What is the official website of Nexeo ?

The official website of Nexeo is http://www.nexeo.group/.

What is Nexeo's cybersecurity risk score?

Nexeo has an AI-generated cybersecurity risk score of 752 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Nexeo experienced?

According to Rankiteo, Nexeo currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Nexeo been affected by any supply chain cyber incidents ?

According to Rankiteo, Nexeo has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Nexeo have SOC 2 Type 1 certification ?

According to Rankiteo, Nexeo is not certified under SOC 2 Type 1.

Does Nexeo have SOC 2 Type 2 certification ?

According to Rankiteo, Nexeo does not hold a SOC 2 Type 2 certification.

Does Nexeo comply with GDPR ?

According to Rankiteo, Nexeo is not listed as GDPR compliant.

Does Nexeo have PCI DSS certification ?

According to Rankiteo, Nexeo does not currently maintain PCI DSS compliance.

Does Nexeo comply with HIPAA ?

According to Rankiteo, Nexeo is not compliant with HIPAA regulations.

Does Nexeo have ISO 27001 certification ?

According to Rankiteo,Nexeo is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Nexeo operate in ?

Nexeo operates primarily in the Business Consulting and Services industry.

How many employees does Nexeo have ?

Nexeo employs approximately 126 people worldwide.

Does Nexeo own any subsidiaries ?

Nexeo presently has no subsidiaries across any sectors.

How many LinkedIn followers does Nexeo have ?

Nexeo's official LinkedIn profile has approximately 48,546 followers.

What is the NAICS classification code for Nexeo ?

Nexeo is classified under the NAICS code 5416, which corresponds to Management, Scientific, and Technical Consulting Services.

Does Nexeo have a Crunchbase profile ?

No, Nexeo does not have a profile on Crunchbase.

Does Nexeo have a LinkedIn profile ?

Yes, Nexeo maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/nexeo.

How many cybersecurity incidents has Nexeo experienced ?

As of July 22, 2026, Rankiteo reports that Nexeo has not experienced any cybersecurity incidents.

How many peer or competitor companies does Nexeo have ?

Nexeo has an estimated 19,594 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Nexeo

Boost Score +25 with badge (5 left)

752

/1000

Fair

777

/1000

Fair

Nexeo Vendor Cyber Rating & Cyber Score

nexeo.group

Add Your Compliance Badge

Since 2002, Nexeo has been providing its customers with strategic, operational and technical support for all their digital transformation projects. Over the past 20 years, we have worked with more than 50 of the major players in the Paris banking and finance industry. With our dual IT and business expertise, we offer consulting in management, performance management, risk and compliance, as well as application engineering and technical assistance, with the aim of implementing agile, efficient transformations that create value for our customers and their employees. In 2021, Nexeo joined the ALTEN Group, world leader in engineering and IT services, to strengthen its BFI activities.

Nexeo A.I CyberSecurity Scoring

Scoring History

Nexeo

Nexeo CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Nexeo Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Nexeo

Incidents vs Business Consulting and Services Industry Avg (This Year)

No incidents recorded for Nexeo in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Nexeo in 2026.

Incident Types Nexeo vs Business Consulting and Services Industry Avg (This Year)

No incidents recorded for Nexeo in 2026.

Incident History - Nexeo (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Nexeo Subsidiaries

Nexeo

Business Consulting and Services

Website: http://www.nexeo.group/

Company Size: 126

ALTENEngineering Services

MIGSO-PCUBEDBusiness Consulting and Services

CORTAC GroupBusiness Consulting and Services

AnotechEngineering Services

ALTEN ItaliaIT Services and IT Consulting

ALTEN MAROCIT Services and IT Consulting

ALTEN CanadaInformation Technology & Services

ALTEN SpainIT Services and IT Consulting

ALTEN IndiaIT Services and IT Consulting

ALTEN GermanyIT Services and IT Consulting

Orion EngineeringStaffing and Recruiting

ALTEN PolskaIT Services and IT Consulting

ALTEN SwitzerlandEngineering Services

ALTEN RomaniaIT Services and IT Consulting

Kepler-RominfoIT Services and IT Consulting

ALTEN KEPLER DivisionServicii IT și consultanță IT

ALTEN TECHNO DivisionServicii IT și consultanță IT

ALTEN SwedenIT Services and IT Consulting

AIXIAL GROUPResearch Services

ALTEN MexicoIT Services and IT Consulting

OptimissaIT Services and IT Consulting

ATEXISIT Services and IT Consulting

ALTEN LTD - UKEngineering Services

ALTEN PortugalEngineering Services

ALTEN Technology USAEngineering Services

ALTEN BelgiumEngineering Services

ALTEN NederlandIT Services and IT Consulting

Lincoln FranceIT Services and IT Consulting

ALTEN FinlandIT Services and IT Consulting

FT ServicesOil and Gas

ALTEN DenmarkEngineering Services

ALTEN AustriaIT Services and IT Consulting

ALTEN LuxembourgIT Services and IT Consulting

AVENIR CONSEILIT Services and IT Consulting

ALTEN ChinaEngineering Services

ALTEN KOREAIT Services and IT Consulting

CaduceumBusiness Consulting and Services

NexDotNetInformation Technology & Services

Loading…

Nexeo Similar Companies

Bain & Company

bain.com

Bain & Company is a global consultancy that helps the world’s most ambitious change makers define the future. Across 65 cities in 40 countries, we work alongside our clients as one team with a shared ambition to achieve extraordinary results, outperform the competition, and redefine industries. We complement our tailored, integrated expertise with a vibrant ecosystem of digital innovators to deliver better, faster, and more enduring outcomes. Our 10-year commitment to invest more than $1 billion in pro bono services brings our talent, expertise, and insight to organizations tackling today’s urgent challenges in education, racial equity, social justice, economic development, and the environment. We earned a platinum rating from EcoVadis, the leading platform for environmental, social, and ethical performance ratings for global supply chains, putting us in the top 1% of all companies. Since our founding in 1973, we have measured our success by the success of our clients, and we proudly maintain the highest level of client

Ayesa

ayesa.com

Ayesa is a global provider of technology and engineering services with more than 11500 employees in twenty-three countries across Europe, Latin America, Africa and Asia. The company develops and implements digital solutions for the private and public sector and uses the latest technology to provide cutting-edge infrastructure design and supervision services. To do this, it has certified experts covering more than 70 different disciplines in utilities and energy; the public sector; banking and insurance; water and the environment, transportation; aeronautics and defence; and construction. As a company that is driven by people and innovation, its business approach is underpinned by talent.

Devoteam

cb devoteam.com

Devoteam is a AI-driven tech consulting firm specialised in cloud platforms, cyber, data, and sustainability. Tech native for almost 30 years, Devoteam guides businesses through sustainable digital transformation to deliver value. With over 11,000 tech architects in more than 25 countries across Europe, the Middle East, and Africa, Devoteam is committed to using technology to serve people.

KPMG UK

kpmg.com

Make growth happen. Make it trusted. Make bold moves. Make the future. KPMG makes the difference for our clients, people and communities. Make growth happen. Make it trusted. Make bold moves. Make the future. At KPMG, we’ve been making the difference for our clients, people and communities for over 150 years. We’re a leading UK provider of advisory, audit and tax services. Our clients have trusted us to make the difference for over 150 years. We work with them to overcome their biggest challenges and find new opportunities with our unique insights, fresh thinking and cutting-edge tech. KPMG. Make the Difference

Publicis Sapient

publicissapient.com

Publicis Sapient is a technology company that provides enterprise AI platforms and services. With over 30 years of digital business transformation experience, we enable enterprise clients to transform how they operate and serve their customers, unlocking new value and enabling them to thrive in an AI-driven world. Our platforms use AI  built off this deep enterprise context to help them modernize, build agentic solutions, and sustain their competitive advantage. The combination of our AI platforms and the expertise of our people enables us to deliver faster and more effective outcomes through solutions that are specific to the unique needs of our clients’ businesses, their industries and their customers.   Publicis Sapient is the technology hub of Publicis Groupe, uniting 20,000 people worldwide across 28 countries. For more information, visit publicissapient.com.

Korn Ferry

kornferry.com

Korn Ferry is a global consulting firm that powers performance. We unlock the potential in your people and unleash transformation across your business—synchronizing strategy, operations, and talent to accelerate performance, fuel growth, and inspire a legacy of change. That’s why the world’s most forward-thinking companies across every major industry turn to us—for a shared commitment to lasting impact and the bold ambition to Be More Than.

Stantec

cb stantec.com

Stantec empowers clients, people, and communities to rise to the world’s greatest challenges at a time when the world faces more unprecedented concerns than ever before. We are a global leader in sustainable engineering, architecture, and environmental consulting. Our professionals deliver the expertise, technology, and innovation communities need to manage aging infrastructure, demographic and population changes, the energy transition, and more. Today’s communities transcend geographic borders. At Stantec, community means everyone with an interest in the work that we do—from our project teams and industry colleagues to our clients and the people our work impacts. The diverse perspectives of our partners and interested parties drive us to think beyond what’s previously been done on critical issues like climate change, digital transformation, and future-proofing our cities and infrastructure. We are designers, engineers, scientists, project managers, and strategic advisors. We innovate at the intersection of community, creativity, and client relationships to advance communities everywhere, so that together we can redefine what’s possible. Stantec trades on the TSX and the NYSE under the symbol STN.

Capgemini Invent

capgemini.com

Capgemini Invent is the digital innovation, consulting and transformation brand of the Capgemini Group, a global business line that combines market leading expertise in strategy, technology, data science and creative design, to help CxOs envision and build what’s next for their businesses. For more information: http://www.capgemini.com/invent. Follow us on Twitter @CapgeminiInvent.

KPMG India

social.kpmg

KPMG entities in India are established under the laws of India and are owned and managed (as the case may be) by established Indian professionals. Established in September 1993, the KPMG entities have rapidly built a significant competitive presence in the country. Today we operate from offices across 14 cities including in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara and Vijayawada. KPMG entities have a domestic client base of over 2700 companies. Our global approach to service delivery helps provide value-added services to clients. Our differentiation is derived from a rapid performance-based, industry-tailored and technology-enabled business advisory services delivered by some of the leading talented professionals in the country. KPMG professionals are grouped by industry focus and our clients are able to deal with industry professionals who speak their language. Our internal information technology and knowledge management systems enable the delivery of informed and timely business advice to clients.

Loading…

NEWS

Nexeo CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

June 02, 2021 07:00 AM

Nexeo Plastics acquires Italy-based distributor and compounder

Nexeo Plastics, LLC, a leading global thermoplastics resin distributor and an affiliate of GPD Companies, Inc., has announced that it has acquired Nevicolor...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-63261

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can send a specially crafted request to a Kibana machine learning feature, causing the server to exhaust available memory and become unavailable to all users.

Published

Date2026-07-21

Updated

Date2026-07-21

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-72/388575

CVE-2026-63260

SUMMARY

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege access can trigger a denial of service condition in Kibana by sending a specially crafted, oversized request payload. Processing this user-supplied input requires resource-intensive memory allocation that can exhaust the available heap memory in the Kibana process, causing it to crash and become unavailable to all users.

Published

Date2026-07-21

Updated

Date2026-07-21

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-71/388574

CVE-2026-63259

SUMMARY

Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via user-supplied identifiers that reference scheduled query result data from Kibana Spaces the requester is not authorized to access.

Published

Date2026-07-21

Updated

Date2026-07-21

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

https://discuss.elastic.co/t/kibana-9-4-4-security-update-esa-2026-70/388573

CVE-2026-63145

SUMMARY

Incorrect Authorization (CWE-863) in Kibana can lead to integrity compromise of Machine Learning audit and notification records via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). A vulnerability exists in Kibana's Machine Learning functionality where a Machine Learning management endpoint performs an insufficient authorization check. The endpoint validates only a coarse privilege level but does not verify that the requesting user has access to the specific Machine Learning job or notification resources provided in the request. As a result, a low-privileged user with Machine Learning access in any Kibana space can manipulate Machine Learning audit and notification records for arbitrary jobs—including jobs in other spaces or belonging to other users—by leveraging Kibana's internally elevated credentials to write to restricted Machine Learning system indices that the user cannot access directly.

Published

Date2026-07-21

Updated

Date2026-07-21

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-69/388572

CVE-2026-63144

SUMMARY

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index access can submit a request that triggers unbounded recursive processing within the Elasticsearch query evaluation component, causing a fatal error that terminates the affected node. In single-node deployments, this results in complete service outage; in multi-node clusters, it causes repeated node restarts and sustained availability degradation.

Published

Date2026-07-21

Updated

Date2026-07-21

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://discuss.elastic.co/t/elasticsearch-8-19-19-9-3-8-9-4-4-security-update-esa-2026-68/388571

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…