What is the official website of Honest Green ?

The official website of Honest Green is http://www.honestgreen.com.

What is Honest Green's cybersecurity risk score?

Honest Green has an AI-generated cybersecurity risk score of 720 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Honest Green experienced?

According to Rankiteo, Honest Green currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Honest Green been affected by any supply chain cyber incidents ?

According to Rankiteo, Honest Green has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Honest Green have SOC 2 Type 1 certification ?

According to Rankiteo, Honest Green is not certified under SOC 2 Type 1.

Does Honest Green have SOC 2 Type 2 certification ?

According to Rankiteo, Honest Green does not hold a SOC 2 Type 2 certification.

Does Honest Green comply with GDPR ?

According to Rankiteo, Honest Green is not listed as GDPR compliant.

Does Honest Green have PCI DSS certification ?

According to Rankiteo, Honest Green does not currently maintain PCI DSS compliance.

Does Honest Green comply with HIPAA ?

According to Rankiteo, Honest Green is not compliant with HIPAA regulations.

Does Honest Green have ISO 27001 certification ?

According to Rankiteo,Honest Green is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Honest Green operate in ?

Honest Green operates primarily in the Wholesale industry.

How many employees does Honest Green have ?

Honest Green employs approximately 5 people worldwide.

Does Honest Green own any subsidiaries ?

Honest Green presently has no subsidiaries across any sectors.

How many LinkedIn followers does Honest Green have ?

Honest Green's official LinkedIn profile has approximately 657 followers.

What is the NAICS classification code for Honest Green ?

Honest Green is classified under the NAICS code 42, which corresponds to Wholesale Trade.

Does Honest Green have a Crunchbase profile ?

No, Honest Green does not have a profile on Crunchbase.

Does Honest Green have a LinkedIn profile ?

Yes, Honest Green maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/honest-green.

How many cybersecurity incidents has Honest Green experienced ?

As of August 29, 2026, Rankiteo reports that Honest Green has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Honest Green have ?

Honest Green has an estimated 6,680 peer or competitor companies worldwide.

What types of cybersecurity incidents has Honest Green faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Honest Green

Boost Score +25 with badge (5 left)

720

/1000

Moderate

745

/1000

Moderate

Honest Green Vendor Cyber Rating & Cyber Score

honestgreen.com

Add Your Compliance Badge

Honest Green eSolutions by UNFI. Our flexible eCommerce solutions are designed to serve etailers and retailers who want to build their business in the natural product market. We offer thousands of non-perishable products, hundreds of new products monthly, no minimum order size and same day shipping. Direct to your location or blind drop shipped to your consumer’s door. Honest Green is the eCommerce division of United Natural Foods, Inc (UNFI). NASDAQ: UNFI.

Honest Green A.I CyberSecurity Scoring

Scoring History

Honest Green

Honest Green CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Honest Green

Cyber Attack

100

6/2024

HON270212711112...

Loading…

A.I.

Honest Green Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Honest Green

Incidents vs Wholesale Industry Avg (This Year)

No incidents recorded for Honest Green in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Honest Green in 2026.

Incident Types Honest Green vs Wholesale Industry Avg (This Year)

No incidents recorded for Honest Green in 2026.

Incident History - Honest Green (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Honest Green Subsidiaries

Parent Company

Honest Green

Wholesale

Website: http://www.honestgreen.com

Company Size: 5,001-10,000 employees

No subsidiary data available for this company.

Loading…

Honest Green Similar Companies

Rexel

rexel.com

Rexel, worldwide expert in the multichannel professional distribution of products and services for the energy world, addresses three main markets: residential, commercial, and industrial. The Group supports its residential, commercial, and industrial customers by providing a tailored and scalable range of products and services in energy management for construction, renovation, production, and maintenance. Rexel operates through a network of more than 1,950 branches in 17 countries, with more than 27,000 employees. The Group’s sales were €19.3 billion in 2024.

Ferguson

ferguson.com

Since 1953, Ferguson has been a leading source of quality supplies for a variety of industries. We are proud to provide world-class products and services to a customer base that is as vast and varied as our inventory. The professionals we serve help transform the world we live in, and we are their trusted partners with the scale, expertise and solutions to provide peace of mind. Ferguson is part of Ferguson Enterprises Inc., which has approximately 35,000 associates across 1,700 locations and serves customers in all 50 states, Canada, Puerto Rico, Mexico and the Caribbean.

HD Supply

hdsupply.com

HD Supply, a wholly owned subsidiary of The Home Depot, is a leading wholesale distribution company serving customers and their communities across the Multifamily, Institutional, Hospitality, Trades, Government Housing, Healthcare, Building Services and Education industries through an expansive network of over 100 distribution centers across the U.S. & Canada. We offer our customers a vast assortment of over 100,000 MRO, full-line janitorial and OS&E products from high-quality, national and private brands, all at competitive prices. Combined with our industry-leading services and solutions – including localized jobsite delivery, renovation programs, direct-ship options and innovative digital tools and capabilities, as well as dedicated sales and customer care teams – you can see why our more than 250,000 customers continue to trust HD Supply as their supplier of choice for serving their communities where people live, learn, work and play. Equally as important is empowering our associates to grow professionally while providing competitive benefits and compensation. If you're ready to find a rewarding career and achieve your full potential with a growing industry leader, HD Supply is ready for you!

Porsche Holding

porsche-holding.com

Porsche Holding Salzburg is the largest and most successful automotive distributor in Europe. Our roots are in Salzburg, but we now also operate in 29 countries on three continents. Our core expertise: global automotive distribution. Our business divisions: automotive wholesale, automotive retail, financial services and IT systems. From a humble family business to one of the largest sales organizations in the world. Driven by our passion for the automobile since the company formation in 1947, Porsche Holding has grown from a family business into the leading mobility partner with dealerships and offices in 23 countries across Europe as well as in Chile, Colombia, China, Singapore, Malaysia, and Japan. Our corporate headquarters is still located where our company's rich history began, in the beautiful Austrian city of Salzburg. As a fully-owned subsidiary of Volkswagen AG, our business focuses on the VW Group brands Volkswagen Passenger Cars and Commercial Vehicles, Škoda, SEAT, CUPRA, Audi, Lamborghini, Bentley, Ducati and Porsche. We shape the future of mobility. Join the Porsche Holding team and be part of it.

METRO/MAKRO

metroag.de

METRO is a leading international wholesale company with food and non-food assortments that specialises in serving the needs of hotels, restaurants and caterers (HoReCa) as well as independent traders. Around the world, METRO has 15 million customers who can choose whether to shop in one of the large-format stores, order online and collect their purchases at the store or have them delivered. METRO also supports the competitiveness of entrepreneurs and independent businesses with digital solutions and thereby contributes to cultural diversity in trade and the hospitality industry. The company operates in more than 30 countries and employs more than 85,000 people worldwide. In financial year 2022/23, METRO generated a group revenue of €31 billion. More information: https://careers.metroag.de Imprint: https://careers.metroag.de/imprint Data Privacy: https://careers.metroag.de/privacy-policy

Assaí Atacadista

cb assai.com.br

Crescimento, oportunidade, valorização e respeito. Isso é Ser Assaí! Muito prazer, somos o Assaí Atacadista, empresa de atacado de autosserviço que está entre as maiores empregadoras privadas do país, que também carrega uma das Marcas Mais Valiosas do Brasil, segundo o ranking da Interbrand! Hoje, temos mais de 290 lojas, com mais de 80 mil colaboradores(as) que atuam com muita paixão por atender nossos(as) clientes, desde pequenos(as) e médios(as) comerciantes(as) e transformadores(as), até consumidores(as) finais que buscam por variedade e economia, cumprindo a nossa missão de abastecer os lares de milhares de brasileiros(as) com alimentos e itens básicos. Somos uma empresa que cuida da Nossa Gente, zela pela simplicidade, valoriza o Ser Humano e acredita no poder da diversidade e inclusão, atitudes que fazem parte dos valores da Nossa Cultura e, mais do que isso, são vivenciadas e praticadas no dia a dia de toda a Nossa Gente! E com o nosso processo de expansão acelerado, estamos crescendo e trazendo cada vez mais pessoas para fazerem parte do nosso time. Afinal, o crescimento do Nosso Negócio significa o crescimento da Nossa Gente! Por isso, buscamos profissionais que tenham muita vontade de se desenvolver em um ambiente inclusivo, que respeita todos e todas, jeitos, raças, cores e crenças, além de muito dinâmico, repleto de desafios e oportunidades! #VemSerAssaí: acesse assai.gupy.io e cadastre seu CV!

Wesco

wesco.com

At Wesco, we believe life should run smoothly. As a leading provider of business-to-business distribution, logistics services and supply chain solutions, we create a world that you can depend on. Harnessing 100 years of ingenuity and expertise, we increase profitability, improve productivity and mitigate risk for approximately 150,000 customers worldwide. With millions of products and locations in more than 50 countries, Wesco is your partner in progress. Our company’s greatest asset is our people. From our corporate and field offices to our distribution sites, Wesco employs over 20,000 professionals around the globe. We’re committed to fostering diversity and inclusion across our workforce by embracing the unique perspectives, authenticity, and individuality our team members contribute to the company. Headquartered in Pittsburgh, Wesco is a publicly traded (NYSE: WCC) FORTUNE 500® company with 2023 net sales of $22.4 billion.

Fastenal

fastenal.com

By providing three things – truly local service, the world’s largest vending program, and unmatched inventory management – Fastenal saves your business time and money. Who are Fastenal's customers? • Organizations wanting to strengthen their supply chains. • Businesses looking to streamline their operations. • Campuses planning for tomorrow. In a world of disruptions, Fastenal is a supply chain partner you can count on.

Sonepar

sonepar.com

Sonepar is an independent family-owned company standing as the world leader in B-to-B distribution of electrical equipment, solutions, and services. In 2024, Sonepar achieved sales of €32.5 billion. Present in 40 countries with a dense network of brands, the Group is leading an ambitious transformation to make its customers’ lives easier, providing them with an omnichannel experience and sustainable solutions in the building, industry, and energy markets. Sonepar’s 46,000 associates are committed to accelerating the world’s electrification and driven by a shared Purpose: Powering Progress for Future Generations.

Loading…

NEWS

Honest Green CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 01, 2026 08:00 AM

Europe has ‘lost the internet’, warns Belgium’s cyber security chief

EU law enforcement too dependent on digital infrastructure from US tech companies, Miguel De Bruycker says.

Read Article

February 24, 2025 08:00 AM

Inside the Effort to Secure SEMO's Campus

"SEMO's Bill Green leads the charge in cybersecurity, protecting student data from hackers, phishing, and AI threats while fostering...

Read Article

July 17, 2019 07:00 AM

Users, cyber security expert sound off on FaceApp privacy concerns

People around the world have been downloading FaceApp. The app allows users to modify photos and change the age or appearance of the people...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55867

SUMMARY

Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken} endpoint implemented by UsersResource.revokeToken() in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERS_TOKENREMOVE permission against the attacker-controlled userId path parameter before resolving the token selected by idOrToken. An authenticated user can provide an authorized userId while accessTokenService.loadById() or accessTokenService.load() resolves a token belonging to another user, including a service account or administrator, after which accessTokenService.destroy() deletes that token without checking AccessToken.getUserName(). The issue does not expose token contents, but unauthorized deletion causes integrity impact and can disrupt access-token-based integrations. This issue is fixed in versions 6.3.12, 7.0.7, and 7.1.2.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55860

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a secure connection. A hostile or man-in-the-middle MariaDB server can send an AuthSwitchRequest naming mysql_clear_password or dialog (PAM) over a plain-TCP unencrypted connection, and AuthenticationFlow permits ClearPasswordPluginFlow or PamPluginFlow to return the user's password as cleartext bytes on the wire. The disclosed credentials can subsequently be used to authenticate directly to the database server. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55859

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to character_set_client through the OK-packet session-state-tracking mechanism, including through SET NAMES executed by a stored routine or trigger, server configuration, or a hostile or man-in-the-middle server. If the new character set is not UTF-8, the driver continues to exchange UTF-8 while the server interprets the same bytes under a different encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value raises R2dbcNonTransientResourceException with SQLState 08000 and closes the connection. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55858

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The server can report a mid-session change to character_set_client through OK-packet session-state tracking, including a change caused by SET NAMES, a stored routine or trigger, server configuration, or a hostile server. If character_set_client changes to a non-UTF-8 value, the driver continues to read and write UTF-8 while the server interprets the same bytes under another encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value causes SQLException with SQLState 08000 and closes the connection. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55857

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysql_clear_password plugin is gated behind a secure transport, but the sibling PAM handler SendPamAuthPacketFactory, named dialog by the server, does not declare that requirement and inherits the default secure-required value false; older branches implement the same affected behavior in SendPamAuthPacket. A hostile or man-in-the-middle server can send an Authentication Switch Request for dialog over plain TCP, causing the driver to return the user's password in cleartext when sslMode=DISABLE and restrictedAuth=null, which is the default configuration. Properly verified TLS and local Unix sockets are not exposed to this transport vector. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…