Company Details
poltrona-frau-group
221
24,964
337
poltronafraugroup.com
0
POL_6686350
In-progress

Poltrona Frau Group Company CyberSecurity Posture
poltronafraugroup.comA story that goes back to 1912 with the foundation of Poltrona Frau, followed by the creation of Cassina in 1927, and Cappellini in 1946. 2005 saw the creation of the Poltrona Frau Group, the leading international group in the high-end furniture sector that comprises Poltrona Frau, Cassina and Cappellini. Over the years Poltrona Frau Group has underlined its ability to interpret, but above all anticipate the evolution of contemporary living. Thanks to the far-sightedness of entrepreneurs and managers who, down the years, have understood the importance of being bold, of continuous experiment, and of challenging the rules, the Group is now a point of reference in the high-end furniture market for the most important international designers and architects.
Company Details
poltrona-frau-group
221
24,964
337
poltronafraugroup.com
0
POL_6686350
In-progress
Between 750 and 799

PFG Global Score (TPRM)XXXX



No incidents recorded for Poltrona Frau Group in 2025.
No incidents recorded for Poltrona Frau Group in 2025.
No incidents recorded for Poltrona Frau Group in 2025.
PFG cyber incidents detection timeline including parent company and subsidiaries

A story that goes back to 1912 with the foundation of Poltrona Frau, followed by the creation of Cassina in 1927, and Cappellini in 1946. 2005 saw the creation of the Poltrona Frau Group, the leading international group in the high-end furniture sector that comprises Poltrona Frau, Cassina and Cappellini. Over the years Poltrona Frau Group has underlined its ability to interpret, but above all anticipate the evolution of contemporary living. Thanks to the far-sightedness of entrepreneurs and managers who, down the years, have understood the importance of being bold, of continuous experiment, and of challenging the rules, the Group is now a point of reference in the high-end furniture market for the most important international designers and architects.


HDR is an employee-owned design firm specializing in engineering, architecture, environmental and construction services. We’re ranked No. 6 among the world’s design firms and we’re the largest healthcare design firm. Led by the strength of our values and a culture shaped by employee ownership, we n

Dar is one of the world’s leading consultancies, providing design, planning, engineering, sustainability consulting, digital solutions and services, and project management for buildings, cities, transportation, civil infrastructure, water, and the environment. We are a global community of talented
.png)
~Reaffirms Its Leadership as a CERT-In Empanelled Cybersecurity Partner for India's Digital Future~. New Delhi, India – November 28,...
AI is transforming cybersecurity workflows, from threat modeling to vulnerability prioritization, said Bill Chen, CISO at Natera, underlining the need for...
An update from Cyviz AS ( ($DE:8P9) ) is now available. Cyviz AS has entered into a new partner contract with IBM to modernize and upgrade...
Dubai, UAE : RNTrust Group announces a high-level GCC Cybersecurity Summit taking place in Dubai on Wednesday, December 10, 2025.
A new Unit 42 report warns that underground AI models like WormGPT and KawaiiGPT are lowering the skill barrier for cybercrime,...
A recent Gartner survey found that more than half of government CIOs outside the US expect IT budgets to rise in 2026, with cybersecurity,...
AUTOCRYPT announced that in 2026 it would focus its efforts to establish a comprehensive cybersecurity framework in the MENA region,...
The report warns that poorly designed, misaligned, or overly prescriptive regulation can create unnecessary costs, divert resources from...
The Cybersecurity Risk Management Market: a comprehensive new analysis of global statistics and emerging trends, offering clear insights...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Poltrona Frau Group is http://www.poltronafraugroup.com.
According to Rankiteo, Poltrona Frau Group’s AI-generated cybersecurity score is 756, reflecting their Fair security posture.
According to Rankiteo, Poltrona Frau Group currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Poltrona Frau Group is not certified under SOC 2 Type 1.
According to Rankiteo, Poltrona Frau Group does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Poltrona Frau Group is not listed as GDPR compliant.
According to Rankiteo, Poltrona Frau Group does not currently maintain PCI DSS compliance.
According to Rankiteo, Poltrona Frau Group is not compliant with HIPAA regulations.
According to Rankiteo,Poltrona Frau Group is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Poltrona Frau Group operates primarily in the Furniture and Home Furnishings Manufacturing industry.
Poltrona Frau Group employs approximately 221 people worldwide.
Poltrona Frau Group presently has no subsidiaries across any sectors.
Poltrona Frau Group’s official LinkedIn profile has approximately 24,964 followers.
Poltrona Frau Group is classified under the NAICS code 337, which corresponds to Furniture and Related Product Manufacturing.
No, Poltrona Frau Group does not have a profile on Crunchbase.
Yes, Poltrona Frau Group maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/poltrona-frau-group.
As of November 28, 2025, Rankiteo reports that Poltrona Frau Group has not experienced any cybersecurity incidents.
Poltrona Frau Group has an estimated 2,617 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, Poltrona Frau Group has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.
Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).
Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint
Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.
Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.