What is the official website of ORAU ?

The official website of ORAU is https://www.orau.org/.

What is ORAU's cybersecurity risk score?

ORAU has an AI-generated cybersecurity risk score of 758 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has ORAU experienced?

According to Rankiteo, ORAU currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has ORAU been affected by any supply chain cyber incidents ?

According to Rankiteo, ORAU has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does ORAU have SOC 2 Type 1 certification ?

According to Rankiteo, ORAU is not certified under SOC 2 Type 1.

Does ORAU have SOC 2 Type 2 certification ?

According to Rankiteo, ORAU does not hold a SOC 2 Type 2 certification.

Does ORAU comply with GDPR ?

According to Rankiteo, ORAU is not listed as GDPR compliant.

Does ORAU have PCI DSS certification ?

According to Rankiteo, ORAU does not currently maintain PCI DSS compliance.

Does ORAU comply with HIPAA ?

According to Rankiteo, ORAU is not compliant with HIPAA regulations.

Does ORAU have ISO 27001 certification ?

According to Rankiteo,ORAU is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does ORAU operate in ?

ORAU operates primarily in the Government Administration industry.

How many employees does ORAU have ?

ORAU employs approximately 935 people worldwide.

Does ORAU own any subsidiaries ?

ORAU presently has no subsidiaries across any sectors.

How many LinkedIn followers does ORAU have ?

ORAU's official LinkedIn profile has approximately 19,199 followers.

What is the NAICS classification code for ORAU ?

ORAU is classified under the NAICS code 92, which corresponds to Public Administration.

Does ORAU have a Crunchbase profile ?

No, ORAU does not have a profile on Crunchbase.

Does ORAU have a LinkedIn profile ?

Yes, ORAU maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/oakridgeassociateduniversities.

How many cybersecurity incidents has ORAU experienced ?

As of July 18, 2026, Rankiteo reports that ORAU has experienced 1 cybersecurity incidents.

How many peer or competitor companies does ORAU have ?

ORAU has an estimated 13,046 peer or competitor companies worldwide.

What types of cybersecurity incidents has ORAU faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

ORAU

Boost Score +25 with badge (5 left)

758

/1000

Fair

783

/1000

Fair

ORAU Vendor Cyber Rating & Cyber Score

orau.org

Add Your Compliance Badge

ORAU provides innovative scientific and technical solutions to advance research and education, protect public health and the environment and strengthen national security. Through specialized teams of experts, unique laboratory capabilities and access to a consortium of more than 100 major Ph.D.-granting institutions, ORAU works with federal, state, local and commercial customers to advance national priorities and serve the public interest. A 501(c)(3) nonprofit corporation and federal contractor, ORAU manages the Oak Ridge Institute for Science and Education (ORISE) for the U.S. Department of Energy (DOE). Learn more about ORAU at http://www.orau.org.

ORAU A.I CyberSecurity Scoring

Scoring History

ORAU

ORAU CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

ORAU

Vulnerability

5/2023

OAK644072725

Loading…

A.I.

ORAU Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for ORAU

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for ORAU in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for ORAU in 2026.

Incident Types ORAU vs Government Administration Industry Avg (This Year)

No incidents recorded for ORAU in 2026.

Incident History - ORAU (X = Date, Y = Severity)

Loading…

SUBSIDIARY

ORAU Subsidiaries

Parent Company

ORAU

Government Administration

Website: https://www.orau.org/

Company Size: 935

No subsidiary data available for this company.

Loading…

ORAU Similar Companies

Commonwealth of Massachusetts

cb mass.gov

Year after year, the Commonwealth of Massachusetts has continued to pioneer bold legislative actions and programs, some of which have been embraced on a national scale. We are always looking for talented individuals to help us maintain this momentum and improve the services that millions of people depend on every day. If you’re looking for an innovative work environment where you can really make a difference, check out the job opportunities with the Commonwealth of Massachusetts. This page is managed according to the Mass.gov social media policy: https://www.mass.gov/info-details/massgov-social-media-policy. Comments that do not follow our policy may be removed.

City of Philadelphia

phila.gov

With a workforce of 30,000 people, and opportunities in 1,000 different job categories, the City of Philadelphia is one of the largest employers in Southeastern Pennsylvania. As an employer, we operate through the guiding principles of service, integrity, respect, accountability, collaboration, diversity and inclusion. We strive to effectively deliver services, to resolve the challenges facing our city, and to make Philadelphia a place where all of our residents have the opportunity to reach their potential. To learn more about job opportunities, visit www.phila.gov or follow #PHLCityJobs.

Ministero dell'Interno

interno.gov.it

Il ministero dell'Interno è una struttura complessa il cui assetto organizzativo è disciplinato dal D.L.vo n. 300/99 e dai provvedimenti attuativi. A livello centrale, si articola in uffici di diretta collaborazione con il ministro (D.P.R. n. 98/2002) e cinque dipartimenti (D.P.R. n. 398/2001 e successive modificazioni); a livello periferico, in Prefetture-Uffici Territoriali di Governo, Questure e Comandi dei Vigili del fuoco.

Ville de Montréal

montreal.ca

Montréal est la plus grande ville francophone d’Amérique et elle se distingue par sa vitalité culturelle exceptionnelle et des forces créatrices reconnues mondialement. Elle se développe un peu plus chaque jour en une ville contemporaine, inclusive et dynamique sur les plans économique, culturel et social. Visant à offrir aux Montréalaises et aux Montréalais un lieu de vie agréable et prospère, la Ville de Montréal veut rester à l’écoute des besoins changeants de sa population afin de s’y adapter de façon continue. Pour ce faire, elle mise sur les compétences et l’expertise de ses 28 000 employés au service de 1,8 million de citoyens.

Ministry of Health Saudi Arabia

moh.gov.sa

The Ministry of Health (MOH), by way of its objectives, policies and projects included in this strategy, seeks to accomplish a promising future vision; namely, delivering best-quality integrated and comprehensive healthcare services. Carrying health conditions or health status of Saudi inhabitants to the best and highest possible level, in terms of justice and equality in providing healthcare, and in terms of effectiveness and the possibility of incurring the financial burden of the treatment and healthcare. In doing so, the MOH takes as its target meeting citizens’ aspirations in this regard, by providing them with high-quality general and specialized health services, and covering all the population with these services. Creating a sole and exclusive entity to formulate health policies including health insurance services, etc. (such as operating the recently established Health Services Council.) Adopting a public and national health strategy which focuses of the main morbidity burdens; including non-communicable diseases, nutrition, reproductive health, smoking (tobacco-use), AIDS, traffic accidents, and injuries. The system must have an effective and fair method for estimating risks and benefits. Working to diversify sources of revenues to finance the system effectively. These sources must include also public revenues and insurance premiums, in addition to the equally allocated costs and taxes.

Etat de Vaud

vd.ch

Le canton de Vaud, c’est plus de 800 000 personnes vivant dans plus de 300 communes ! Rejoindre l’Administration cantonale vaudoise, c’est s’engager aux côtés de près de 40’000 personnes unies dans un même but : servir la population. Pourquoi nous suivre ? Dédiez votre quart d’heure vaudois aux opportunités de carrière et à l’info du canton ! Retrouvez les actualités vaudoises, les décisions du Grand Conseil et du Conseil d’Etat qui orientent les politiques publiques, les infos pratiques et les chiffres clés. Découvrez aussi des portraits des collaboratrices et collaborateurs au cœur de l’action et des offres d’emploi variées. Pourquoi nous rejoindre ? Nous rejoindre, c’est s’engager auprès d’un employeur fiable, éthique, équitable et tourné vers la durabilité. Parce que les envies, les attentes et les besoins évoluent tout au long d’une carrière, nous proposons des formations, des opportunités de développement de carrière ainsi qu’un équilibre entre vie privée et vie professionnelle. Vous aussi contribuez à l’actualité et à l’avenir du canton ! Retrouvez toutes nos offres d’emploi sur www.vd.ch/offres-demploi

Social Security Administration

ssa.gov

Social Security provides financial protection for our nation’s people, supporting more than 64 million individuals and families. With retirement, disability, and survivors benefits, Social Security is one of the most successful anti-poverty programs in our nation's history. We are there throughout life’s journey, helping secure today and tomorrow. We are one of the largest independent agencies in government, with over 58,000 team members throughout the country. Our talented workforce includes employees who serve customers directly, as well as those who support their work in diverse fields. Through compassion and dedication, our team members help promote the economic security of the country. They are the heart of our agency, providing high-quality, personalized service to people in their communities, nationwide, and even living abroad. Our workforce is our greatest strength at SSA. We place high priority on developing, engaging, and empowering our team members. Through career development programs, our team members have access to a wide range of training and professional development opportunities. We rely on our team members’ feedback to improve how we administer our programs and to create an environment of trust and cooperation across our organization. We also offer an excellent benefits package to our team members. To learn more about a career with SSA, visit SSA.gov/careers.

Københavns Kommune

kk.dk

Københavns Kommune er Danmarks største arbejdsplads med ca. 45.000 medarbejdere. Vi udvikler hovedstaden og servicerer over 500.000 københavnere. Vores mål er at fastholde og udvikle København som en af verdens bedste byer at bo i – og skabe øget vækst gennem viden, innovation og beskæftigelse. Find dit næste job her eller på www.kk.dk/job På vores karrieresite www.kk.dk/job kan du bl.a. se alle vores ledige stillinger og tilmelde dig vores jobagent. Her kan du også læse om vores medarbejdergoder.

State of California

ca.gov

Californians deserve a government that works for them and with them. One that will work to ensure opportunity and justice. We are building a California not for the few, but for all — including those who have historically been left out. We are doing the work to make our state a place for every Californian and all the diversity that makes us strong. Our state will be known as a place where everyone is respected, protected, and connected.

Loading…

NEWS

ORAU CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 25, 2024 08:00 AM

Top Cybersecurity Employers in Knoxville: Who's Hiring and What They Look For

Knoxville's booming cybersecurity sector offers plentiful job opportunities, with over 240 open positions at top employers like the...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-57980

SUMMARY

Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.

Published

Date2026-07-17

Updated

Date2026-07-17

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

2.8

REFERENCES

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57980

CVE-2026-56741

SUMMARY

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS() in TelnetIO.java:856-879 reads client-supplied width and height as 16-bit unsigned integers and passes values such as 65535x65535 to setTerminalGeometry(), allowing an unauthenticated remote attacker to repeatedly alternate values and trigger continuous expensive rendering work that causes CPU exhaustion and denial of service. This issue is fixed in versions 3.30.14, 4.0.16, and 4.2.1.

Published

Date2026-07-17

Updated

Date2026-07-17

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-56740

SUMMARY

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables() in TelnetIO.java:1127-1180 stores each variable pair in a HashMap held by ConnectionData, allowing an unauthenticated attacker to flood unique variable pairs before the terminating IAC SE byte and exhaust JVM heap memory with an OutOfMemoryError. This issue is fixed in versions 3.30.14, 4.0.16, and 4.2.1.

Published

Date2026-07-17

Updated

Date2026-07-17

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-56171

SUMMARY

Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.

Published

Date2026-07-17

Updated

Date2026-07-17

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Impact Score

4.2

Exploitability

2.8

REFERENCES

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56171

CVE-2026-54335

SUMMARY

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In 5.0.44 and earlier, the _.merge(target, source) utility exported by @feathersjs/commons recursively merges source into target by iterating Object.keys(source). When source was produced by JSON.parse and contains a __proto__, constructor, or prototype key, that key is returned as an own-enumerable property; the recursive merge then resolves target['__proto__'] to Object.prototype and writes attacker-supplied properties onto it, polluting the prototype for all plain objects in the process for the lifetime of the Node process. This issue is fixed in version 5.0.45.

Published

Date2026-07-17

Updated

Date2026-07-17

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…