients as we do with our colleagues. We build their capabilities and leadership skills at every level and every opportunity. We do this to help build internal support, get to real issues, and reach practical recommendations. We bring out the capabilities of clients to fully participate in the process and lead the ongoing work.

Protiviti

protiviti.com

Protiviti (www.protiviti.com) is a global consulting firm that delivers deep expertise, objective insights, a tailored approach and unparalleled collaboration to help leaders confidently face the future. Protiviti and its independent and locally owned member firms provide clients with consulting and managed solutions in finance, technology, operations, data, digital, legal, HR, risk and internal audit through a network of more than 90 offices in over 25 countries. Named to the Fortune 100 Best Companies to Work For® list for the 11th consecutive year, Protiviti Inc. has served more than 80 percent of Fortune 100 and nearly 80 percent of Fortune 500 companies. The firm also works with government agencies and smaller, growing companies, including those looking to go public. Protiviti Inc. is a wholly owned subsidiary of Robert Half (NYSE: RHI).

EY-Parthenon

ey.com

Our unique combination of transformative strategy, transactions and corporate finance delivers real-world value – solutions that work in practice, not just on paper. Benefiting from EY’s full spectrum of services, we’ve reimagined strategic consulting to work in a world of increasing complexity. With deep functional and sector expertise, paired with innovative AI-powered technology and an investor mindset, we partner with CEOs, boards, private equity and governments every step of the way – enabling you to shape your future with confidence. EY-Parthenon is a brand under which a number of EY member firms across the globe provide strategy consulting services. For more information, please visit ey.com/parthenon.

Devoteam

cb devoteam.com

Devoteam is a AI-driven tech consulting firm specialised in cloud platforms, cyber, data, and sustainability. Tech native for almost 30 years, Devoteam guides businesses through sustainable digital transformation to deliver value. With over 11,000 tech architects in more than 25 countries across Europe, the Middle East, and Africa, Devoteam is committed to using technology to serve people.

Jacobs

cb jacobs.com

At Jacobs, we're challenging today to reinvent tomorrow – delivering outcomes and solutions for the world's most complex challenges. With a team of approximately 45,000, we provide end-to-end services in advanced manufacturing, cities & places, energy, environmental, life sciences, transportation and water. From advisory and consulting, feasibility, planning, design, program and lifecycle management, we're creating a more connected and sustainable world.

Stantec

cb stantec.com

Stantec empowers clients, people, and communities to rise to the world’s greatest challenges at a time when the world faces more unprecedented concerns than ever before. We are a global leader in sustainable engineering, architecture, and environmental consulting. Our professionals deliver the expertise, technology, and innovation communities need to manage aging infrastructure, demographic and population changes, the energy transition, and more. Today’s communities transcend geographic borders. At Stantec, community means everyone with an interest in the work that we do—from our project teams and industry colleagues to our clients and the people our work impacts. The diverse perspectives of our partners and interested parties drive us to think beyond what’s previously been done on critical issues like climate change, digital transformation, and future-proofing our cities and infrastructure. We are designers, engineers, scientists, project managers, and strategic advisors. We innovate at the intersection of community, creativity, and client relationships to advance communities everywhere, so that together we can redefine what’s possible. Stantec trades on the TSX and the NYSE under the symbol STN.

Guidehouse

guidehouse.com

Guidehouse is a global AI-led professional services firm delivering advisory, technology, and managed services to the commercial and government sectors. With an integrated business technology approach, Guidehouse drives efficiency and resilience in the healthcare, financial services, energy, infrastructure, and national security markets. Built to help clients across industries outwit complexity, the firm brings together approximately 18,000 professionals to achieve lasting impact and shape a meaningful future.

Loading…

NEWS

FTI Consulting CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 18, 2026 04:13 PM

Forensic IT recruits Chris Hatfield as executive general manager

Forensic IT, a subsidiary of cybersecurity consulting and services firm Infotrust, has recruited former FTI Consulting managing director...

Read Article

March 17, 2026 07:00 AM

FTI Consulting Study Reveals Cybersecurity Attacks Are an Increasing Threat to M&A

Third Installment of CISO Redefined Series Highlights Correlation between Cyber Attacks and Transactions, an Emerging Risk for Dealmakers as...

Read Article

March 17, 2026 07:00 AM

Cyberattacks are derailing M&A deals and cutting value, FTI Consulting finds

FTI Consulting (NYSE: FCN) released CISO Redefined III on March 17, 2026, finding cybersecurity incidents are increasingly tied to M&A...

Read Article

February 13, 2026 08:00 AM

Platforms, AI and Concentration

Cybersecurity has long been urgency-driven, but its economic and operating model is now being reshaped in real time across the industry...

Read Article

January 13, 2026 08:00 AM

Ex-FBI cybercrime agent Jason Smolanoff joins FTI Consulting team

FTI Consulting (NYSE: FCN) announced on January 13, 2026 that Jason Smolanoff joined as a Senior Managing Director in the Cybersecurity...

Read Article

January 09, 2026 08:00 AM

Understanding the Cyber Risks Flooding the Water and Wastewater Systems Sector

Aging infrastructure and a large operational footprint require the Water and Wastewater Services ("WWS") sector to prioritize cyber maturity...

Read Article

December 19, 2025 08:00 AM

Intelligence-Led Stress Testing for Data Centers

Keeping pace with threats to data centers requires security strategies that go beyond traditional compliance, achieved through...

Read Article

December 17, 2025 08:00 AM

The DOJ’s Data Security Program: A New Era of Cross-Border Data Transfer Compliance

Compliance with the U.S. Data Security Program will require organizations to create an additional layer to their existing data privacy...

Read Article

December 16, 2025 08:00 AM

FTI Consulting Survey Shows Life Sciences Leaders’ Outlook

Industry Leaders Point to Challenging Political and Economic EnvironmentKey Legislation Expected to Impact Supply Chain and Drug CostsRecent...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-58489

SUMMARY

HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.0, the GitHub Gist export flow created an OAuth2 state value but only checked that it was present rather than validating it against the value expected for the user's session. Because the state was not properly validated, an attacker could forge a callback URL containing their own valid GitHub OAuth code. When processing the callback, HedgeDoc used the victim's logged-in session to select which note to export, but the attacker's authorization code to determine which GitHub account received it. As a result, a logged-in victim who clicked a crafted link could export their own private, protected, or limited note directly into a Gist controlled by the attacker. This issue has been fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 6.8

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58486

SUMMARY

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, HedgeDoc was vulnerable to a YAML alias bomb due to unsafe processing of the note frontmatter. HedgeDoc parsed frontmatter with js-yaml.load (js-yaml v3) via @hedgedoc/meta-marked, which resolved YAML anchor aliases. A compact malicious payload could therefore expand into a huge object structure, consuming excessive CPU. This expansion ran on every request to the publish view (/s/<shortid>) and, when placed under the opengraph key, the editor view (/<noteId>). A ten-level alias bomb could block the single Node.js event loop for roughly 235 seconds per request, causing concurrent requests to hang or drop and rendering the instance unavailable (DoS). Because the note was stored in the database, the impact survived process restarts until the note was removed. toobusy-js did not reliably mitigate the worst cases, as the event loop was saturated before the middleware could respond. This issue was fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58102

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via extensions(), extensions_by_long_name(), extensions_by_oid(), or has_extension_oid()), the code passes OBJ_obj2txt()'s return value as the hash-key length; because that value is the OID's full text length rather than the bytes written to the fixed-size buffer (129 bytes), an OID whose text is longer than the 129-byte buffer causes a read past the allocation, exposing adjacent heap memory as the returned hash key. extensions_by_name() uses the static shortname path and is not affected.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-58101

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check. keyid_data also dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when the parse succeeds. A caller invoking an affected helper on an extension from an untrusted certificate triggers a SIGSEGV that crashes the Perl process.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-57856

SUMMARY

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php sanitizes the bucket name with preg_replace('/[^a-zA-Z0-9-_\\.]/','', $bucket), which permits '..' and '../' sequences. The sanitized value is interpolated into a Flysystem path as uploads://buckets/{bucket}. Flysystem's WhitespacePathNormalizer resolves 'buckets/..' to the empty string (the uploads storage root) without raising PathTraversalDetected because the '..' has a preceding component to consume. An authenticated low-privileged user can send a crafted request with a '../' bucket name to list, upload, and delete files across all buckets, including those belonging to other users or roles

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…