What is the official website of Par Petroleum ?

The official website of Par Petroleum is https://www.parpacific.com.

What is Par Petroleum's cybersecurity risk score?

Par Petroleum has an AI-generated cybersecurity risk score of 743 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Par Petroleum experienced?

According to Rankiteo, Par Petroleum currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Par Petroleum been affected by any supply chain cyber incidents ?

According to Rankiteo, Par Petroleum has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Par Petroleum have SOC 2 Type 1 certification ?

According to Rankiteo, Par Petroleum is not certified under SOC 2 Type 1.

Does Par Petroleum have SOC 2 Type 2 certification ?

According to Rankiteo, Par Petroleum does not hold a SOC 2 Type 2 certification.

Does Par Petroleum comply with GDPR ?

According to Rankiteo, Par Petroleum is not listed as GDPR compliant.

Does Par Petroleum have PCI DSS certification ?

According to Rankiteo, Par Petroleum does not currently maintain PCI DSS compliance.

Does Par Petroleum comply with HIPAA ?

According to Rankiteo, Par Petroleum is not compliant with HIPAA regulations.

Does Par Petroleum have ISO 27001 certification ?

According to Rankiteo,Par Petroleum is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Par Petroleum operate in ?

Par Petroleum operates primarily in the Oil and Gas industry.

How many employees does Par Petroleum have ?

Par Petroleum employs approximately 21 people worldwide.

Does Par Petroleum own any subsidiaries ?

Par Petroleum presently has no subsidiaries across any sectors.

How many LinkedIn followers does Par Petroleum have ?

Par Petroleum's official LinkedIn profile has approximately 569 followers.

What is the NAICS classification code for Par Petroleum ?

Par Petroleum is classified under the NAICS code 211, which corresponds to Oil and Gas Extraction.

Does Par Petroleum have a Crunchbase profile ?

No, Par Petroleum does not have a profile on Crunchbase.

Does Par Petroleum have a LinkedIn profile ?

Yes, Par Petroleum maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/par-petroleum.

How many cybersecurity incidents has Par Petroleum experienced ?

As of July 14, 2026, Rankiteo reports that Par Petroleum has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Par Petroleum have ?

Par Petroleum has an estimated 10,969 peer or competitor companies worldwide.

What types of cybersecurity incidents has Par Petroleum faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Par Petroleum

Boost Score +25 with badge (5 left)

743

/1000

Moderate

768

/1000

Fair

Par Petroleum Vendor Cyber Rating & Cyber Score

parpacific.com

Add Your Compliance Badge

Par Petroleum is part of Par Pacific Holdings, Inc. organization. Please visit www.linkedin.com/company/par-pacific for more information. Par Pacific Holdings, Inc. (NYSE: PARR), headquartered in Houston, Texas, owns and operates market-leading energy and infrastructure businesses. Par Pacific's strategy is to acquire and develop energy and infrastructure businesses in logistically complex markets. Par Pacific owns and operates one of the largest energy networks in Hawaii with 148,000-bpd of combined refining capacity, a logistics system supplying the major islands of the state and 91 retail locations. In the Pacific Northwest and the Rockies, Par Pacific owns and operates 60,000-bpd of combined refining capacity, related multimodal

Par Petroleum A.I CyberSecurity Scoring

Scoring History

Par Petroleum

Par Petroleum CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

U.S. Oil & Refining...

Cyber Attack

100

5/2026

U.SCYB178067670...

Loading…

A.I.

Par Petroleum Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Par Petroleum

Incidents vs Oil and Gas Industry Avg (This Year)

No incidents recorded for Par Petroleum in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Par Petroleum in 2026.

Incident Types Par Petroleum vs Oil and Gas Industry Avg (This Year)

No incidents recorded for Par Petroleum in 2026.

Incident History - Par Petroleum (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Par Petroleum Subsidiaries

Par Petroleum

Oil and Gas

Website: https://www.parpacific.com

Company Size: 21

Par Pacific Holdings, Inc.Oil and Gas

Par Hawaii, Inc.Oil and Gas

Par Hawaii Refining, LLCOil and Gas

U.S. Oil & Refining Co.Oil and Gas

Wyoming Refining CompanyOil and Gas

Par Petroleum CorpOil and Gas

Par Hawaii Shared Services, LLCOil and Gas

Loading…

Par Petroleum Similar Companies

Ecopetrol

ecopetrol.com.co

Ecopetrol (NYSE: EC) es la compañía más grande en Colombia y uno de los principales grupos de energía de Latinoamérica. Cuenta con más de 18.000 empleados y es responsable del 60% de la producción de hidrocarburos en Colombia. Es propietaria de las dos refinerías del Colombia y de la gran parte de la infraestructura del segmento de transporte. A su vez, participa en la venta de energía y distribución de gas. En el panorama internacional, el foco estratégico de Ecopetrol se concentra en las cuencas del continente americano. Tiene operación y participa en proyectos de exploración y producción en Estados Unidos (Cuenca Permian y Golfo de México), Brasil y México. Como parte de la estrategia de sosTECnibilidad, la compañía lidera diferentes iniciativas en aspectos claves como descarbonización, energías renovables, gestión del agua, Desarrollo sostenible del territorio y transformación digital. Ecopetrol (NYSE: EC) is the largest company in Colombia and one of the leading integrated energy groups in the American continent, with operations in over eight countries. Its operations span the hydrocarbons value chain (upstream, midstream, downstream), gas distribution, energy transmission, management of real-time systems, road concessions, and telecommunications. As part of its TESG agenda (Technology, Environmental, Social and Governance), the company is leading several initiatives for diversification and decarbonization through, among others, renewables, electrification, natural climate solutions, and hydrogen. All the above, underpinned by innovation and technology as catalyzers of sustainability.

Transocean

cb deepwater.com

Transocean is a leading international provider of offshore contract drilling services for oil and gas wells. The company specializes in technically demanding sectors of the global offshore drilling business, with a particular focus on ultra-deepwater and harsh environment drilling services and operates the highest specification floating offshore drilling fleet in the world. Transocean owns or has partial ownership interests in and operates a fleet of 27 mobile offshore drilling units, consisting of 20 ultra-deepwater floaters and seven harsh environment floaters.

Bharat Petroleum Corporation Limited

cb bharatpetroleum.in

Fortune Global 500 Company, Bharat Petroleum is the second largest Indian Oil Marketing Company and one of the premier integrated energy companies in India, engaged in refining of crude oil and marketing of petroleum products, with a significant presence in the upstream and downstream sectors of the oil and gas industry. The company attained the coveted Maharatna status, joining the elite club of companies having greater operational & financial autonomy. Bharat Petroleum’s Refineries at Mumbai & Kochi and Bina at Madhya Pradesh have a combined refining capacity of around 35.3 MMTPA. Its marketing infrastructure includes a network of installations, depots, energy stations, aviation service stations and LPG distributors. Its distribution network comprises over 20,000 Energy Stations, over 6,200 LPG distributorships, 733 Lubes distributorships, and 123 POL storage locations, 54 LPG Bottling Plants, 60 Aviation Service Stations, 4 Lube blending plants and 4 cross-country pipelines. Bharat Petroleum is integrating its strategy, investments, environmental and social ambitions to move towards a sustainable planet. The company has chalked out the plan to offer electric vehicle charging stations at around 7000 energy stations over next 5 years. With a focus on sustainable solutions, the company is developing a vibrant ecosystem and a road-map to become a Net Zero Energy Company by 2040, in Scope 1 and Scope 2 emissions. Bharat Petroleum has been partnering communities by supporting innumerable initiatives connected primarily in the areas of education, water conservation, skill development, health, community development, capacity building and employee volunteering. With ‘Energising Lives’ as its core purpose, Bharat Petroleum’s vision is to be the most admired global energy company leveraging talent, innovation & technology.

PDVSA Petróleos de Venezuela S.A.

pdvsa.com

Petróleos de Venezuela S.A. is a Venezuelan state company, began operations on January 1st, 1976 and whose activities are the oil exploration, production, refining, marketing and transportation of Venezuelan oil as well as the orimulsion, chemical, petrochemical businesses and coal. We have the largest oil reserves in the world, reaching at the end of 2013, a total certified sum of 298,353 million barrels, which represent 20% of the world reserves of this resource. Also we manage 197.1 trillion cubic feet of natural gas in proven reserves, a figure that places us in eighth place worldwide. PDVSA carries out its crude processing operations through 14 refineries: six in Venezuela, and nine in the rest of the world. The national refining system is made up of 6 refineries that have a processing capacity of 1 million 303 MBD of which 52% is destined for the local market and 48% for export. The international refining system is made up of 9 refineries located in the Caribbean region, United States and Europe. Our subsidiaries and affiliates are located across the globe in Venezuela, Belgium, China, Dominican Republic, Netherlands, Sweden, the United Kingdom and the United States. Headquartered in Caracas, Venezuela, with offices and operations throughout the country, we employ more than 140,000 workers worldwide.

Oil and Natural Gas Corporation Ltd

ongcindia.com

Maharatna ONGC is the largest producer of crude oil and natural gas in India, contributing around 70 per cent of Indian domestic production. The crude oil is the raw material used by downstream companies like IOC, BPCL, HPCL to produce petroleum products like Petrol, Diesel, Kerosene, Naphtha, Cooking Gas-LPG. ONGC is India’s Top Energy Company and ranks 14th among global energy majors (Platts). It is the only Indian company to figure in Fortune’s ‘Most Admired Energy Companies’ list. ONGC ranks 226th overall in Forbes Global 2000. Acclaimed for its Corporate Governance practices, Transparency International has ranked ONGC 26th among the biggest publicly traded global giants. It is most valued public enterprise in India, and one of the highest profit-making and dividend-paying. ONGC has a unique distinction of being a company with in-house service capabilities in all areas of Exploration and Production of oil & gas and related oil-field services. Winner of the Best Employer award, a dedicated team of over 25,000 professionals toil round the clock in challenging locations. ONGC is an integrated energy company with interests in upstream, midstream and downstream sector of the hydrocarbon value chain, renewables, LNG, Power generation, petrochemicals and Value Added Products. ONGC's wholly-owned subsidiary Navratna ONGC Videsh Limited (OVL) is the biggest Indian multinational in the energy space, participating in 32 oil and gas properties in 15 countries. ONGC's subsidiary Mangalore Refinery and Petrochemicals Limited (MRPL) is a Schedule ‘A’ Miniratna, with a single-location refining capacity of 15 million tons per annum. ONGC subsidiary HPCL is a Maharatna CPSE, and has the second largest share of product pipelines in India with a pipeline network of more than 3370 kms for transportation of petroleum products and a vast marketing network consisting of 14 Zonal offices and 133 Regional Offices.

Chevron

chevron.com

Our greatest resource is our people. Their ingenuity, creativity and collaboration have met the complex challenges of energy’s past. Together, we’ll take on the future. We support the LinkedIn Terms of Use (User Agreement), and we expect visitors to our page to do the same. We encourage open, lively conversation with a few simple rules: --We reserve the right to correct factual errors. --We will reply to comments when appropriate. --If we disagree with other opinions, we will do so respectfully. --You may not post anything that is spam or that is abusive, profane, or defamatory toward a person, entity, belief, or symbol. --We will delete any posts that contain personal information such as email addresses, phone numbers and physical addresses, and other third party intellectual property material, when that information does not belong to the author of the post. --You may not post job listings for non-Chevron positions. --While we support lively, open discussion, we reserve the right to delete comments.

Marathon Petroleum Corporation

cb marathonpetroleum.com

Marathon Petroleum Corporation (MPC) is a leading, integrated, downstream and midstream energy company headquartered in Findlay, Ohio. The company operates the nation's largest refining system. MPC's marketing system includes branded locations across the United States, including Marathon brand retail outlets. MPC also owns the general partner and majority limited partner interest in MPLX LP, a midstream company that owns and operates gathering, processing, and fractionation assets, as well as crude oil and light product transportation and logistics infrastructure. More information is available at www.marathonpetroleum.com.

Koch Engineered Solutions

kochengineeredsolutions.com

Koch Engineered Solutions (KES) provides uniquely engineered solutions in construction; mass and heat transfer; combustion and emissions controls; filtration; separation; materials applications; automation and actuation. KES is located in Wichita, Kansas, and is a subsidiary of Koch Industries, one of the largest private companies in the world. KES delivers superior value in developing, integrating, and applying innovative technical and service solutions for industrial value chains. More information is available at KochEngineeredSolutions.com. Below is a list of our businesses: Koch-Glitsch John Zink Koch Specialty Plant Services Optimized Process Designs, LLC Koch Technology Solutions DEPCOM Power Inc. DarkVision Technologies Inc.

Equinor

equinor.com

We're Equinor, an international energy company with a proud history. Formerly Statoil, we are 20,000 committed colleagues developing oil, gas, wind and solar energy in more than 30 countries worldwide. We’re the largest operator in Norway, among the world’s largest offshore operators, and a growing force in renewables. Driven by our Nordic urge to explore beyond the horizon, and our dedication to safety, equality and sustainability, we’re building a global business on our values and the energy needs of the future. We're the leading operator on the Norwegian continental shelf and have substantial international activities. We are engaged in exploration, development and production of oil and gas, as well as wind and solar power. We sell crude oil and are a major supplier of natural gas, with activities in processing, refining, and trading. Our activities are managed through eight business areas, staffs and support divisions, and we have operations in North and South America, Africa, Asia, Europe and Oceania, and Norway. ______ On this page we encourage you to share your views on energy, sustainability, technology and innovation. We appreciate all feedback, but encourage politeness and a respectful tone. See our full privacy policy here: https://www.equinor.com/about-us/privacy-policy-and-data-protection See our policy for social media here: En: https://www.equinor.com/about-us/social-media#social-media-guidelines

Loading…

NEWS

Par Petroleum CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 25, 2026 10:25 PM

PAR PACIFIC HOLDINGS, INC. SEC 10-K Report

Par Pacific Holdings, Inc., a diversified energy company with operations in refining, retail, and logistics, has released its 2025 10-K...

Read Article

August 28, 2025 07:00 AM

Ardent Mills names new CIO

DENVER — Former Par Pacific Holdings executive Ryan Kelley has joined the C-suite at Ardent Mills, North America's largest milling company,...

Read Article

October 29, 2020 07:00 AM

Cybersecurity for small-and-medium enterprises in Asia Pacific

By Ricky Kapur, Vice President of Sales, Marketing and Operations, Microsoft Asia Pacific. Ricky Kapur The past few months have brought...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-58489

SUMMARY

HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.0, the GitHub Gist export flow created an OAuth2 state value but only checked that it was present rather than validating it against the value expected for the user's session. Because the state was not properly validated, an attacker could forge a callback URL containing their own valid GitHub OAuth code. When processing the callback, HedgeDoc used the victim's logged-in session to select which note to export, but the attacker's authorization code to determine which GitHub account received it. As a result, a logged-in victim who clicked a crafted link could export their own private, protected, or limited note directly into a Gist controlled by the attacker. This issue has been fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 6.8

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58486

SUMMARY

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, HedgeDoc was vulnerable to a YAML alias bomb due to unsafe processing of the note frontmatter. HedgeDoc parsed frontmatter with js-yaml.load (js-yaml v3) via @hedgedoc/meta-marked, which resolved YAML anchor aliases. A compact malicious payload could therefore expand into a huge object structure, consuming excessive CPU. This expansion ran on every request to the publish view (/s/<shortid>) and, when placed under the opengraph key, the editor view (/<noteId>). A ten-level alias bomb could block the single Node.js event loop for roughly 235 seconds per request, causing concurrent requests to hang or drop and rendering the instance unavailable (DoS). Because the note was stored in the database, the impact survived process restarts until the note was removed. toobusy-js did not reliably mitigate the worst cases, as the event loop was saturated before the middleware could respond. This issue was fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58102

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via extensions(), extensions_by_long_name(), extensions_by_oid(), or has_extension_oid()), the code passes OBJ_obj2txt()'s return value as the hash-key length; because that value is the OID's full text length rather than the bytes written to the fixed-size buffer (129 bytes), an OID whose text is longer than the 129-byte buffer causes a read past the allocation, exposing adjacent heap memory as the returned hash key. extensions_by_name() uses the static shortname path and is not affected.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-58101

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check. keyid_data also dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when the parse succeeds. A caller invoking an affected helper on an extension from an untrusted certificate triggers a SIGSEGV that crashes the Perl process.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-57856

SUMMARY

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php sanitizes the bucket name with preg_replace('/[^a-zA-Z0-9-_\\.]/','', $bucket), which permits '..' and '../' sequences. The sanitized value is interpolated into a Flysystem path as uploads://buckets/{bucket}. Flysystem's WhitespacePathNormalizer resolves 'buckets/..' to the empty string (the uploads storage root) without raising PathTraversalDetected because the '..' has a preceding component to consume. An authenticated low-privileged user can send a crafted request with a '../' bucket name to list, upload, and delete files across all buckets, including those belonging to other users or roles

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…