What is the official website of Ōner Travel ?

The official website of Ōner Travel is https://www.onertravel.com.

What is Ōner Travel's cybersecurity risk score?

Ōner Travel has an AI-generated cybersecurity risk score of 757 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Ōner Travel experienced?

According to Rankiteo, Ōner Travel currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Ōner Travel been affected by any supply chain cyber incidents ?

According to Rankiteo, Ōner Travel has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Ōner Travel have SOC 2 Type 1 certification ?

According to Rankiteo, Ōner Travel is not certified under SOC 2 Type 1.

Does Ōner Travel have SOC 2 Type 2 certification ?

According to Rankiteo, Ōner Travel does not hold a SOC 2 Type 2 certification.

Does Ōner Travel comply with GDPR ?

According to Rankiteo, Ōner Travel is not listed as GDPR compliant.

Does Ōner Travel have PCI DSS certification ?

According to Rankiteo, Ōner Travel does not currently maintain PCI DSS compliance.

Does Ōner Travel comply with HIPAA ?

According to Rankiteo, Ōner Travel is not compliant with HIPAA regulations.

Does Ōner Travel have ISO 27001 certification ?

According to Rankiteo,Ōner Travel is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Ōner Travel operate in ?

Ōner Travel operates primarily in the Travel Arrangements industry.

How many employees does Ōner Travel have ?

Ōner Travel employs approximately 36 people worldwide.

Does Ōner Travel own any subsidiaries ?

Ōner Travel presently has no subsidiaries across any sectors.

How many LinkedIn followers does Ōner Travel have ?

Ōner Travel's official LinkedIn profile has approximately 7,651 followers.

What is the NAICS classification code for Ōner Travel ?

Ōner Travel is classified under the NAICS code 5615, which corresponds to Travel Arrangement and Reservation Services.

Does Ōner Travel have a Crunchbase profile ?

No, Ōner Travel does not have a profile on Crunchbase.

Does Ōner Travel have a LinkedIn profile ?

Yes, Ōner Travel maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/onertravel.

How many cybersecurity incidents has Ōner Travel experienced ?

As of August 22, 2026, Rankiteo reports that Ōner Travel has not experienced any cybersecurity incidents.

How many peer or competitor companies does Ōner Travel have ?

Ōner Travel has an estimated 5,011 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Ōner Travel

Boost Score +25 with badge (5 left)

757

/1000

Fair

782

/1000

Fair

Ōner Travel Vendor Cyber Rating & Cyber Score

onertravel.com

Add Your Compliance Badge

Oner, a plataforma de viagens que conecta tecnologia e empreendedores. Nós somos um fio condutor disruptivo que une necessidades, desejos, realizações e oportunidades, de forma simples, fácil e inteligente. Nós somos a Ōner e com a gente você pode sonhar, se conectar e realizar a viagem dos seus sonhos ou se conectar e criar o seu próprio negócio tão sonhado. É único, é simples, é humano, é digital. É Oner!

Ōner Travel A.I CyberSecurity Scoring

Scoring History

Ōner Travel

Ōner Travel CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Ōner Travel Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Ōner Travel

Incidents vs Travel Arrangements Industry Avg (This Year)

No incidents recorded for Ōner Travel in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Ōner Travel in 2026.

Incident Types Ōner Travel vs Travel Arrangements Industry Avg (This Year)

No incidents recorded for Ōner Travel in 2026.

Incident History - Ōner Travel (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Ōner Travel Subsidiaries

Ōner Travel

Travel Arrangements

Website: https://www.onertravel.com

Company Size: 36

BeFlyTravel Arrangements

FlytourTravel Arrangements

STB Student Travel BureauEducation Administration Programs

Jazz SideMarketing Services

BelviturTravel Arrangements

BeParkSightseeing Transportation

Queensberry ViagensLeisure, Travel & Tourism

Tech TravelIT Services and IT Consulting

InstaviagemTravel Arrangements

Vai VoandoTravel Arrangements

OpenTripsIT Services and IT Consulting

BeFly TravelTravel Arrangements

Queensberry Viagens de IncentivoTravel Arrangements

VIPTRIPLeisure, Travel & Tourism

Qualitours Cruises & ToursTravel Arrangements

ReserviaHospitality

Passagens PromoLeisure, Travel & Tourism

BeFly ConectaTravel Arrangements

3SixtyEvents Services

BClub CoworkingLeasing Non-residential Real Estate

Melhor SeguroInsurance Agencies and Brokerages

DesviantesTravel Arrangements

Chanteclair TravelTravel Arrangements

Loading…

Ōner Travel Similar Companies

Princess Cruises

spr.ly

Princess is the world’s leading premium cruise line operating a fleet of modern ships visiting over 380 destinations around the globe on more than 160 itineraries. Each moment on Princess is one of wonderful discovery where guests can relax and explore. The choices are endless, from invigorating activities to more relaxing pursuits, and enable guests to share special moments with family and friends and enjoy unique travel experiences that create inspiring memories. At the forefront of innovation, Princess MedallionClass elevates service levels through enhanced guest experiences before and during cruise vacations. Exciting career opportunities in many departments await your discovery. Whether you are in customer service, food and beverage, or fleet operations (just to name a few), we’re certain you will find a career path at Princess Cruises that will keep you engaged and growing for years to come. Teams on shore support colleagues onboard, as together we create memorable experiences—dining, entertainment, exploration, and celebration—for our guests. Exceptional customer service is the cornerstone of our success thanks to more than 30,000 of the cruise industry’s finest team members on land and at sea. We create a friendly and welcoming environment not only for our onboard guests, but for our seagoing and land-based teams as well. The result is a remarkable number of loyal staff. We respect the seas we sail and destinations we visit. Our ships adhere to international rules regulating operations from fire safety to navigation, maritime security, and environmental stewardship. Onboard medical facilities meet or exceed standards set by the American College of Emergency Physicians. There’s no limit to how far you can go with Princess Cruises!

Norwegian Cruise Line Holdings Ltd.

nclhltd.com

Norwegian Cruise Line Holdings Ltd. (NYSE: NCLH) is a leading global cruise company which operates Norwegian Cruise Line, Oceania Cruises and Regent Seven Seas Cruises. With a combined fleet of 32 ships and approximately 66,500 berths, NCLH offers itineraries to approximately 700 destinations worldwide. NCLH expects to add 13 additional ships across its three brands through 2036, which will add approximately 41,000 berths to its fleet.

Enterprise Mobility

enterprisemobility.com

At Enterprise Mobility™ we are paving a new way forward by creating better experiences for how we move. We give people around the world the ability to connect in ways that suit their unique needs. It’s a bold idea that has defined our purpose-led, people-first organization for over 65 years, and it’s one that we continue to strive toward with every journey. Through our trusted brands and our portfolio of offerings, we aim to reach the highest levels of customer service with each interaction. And we invest in — and care about — each other, our communities and every journey. It’s a point of pride and distinction, rooted in our origins. It’s how we grew from a pioneer with a fleet of seven cars to a global mobility leader with more than 90,000 team members around the world. And it’s what will continue to drive the future of the organization and mobility itself. Over the years, we’ve learned moving forward isn’t a simple matter of going from point A to B. Today, mobility is the movement of people and goods. It goes beyond the vehicles we drive to encompass an integrated way of travel that meets every individual’s unique needs and preferences. That is why it’s our vision to be the world’s best and most trusted mobility company. As mobility continues to evolve, we'll continue to innovate to work toward a reimagined mobility future that is more accessible, efficient and sustainable for all.

Avis Budget Group

cb avisbudgetgroup.com

Avis Budget Group, Inc. is a leading global provider of transportation solutions, both through its Avis and Budget brands, which have more than 11,000 rental locations in approximately 180 countries around the world, and through its Zipcar brand, which is the world's leading car sharing network, with more than one million members. Avis Budget Group operates most of its car rental offices in North America, Europe and Australasia directly, and operates primarily through licensees in other parts of the world. Avis Budget Group is headquartered in Parsippany, N.J.

MSC Cruises

msccruises.com

Headquartered in Geneva, Switzerland, MSC Cruises is the world’s third largest cruise lines and the market leader in Europe, South America, the Middle East and Southern Africa, with a strong and growing presence in North America and the Far East. The MSC Cruises fleet consists of 23 modern ships with four new vessels due to be launched in 2026, 2027, 2029 and 2030. The Company operates in more than 100 countries around the world, offering cruises across five continents, calling at more than 240 destinations and welcoming more than 180 different nationalities on board. MSC Cruises is firmly committed to achieving net zero greenhouse gas emissions for its marine operations by 2050.

American Express Global Business Travel

cb amexgbt.com

Business travel doesn’t just move people from A to B, it helps ideas and innovation move forward, too. And with the most valuable marketplace, software, and services in travel, there is nowhere they can’t go with American Express Global Business Travel. With us, your Great Ideas Travel. GBT Travel Services UK Limited (GBT UK) and its authorized sublicensees (including Ovation Travel Group, Egencia and CWT) use certain trademarks and service marks of American Express Company or its subsidiaries (American Express) in the “American Express Global Business Travel” and “American Express GBT Meetings & Events” brands and in connection with its business for permitted uses only under a limited license from American Express (Licensed Marks). The Licensed Marks are trademarks or service marks of, and the property of, American Express. GBT UK is a subsidiary of Global Business Travel Group, Inc. (NYSE: GBTG). American Express holds a minority interest in GBTG, which operates as a separate company from American Express.

BCD Travel

bcdtravel.com

BCD Travel helps companies travel smart and achieve more. We drive program adoption, cost savings and talent retention through digital experiences that simplify business travel. Our 15,000+ dedicated team members service clients in 170+ countries as we shape a sustainable future for business travel. BCD’s leading meetings and events management and global consultancy services complete our comprehensive suite of solutions for all aspects of corporate travel. In 2024, BCD achieved US$22.9 billion in sales. For more information, visit our website. You can also subscribe to our newsletter for the latest industry insights, thought-leader analysis and top tips to drive your successful travel program. Go to: http://ow.ly/N73i50Mhc9Y

Hertz

cb hertz.com

Hertz is one of the world’s largest mobility companies, and through its indirect subsidiary, The Hertz Corporation, operates the Hertz, Dollar, and Thrifty vehicle rental brands throughout North America, Europe, the Caribbean, Latin America, Africa, the Middle East, Asia, Australia, and New Zealand. Hertz pioneered the car rental industry, and the Hertz brand is one of the most recognized brands globally. For more than a century, Hertz has offered innovative, differentiated products in an effort to make every rental experience seamless and special. Customers choose Hertz for its wide selection of top-rated vehicles, for its free Hertz Gold Plus Rewards® loyalty program, and because of Hertz’s thousands of convenient locations. Hertz also operates the Firefly car rental brand and Hertz 24/7 car sharing business in international markets and additionally rents vehicles to rideshare drivers through dedicated partnerships with Uber, Lyft, and others. Hertz also sells vehicles to consumers at Hertz Car Sales locations throughout the United States.

Carnival Cruise Line

carnival.com

Since our founding in 1972, Carnival Cruise Line — "The World’s Most Popular Cruise Line®” — carries millions of passengers every year. We offer a fun and unique career destination for a wide range of professionals in Marketing, IT, Accounting/Audit, Finance, Marine Operations and Human Resources, just to mention a few. We also offer remote opportunities flexibility for select positions. Headquartered in sunny South Florida, team members have access to a multi-station cafeteria, Starbucks (with cafecitos! - It's a Miami thing...), car wash, in-person TechBar services, an onsite floral vendor and a fully equipped gym. We offer top of line benefits including: health, dental, 401K matching, commitment to continued learning & development, employee stock purchase discount, cruise discounts for employees and more! We are committed to a culture of diversity, equity and inclusion for our shoreside and shipboard team members, as well as our guests. We are proud to be part of a family of companies owned by Carnival Corporation & plc, a Fortune 200 Company, which includes sister lines Princess Cruises, Holland America Line and Cunard Line, among others. We pride ourselves on delivering fun, memorable vacations to our guests by offering a wide array of quality cruises which present outstanding value for the money.

Loading…

NEWS

Ōner Travel CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 08, 2026 08:00 AM

Digital safety 101: Essential cybersecurity tips for gamers on the road

By Vedat Özgür Töre / Published : January 8, 2026 / Last updated : January 9, 2026 / Leave a Comment. Travelling with your gaming gear has become second...

Read Article

December 26, 2025 08:00 AM

Now New Holiday Travel Warning as Christmas and New Year Trip Starts: Cybersecurity Experts Reveals Cyberattacks Targeting Professionals for Business Travellers

As the Christmas and New Year trip season kicks off, cybersecurity experts are raising alarms about a significant rise in cyberattacks...

Read Article

December 24, 2025 08:00 AM

A serial entrepreneur’s journey from marketing to cybersecurity: Founder Stories

On this episode, Brian Long, CEO and Co-Founder of Adaptive Security, takes us through his journey from digital-marketing entrepreneur to...

Read Article

December 23, 2025 08:00 AM

Travelling This Holiday? Learn About How Cyber Attacks Work and Target Business Travellers

The bad news: as soon as laptops or smartphones connect to a network, cybercriminals are on the move. A spike of approximately 30% in incidents...

Read Article

December 18, 2025 08:00 AM

Six holiday cybersecurity tips for travelling with families

Give your trip a safety check: device updates, safer Wi-Fi habits, emergency steps and key Verizon travel settings. Motherish co-host Karen...

Read Article

December 07, 2025 08:00 AM

Inside BUNKR, the cybersecurity startup winning over the tennis world

From passports to passwords, the app is helping players stay organized and secure across nonstop global travel.

Read Article

December 04, 2025 08:00 AM

This company gives away free trips and luxury cars to its top employees every year

ThreatLocker rewards two employees every holiday season with luxury vehicles, like a Hummer EV or a Porsche Panamera.

Read Article

December 01, 2025 08:00 AM

Spain’s Tourism Faces Cybersecurity Setback as Iberia Data Breach Exposes Customer Information

Iberia's data breach raises concerns for Spain's tourism sector as travelers are advised to take precautions. The airline has assured no...

Read Article

November 16, 2025 08:00 AM

Ester’s journey: From cleaning houses to cybersecurity

After immigrating to Israel from Ethiopia at 18, Ester Gebrezgi spent years working as a cleaner; Today, she's training for a new career in...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-53541

SUMMARY

OliveTin gives access to predefined shell commands from a web interface. The `filterToDefinedArgumentsOnly` function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a special case allows any argument whose name starts with `ot_` to bypass this filter. While two system arguments (`ot_executionTrackingId` and `ot_username`) are injected by OliveTin and overridden, all other `ot_`-prefixed arguments supplied by the user pass through unmodified. These bypassed arguments are not type-checked — the validation loop only iterates over the action's defined arguments, so `ot_`-prefixed arguments skip all type safety checks entirely; set as environment variables — via `buildEnv()`, with completely unvalidated values, and passed to the executed command; and included in the template context — available as `.Arguments.ot_*` in template rendering. Commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d contains a patch.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-53525

SUMMARY

WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 0.3.1 through 4.9.0, the WeeChat relay authentication uses non-constant-time string comparison functions (weechat_strcasecmp and strcmp) to verify password hashes and plaintext passwords. An attacker can exploit timing differences to extract the server-computed hash character by character, then authenticate using the correct hash without knowing the password. Version 4.9.1 fixes the issue.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

2.2

REFERENCES

https://github.com/weechat/weechat/security/advisories/GHSA-vhv8-g2r9-cwcc

CVE-2026-53524

SUMMARY

WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 4.3.0 through 4.9.0, the WeeChat relay module's WebSocket permessage-deflate decompression function relay_websocket_inflate() has no upper bound on output size. An authenticated relay user can send a small compressed WebSocket frame (~100 bytes) that decompresses to gigabytes, exhausting all server memory and crashing the entire WeeChat process. The api protocol enables permessage-deflate and requires authentication before WebSocket upgrade. Version 4.9.1 patches the issue.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/weechat/weechat/security/advisories/GHSA-v2v4-45wm-5cr3

CVE-2026-53499

SUMMARY

FORT Validator is a Resource Public Key Infrastructure (RPKI) relying-party validator that produces validated route-origin data. FORT Validator versions through 1.6.7 contain an origin-validation error in their RRDP processing: a delegated CA under the same Trust Anchor Locator (TAL) can reference a victim CA’s public RRDP notification and snapshot URLs, causing FORT’s URL-based download cache to report success after deleting the victim’s local snapshot. Following a routine victim publication, this can silently remove the victim’s VRPs and other signed objects from FORT’s output, potentially enabling route hijacking or loss of reachability. Version 1.6.8 contains a patch that rejects cross-origin RRDP snapshot and delta URLs; as a workaround, administrators can disable HTTP/RRDP with --http.enabled=false while keeping rsync enabled, although this can leave data unavailable or stale where rsync is not supported.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: )

cvss4

Base Score: 7.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/NICMx/FORT-validator/security/advisories/GHSA-qfm3-577x-rh54

CVE-2026-49360

SUMMARY

Recce is a data-validation toolkit for enhanced dbt (data build tool) PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured with a DuckDB-backed project, an attacker can use DuckDB filesystem primitives to read and write files accessible to the Recce server process. The impact depends on how Recce is deployed, but may include disclosure of local files, tampering with Recce/dbt artifacts, modification of browser-served static files leading to stored XSS, and modification of application files if those paths are writable. If Recce is run as root, file access occurs with root privileges inside that host or container. This issue has been patched in Recce `v1.50.0`. Users should upgrade to Recce `v1.50.0` or later. The patch restricts unsafe file read/write behavior for DuckDB-backed query execution and hardens the affected query path. Other warehouse adapters have also been reviewed for similar exposure. Users who cannot upgrade immediately should avoid exposing `recce server` to the public internet or any untrusted network. Recommended mitigations include enabling authentication or placing Recce behind an authenticated reverse proxy/VPN, running Recce as a non-root user, using a read-only application filesystem where possible, and ensuring that sensitive files or credentials are not available to the Recce process.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: )

cvss4

Base Score: 7.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…