ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

We shape the future of cities.

KONE A.I CyberSecurity Scoring

KONE

Company Details

Linkedin ID:

kone

Employees number:

35,146

Number of followers:

641,510

NAICS:

3332

Industry Type:

Industrial Machinery Manufacturing

Homepage:

kone.com

IP Addresses:

370

Company ID:

KON_8667359

Scan Status:

Completed

AI scoreKONE Risk Score (AI oriented)

Between 750 and 799

https://images.rankiteo.com/companyimages/kone.jpeg
KONE Industrial Machinery Manufacturing
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreKONE Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/kone.jpeg
KONE Industrial Machinery Manufacturing
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

KONE Company CyberSecurity News & History

Past Incidents
0
Attack Types
0
No data available
Ailogo

KONE Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for KONE

Incidents vs Industrial Machinery Manufacturing Industry Average (This Year)

No incidents recorded for KONE in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for KONE in 2025.

Incident Types KONE vs Industrial Machinery Manufacturing Industry Avg (This Year)

No incidents recorded for KONE in 2025.

Incident History — KONE (X = Date, Y = Severity)

KONE cyber incidents detection timeline including parent company and subsidiaries

KONE Company Subsidiaries

SubsidiaryImage

We shape the future of cities.

Loading...
similarCompanies

KONE Similar Companies

Metso

Metso is a frontrunner in sustainable technologies, end-to-end solutions and services for the aggregates, minerals processing and metals refining industries globally. By improving our customers’ energy and water efficiency, increasing their productivity, and reducing environmental risks with our p

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries (MHI) Group is one of the world’s leading industrial firms. For more than 130 years, we have channeled big thinking into solutions that move the world forward – advancing the lives of everyone who shares our planet. We deliver innovative and integrated solutions across a

Smiths Group plc

For over 170 years, Smiths Group has been pioneering progress by engineering a better future. We serve millions of people every year, to help make the world safer, more energy efficient and productive, and better connected, across four global markets: Energy, General Industrial, Safety & Security,

Xylem

Xylem is the global leader in advanced technologies, solutions and services that address the world’s biggest water challenges. We enable our customers to dramatically improve the way water and wastewater is used, managed, conserved, re-used and returned to nature. At every level, our global team is

Ingersoll Rand

Ingersoll Rand Inc. (NYSE:IR), driven by an entrepreneurial spirit and ownership mindset, is dedicated to Making Life Better for our employees, customers, shareholders, and planet. Customers lean on us for exceptional performance and durability in mission-critical flow creation and industrial soluti

Flowserve Corporation

Flowserve is one of the world's largest manufacturers of pumps, valves and seals with over 16,000 employees across 50 countries. Built on more than 50 world-renowned heritage brands, the equity and customer loyalty we have earned over the past 230 years is the foundation of our leadership position a

Trane Technologies

Trane Technologies is a global climate innovator advancing sustainability through our leading brands Trane® and Thermo King®, which bring efficient and sustainable climate solutions to buildings, homes and transportation across the globe. Together, we are one team innovating for a better future. At

Former Stork B.V.

Stork B.V. was an international group of companies active in aerospace, technical services, food, and printing machinery. Since 2008 Stork is delisted from the Amsterdam Stock Exchange and now privately held . As of January 1, 2013 - Fokker Technologies and Stork Technical Services have thei

Schindler Group

The Schindler Group is a leading manufacturer and provider of related services for elevators, escalators, and moving walkways. Founded in 1874 in Switzerland, our company is at the forefront of industry innovation, working on pushing the boundaries of technological engineering, while having a stro

newsone

KONE CyberSecurity News

November 17, 2025 06:42 AM
Smart Africa : when Africa takes its digital destiny into its own hands

Created in 2013 under the impetus of 8 founding states, the Smart Africa initiative has become one of the most ambitious levers of...

September 29, 2025 07:00 AM
ANCA Grows as Six Nations Signal Intent to Join, Driving Innovation and Regional Cybersecurity Cooperation

This significant development underscores ANCA's growing relevance as a continental platform for cybersecurity collaboration and policy...

May 27, 2025 07:00 AM
Cybersecurity jobs available right now: May 27, 2025

Here are the worldwide cybersecurity job openings available as of May 27, 2025, including on-site, hybrid, and remote roles.

May 22, 2025 07:00 AM
KONE recognized among Vietnams best at Sao Khue Award 2025 for pioneering service robot API

KONE, a global leader in the elevator and escalator industry, has been awarded the Sao Khue Award 2025 for its smart service robot...

May 19, 2025 07:00 AM
Smart Africa on Harmonizing Connectivity, AI, and Investment for Africa’s Digital Future

In an interview at GITEX Africa 2025, Akim Benamara, Chief Editor and Founder of TechAfrica News, engaged Lacina Koné, CEO of Smart Africa,...

May 16, 2025 07:00 AM
Smart Africa Pushes for Inclusive Cyber Capacity at GC3B 2025

Smart Africa CEO Lacina Koné and Dutch Ambassador Ernest Norman discussed cyber capacity collaboration at GC3B, promoting secure, inclusive digital growth.

April 23, 2025 07:00 AM
Smart Africa Unveils 5-Year Cybersecurity Plan to Strengthen Digital Resilience

ANCA's five-year roadmap is an enormous step forward for African cybersecurity, establishing a unified framework to help countries combat cyber threats.

April 02, 2025 07:00 AM
‘Data is the new oil - African data must stay in Africa’

Ahead of the AI Global Summit in Kigali, Lacina Koné, director general of Smart Africa, talks the future of AI.

March 06, 2025 08:00 AM
Kaspersky and Smart Africa forge strategic partnership to bolster cybersecurity in Africa

In a move to enhance digital security on the African continent, Kaspersky (www.Kaspersky.co.za) has signed a three-year Memorandum of...

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

KONE CyberSecurity History Information

Official Website of KONE

The official website of KONE is https://www.kone.com/en/.

KONE’s AI-Generated Cybersecurity Score

According to Rankiteo, KONE’s AI-generated cybersecurity score is 797, reflecting their Fair security posture.

How many security badges does KONE’ have ?

According to Rankiteo, KONE currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does KONE have SOC 2 Type 1 certification ?

According to Rankiteo, KONE is not certified under SOC 2 Type 1.

Does KONE have SOC 2 Type 2 certification ?

According to Rankiteo, KONE does not hold a SOC 2 Type 2 certification.

Does KONE comply with GDPR ?

According to Rankiteo, KONE is not listed as GDPR compliant.

Does KONE have PCI DSS certification ?

According to Rankiteo, KONE does not currently maintain PCI DSS compliance.

Does KONE comply with HIPAA ?

According to Rankiteo, KONE is not compliant with HIPAA regulations.

Does KONE have ISO 27001 certification ?

According to Rankiteo,KONE is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of KONE

KONE operates primarily in the Industrial Machinery Manufacturing industry.

Number of Employees at KONE

KONE employs approximately 35,146 people worldwide.

Subsidiaries Owned by KONE

KONE presently has no subsidiaries across any sectors.

KONE’s LinkedIn Followers

KONE’s official LinkedIn profile has approximately 641,510 followers.

NAICS Classification of KONE

KONE is classified under the NAICS code 3332, which corresponds to Industrial Machinery Manufacturing.

KONE’s Presence on Crunchbase

No, KONE does not have a profile on Crunchbase.

KONE’s Presence on LinkedIn

Yes, KONE maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/kone.

Cybersecurity Incidents Involving KONE

As of November 27, 2025, Rankiteo reports that KONE has not experienced any cybersecurity incidents.

Number of Peer and Competitor Companies

KONE has an estimated 7,403 peer or competitor companies worldwide.

KONE CyberSecurity History Information

How many cyber incidents has KONE faced ?

Total Incidents: According to Rankiteo, KONE has faced 0 incidents in the past.

What types of cybersecurity incidents have occurred at KONE ?

Incident Types: The types of cybersecurity incidents that have occurred include .

Incident Details

What are the most common types of attacks the company has faced ?

Additional Questions

cve

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=kone' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge