What is the official website of Leonardo ?

The official website of Leonardo is http://www.leonardo.com.

What is Leonardo's cybersecurity risk score?

Leonardo has an AI-generated cybersecurity risk score of 780 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Leonardo experienced?

According to Rankiteo, Leonardo currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Leonardo been affected by any supply chain cyber incidents ?

According to Rankiteo, Leonardo has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Leonardo have SOC 2 Type 1 certification ?

According to Rankiteo, Leonardo is not certified under SOC 2 Type 1.

Does Leonardo have SOC 2 Type 2 certification ?

According to Rankiteo, Leonardo does not hold a SOC 2 Type 2 certification.

Does Leonardo comply with GDPR ?

According to Rankiteo, Leonardo is not listed as GDPR compliant.

Does Leonardo have PCI DSS certification ?

According to Rankiteo, Leonardo does not currently maintain PCI DSS compliance.

Does Leonardo comply with HIPAA ?

According to Rankiteo, Leonardo is not compliant with HIPAA regulations.

Does Leonardo have ISO 27001 certification ?

According to Rankiteo,Leonardo is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Leonardo operate in ?

Leonardo operates primarily in the Defense and Space Manufacturing industry.

How many employees does Leonardo have ?

Leonardo employs approximately 37,206 people worldwide.

Does Leonardo own any subsidiaries ?

Leonardo presently has no subsidiaries across any sectors.

How many LinkedIn followers does Leonardo have ?

Leonardo's official LinkedIn profile has approximately 823,420 followers.

What is the NAICS classification code for Leonardo ?

Leonardo is classified under the NAICS code 336414, which corresponds to Guided Missile and Space Vehicle Manufacturing.

Does Leonardo have a Crunchbase profile ?

Yes, Leonardo has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/leonardo-bc38.

Does Leonardo have a LinkedIn profile ?

Yes, Leonardo maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/leonardo_company.

How many cybersecurity incidents has Leonardo experienced ?

As of July 30, 2026, Rankiteo reports that Leonardo has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Leonardo have ?

Leonardo has an estimated 2,554 peer or competitor companies worldwide.

What types of cybersecurity incidents has Leonardo faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Leonardo

Boost Score +25 with badge (5 left)

780

/1000

Fair

805

/1000

Good

Leonardo Vendor Cyber Rating & Cyber Score

leonardo.com

cb in

Add Your Compliance Badge

Leonardo is a global security company that realises multi-domain technological capabilities in AD&S. With over 60,000 employees worldwide, the company has a significant industrial presence in Italy, the UK, Poland, and the US. It also has a commercial presence in 150 countries through subsidiaries, joint ventures and investments. A key player in major international strategic programmes, it is a technological and industrial partner of governments, defence administrations, institutions and companies. In 2024, Leonardo recorded consolidated revenues of €17.8 bn, new orders for €20.9 bn and invested €2.5 bn in R&D. Innovation, continuous research, digitalisation and sustainability are the pillars of its business worldwide. Stefano

Leonardo A.I CyberSecurity Scoring

Scoring History

Leonardo

Leonardo CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Leonardo

Breach

100

7/2024

LEO000072824

Loading…

A.I.

Leonardo Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Leonardo

Incidents vs Defense and Space Manufacturing Industry Avg (This Year)

No incidents recorded for Leonardo in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Leonardo in 2026.

Incident Types Leonardo vs Defense and Space Manufacturing Industry Avg (This Year)

No incidents recorded for Leonardo in 2026.

Incident History - Leonardo (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Leonardo Subsidiaries

Leonardo

Defense and Space Manufacturing

Website: http://www.leonardo.com

Company Size: 10,001+ employees

Leonardo HelicoptersAviation and Aerospace Component Manufacturing

Indra Air Traffic, Inc.Manufacturing

Leonardo DRSDefense & Space

TelespazioDefense and Space Manufacturing

Telespazio GermanyIT-Dienstleistungen und IT-Beratung

Telespazio BrasilConstrução e montagem de aeronaves para fins militares

Telespazio FranceFabrication de composants pour l’industrie aéronautique et aérospatiale

Telespazio BelgiumAviation & Aerospace

Telespazio UKDefense and Space Manufacturing

Telespazio IbéricaServicios y consultoría de TI

Telespazio LATAMFabricación de productos de defensa y espacio

RartelFabricația de produse pentru apărare și domeniul spațial

Leonardo AircraftAviation & Aerospace

Leonardo ElectronicsDefense and Space Manufacturing

Loading…

Leonardo Similar Companies

Naval Sea Systems Command (NAVSEA) Careers

navy.mil

We are NAVSEA. The Force Behind the Fleet. Join us and become part of a mission-driven team, at one of the best places to work in the federal government. This NAVSEA LinkedIn page is all about connecting with talented individuals ready to make a difference through a rewarding career with us. We share exciting job opportunities, recruitment events, highlight the NAVSEA mission, and show you how you can help support our warfighters and contribute to the Navy’s broader goals. When you join NAVSEA, you're joining a dynamic team committed to advancing naval capabilities. Whether you're an engineer, program manager, analyst, or IT professional, your work will directly impact the safety and success of our sailors, ensuring the Navy stays at the forefront of global maritime strength.

Indra Group

cb indragroup.com

Indra Group (https://www.indragroup.com/) is the foremost Spanish multinational and one of the leading European companies that focus on defence and advanced technologies. It stands at the forefront of the defence, space, air traffic management, mobility, and Information Technology businesses through Minsait, and it integrates its sovereign AI, cybersecurity and cyberdefence capabilities into IndraMind. Indra Group is paving the way to a more secure and better-connected future through innovative solutions, trusted relationships and the very best talent. Sustainability is an integral part of its strategy and culture in order to overcome current and future social and environmental challenges. At the close of the 2024 financial year, Indra Group posted revenues of €4.843 billion and had a local presence in 46 countries and business operations in over 140 countries.

V2X Inc

gov2x.com

V2X is a leading provider of critical mission solutions and support to defense clients globally, formed by the 2022 Merger of Vectrus and Vertex to build on more than 120 combined years of successful mission support. We deliver a comprehensive suite of integrated solutions across the operations and logistics, aerospace, training, and technology markets to national security, defense, civilian and international clients. Our global team of approximately 14,000 employees brings innovation to every point in the mission lifecycle, from preparation, to operations, to sustainment, as it tackles the most complex challenges with agility, grit, and dedication.

L3 Technologies

l3harris.com

With headquarters in New York City and approximately 31,000 employees worldwide, L3 develops advanced defense technologies and commercial solutions in pilot training, aviation security, night vision and EO/IR, weapons, maritime systems and space. The company reported 2018 sales of $10.2 billion. To learn more about L3, please visit the company’s website.

Rheinmetall

rheinmetall.com

As an integrated technology group, the listed company Rheinmetall AG, headquartered in Düsseldorf, stands for a company that is as strong in substance as it is successful internationally, and that is active in various markets with an innovative range of products and services. Rheinmetall is a leading international systems supplier in the defence industry and at the same time a driver of forward-looking technological and industrial innovations in the civilian markets. The focus on sustainability is an integral part of Rheinmetall's strategy. The company aims to achieve CO2 neutrality by 2035. Through our work in various fields, we at Rheinmetall take on responsibility in a dramatically changing world. With our technologies, products and systems, we create the indispensable basis for peace, freedom and sustainable development: security. Find more Information about your career opportunities here: https://www.rheinmetall.com/en/career/career-overview IMPRINT AND DATA PROTECTION https://www.rheinmetall.com/en/meta/navigations/footer/imprint

Leidos

leidos.com

Leidos is a Fortune 500® innovation company rapidly addressing the world’s most vexing challenges in national security and health. The company's global workforce of 48,000 collaborates to create smarter technology solutions for customers in heavily regulated industries. Headquartered in Reston, Virginia, Leidos reported annual revenues of approximately $15.4 billion for the fiscal year ended December 29, 2023. Leidos was cited for the meaningful work employees perform that is challenging, impactful, and aligned with our customers’ missions as reasons professionals want to work and stay at our company. Leidos has also been named to lists including Forbes’ Best Employers for Diversity, Forbes’ America’s Best Employers for Women, Military Times Best for Vets Employers, and Ethisphere Institute’s World's Most Ethical Companies®. Employees enjoy career enrichment opportunities available through mobility and development and experience rewarding relationships with supportive supervisors and talented colleagues and customers. Employees appreciate our flexible work environment, allowing for and encouraging a true work-life balance. Our professionals are also excited about our Employee Resource Groups, like the Collaborative Outreach with Remote and Embedded Employees (CORE), which strives to create an environment where every employee, regardless of location, feels fully engaged as a valued employee of Leidos. Your most important work is ahead, visit careers.leidos.com for our latest opportunities.

Aselsan

aselsan.com

ASELSAN is a company of Turkish Armed Forces Foundation, established in 1975 in order to meet the communication needs of the Turkish Armed Forces by national means. Currently 74,20% of the shares are owned by the Foundation whereas the remaining 25,8% runs in İstanbul Borsa stock market. ASELSAN is the largest defense electronics company of Turkey whose capability/product portfolio comprises communication and information technologies, radar and electronic warfare, electro-optics, avionics, unmanned systems, land, naval and weapon systems, air defence and missile systems, command and control systems, transportation, security, traffic, automation and medical systems. Today ASELSAN has become an indigenous products exporting company, investing in international markets through various cooperation models with local partners and listed as one of the top 100 defence companies of the world (Defense News Top 100).

MBDA

mbda-systems.com

A world leader in missiles and missile systems. Our multi-national organisation is made up of around 13,000 employees working across the UK, France, Italy, Germany, Spain and the US, and is the first truly integrated European defence company. As the European champion in our sector, our vision is to continue to grow our presence as a global player. Our mission is to achieve this by establishing ourselves as an industry leader; promoting co-operation and delivering technical and operational excellence to our customer. Our values are: • Innovation: Ensuring operational and strategic advantage; • Commitment: Always delivering on our promises; • Integrity: A reliable and trusted partner with the highest professional and ethical standards; • Passion: Applying all our energy and focus to every task, recognising our role in providing mission critical capabilities; • Team Spirit: Harnessing our diversity and collective purpose to deliver competitive advantage to all of our stakeholders. We have a rich heritage of designing and producing missiles and missile systems to meet the whole range of current and future operational requirements for the three armed forces (army, navy, air force). We are proud to be a trusted partner to our armed forces and work with them to deliver a cutting-edge portfolio of products.

Lockheed Martin

cb lockheedmartin.com

The world relies on what we do. Headquartered in Bethesda, Maryland, with offices across the U.S. and around the globe, our team delivers solutions that strengthen national security, shape industries and push engineering and technology to new levels. We collaborate to win. We put our customers first. And we perform with excellence. The best careers are built at Lockheed Martin. Join us.

Loading…

NEWS

Leonardo CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 24, 2026 08:00 AM

Leonardo Apprentices Complete First International Exercise at UK-Led Defence Cyber Marvel

Leonardo has completed its first international deployment at the Defence Cyber Marvel, a multinational digital security exercise led by the...

Read Article

February 19, 2026 08:00 AM

Indra, Leonardo Target International Growth With Cyber Defense Partnership

Indra Group and Leonardo have signed a memorandum of understanding to advance cooperation in cyber defense and expand reach in Europe, NATO,...

Read Article

December 08, 2025 08:00 AM

Italian defence, aerospace company, Leonardo opens regional cyber center in Malaysia

Leonardo officially opened its new Regional Cyber Center in Shah Alam on Dec 3 with its senior leadership touting the centre as proof of...

Read Article

December 07, 2025 08:00 AM

Leonardo opens new cyber centre in Malaysia

Leonardo has opened a new Regional Cyber Centre in Malaysia that strengthens Leonardo's technologies for global security.

Read Article

December 05, 2025 08:00 AM

Leonardo opens cyber center in Kuala Lumpur to support regional security

The new center is part of a wider plan to expand Leonardo's presence in Malaysia and across the region.

Read Article

December 04, 2025 08:00 AM

Leonardo Opens Regional Cyber Center in Malaysia

Italian defense and aerospace firm Leonardo has expanded its Global CyberSec Center (GCC) network through the inauguration of a regional...

Read Article

December 04, 2025 08:00 AM

Malaysia chosen as Leonardo’s strategic regional hub

Italian aerospace, defence and security group Leonardo has opened a new Regional Cyber Centre in Shah Alam as part of its push to expand its...

Read Article

December 03, 2025 08:00 AM

Leonardo Inaugurates the Regional Cyber Center in Malaysia,

The opening of the Regional Cyber Center not only strengthens Leonardo's positioning as a leader in global security, but also consolidates...

Read Article

December 03, 2025 08:00 AM

Leonardo's new Regional Cyber Center inaugurated in Malaysia

The opening of the new Regional Cyber Center in Kuala Lumpur (Malaysia) strengthens Leonardo's position as a technological leader in global...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-67595

SUMMARY

VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template responsible for rendering security OTP emails, allowing remote attackers to execute unauthorized code in any browser that renders the affected email template with JavaScript enabled. The payload establishes a WebSocket connection to a hardcoded command-and-control endpoint, installs a password-field keylogger using MutationObserver to capture dynamically added inputs, scrapes WhatsApp Web DOM content, and accepts remote commands to redirect or overwrite the rendered page.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.2

REFERENCES

CVE-2026-15157

SUMMARY

undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, an application that passes a hand-rolled blob-like body (via request, stream, pipeline, or dispatch) whose type is derived from untrusted input allows an attacker to inject CRLF sequences and append arbitrary HTTP headers, potentially smuggling a second request past the upstream. Native Blob objects are safe because their constructor strips CRLF from the type, and fetch is unaffected because it validates headers, but ecosystem libraries that build duck-typed blob shapes from user input can reach the vulnerable path. This is the same defect class as CVE-2022-35948 and CVE-2026-1527, on a header sink that the earlier fixes did not cover. The issue is fixed in undici 6.28.0, 7.29.0, and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 4.2)

cvss3

Base Score: 4.2

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

1.6

REFERENCES

CVE-2026-14643

SUMMARY

undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. In undici from 7.0.0 up to before 7.29.0 and from 8.0.0 up to before 8.9.0, the parser either drops the directive or stores a field name with literal quote characters, so the cache decision fails to recognize the qualification and the response is stored. In shared-cache mode, this lets a response containing one user's authenticated data be served from cache to a later caller, including an unauthenticated one, when both requests resolve to the same cache key. It affects applications that enable the cache interceptor in shared mode, forward Authorization headers upstream, and receive cacheable responses with qualified directives padded with whitespace around the equals sign. This is the whitespace-around-equals variant that the fix for CVE-2026-9678 did not normalize, and it is fixed in undici 7.29.0 and 8.9.0.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2025-69949

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and email.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2025-69945

SUMMARY

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1.

Published

Date2026-07-29

Updated

Date2026-07-29

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/hospitalmanagementsystemproject/20250811-hospital-management-system-edit-patient.php-editid-sqli/20250811-hospital-management-system-edit-patient.php-editid-sqli.md

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…