Company Details
indra
38,194
1,104,112
5415
indracompany.com
14
IND_3008179
Completed

Indra Company CyberSecurity Posture
indracompany.comIndra (www.indracompany.com) is one of the leading global defence, aerospace and technology companies, and a world leader in digital transformation and information technologies in Spain and Latin America through its subsidiary, Minsait. Its business model is based on a comprehensive range of proprietary products, with high-value approach and a significant innovative component, making it the technological partner for the digitalization and key operations of its clients around the world. Sustainability forms part of its strategy and culture in order to overcome current-day and future social and environmental challenges. In the 2023 fiscal year, Indra achieved revenue totaling €4.343 billion, with more than 57,000 employees, a local presence in 46 countries and business operations in over 140 countries.
Company Details
indra
38,194
1,104,112
5415
indracompany.com
14
IND_3008179
Completed
Between 750 and 799

Indra Global Score (TPRM)XXXX



No incidents recorded for Indra in 2025.
No incidents recorded for Indra in 2025.
No incidents recorded for Indra in 2025.
Indra cyber incidents detection timeline including parent company and subsidiaries

Indra (www.indracompany.com) is one of the leading global defence, aerospace and technology companies, and a world leader in digital transformation and information technologies in Spain and Latin America through its subsidiary, Minsait. Its business model is based on a comprehensive range of proprietary products, with high-value approach and a significant innovative component, making it the technological partner for the digitalization and key operations of its clients around the world. Sustainability forms part of its strategy and culture in order to overcome current-day and future social and environmental challenges. In the 2023 fiscal year, Indra achieved revenue totaling €4.343 billion, with more than 57,000 employees, a local presence in 46 countries and business operations in over 140 countries.


HCLTech is a global technology company, home to more than 220,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals
Dimension Data is a leading African born technology provider operating in the Middle East and Africa, offering a portfolio of services including systems integration, managed services infrastructure, cloud solutions, business applications, customer experience, and intelligent security solutions. We p

Zensar stands out as a premier technology consulting and services company, embracing an ‘experience-led everything’ philosophy. We are creators, thinkers, and problem solvers passionate about designing digital experiences that are engineered into scale-ready products, services, and solutions to deli
Insights you can act on to achieve trusted outcomes. We are insights-driven and outcomes-focused to help accelerate returns on your investments. Across 21 industry sectors and 400 locations worldwide, we provide comprehensive, scalable and sustainable IT and business consulting services that are in

Infosys BPM Ltd., the business process management subsidiary of Infosys Ltd. (NYSE: INFY), was set up in April 2002. Infosys BPM focuses on integrated end-to-end outsourcing and delivers transformational benefits to its clients through reduced costs, ongoing productivity improvements, and process re
Bring teams together, reimagine workspaces, engage new audiences, and delight your customers –– all on the Zoom platform you know and love. 💙 Zoomies help people stay connected so they can get more done together. We set out on a mission to make video communications frictionless and secure by buildi
For over 70 years, Iron Mountain Incorporated (NYSE: IRM) has been your strategic partner to care for your information and assets. A global leader in storage and information management services and trusted by more than 225,000 organizations around the world, including 95% of the Fortune 1000, we pro

SoftwareOne is a leading global software and cloud solutions provider that is redefining how companies build, buy and manage everything in the cloud. By helping clients to migrate and modernize their workloads and applications – and in parallel, to navigate and optimize the resulting software and cl

NTT DATA, Inc. is a trusted global innovator of business and technology services. We're committed to helping clients innovate, optimize and transform for long-term success. Our R&D investments help organizations and society move confidently and sustainably into the digital future. As a Global Top Em
.png)
The alliance responds to the growing digitalisation of military systems and the increased risk associated with highly skilled state actors.
Indra Group, one of the world's leading companies in mobility technology, is showcasing its technological potential to drive the new era of...
'The battle is now' if Spain wants to take its rightful place in the European space industry, warns Hispasat CEO.
With more than 13 years at the company, she has extensive experience in the public sector and in-depth knowledge of administrative...
Indra Group has signed a letter of intent with Sirt, a Barcelona-based cybersecurity company, to increase capabilities and form...
Indra eyes a cybersecurity alliance with Leonardo, BBVA gains ground in its bid for Sabadell, and top Spanish stocks face fresh analyst moves and executive...
Saudi-Spanish defense cooperation has steadily evolved into a multifaceted strategic partnership, with a strong focus on naval modernization...
Indra plans to make acquisitions to develop this new subsidiary and aspires to compete with the US company Pallantir. Share on Whatsapp.
65M contract from Aerocivil to upgrade over 50% of Colombia's radar systems, including new 3D-equipped stations in the Andes.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Indra is http://www.indracompany.com.
According to Rankiteo, Indra’s AI-generated cybersecurity score is 780, reflecting their Fair security posture.
According to Rankiteo, Indra currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Indra is not certified under SOC 2 Type 1.
According to Rankiteo, Indra does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Indra is not listed as GDPR compliant.
According to Rankiteo, Indra does not currently maintain PCI DSS compliance.
According to Rankiteo, Indra is not compliant with HIPAA regulations.
According to Rankiteo,Indra is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Indra operates primarily in the IT Services and IT Consulting industry.
Indra employs approximately 38,194 people worldwide.
Indra presently has no subsidiaries across any sectors.
Indra’s official LinkedIn profile has approximately 1,104,112 followers.
Indra is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.
Yes, Indra has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/indra.
Yes, Indra maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/indra.
As of December 10, 2025, Rankiteo reports that Indra has not experienced any cybersecurity incidents.
Indra has an estimated 37,375 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, Indra has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain a Stored Cross-Site Scripting (XSS) vulnerability in the /WeGIA/html/geral/configurar_senhas.php endpoint. The application does not sanitize user-controlled data before rendering it inside the employee selection dropdown. The application retrieves employee names from the database and injects them directly into HTML <option> elements without proper escaping. This issue is fixed in version 3.5.5.
ZITADEL is an open-source identity infrastructure tool. Versions 4.0.0-rc.1 through 4.7.0 are vulnerable to DOM-Based XSS through the Zitadel V2 logout endpoint. The /logout endpoint insecurely routes to a value that is supplied in the post_logout_redirect GET parameter. As a result, unauthenticated remote attacker can execute malicious JS code on Zitadel users’ browsers. To carry out an attack, multiple user sessions need to be active in the same browser, however, account takeover is mitigated when using Multi-Factor Authentication (MFA) or Passwordless authentication. This issue is fixed in version 4.7.1.
ZITADEL is an open-source identity infrastructure tool. Versions 4.7.0 and below are vulnerable to an unauthenticated, full-read SSRF vulnerability. The ZITADEL Login UI (V2) treats the x-zitadel-forward-host header as a trusted fallback for all deployments, including self-hosted instances. This allows an unauthenticated attacker to force the server to make HTTP requests to arbitrary domains, such as internal addresses, and read the responses, enabling data exfiltration and bypassing network-segmentation controls. This issue is fixed in version 4.7.1.
NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to directory traversal through the App.add_media_files() function, which allows a remote attacker to read arbitrary files on the server filesystem. This issue is fixed in version 3.4.0.
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an Authorization header with an arbitrary value, a session is associated with the target user regardless of valid credentials. This issue is fixed in versions 16.0.44 and 17.0.23.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.