What is the official website of Pickup ?

The official website of Pickup is http://www.pickup.fr.

What is Pickup's cybersecurity risk score?

Pickup has an AI-generated cybersecurity risk score of 753 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Pickup experienced?

According to Rankiteo, Pickup currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Pickup been affected by any supply chain cyber incidents ?

According to Rankiteo, Pickup has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Pickup have SOC 2 Type 1 certification ?

According to Rankiteo, Pickup is not certified under SOC 2 Type 1.

Does Pickup have SOC 2 Type 2 certification ?

According to Rankiteo, Pickup does not hold a SOC 2 Type 2 certification.

Does Pickup comply with GDPR ?

According to Rankiteo, Pickup is not listed as GDPR compliant.

Does Pickup have PCI DSS certification ?

According to Rankiteo, Pickup does not currently maintain PCI DSS compliance.

Does Pickup comply with HIPAA ?

According to Rankiteo, Pickup is not compliant with HIPAA regulations.

Does Pickup have ISO 27001 certification ?

According to Rankiteo,Pickup is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Pickup operate in ?

Pickup operates primarily in the Transportation, Logistics, Supply Chain and Storage industry.

How many employees does Pickup have ?

Pickup employs approximately 452 people worldwide.

Does Pickup own any subsidiaries ?

Pickup presently has no subsidiaries across any sectors.

How many LinkedIn followers does Pickup have ?

Pickup's official LinkedIn profile has approximately 19,709 followers.

What is the NAICS classification code for Pickup ?

Pickup is classified under the NAICS code 47, which corresponds to Transportation and Warehousing.

Does Pickup have a Crunchbase profile ?

Yes, Pickup has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/pickup-services.

Does Pickup have a LinkedIn profile ?

Yes, Pickup maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/pickup-sa.

How many cybersecurity incidents has Pickup experienced ?

As of August 2, 2026, Rankiteo reports that Pickup has not experienced any cybersecurity incidents.

How many peer or competitor companies does Pickup have ?

Pickup has an estimated 6,695 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Pickup

Boost Score +25 with badge (5 left)

753

/1000

Fair

778

/1000

Fair

Pickup Vendor Cyber Rating & Cyber Score

pickup.fr

cb in

Add Your Compliance Badge

Filiale du groupe La Poste via sa filiale Geopost, Pickup est l'opérateur du réseau de relais et consignes leader en France, avec ses 17 000 relais et 5 000 consignes. Les relais Pickup sont livrés quotidiennement par les transporteurs Colissimo, Chronopost et DPD France. L’offre de livraison en point Pickup est proposée par plus de 90 000 e-commerçants comme : Vinted, Veepee, Showroomprivé, Sarenza, CDiscount, Zalando, Amazon, Orange, Nespresso, i.run, Sephora, Mango, Decathlon… À travers les différentes entités Geopost, réseau international de livraison de colis du groupe La Poste et numéro 1 en Europe, le réseau Pickup est également présent dans 30 pays à travers le monde, avec plus de 132 000 points au total. Pickup, dont le siège

Pickup A.I CyberSecurity Scoring

Scoring History

Pickup

Pickup CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Pickup Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Pickup

Incidents vs Transportation, Logistics, Supply Chain and Storage Industry Avg (This Year)

No incidents recorded for Pickup in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Pickup in 2026.

Incident Types Pickup vs Transportation, Logistics, Supply Chain and Storage Industry Avg (This Year)

No incidents recorded for Pickup in 2026.

Incident History - Pickup (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Pickup Subsidiaries

Pickup

Transportation, Logistics, Supply Chain and Storage

Website: http://www.pickup.fr

Company Size: 452

DPDgroupTruck Transportation

Loading…

Pickup Similar Companies

A.P. Moller - Maersk

maersk.com

A.P. Moller - Maersk is an integrated transport and logistics company; going all the way, together, for our customers and society. ALL THE WAY is our commitment to connect the world so that everyone has both the possibility and the ability to trade, grow and thrive. The company employs roughly 110.000 employees across operations in 130 countries.

Kuehne+Nagel

cb kuehne-nagel.com

With more than 82,000 employees at almost 1,300 sites in close to 100 countries, the Kuehne+Nagel Group is one of the world's leading logistics providers. Headquartered in Switzerland, Kuehne+Nagel is listed in the Swiss blue-chip stock market index, the SMI. The Group is the global number one in air and sea logistics and has strong market positions in road and contract logistics. Kuehne+Nagel is the logistics partner of choice for 400,000 customers worldwide. Using its global network, logistics expertise and data-based insights, the Group provides end-to-end supply chain solutions for global companies and industries.

Lineage

onelineage.com

Lineage is one of the world’s leading temperature-controlled industrial REITs and integrated solutions providers with a global network of over 480 strategically located facilities, totaling nearly 2.9 billion cubic feet of capacity across countries in North America, Europe, and Asia-Pacific. Coupling industry-leading expertise in end-to-end logistical solutions and innovative technology, Lineage partners with the world’s largest food and beverage companies to increase distribution efficiency, advance sustainability, minimize supply chain waste, and, most importantly, help feed the world. In recognition of the company’s leading innovations and sustainability initiatives, Lineage has been named a CNBC Disruptor 50 Company for three consecutive years, twice named a US Best Managed Company, named the No. 1 Data Science company, and 23rd overall, on Fast Company’s list of The World’s Most Innovative Companies, and was included on Fortune’s Change the World list. Nasdaq: LINE

bnode

bnode.com

bnode (formerly bpostgroup) is a digital expert in parcel logistics, active in Europe, North America and Asia-Pacific. The group operates through three business units: 3PL (soon to be paxon, with brands as Active Ants, Staci and Radial), Cross-border (working under the name of Landmark Global) and Bene last-mile (bpost, Dynagroup, Euro-Sprinters,..). With more than 37,000 employees and a turnover of 4.3 billion euros in 2024, bnode is a major logistics player. As a people- and planet-friendly company, bnode creates long-term sustainable value for customers and shareholders.

Toll Group

tollgroup.com

At Toll, we do more than just logistics - we move the businesses that move the world. Our 16,000 team members can help solve any logistics, transport, or supply chain challenge – big or small. We have been supporting our customers for more than 130 years. Today, we support more than 20,000 customers worldwide with 500 sites in 29 markets, and a forwarding network spanning 150 countries. We are proudly part of Japan Post — www.tollgroup.com What moves you? At Toll, you can help play a vital role in delivering what matters. From food, fuel, medicine and rescue services, we keep businesses and communities thriving. Every day brings change. We see that as an opportunity. To be curious. To ask the right questions. And build meaningful connections. Because finding new ways to solve problems is what we do. With a bold vision to expand our global reach, our 16,000+ people bring a passion for progress. We collaborate in friendly, caring teams, supported by approachable leaders who give us the autonomy to quickly make decisions with impact. Learn and grow with industry-leading training, alongside talented experts. Feel empowered to take on diverse challenges and new responsibilities to move you, our customers, and our world further.

Aramex

aramex.com

Founded in 1982, Aramex has emerged as a global leader in logistics and transportation, renowned for its innovative services tailored to businesses and consumers. As a listed company on the Dubai Financial Market (since 2005) and headquartered in the UAE, our strategic location facilitates extensive customer reach worldwide, bridging the gap between East and West. With operations in 600+ cities across 70 countries, Aramex employs over 16,000 professionals. Our success is attributed to four distinct business products that provide scalable, diversified, and end-to- end services for customers. These products are: • International Express, encompassing Aramex's Parcel Forwarding Business (Shop & Ship and MyUS). • Domestic Express • Freight Forwarding • Logistics & Supply Chain Solutions Sustainability is at the core of our vision and mission. To build a truly sustainable business, we leverage our core competencies to make a positive impact as responsible members of the communities we serve. Through partnerships with local and international organizations, we strive to expand our reach and benefit more individuals through targeted programs and initiatives, ensuring long-term positive change and community development. For more information, please visit us: www.aramex.com

DB Schenker

dbschenker.com

At DB Schenker, we're not just about logistics; we're about understanding what truly matters to you. As a global leader in transportation and logistics, we're dedicated to supporting industries and businesses worldwide in the seamless exchange of goods. Our integrated approach ensures that every step of the supply chain is optimized for success, from land transport to air and ocean freight, contract logistics, and supply chain management. We operate at the heart of crucial intersections, where the flow of goods meets the demands of industry. Our top positions in automotive, technology, consumer goods, trade fair logistics, special transports, and special events logistics demonstrate our commitment to delivering tailored solutions that meet the unique needs of each sector. With a global team of over 76,100 talented individuals, DB Schenker offers unparalleled opportunities for growth and challenge. If professional development truly matters to you, then seize the chance to elevate your career in logistics and transportation by joining us now! #Logistics #WhatMattersToYou Learn more: Information about DB Schenker: https://www.dbschenker.com/global Careers at DB Schenker: https://www.dbschenker.com/global/careers Impressum & Legal notice: https://www.dbschenker.com/global/meta/legal

GEODIS

geodis.com

GEODIS is a leading global logistics provider acknowledged for its expertise across all aspects of the supply chain. As a growth partner to its clients, GEODIS specializes in four lines of business: Global Freight Forwarding, Global Contract Logistics, Distribution & Express Transport, and European Road Network. With a global network spanning nearly 170 countries and more than 49,400 employees, GEODIS is ranked no. 5 in its sector across the world. In 2022, GEODIS generated €13.7 billion in revenue. GEODIS is a company owned by SNCF group. 

DHL Supply Chain

logistics.dhl

As the world’s largest contract logistics specialist, we create competitive advantage for customers through customized logistics solutions based on globally standardized warehousing, transportation and integrated services components. We bring sector expertise, global scale and local knowledge to design and manage supply chains from raw materials and manufacturing to finished goods delivery and return services.

Loading…

NEWS

Pickup CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 16, 2026 08:00 AM

Russian “pick-up artist” case: Online content is traceable, but Ghana needs stronger digital rights awareness – Cybersecurity expert

Cybersecurity Experts Association of Ghana says widely shared online content can still be traced and preserved for investigations.

Read Article

February 04, 2026 03:34 PM

Some ELDs May Present Cybersecurity Risk

Electronic logging devices may be a security threat – especially lower-cost devices from smaller providers, according to Glenn Atkinson,...

Read Article

January 07, 2026 08:00 AM

Cybersecurity threats to transportation sector growing more complex

Social engineering remained the primary cause of security incidents, but the sophistication and speed of these campaigns increased dramatically.

Read Article

January 06, 2026 08:00 AM

Inside a $400,000 Lobster Cargo Theft and What It Signals for Supply Chain Risk

On December 30th, 2025, $400,000 of lobster was stolen before it arrived at its Midwest Costco destinations. A rising trend impacting supply...

Read Article

December 09, 2025 08:00 AM

Grim future: only humanoids in the building

We should probably take it with a pinch of salt, but Recorded Future, a cybersecurity firm, predicts that we might soon live with more than...

Read Article

December 08, 2025 08:00 AM

Chagrin Falls adopts cybersecurity policy, tackles snow removal

The newly established cybersecurity ordinance is the village's response to Ohio House Bill 96, which requires all government agencies in the...

Read Article

November 13, 2025 08:00 AM

You Could Be Hacked By A Single WhatsApp Call And You Don’t Even Have To Pick Up

The UAE Cybersecurity Council dropped a warning. Hackers can break into your phone with a single WhatsApp call, even if you don't pick up.

Read Article

November 06, 2025 08:00 AM

Cargo Theft Goes Digital as Cybercrime Invades the Supply Chain

Highlights. Cybercriminals are exploiting digital vulnerabilities in freight systems to hijack cargo, leading to an estimated $35 billion in...

Read Article

October 20, 2025 07:00 AM

Teens’ £2b attack on Jaguar Land Rover could be UK’s most costly hack

World · Europe · Cybersecurity. Teens' £2b attack on Jaguar Land Rover could be UK's most costly hack. Conditions are ripe for teenage...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…