What is the official website of Roche ?

The official website of Roche is http://www.roche.com/.

What is Roche's cybersecurity risk score?

Roche has an AI-generated cybersecurity risk score of 835 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has Roche experienced?

According to Rankiteo, Roche currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Roche been affected by any supply chain cyber incidents ?

According to Rankiteo, Roche has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Roche have SOC 2 Type 1 certification ?

According to Rankiteo, Roche is not certified under SOC 2 Type 1.

Does Roche have SOC 2 Type 2 certification ?

According to Rankiteo, Roche does not hold a SOC 2 Type 2 certification.

Does Roche comply with GDPR ?

According to Rankiteo, Roche is not listed as GDPR compliant.

Does Roche have PCI DSS certification ?

According to Rankiteo, Roche does not currently maintain PCI DSS compliance.

Does Roche comply with HIPAA ?

According to Rankiteo, Roche is not compliant with HIPAA regulations.

Does Roche have ISO 27001 certification ?

According to Rankiteo,Roche is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Roche operate in ?

Roche operates primarily in the Biotechnology Research industry.

How many employees does Roche have ?

Roche employs approximately 103,689 people worldwide.

Does Roche own any subsidiaries ?

Roche presently has no subsidiaries across any sectors.

How many LinkedIn followers does Roche have ?

Roche's official LinkedIn profile has approximately 4,227,329 followers.

What is the NAICS classification code for Roche ?

Roche is classified under the NAICS code 541714, which corresponds to Research and Development in Biotechnology (except Nanobiotechnology).

Does Roche have a Crunchbase profile ?

Yes, Roche has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/roche.

Does Roche have a LinkedIn profile ?

Yes, Roche maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/roche.

How many cybersecurity incidents has Roche experienced ?

As of August 3, 2026, Rankiteo reports that Roche has not experienced any cybersecurity incidents.

How many peer or competitor companies does Roche have ?

Roche has an estimated 4,735 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Roche

Boost Score +25 with badge (5 left)

835

/1000

Good

860

/1000

Very Good

Roche Vendor Cyber Rating & Cyber Score

roche.com

cb in

Add Your Compliance Badge

Roche is a global pioneer in pharmaceuticals and diagnostics focused on advancing science to improve people’s lives. The combined strengths of pharmaceuticals and diagnostics under one roof have made Roche the leader in personalised healthcare – a strategy that aims to fit the right treatment to each patient in the best way possible. Roche is the world’s largest biotech company, with truly differentiated medicines in oncology, immunology, infectious diseases, ophthalmology and diseases of the central nervous system. Roche is also the world leader in in vitro diagnostics and tissue-based cancer diagnostics, and a frontrunner in diabetes management. Founded in 1896, Roche continues to search for better ways to prevent, diagnose and treat

Roche A.I CyberSecurity Scoring

Scoring History

Roche

Roche CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Roche Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Roche

Incidents vs Biotechnology Research Industry Avg (This Year)

No incidents recorded for Roche in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Roche in 2026.

Incident Types Roche vs Biotechnology Research Industry Avg (This Year)

No incidents recorded for Roche in 2026.

Incident History - Roche (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Roche Subsidiaries

Roche

Biotechnology Research

Website: http://www.roche.com/

Company Size: 10,001+ employees

GenentechBiotechnology Research

Genentech MedicalBiotechnology Research

Roche MéxicoPharmaceutical Manufacturing

Roche Diagnostics USABiotechnology Research

Roche Middle EastBiotechnology Research

Roche DeutschlandBiotechnologieforschung

Loading…

Roche Similar Companies

bioMérieux

biomerieux.com

A family-owned company, bioMérieux has grown to become a world leader in the field of in vitro diagnostics. Our entrepreneurial adventure, begun over a century ago, is driven by an unrelenting commitment to improve public health worldwide. Since 1963, we've been paving the way in the field of in vitro diagnostics and have contributed greatly to improving public health and making the world a healthier place. The solutions that our teams imagine, develop and manufacture are key to enable healthcare professionals and industry players to make confident decisions to improve patient outcome and ensure consumer safety.

ICON plc

iconplc.com

Since our foundation in Dublin, Ireland in 1990, our mission has been to help our clients to accelerate the development of drugs and devices that save lives and improve quality of life. We do this by delivering best in class information, solutions and performance, with an unyielding focus on quality at all times. We offer a full range of consulting, development and commercialisation services from a global network of offices in 53 countries. We focus our innovation on the factors that are critical to our clients – reducing time to market, reducing cost, and increasing quality – and our global team of experts has extensive experience in a broad range of therapeutic areas.

Charles River Laboratories

criver.com

At Charles River, we are guided by our strong purpose—to create healthier lives—which centers around the patients who rely on the therapeutics we help to develop, the animals in our care, to our planet, and to the passionate and skilled people who are at the heart of our organization and make it all possible. #DrugDiscovery #Biotech #Biotechnology #Pharmaceuticals #CRL

Fortrea

fortrea.com

Fortrea (Nasdaq: FTRE) is a leading global clinical research organization (CRO) dedicated to providing innovative clinical development solutions to the life sciences industry. With over 30 years of clinical research experience, Fortrea has evolved from Covance and Labcorp into a pureplay CRO built for biotech, biopharma, medical device and diagnostic innovators. Fortrea collaborates with both emerging and established companies to deliver agile, fit-for-purpose full service (FSO), functional service (FSP) and hybrid solutions. Fortrea provides comprehensive Phase I-IV clinical trial management, clinical pharmacology, and consulting services, backed by deep experience in more than 20 therapeutic areas. Operating in approximately 100 countries, our diverse and talented team brings scientific rigor, operational excellence, and a strong investigator site network to every trial. By combining the best of our legacy experience with forward-thinking innovation, Fortrea brings predictability to clinical trial execution and helps transform aspirations into outcomes. Together, exceptional is possible. Learn more at Fortrea.com

Amgen

amgen.com

Amgen harnesses the best of biology and technology to fight the world’s toughest diseases, and make people’s lives easier, fuller and longer. We helped establish the biotechnology industry, and we remain on the cutting-edge of innovation, using technology and human genetic data to push beyond what’s known today. Our investment in research and development has yielded a robust pipeline that builds on our existing portfolio of medicines to treat cancer, heart disease, osteoporosis, inflammatory diseases and rare diseases. Amgen is one of 30 companies comprising the Dow Jones Industrial Average®, and part of the Nasdaq-100 Index®. In 2024, Amgen was named one of the “World’s Most Innovative Companies” by Fast Company and one of “America’s Best Large Employers” by Forbes. For more information, visit Amgen.com and follow us on X, LinkedIn, Instagram, TikTok, YouTube and Threads. 🔗 Community Guidelines: https://wwwext.amgen.com/community-guidelines 🔗Global Privacy Statement Directory: www.amgen.com/dp Special Advisory: Please be cautious of scam recruitment offers claiming to be from Amgen. Such scams may come from various sources, including fake websites and/or unsolicited emails and seek to obtain personal data or payment from victims by offering jobs that do not exist. Please be advised that Amgen would never ask for payment to progress a job application. When in doubt, please check to see if the position in question is posted on this website before applying. Additionally, please report any suspicious recruiting activity to https://complaint.ic3.gov/ and thank you for your assistance.

Thermo Fisher Scientific

thermofisher.com

About Thermo Fisher Scientific Thermo Fisher Scientific Inc. is the world leader in serving science, with annual revenue of approximately $40 billion. Our Mission is to enable our customers to make the world healthier, cleaner and safer. Whether our customers are accelerating life sciences research, solving complex analytical challenges, increasing productivity in their laboratories, improving patient health through diagnostics or the development and manufacture of life-changing therapies, we are here to support them. Our global team delivers an unrivaled combination of innovative technologies, purchasing convenience and pharmaceutical services through our industry-leading brands, including Thermo Scientific, Applied Biosystems, Invitrogen, Fisher Scientific, Unity Lab Services, Patheon and PPD. For more information, please visit www.thermofisher.com.

CSL

cb csl.com

CSL is a leading global biopharma company with a dynamic portfolio of lifesaving medicines, including those that treat haemophilia and immune deficiencies, vaccines to prevent influenza, and therapies in iron deficiency, dialysis and nephrology. Since our start in 1916, we have been driven by our promise to save lives using the latest technologies. Today, CSL – including our businesses, CSL Behring, CSL Seqirus, and CSL Vifor – provides lifesaving products to patients in more than 100 countries and employs 29,000+ people. Our unique combination of commercial strength, R&D focus and operational excellence enables us to identify, develop and deliver innovations so our patients can live life to the fullest. See our community guidelines: https://bit.ly/3Bs17Ra

Avantor

cb avantorsciences.com

Avantor® is a leading global provider of mission-critical products and services to customers in the biopharma, healthcare, education & government, and advanced technologies & applied materials industries. Our portfolio is used in virtually every stage of the most important research, development and production activities in the industries we serve. Our global footprint enables us to serve more than 300,000 customer locations and gives us extensive access to research laboratories and scientists in more than 180 countries. We set science in motion to create a better world. More than 14,500 strong, our associates are passionate about our mission to set science in motion to create a better world. We share enthusiasm for innovation, excellence, and achievement. Whether we are collaborating with our customers to advance science or solve multifaceted problems, we help them reach their goals more efficiently and effectively. Visit our website to learn more about Avantor.

Genentech

gene.com

About Genentech We're passionate about finding solutions for people facing the world's most difficult-to-treat conditions. That is why we use cutting-edge science to create and deliver innovative medicines around the globe. To us, science is personal. Making a difference in the lives of millions starts when you make a change in yours. If you’d like to join our team, view our openings at gene.com/careers. Our patient resource center is dedicated to getting patients and caregivers to the right resources. You can reach them at 1 (877) GENENTECH (436-3683) Monday-Friday, 6am-5pm PST or [email protected]. Community Guidelines: 1. We want to foster positive conversation around the issues we are passionate about. To that end, we remove profanity, content that contains threatening language, content that is aimed at private individuals, personal information, and repeated unwanted messages. 2. Don’t mention any medicines by name — ours or anyone else’s. Because of the fair balance rules governing our industry, we cannot post any comments that reference any pharmaceutical brand, product, or service. Please do not mention any specific medicines by name, or include any links to third party sites in your comments. 3. This isn’t the place to report or discuss side effects. This site is not intended as a forum for reporting side effects experienced while taking a Genentech product. Instead, you should report any side effects to Genentech Drug Safety at 1-888-835-2555. You can also report side effects of any prescription product directly to the FDA at 1-800-FDA-1088 or by visiting www.FDA.gov/medwatch. 4. Don’t pitch your product or service. Please don't use our page as a place to promote your product or pitch your services. Please also avoid posting links to external sites. We reserve the right to remove any posts that are deemed promotional.

Loading…

NEWS

Roche CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

April 20, 2026 03:50 PM

AdvaMed® Cybersecurity Summit

Join cyber experts for the 2026 Cybersecurity Summit to address the latest industry issues and FDA requirements.

Read Article

March 24, 2026 07:00 AM

Crogl Report Finds Enterprises Facing 16 Cyber Attacks a Year Amid Alert Overload

Enterprises face 16 cyber attacks a year and 4000+ daily alerts, as Crogl warns alert overload and AI-driven threats are pushing SecOps to...

Read Article

March 05, 2026 08:00 AM

SAP and Uptycs Launch Hybrid AI Security Model for Enterprise

SAP and Uptycs integrate verifiable AI analysts to improve enterprise security, transparency, and governance in cloud environments.

Read Article

December 01, 2025 08:00 AM

Cybersecurity leaders confront new risk realities as Black Hat MEA returns to Riyadh next week

The global cybersecurity community returns to Riyadh next week as Black Hat MEA opens its doors from 2 to 4 December at the Riyadh...

Read Article

October 14, 2025 07:00 AM

Cybersecurity jobs available right now: October 14, 2025

First Citizens Bank | USA | Remote – No longer accepting applications. As a Cyber Security Analyst, you will be responsible for developing...

Read Article

June 26, 2025 07:00 AM

The Chairman of the Joint Chiefs of Staff, General Dan Caine, to Speak at 16

Joint Chiefs of Staff Chairman Gen. Caine to speak at the Billington CyberSecurity Summit--Sept 9-12 in DC--about key cyber threats facing...

Read Article

May 27, 2025 07:00 AM

How These Cyber Heroes Are Securing Our Digital World

Infosecurity Europe 2025 is a call to action: the future of cybersecurity is in our hands, and together we can take action to secure it.

Read Article

December 24, 2024 08:00 AM

Breaking Into Cybersecurity: Essential Skills and Certifications in Indianapolis

Explore the essential skills and top certifications needed to break into cybersecurity in Indianapolis, Indiana. Kickstart your career in...

Read Article

October 23, 2024 07:00 AM

Top 10 Cyber Leaders in EMEA

We consider leading cyber leaders in the EMEA who are committed to developing security policies to protect critical data amid an onslaught...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18577

SUMMARY

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-10848

SUMMARY

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7)

cvss3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

2.2

REFERENCES

CVE-2026-9856

SUMMARY

A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-65321

SUMMARY

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-10774

SUMMARY

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 2.4)

cvss3

Base Score: 2.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

0.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…