What is the official website of Pon ?

The official website of Pon is http://www.pon.com.

What is Pon's cybersecurity risk score?

Pon has an AI-generated cybersecurity risk score of 764 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Pon experienced?

According to Rankiteo, Pon currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Pon been affected by any supply chain cyber incidents ?

According to Rankiteo, Pon has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Pon have SOC 2 Type 1 certification ?

According to Rankiteo, Pon is not certified under SOC 2 Type 1.

Does Pon have SOC 2 Type 2 certification ?

According to Rankiteo, Pon does not hold a SOC 2 Type 2 certification.

Does Pon comply with GDPR ?

According to Rankiteo, Pon is not listed as GDPR compliant.

Does Pon have PCI DSS certification ?

According to Rankiteo, Pon does not currently maintain PCI DSS compliance.

Does Pon comply with HIPAA ?

According to Rankiteo, Pon is not compliant with HIPAA regulations.

Does Pon have ISO 27001 certification ?

According to Rankiteo,Pon is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Pon operate in ?

Pon operates primarily in the International Trade and Development industry.

How many employees does Pon have ?

Pon employs approximately 3,713 people worldwide.

Does Pon own any subsidiaries ?

Pon presently has no subsidiaries across any sectors.

How many LinkedIn followers does Pon have ?

Pon's official LinkedIn profile has approximately 32,215 followers.

What is the NAICS classification code for Pon ?

Pon is classified under the NAICS code 522293, which corresponds to International Trade Financing.

Does Pon have a Crunchbase profile ?

No, Pon does not have a profile on Crunchbase.

Does Pon have a LinkedIn profile ?

Yes, Pon maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/pon.

How many cybersecurity incidents has Pon experienced ?

As of July 2, 2026, Rankiteo reports that Pon has not experienced any cybersecurity incidents.

How many peer or competitor companies does Pon have ?

Pon has an estimated 2,239 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Pon

Boost Score +25 with badge (5 left)

764

/1000

Fair

789

/1000

Fair

Pon Vendor Cyber Rating & Cyber Score

pon.com

Add Your Compliance Badge

Volkswagen, Swapfiets, Audi, Gazelle, Caterpillar en Greenwheels. Inderdaad, bekende merken. Maar wist je ook dat ze bij Pon horen? Pon is een van Nederlands grootste familiebedrijven en een internationale handels- en serviceorganisatie op het gebied van mobiliteit. Wereldwijd werken bij Pon 13.800 collega's verspreid over 110 bedrijven in 34 landen. De mensen van Pon vormen het DNA van ons bedrijf. Onze mensen hebben de passie hebben om te presteren, krijgen ons vertrouwen en vrijheid. Plezier hebben in het werk is bij ons heel belangrijk, net als het nemen van de verantwoordelijkheid voor de manier waarop jij je werk uitvoert. Dat is ook de manier waarop we iedere dag met elkaar en met onze klanten en leveranciers omgaan.

Pon A.I CyberSecurity Scoring

Scoring History

Pon

Pon CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Pon Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Pon

Incidents vs International Trade and Development Industry Avg (This Year)

No incidents recorded for Pon in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Pon in 2026.

Incident Types Pon vs International Trade and Development Industry Avg (This Year)

No incidents recorded for Pon in 2026.

Incident History - Pon (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Pon Subsidiaries

Pon

International Trade and Development

Website: http://www.pon.com

Company Size: 3,713

CervéloSporting Goods Manufacturing

Pon AutomotiveMotor Vehicle Manufacturing

Audi NederlandProductie motorvoertuigen

Porsche NederlandAuto-industrie

Volkswagen NederlandProductie motorvoertuigen

Škoda NederlandProductie motorvoertuigen

Pon Business MobilityProductie motorvoertuigen

SEAT NederlandProductie motorvoertuigen

W&O, a Vytl CompanyMaritime Transportation

EMI MarineMaritime Transportation

Georg Fischer Engineered Piping SystemsMaritime

W&O for: Naval AchitectsMaritime Transportation

Koninklijke GazelleManufacturing

Pon DealerAutomotive

Loading…

Pon Similar Companies

Marubeni Corporation

marubeni.com

Marubeni Corporation (TSE securities code: 8002) is one of Japan’s largest trading companies (sogo shosha) with more than 165 years of history. Headquartered in Tokyo, Marubeni continues to expand its businesses across the globe, with 130 branches and offices worldwide. Marubeni is involved in the handling of products and provision of services in a broad range of sectors, with our 50,000+ employees across our Group companies engaging in business as corporate staff or through one of our many Business Divisions: Lifestyle, Food & Agri Business, Metals & Mineral Resources, Energy & Chemicals, Power & Infrastructure Services, Finance, Leasing & Real Estate Business, Aerospace & Mobility, Next Generation Business Development, and Next Generation Corporate Development. In these areas, Marubeni’s business encompasses importing and exporting, as well as transactions in the Japanese market, as well as investment, development, and management on a global level. For more information on our business in these areas, please visit https://www.marubeni.com/en/business/ Marubeni’s vision for the future is exemplified by the Marubeni’s “Global crossvalue platform,” wherein Marubeni will anticipate challenges and deliver innovative solutions by breaking down barriers as well as generate new value combining strengths across the Marubeni Group. For more details on the Global crossvalue platform, please see https://www.marubeni.com/en/company/gcp/ For more information on Marubeni in general or on our various businesses, please visit our website.

ALS

alsglobal.com

A global leader in testing, ALS provides comprehensive testing solutions to clients in a wide range of industries around the world. Using state-of-the-art technologies and innovative methodologies, our dedicated international teams deliver highest-quality testing services and personalized solutions supported by local expertise. We help our clients leverage the power of data-driven insights for a safer and healthier world.

Intertek

cb intertek.com

Intertek is a leading Total Quality Assurance provider to industries worldwide. Our network of more than 1,000 laboratories and offices in more than 100 countries, delivers innovative and bespoke Assurance, Testing, Inspection and Certification solutions for our customers' operations and supply chains. Intertek is a purpose-led company to Bring Quality, Safety and Sustainability to Life. We provide 24/7 mission-critical quality assurance solutions to our clients to ensure that they can operate with well-functioning supply chains in each of their operations. Our Customer Promise is: Intertek Total Quality Assurance expertise, delivered consistently, with precision, pace and passion, enabling our customers to power ahead safely. Find all of our Intertek locations at: https://www.intertek.com/contact/

COTO

coto.com.ar

¿Sabés lo importante que es para nosotros que formes parte de COTO? Te proponemos superarte con proyectos arquitectónicos increíbles como, por ejemplo, la construcción de un mega centro comercial, o profesionalizarte en Comercio Exterior interactuando con los mercados del mundo más importantes. También podés ser parte de nuestra área Comercial y estar en contacto con los principales proveedores nacionales e internacionales o bien unirte a Recursos Humanos que trabaja con pasión y compromiso en la mejora continua de nuestra propuesta de valor para más de 23.000 colaboradores. Y si te gusta innovar en tecnología, nuestro equipo IT te desafía a desarrollar grandes productos que marcan la diferencia en la experiencia de nuestros clientes, tanto internos como externos. ¿Querés aportar tus conocimientos en la producción ganadera o frigorífica? ¿O tal vez ser uno de nuestros ingenieros en procesos industriales propios? COTO es mucho más que un supermercado y vos podés hacer mucho más de lo que imaginás. Comenzamos como un sueño familiar hace más de 50 años, sin saber que llegaríamos tan lejos. Hoy, somos una Compañía de Producción y Comercialización Nacional e Internacional integrada por Centros Comerciales y Shoppings propios, Producción y Comercialización Industrial, Desarrollos Tecnológicos y proyectos de Real Estate en Argentina y el mundo. Te invitamos a ser parte de nuestro equipo, para que sigas soñando y creciendo cada vez más, como lo hacemos nosotros. ¡Sumate!

John Swire & Sons (H.K.) Ltd.

swire.com

Swire is a highly diversified global business group which has been in operation for over 200 years. It employs over 121,000 people across the world. Swire Group’s businesses span Property, Beverages & Food Chain, Aviation, Marine Services, Trading & Industrial, as well as Healthcare. Whilst Swire operates globally, its main sphere of operations is in Asia and to a lesser, but nevertheless significant, extent in North America and Europe. Swire’s wholly owned shipping businesses trade worldwide, but the major sphere of their activity is in the Pacific and Australasia.

Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH

cb giz.de

As a service provider in the field of international cooperation for sustainable development and international education work, we are dedicated to shaping a future worth living around the world. GIZ has over 50 years of experience in a wide variety of areas, including economic development and employment promotion, energy and the environment, and peace and security. The diverse expertise of our federal enterprise is in demand around the globe – from the German Government, European Union institutions, the United Nations, the private sector and governments of other countries. We work with businesses, civil society actors and research institutions, fostering successful interaction between development policy and other policy fields and areas of activity. Our main commissioning party is the German Federal Ministry for Economic Cooperation and Development (BMZ). The commissioning parties and cooperation partners all place their trust in GIZ, and we work with them to generate ideas for political, social and economic change, to develop these into concrete plans and to implement them. Since we are a public-benefit federal enterprise, German and European values are central to our work. Together with our partners in national governments worldwide and cooperation partners from the worlds of business, research and civil society, we work flexibly to deliver effective solutions that offer people better prospects and sustainably improve their living conditions. The registered offices of GIZ are in Bonn and Eschborn (Germany). Our video: DE: https://youtu.be/KCb9XVCZzWQ?si=Cwm0ArGKq6VQD83q EN: https://youtu.be/XIMLHv17Pns?si=UrRGg8WANlZ-j8og Registration information: https://www.giz.de/en/html/registration_information.html Our netiquette: https://www.giz.de/en/mediacenter/93951.html Data privacy statement: https://www.giz.de/en/html/data_protection.html

The World Bank

worldbank.org

The World Bank is a vital source of financial and technical assistance to developing countries around the world. Our vision is to create a world free of poverty on a livable planet. We are not a bank in the common sense; we are made up of two unique development institutions owned by 189 member countries: the International Bank for Reconstruction and Development (IBRD) and the International Development Association (IDA). Each institution plays a different but collaborative role in advancing the vision of inclusive and sustainable globalization. The IBRD aims to reduce poverty in middle-income and creditworthy poorer countries, while IDA focuses on the world's poorest countries. Their work is complemented by that of the International Finance Corporation (IFC), Multilateral Investment Guarantee Agency (MIGA) and the International Centre for the Settlement of Investment Disputes (ICSID). Together, we provide low-interest loans, interest-free credits and grants to developing countries for a wide array of purposes that include investments in education, health, public administration, infrastructure, financial and private sector development, agriculture and environmental and natural resource management.

Loading…

NEWS

Pon CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 24, 2025 08:30 PM

TCL, F-Secure Partnership Strengthens Broadband Cybersecurity & 5G Connectivity

TCL and F-Secure have formalized a strategic alliance as part of Network X 2025, merging TCL's excellence in connectivity solutions with...

Read Article

October 14, 2025 07:00 AM

TCL and F-Secure Announce Strategic Partnership to Set a New Standard for Secure and Seamless Connectivity

PARIS, Oct. 14, 2025 /PRNewswire/ -- At Network X 2025, TCL, a global leader in display technology across feature-rich smartphones, tablets,...

Read Article

October 10, 2025 07:00 AM

Nokia says operators now have a faster way to 50G PON

Nokia said it's offering operators a path to 50 Gbps PON speeds without costly network upgrades. The vendor announced this week it...

Read Article

October 08, 2025 07:00 AM

Nokia pitches first 50G PON solution with quantum safety warning

Nokia has unveiled a 50G PON solution designed to ensure quantum-safe measures in passive optical networks. Claimed by Nokia to be a world...

Read Article

August 26, 2025 07:00 AM

From the Air Force to Pondurance, Doug Howard Stays Cool Under Pressure

The problems are new, but Pondurance isn't. As Chief Executive Officer Doug Howard says, the company isn't a “fly-by-night” entry into the...

Read Article

July 22, 2025 07:00 AM

Vodafonewatch Analyst Briefing: deals driving network, security upgrades

Latest from Vodafone, including a spectrum fee reprieve; SecOps potential with $1bn partner Google Cloud; DOCSIS development in the...

Read Article

June 16, 2025 07:00 AM

Pondurance Ranked #8 Top Cybersecurity Company of 2025

Pondurance, the leading provider of managed detection and response (MDR) cybersecurity services designed to minimize breach risks, today announced that they...

Read Article

May 23, 2025 07:00 AM

What’s up with… Swisscom, Netomnia, optical systems spending

Swisscom launches embedded security solutionNetomnia deploys Adtran's 50Gbit/s PON gearDatacentre interconnect (DCI) investments drive...

Read Article

May 04, 2025 07:00 AM

Securing Edge Computing on PON with Open-Source Software: Lessons from Industrial R&D

In an industrial R&D project, researchers secured the GENIO platform for Passive Optical Networks (PON) using open-source software,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55790

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.22 and 4.0.0-RC1 through 4.17.15, an attacker with only a GitHub account can plant a JavaScript payload in a craftcms/cms issue title. When a Craft admin uses the CraftSupport widget’s "Give feedback" screen and types a search term that returns the poisoned issue, the payload executes in the admin’s control panel session. No control panel account or elevated privileges are required on the attacker’s side. This issue has been fixed in versions 4.17.16 and 5.9.23.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50284

SUMMARY

Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder() only requires the deleteAssets:<volume-uid> permission for the target folder. It never enforces deletePeerAssets:<volume-uid>, even though Assets::deleteFoldersByIds() cascades deletion to every descendant folder and every asset inside, regardless of the uploader's assigned privileges. A low-privilege user who has been granted folder-management rights on a shared volume can therefore destroy assets uploaded by other users (peer assets), bypassing the per-asset peer-permission check that the sibling actionDeleteAsset endpoint correctly applies. This issue has been fixed in versions 4.17.15 and 5.9.22.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-50283

SUMMARY

Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in the AssetsController::actionReplaceFile that can delete a source asset without source delete permission by supplying both assetId and sourceAssetId. AssetsController::actionReplaceFile() supports replacing a target asset file using another existing asset as the source. The action loads: assetId -> $assetToReplace and sourceAssetId -> $sourceAsset, then enforces replace permissions using ($assetToReplace ?: $sourceAsset). When both IDs are provided, this expression resolves to the target asset so no permission check is performed against the source asset volume. When both assets are present, Craft copies the source file into the target and then deletes the source asset. There is no deletion check for for the source asset. An authenticated user who can replace files in one volume can delete assets in another volume where they do not have delete permission, as long as they can obtain a sourceAssetId, leading to broken content references and data loss. This issue has been fixed in versions 4.17.14 and 5.9.21.

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14440

SUMMARY

Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the customer's zone. This auto-managed RRset is permissive by design (e.g. 'issue "letsencrypt.org"' without parameters). On Universal SSL zones, Cloudflare's authoritative DNS serves this auto-managed RRset at query time, superseding any customer-configured CAA records on the zone. When a customer publishes a stricter CAA record using the RFC 8657 accounturi or validationmethods parameters, the Certificate Authority does not observe those parameters when evaluating the served RRset under RFC 8659. As a result, the RFC 8657 account-binding and validation-method-binding protections are not enforced end-to-end on Universal SSL zones. Successful exploitation could result in issuance of a browser-trusted TLS certificate to an attacker, enabling MITM against the affected domain. Exploitation is non-trivial in practice: an attacker would need to hold an ACME account at one of the Certificate Authorities in the served CAA RRset and to simultaneously satisfy domain control validation across the multiple geographically distinct Network Perspectives the CA relies on for Multi-Perspective Issuance Corroboration. Cloudflare prefixes are anycast-announced from hundreds of locations globally, raising the bar against single-vantage-point BGP hijacks. Any resulting misissuance of a browser-trusted certificate is subject to Certificate Transparency logging required by major browsers, and would be visible to CT monitoring. Mitigation: Customers requiring strict RFC 8657 enforcement need to disable Universal SSL on the affected zone. Universal SSL's automatic CAA management and customer-set RFC 8657 accounturi and validationmethods enforcement are mutually exclusive by the nature of the issue, so there is no in-product workaround that preserves both. Certificate Transparency monitoring is recommended for all customers as a general detection control. Credits: David Osipov (ORCID: https://orcid.org/0009-0005-2713-9242), independent researcher

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

cvss4

Base Score: 7.6

Complexity: HIGH

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-14422

SUMMARY

Out of bounds read and write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Published

Date2026-07-01

Updated

Date2026-07-01

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…