What is the official website of Holdina d.o.o. Sarajevo ?

The official website of Holdina d.o.o. Sarajevo is https://ina.ba/.

What is Holdina d.o.o. Sarajevo's cybersecurity risk score?

Holdina d.o.o. Sarajevo has an AI-generated cybersecurity risk score of 745 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Holdina d.o.o. Sarajevo experienced?

According to Rankiteo, Holdina d.o.o. Sarajevo currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Holdina d.o.o. Sarajevo been affected by any supply chain cyber incidents ?

According to Rankiteo, Holdina d.o.o. Sarajevo has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Holdina d.o.o. Sarajevo have SOC 2 Type 1 certification ?

According to Rankiteo, Holdina d.o.o. Sarajevo is not certified under SOC 2 Type 1.

Does Holdina d.o.o. Sarajevo have SOC 2 Type 2 certification ?

According to Rankiteo, Holdina d.o.o. Sarajevo does not hold a SOC 2 Type 2 certification.

Does Holdina d.o.o. Sarajevo comply with GDPR ?

According to Rankiteo, Holdina d.o.o. Sarajevo is not listed as GDPR compliant.

Does Holdina d.o.o. Sarajevo have PCI DSS certification ?

According to Rankiteo, Holdina d.o.o. Sarajevo does not currently maintain PCI DSS compliance.

Does Holdina d.o.o. Sarajevo comply with HIPAA ?

According to Rankiteo, Holdina d.o.o. Sarajevo is not compliant with HIPAA regulations.

Does Holdina d.o.o. Sarajevo have ISO 27001 certification ?

According to Rankiteo,Holdina d.o.o. Sarajevo is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Holdina d.o.o. Sarajevo operate in ?

Holdina d.o.o. Sarajevo operates primarily in the Oil and Gas industry.

How many employees does Holdina d.o.o. Sarajevo have ?

Holdina d.o.o. Sarajevo employs approximately 144 people worldwide.

Does Holdina d.o.o. Sarajevo own any subsidiaries ?

Holdina d.o.o. Sarajevo presently has no subsidiaries across any sectors.

How many LinkedIn followers does Holdina d.o.o. Sarajevo have ?

Holdina d.o.o. Sarajevo's official LinkedIn profile has approximately 5,504 followers.

What is the NAICS classification code for Holdina d.o.o. Sarajevo ?

Holdina d.o.o. Sarajevo is classified under the NAICS code 211, which corresponds to Oil and Gas Extraction.

Does Holdina d.o.o. Sarajevo have a Crunchbase profile ?

No, Holdina d.o.o. Sarajevo does not have a profile on Crunchbase.

Does Holdina d.o.o. Sarajevo have a LinkedIn profile ?

Yes, Holdina d.o.o. Sarajevo maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/holdina-d-o-o-sarajevo.

How many cybersecurity incidents has Holdina d.o.o. Sarajevo experienced ?

As of August 22, 2026, Rankiteo reports that Holdina d.o.o. Sarajevo has not experienced any cybersecurity incidents.

How many peer or competitor companies does Holdina d.o.o. Sarajevo have ?

Holdina d.o.o. Sarajevo has an estimated 11,000 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

HDS

Boost Score +25 with badge (5 left)

745

/1000

Moderate

770

/1000

Fair

Holdina d.o.o. Sarajevo Vendor Cyber Rating & Cyber Score

ina.ba

Add Your Compliance Badge

Holdina d.o.o. Sarajevo je jedna od vodećih kompanija za prodaju nafte i naftnih derivata na veleprodajnom i maloprodajnom tržištu Bosne i Hercegovine. Kompanija je osnovana 2000. godine kao supsidijar INA d.d. i članica INA Grupe koja upravlja mrežom od oko pedeset INA benzinskih stanica na području Bosne i Hercegovine, te eksluzivni uvoznik i veleprodajni zastupnik za prodaju nafte i naftnih derivata iz INA rafinerija u Hrvatskoj. Kupovinom 30% vlasničkog udjela Energopetrola d.d. Sarajevo 2016. godine, INA d.d. je postala većinski vlasnik Energopetrola te od tada Holdina i Energopetrol zajednički nastupaju na tržištu Bosne i Hercegovine kao najveća mreža benzinskih stanica u zemlji sa oko 105 maloprodajnih objekata. Ukupan broj

HDS A.I CyberSecurity Scoring

Scoring History

HDS

Holdina d.o.o. Sarajevo CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

HDS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for HDS

Incidents vs Oil and Gas Industry Avg (This Year)

No incidents recorded for Holdina d.o.o. Sarajevo in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Holdina d.o.o. Sarajevo in 2026.

Incident Types HDS vs Oil and Gas Industry Avg (This Year)

No incidents recorded for Holdina d.o.o. Sarajevo in 2026.

Incident History - HDS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Holdina d.o.o. Sarajevo Subsidiaries

HDS

Oil and Gas

Website: https://ina.ba/

Company Size: 501-1,000 employees

INA GrupaOil and Gas

MOL GroupOil and Gas

MOL Pakistan Oil & Gas Co. B.V.Oil and Gas

MOL MagyarországOil and Gas

MOL RomaniaOil and Gas

SlovnaftOil and Gas

MOL Serbia doo, Member of MOL GroupOil and Gas

IES - Italiana Energia e Servizi S.p.A. MEMBER OF MOL GROUPOil and Gas

MOL Česká republikaOil and Gas

TIFON (Member of MOL Group)Oil and Gas

MOL Petrolkémia Zrt.Chemical Manufacturing

MOL Austria Handels GmbHOil and Gas

MOL SlovenijaOil and Gas

UPPP programOil and Gas

Petrolszolg KftIndustrial Machinery Manufacturing

MOL Group's Top 10 TipsOil and Gas

MOL Oman Ltd. Oman BranchOil and Gas

MOL-Russ LLCOil and Gas

Slovnaft Polska S.A.Oil and Gas

Crosco, Integrated Drilling & Well Services Co., Ltd.Oil and Gas

STSI d.o.o.Oil and Gas

INA MAZIVAOil and Gas

Energopetrol d.d. SarajevoOil and Gas

Plavi tim d.o.o.IT Services and IT Consulting

Loading…

Holdina d.o.o. Sarajevo Similar Companies

Enbridge

cb enbridge.com

At Enbridge, our goal is to be the first-choice energy delivery company in North America and beyond—for customers, communities, investors, regulators and policymakers, and employees. We also recognize the importance of a secure, reliable and affordable supply of energy, which we deliver every day through our four core businesses: -Liquids pipelines -Natural gas pipelines -Gas utilities and storage -Renewable energy There has been an increase in fraudulent activity related to recruitment and employment offers targeting potential candidates for companies like Enbridge. Learn how we accept job applications by visiting the careers section of our website.

McDermott International, Ltd

mcdermott.com

McDermott is a premier provider of engineering and construction solutions to the energy industry. Our customers trust our technology-driven approach—engineered to responsibly harness and transform global energy resources into the products the world needs for now and what’s next. From concept to commissioning, we are creating and delivering the building blocks of the energy transition. Our innovative expertise and capabilities advance the next generation of global energy infrastructure—empowering a brighter, more sustainable future for us all. Operating in over 54 countries, our locally focused and globally integrated resources include more than 30,000 employees, a diversified fleet of specialty marine construction vessels and fabrication facilities around the world. To learn more, visit www.mcdermott.com.

Reliance Industries Limited

ril.com

Our motto “Growth is Life” aptly captures the ever-evolving spirit of Reliance. Our activities span hydrocarbon exploration and production, petroleum refining and marketing, petrochemicals, retail, and telecommunications. In each of these areas, we are committed to innovation-led, exponential growth. Our vision has pushed us to achieve global leadership in many of our businesses – including our position as the largest polyester yarn and fiber producer in the world. Reliance Industries Limited is a Fortune 500 company and the largest private sector corporation in India. As Reliance sets sights on even more ambitious goals, we remain inspired and guided by the story and philosophy of our founder chairman Dhirubhai Ambani. Hailing from modest means, he followed his dream to create India's largest company. Reliance as an organization has adopted this ethos of converting adversity into opportunity and making the impossible possible by challenging conventional wisdom. Our ultimate aim has always been – and will always be – to touch the lives of people in a positive way

Chevron

chevron.com

Our greatest resource is our people. Their ingenuity, creativity and collaboration have met the complex challenges of energy’s past. Together, we’ll take on the future. We support the LinkedIn Terms of Use (User Agreement), and we expect visitors to our page to do the same. We encourage open, lively conversation with a few simple rules: --We reserve the right to correct factual errors. --We will reply to comments when appropriate. --If we disagree with other opinions, we will do so respectfully. --You may not post anything that is spam or that is abusive, profane, or defamatory toward a person, entity, belief, or symbol. --We will delete any posts that contain personal information such as email addresses, phone numbers and physical addresses, and other third party intellectual property material, when that information does not belong to the author of the post. --You may not post job listings for non-Chevron positions. --While we support lively, open discussion, we reserve the right to delete comments.

Valero

valero.com

Valero is an international manufacturer and marketer of transportation fuels and petrochemical products. We are a Fortune 500 company based in San Antonio, Texas, fueled by nearly 10,000 employees and 15 petroleum refineries with a combined throughput capacity of approximately 3.2 million barrels per day. We also proudly operate 12 ethanol plants in the Mid-Continent of the U.S., with a combined production capacity of 1.6 billion gallons per year. Our petroleum refineries are located in the United States, Canada and the United Kingdom. Valero also is a joint venture partner in Diamond Green Diesel, which operates a renewable diesel plant in Norco, Louisiana. Diamond Green Diesel is North America’s largest biomass-based diesel plant. Valero sells its products in the wholesale rack or bulk markets in the U.S., Canada, the U.K., Ireland and Latin America. Approximately 7,000 outlets carry Valero’s brand names. Visit www.valero.com for more information, and click 'Careers' to explore opportunities!

Petrobras

cb petrobras.com.br

Nosso propósito é prover energia que assegure prosperidade de forma ética, justa, segura e competitiva. Queremos ser a melhor empresa diversificada e integrada de energia na geração de valor, construindo um mundo mais sustentável, conciliando o foco em óleo e gás com a diversificação em negócios de baixo carbono (inclusive produtos petroquímicos e fertilizantes), sustentabilidade, segurança, respeito ao meio ambiente e atenção total às pessoas. Saiba mais em petrobras.com.br

repsol

repsol.com

What do you do with the energy that drives you every day? We strive to turn it into something useful for you—your decisions and your next steps. We are a company that explores multi-energy solutions through innovation, technology, and the curiosity of our team. With over 25,000 colleagues and presence in 27 countries, we deliver real solutions to the challenges of mobility, home, and industry. And we do it the way we know best: #AllOurEnergy.

Sonatrach

sonatrach.com

Sonatrach (Société Nationale pour la Recherche, la Production, le Transport, la Transformation, et la Commercialisation des Hydrocarbures s.p.a.) is an Algerian government-owned company formed to exploit the hydrocarbon resources of the country. Its diversified activities cover all aspects of Oil & Gas industry chain. Upstream (E&P), Midstream (Transport) and Downstream (Marketing, Refining and Petchems).

Koch Engineered Solutions

kochengineeredsolutions.com

Koch Engineered Solutions (KES) provides uniquely engineered solutions in construction; mass and heat transfer; combustion and emissions controls; filtration; separation; materials applications; automation and actuation. KES is located in Wichita, Kansas, and is a subsidiary of Koch Industries, one of the largest private companies in the world. KES delivers superior value in developing, integrating, and applying innovative technical and service solutions for industrial value chains. More information is available at KochEngineeredSolutions.com. Below is a list of our businesses: Koch-Glitsch John Zink Koch Specialty Plant Services Optimized Process Designs, LLC Koch Technology Solutions DEPCOM Power Inc. DarkVision Technologies Inc.

Loading…

NEWS

Holdina d.o.o. Sarajevo CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-53541

SUMMARY

OliveTin gives access to predefined shell commands from a web interface. The `filterToDefinedArgumentsOnly` function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a special case allows any argument whose name starts with `ot_` to bypass this filter. While two system arguments (`ot_executionTrackingId` and `ot_username`) are injected by OliveTin and overridden, all other `ot_`-prefixed arguments supplied by the user pass through unmodified. These bypassed arguments are not type-checked — the validation loop only iterates over the action's defined arguments, so `ot_`-prefixed arguments skip all type safety checks entirely; set as environment variables — via `buildEnv()`, with completely unvalidated values, and passed to the executed command; and included in the template context — available as `.Arguments.ot_*` in template rendering. Commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d contains a patch.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-53525

SUMMARY

WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 0.3.1 through 4.9.0, the WeeChat relay authentication uses non-constant-time string comparison functions (weechat_strcasecmp and strcmp) to verify password hashes and plaintext passwords. An attacker can exploit timing differences to extract the server-computed hash character by character, then authenticate using the correct hash without knowing the password. Version 4.9.1 fixes the issue.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

2.2

REFERENCES

https://github.com/weechat/weechat/security/advisories/GHSA-vhv8-g2r9-cwcc

CVE-2026-53524

SUMMARY

WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 4.3.0 through 4.9.0, the WeeChat relay module's WebSocket permessage-deflate decompression function relay_websocket_inflate() has no upper bound on output size. An authenticated relay user can send a small compressed WebSocket frame (~100 bytes) that decompresses to gigabytes, exhausting all server memory and crashing the entire WeeChat process. The api protocol enables permessage-deflate and requires authentication before WebSocket upgrade. Version 4.9.1 patches the issue.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/weechat/weechat/security/advisories/GHSA-v2v4-45wm-5cr3

CVE-2026-53499

SUMMARY

FORT Validator is a Resource Public Key Infrastructure (RPKI) relying-party validator that produces validated route-origin data. FORT Validator versions through 1.6.7 contain an origin-validation error in their RRDP processing: a delegated CA under the same Trust Anchor Locator (TAL) can reference a victim CA’s public RRDP notification and snapshot URLs, causing FORT’s URL-based download cache to report success after deleting the victim’s local snapshot. Following a routine victim publication, this can silently remove the victim’s VRPs and other signed objects from FORT’s output, potentially enabling route hijacking or loss of reachability. Version 1.6.8 contains a patch that rejects cross-origin RRDP snapshot and delta URLs; as a workaround, administrators can disable HTTP/RRDP with --http.enabled=false while keeping rsync enabled, although this can leave data unavailable or stale where rsync is not supported.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: )

cvss4

Base Score: 7.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/NICMx/FORT-validator/security/advisories/GHSA-qfm3-577x-rh54

CVE-2026-49360

SUMMARY

Recce is a data-validation toolkit for enhanced dbt (data build tool) PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured with a DuckDB-backed project, an attacker can use DuckDB filesystem primitives to read and write files accessible to the Recce server process. The impact depends on how Recce is deployed, but may include disclosure of local files, tampering with Recce/dbt artifacts, modification of browser-served static files leading to stored XSS, and modification of application files if those paths are writable. If Recce is run as root, file access occurs with root privileges inside that host or container. This issue has been patched in Recce `v1.50.0`. Users should upgrade to Recce `v1.50.0` or later. The patch restricts unsafe file read/write behavior for DuckDB-backed query execution and hardens the affected query path. Other warehouse adapters have also been reviewed for similar exposure. Users who cannot upgrade immediately should avoid exposing `recce server` to the public internet or any untrusted network. Recommended mitigations include enabling authentication or placing Recce behind an authenticated reverse proxy/VPN, running Recce as a non-root user, using a read-only application filesystem where possible, and ensuring that sensitive files or credentials are not available to the Recce process.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: )

cvss4

Base Score: 7.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…