Saipem
Company Details
Linkedin ID:
saipem
Website:
Employees number:
25,391
Number of followers:
1,897,220
NAICS:
54139
Industry Type:
Homepage:
saipem.com
IP Addresses:
13
Company ID:
SAI_3062033
Scan Status:
Completed
Saipem Company CyberSecurity Posture
saipem.com
Saipem is a global leader in the engineering and construction of major projects for the energy and infrastructure sectors, both offshore and onshore. Saipem is “One Company” organized into business lines: Asset Based Services, Drilling, Energy Carriers, Offshore Wind, Sustainable Infrastructures, Robotics & Industrialized Solutions. The company has 6 fabrication yards and an offshore fleet of 17 construction vessels owned and 15 drilling rigs, of which 9 owned. Always oriented towards technological innovation, the company’s purpose is “Engineering for a sustainable future”. As such Saipem is committed to supporting its clients on the energy transition pathway towards Net Zero, with increasingly digital means, technologies and processes geared for environmental sustainability. Listed on the Milan Stock Exchange, it is present in more than 50 countries around the world and employs about 30,000 people of over 120 nationalities.
Saipem A.I CyberSecurity Scoring
Saipem Risk Score (AI oriented)Between 750 and 799
Saipem
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
Saipem Global Score (TPRM)XXXX
Saipem
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
Saipem Company CyberSecurity News & History
Past Incidents
0
Attack Types
0
No data available
Saipem Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for Saipem
Incidents vs Engineering Services Industry Average (This Year)
No incidents recorded for Saipem in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for Saipem in 2025.
Incident Types Saipem vs Engineering Services Industry Avg (This Year)
No incidents recorded for Saipem in 2025.
Incident History — Saipem (X = Date, Y = Severity)
Saipem cyber incidents detection timeline including parent company and subsidiaries
Saipem Company Subsidiaries
Saipem is a global leader in the engineering and construction of major projects for the energy and infrastructure sectors, both offshore and onshore. Saipem is “One Company” organized into business lines: Asset Based Services, Drilling, Energy Carriers, Offshore Wind, Sustainable Infrastructures, Robotics & Industrialized Solutions. The company has 6 fabrication yards and an offshore fleet of 17 construction vessels owned and 15 drilling rigs, of which 9 owned. Always oriented towards technological innovation, the company’s purpose is “Engineering for a sustainable future”. As such Saipem is committed to supporting its clients on the energy transition pathway towards Net Zero, with increasingly digital means, technologies and processes geared for environmental sustainability. Listed on the Milan Stock Exchange, it is present in more than 50 countries around the world and employs about 30,000 people of over 120 nationalities.
Loading...
Saipem Similar Companies
Atkins
Atkins is now AtkinsRéalis. Please follow AtkinsRéalis on LinkedIn. We are a world-class engineering services and nuclear organization. We connect people, data and technology to transform the world’s infrastructure and energy systems. Together, with our industry partners and clients, and our glob
We are a leading international service provider to the energy industry, with a diverse client portfolio including many of the world’s leading energy companies. Petrofac designs, builds, manages and maintains oil, gas, refining, petrochemicals and renewable energy infrastructure. Our purpose is to e
ALTEN
𝐀 𝐰𝐨𝐫𝐥𝐝 𝐥𝐞𝐚𝐝𝐞𝐫 𝐢𝐧 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 𝐚𝐧𝐝 𝐈𝐓 𝐒𝐞𝐫𝐯𝐢𝐜𝐞𝐬 ALTEN is committed to meeting the expectations of its stakeholders and anticipating their requirements in the fields of innovation, R&D, and technological information systems. Founded in 1988 and present in 30+ countries, the Group has established its
UGL
UGL is CIMIC Group's specialist end-to-end engineering, services and operations provider. We have a rich history dating back to 1899 and since then we have grown to be a market leader in many of the sectors in which we operate. Working with some of the most important companies and governments in Au
Black & Veatch
Black & Veatch is an employee-owned, global leader in building critical human infrastructure in Energy, Water, Digital Connectivity and Government Services. Since 1915, we have helped our clients improve business operations and the lives of people in over 100 countries through consulting, engineerin
L&T Technology Services
L&T Technology Services (LTTS) is one of the world’s leading engineering and technology service providers. With operations in over 25 countries and a growing annual revenue that now surpasses USD 1.2 billion, we work with organizations who design, develop or deliver products and services. We help
World leader in engineering and R&D services, Capgemini Engineering combines its broad industry knowledge and cutting-edge technologies in digital and software to support the convergence of the physical and digital worlds. Coupled with the capabilities of the rest of the Group, it helps clients to a
We're a global product engineering and digital services company focused on fulfilling our mission of helping the world drive, fly, build, and farm by enabling our customers to realize better products and deliver better experiences. We’re the strategic engineering partner businesses turn to when they
Technip Energies
Technip Energies is a global technology and engineering powerhouse. With leadership positions in LNG, hydrogen, ethylene, sustainable chemistry, and CO2 management, we are contributing to the development of critical markets such as energy, energy derivatives, decarbonization, and circularity. Our
.png)
Saipem CyberSecurity News
December 03, 2025 05:00 AM
Italy - Factors to watch on December 3
The following factors could affect Italian markets on Wednesday.Reuters has not verified the newspaper reports, and cannot vouch for their...
March 27, 2023 07:00 AM
DNV Names Roll Richardsen as Director of Cyber Security in Norway
DNV has appointed Anette Roll Richardsen as Director of its Cyber Security business in Norway.DNV said Roll Richardsen would…
January 29, 2022 04:37 AM
Accenture to help Saipem deliver digital transformation programme
Accenture has been selected by the global energy and construction services firm Saipem to help deliver its global digital transformation programme. Un...
March 18, 2019 07:00 AM
Woodside puts money into cyber security company to protect assets
Australian energy giant Woodside has invested in Sapien Cyber, a Western Australian company specializing in the protection and security of...
December 14, 2018 08:00 AM
New Shamoon Malware Variant Targets Italian Oil and Gas Company
Shamoon is back… one of the most destructive malware families that caused damage to Saudi Arabia's largest oil producer in 2012 and this...
December 14, 2018 08:00 AM
Incident Of The Week: Shamoon Virus Cripples Hundreds Of Computers | Cyber Security Hub
A variant of the notorious Shamoon virus is the culprit behind a cyberattack on Italian oil services firm Saipem, which left between 300 and 400 of its...
December 14, 2018 08:00 AM
Shamoon resurfaces, targeting Italian oil company
The Shamoon virus known for the destructive 2012 attack on Saudi Aramco appears to have hit Italian oil and gas company Saipem.
December 13, 2018 08:00 AM
‘Disruptive’ virus that hit energy companies resurfaces
A crippling computer virus that wiped out tens of thousands of computers at Saudi Aramco six years ago has resurfaced, security researchers...
December 13, 2018 08:00 AM
Shamoon malware attack confirmed by hacked Italian energy firm
Saipem now says an attack on its global servers used the infamous Shamoon program.
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
Saipem CyberSecurity History Information
Official Website of Saipem
The official website of Saipem is http://www.saipem.com.
Saipem’s AI-Generated Cybersecurity Score
According to Rankiteo, Saipem’s AI-generated cybersecurity score is 770, reflecting their Fair security posture.
How many security badges does Saipem’ have ?
According to Rankiteo, Saipem currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does Saipem have SOC 2 Type 1 certification ?
According to Rankiteo, Saipem is not certified under SOC 2 Type 1.
Does Saipem have SOC 2 Type 2 certification ?
According to Rankiteo, Saipem does not hold a SOC 2 Type 2 certification.
Does Saipem comply with GDPR ?
According to Rankiteo, Saipem is not listed as GDPR compliant.
Does Saipem have PCI DSS certification ?
According to Rankiteo, Saipem does not currently maintain PCI DSS compliance.
Does Saipem comply with HIPAA ?
According to Rankiteo, Saipem is not compliant with HIPAA regulations.
Does Saipem have ISO 27001 certification ?
According to Rankiteo,Saipem is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of Saipem
Saipem operates primarily in the Engineering Services industry.
Number of Employees at Saipem
Saipem employs approximately 25,391 people worldwide.
Subsidiaries Owned by Saipem
Saipem presently has no subsidiaries across any sectors.
Saipem’s LinkedIn Followers
Saipem’s official LinkedIn profile has approximately 1,897,220 followers.
NAICS Classification of Saipem
Saipem is classified under the NAICS code 54139, which corresponds to Engineering Services.
Saipem’s Presence on Crunchbase
Yes, Saipem has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/saipem.
Saipem’s Presence on LinkedIn
Yes, Saipem maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/saipem.
Cybersecurity Incidents Involving Saipem
As of December 11, 2025, Rankiteo reports that Saipem has not experienced any cybersecurity incidents.
Number of Peer and Competitor Companies
Saipem has an estimated 1,305 peer or competitor companies worldwide.
Saipem CyberSecurity History Information
How many cyber incidents has Saipem faced ?
Total Incidents: According to Rankiteo, Saipem has faced 0 incidents in the past.
What types of cybersecurity incidents have occurred at Saipem ?
Incident Types: The types of cybersecurity incidents that have occurred include .
Incident Details
What are the most common types of attacks the company has faced ?
Additional Questions
.png)
Latest Global CVEs (Not Company-Specific)
Description
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Risk Information
cvss3
Base: 9.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Description
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Description
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
Risk Information
cvss3
Base: 8.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
Description
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.
Risk Information
cvss3
Base: 5.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=saipem' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
