What is the official website of Havas Productions ?

The official website of Havas Productions is http://www.havas-productions.com/.

What is Havas Productions's cybersecurity risk score?

Havas Productions has an AI-generated cybersecurity risk score of 755 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Havas Productions experienced?

According to Rankiteo, Havas Productions currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Havas Productions been affected by any supply chain cyber incidents ?

According to Rankiteo, Havas Productions has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Havas Productions have SOC 2 Type 1 certification ?

According to Rankiteo, Havas Productions is not certified under SOC 2 Type 1.

Does Havas Productions have SOC 2 Type 2 certification ?

According to Rankiteo, Havas Productions does not hold a SOC 2 Type 2 certification.

Does Havas Productions comply with GDPR ?

According to Rankiteo, Havas Productions is not listed as GDPR compliant.

Does Havas Productions have PCI DSS certification ?

According to Rankiteo, Havas Productions does not currently maintain PCI DSS compliance.

Does Havas Productions comply with HIPAA ?

According to Rankiteo, Havas Productions is not compliant with HIPAA regulations.

Does Havas Productions have ISO 27001 certification ?

According to Rankiteo,Havas Productions is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Havas Productions operate in ?

Havas Productions operates primarily in the Media Production industry.

How many employees does Havas Productions have ?

Havas Productions employs approximately 9 people worldwide.

Does Havas Productions own any subsidiaries ?

Havas Productions presently has no subsidiaries across any sectors.

How many LinkedIn followers does Havas Productions have ?

Havas Productions's official LinkedIn profile has approximately 3,271 followers.

Does Havas Productions have a Crunchbase profile ?

No, Havas Productions does not have a profile on Crunchbase.

Does Havas Productions have a LinkedIn profile ?

Yes, Havas Productions maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/havas-productions.

How many cybersecurity incidents has Havas Productions experienced ?

As of August 2, 2026, Rankiteo reports that Havas Productions has not experienced any cybersecurity incidents.

How many peer or competitor companies does Havas Productions have ?

Havas Productions has an estimated 6,827 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Havas Productions

Boost Score +25 with badge (5 left)

755

/1000

Fair

780

/1000

Fair

Havas Productions Vendor Cyber Rating & Cyber Score

havas-productions.com

Add Your Compliance Badge

L'agence de création audiovisuelle du groupe Havas en France. Havas Productions, c'est : - Havas Prod for Brands, l'expertise narrative au service des marques - Hercules, une infrastructure dédiée à la post-production, mais aussi un label de musique - Save Ferris, producteurs de fiction et d'entertainment - Upside Télévision, une agence de presse audiovisuelle au service des chaînes du monde entier - Upside Distribution, une équipe dédiée à la distribution internationale de contenus pour la TV, le cinéma, et les nouvelles plates-formes

Havas Productions A.I CyberSecurity Scoring

Scoring History

Havas Productions

Havas Productions CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Havas Productions Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Havas Productions

Incidents vs Media Production Industry Avg (This Year)

No incidents recorded for Havas Productions in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Havas Productions in 2026.

Incident Types Havas Productions vs Media Production Industry Avg (This Year)

No incidents recorded for Havas Productions in 2026.

Incident History - Havas Productions (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Havas Productions Subsidiaries

Havas Productions

Media Production

Website: http://www.havas-productions.com/

Company Size: 9

HavasAdvertising Services

Think Design CollaborativeDesign Services

Intern from HomeDesign Services

Data Design BootcampDesign Services

Havas Media NetworkAdvertising Services

HAVAS DIGITALAdvertising Services

Mobext (Havas Group)Advertising Services

Media ContactsOnline Audio and Video Media

Havas Media PortugalAdvertising Services

Arena MediaAdvertising Services

Havas Media MéxicoAdvertising Services

Havas Market FranceBusiness Consulting and Services

Havas Programmatic HubAdvertising Services

AffiperfTechnology, Information and Internet

AGENCE79Advertising Services

Havas RigaAdvertising Services

BRAIN PUBAdvertising Services

MPGAdvertising Services

Mobext - PhilippinesAdvertising Services

SocialyseAdvertising Services

ChrysalisAdvertising Services

ROSA PARISAdvertising Services

Havas Play 🇫🇷Advertising Services

Havas EspañaAdvertising Services

Havas Events ParisEvents Services

Arnold WorldwideAdvertising Services

CSA (Institut d'Etudes)Market Research

Havas Creative Network IndiaAdvertising Services

BETCAdvertising Services

BETC ETOILE ROUGEAdvertising Services

BETC HAVASAdvertising Services

Search Laboratory (now Havas Market UK)Advertising Services

Prose on PixelsMedia Production

Havas Media Network EspañaAdvertising Services

Havas HostAdvertising Services

BoondoggleAdvertising Services

Havas Worldwide ParisAdvertising Services

Havas Legal & LitigationPublic Relations and Communications Services

BrandBoxGraphic Design

Havas B2BBusiness Consulting and Services

Sport & Reputation x HavasServices de relations publiques et communication

Arena Media EspañaAdvertising Services

Havas FactoryAdvertising Services

Camp + KingAdvertising Services

Vale NetworkAdvertising Services

Havas CreativeAdvertising Services

Havas CXAdvertising Services

Havas Life LondonAdvertising Services

Havas CX heliaAdvertising Services

Havas IndiaAdvertising Services

Bastion BrandsAdvertising Services

W Conran DesignAdvertising Services

La Maison W ParisAdvertising Services

Havas Creative CanadaAdvertising Services

HRCLSMedia Production

Havas Media UKAdvertising Services

HAVAS OrtegaAdvertising Services

BLKJ HAVASAdvertising Services

Havas Play UKAdvertising Services

One Green BeanPublic Relations and Communications Services

HAVAS Red AUPublic Relations and Communications Services

Havas Media Network SingaporeAdvertising Services

ignition inc.Advertising Services

Havas APACAdvertising Services

Arnold FullsixAdvertising Services

Noise DigitalTechnology, Information and Media

Havas Media IrelandAdvertising Services

Havas Hong KongAdvertising Services

SciterionPharmaceutical Manufacturing

Shobiz ExperientialEvents Services

Havas EdgeAdvertising Services

Havas Life MumbaiAdvertising Services

Havas LondonAdvertising Services

Havas Startup AcceleratorAdvertising Services

Havas ThailandAdvertising Services

HAVAS Just::Public Relations and Communications Services

Havas Network ANZAdvertising Services

Frontier AustraliaAdvertising Services

Havas Life MadridAdvertising Services

Porda HavasPublic Relations and Communications Services

Havas & CompagniesAdvertising Services

Havas ColombiaAdvertising Services

Havas ChinaAdvertising Services

Havas Health & You China广告服务

Pulse Project Management SoftwareSoftware Development

The Salmon ConsultingBusiness Consulting and Services

PLEADPublic Relations and Communications Services

Havas Life São PauloAdvertising Services

Havas Media Network IndiaAdvertising Services

Havas Red UKPublic Relations and Communications Services

Havas SwitzerlandAdvertising Services

Havas SOPublic Relations and Communications Services

Havas Media Network AustraliaAdvertising Services

DBi Data Business IntelligenceAdvertising Services

ProximiaAdvertising Services

Havas CambodiaAdvertising Services

Havas Media EspañaAdvertising Services

Loading…

Havas Productions Similar Companies

Bertelsmann SE & Co. KGaA

wonderl.ink

Bertelsmann ist ein Medien-, Dienstleistungs- und Bildungsunternehmen mit rund 75.000 Mitarbeitenden, das in gut 50 Ländern der Welt aktiv ist. Zum Konzernverbund gehören das Entertainment-Unternehmen RTL Group, die Buchverlagsgruppe Penguin Random House, das Musikunternehmen BMG, der Dienstleister Arvato Group, Bertelsmann Marketing Services, die Bertelsmann Education Group sowie das internationale Fondsnetzwerk Bertelsmann Investments. Das Unternehmen erzielte im Geschäftsjahr 2024 einen Umsatz von 19 Mrd. Euro. Bertelsmann steht für Kreativität und Unternehmertum. Diese Kombination ermöglicht erstklassige Medienangebote und innovative Servicelösungen, die Kunden in aller Welt begeistern. www.bertelsmann.com

Freelancer

wikipedia.org

A freelancer or freelance worker is a term commonly used for a person who is self-employed and is not necessarily committed to a particular employer long-term. Freelance workers are sometimes represented by a company or a temporary agency that resells freelance labor to clients; others work independently or use professional associations or websites to get work. While the term "independent contractor" would be used in a higher register of English to designate the tax and employment class of this type of worker, the term freelancing is most common in culture and creative industries and this term specifically motions to participation therein. Fields, professions and industries where freelancing is predominant include music, writing, acting, computer programming, web design, translating and illustrating, and other forms of piece work which some cultural theorists consider as central to the cognitive-cultural economy.

Loading…

NEWS

Havas Productions CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

May 06, 2020 07:00 AM

Movers & Shakers: L'Oreal, 72andSunny, Red Havas and more

This week's account of wins and losses, lay-offs and hires.. From Campaign US.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…