ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

SBI Card was launched in 1998 with the State Bank of India, India's largest bank, as the majority stakeholder. In March 2020, SBI Card was listed on BSE and NSE. Today, SBI Card is India’s largest pure-play credit card issuer with over 19.5 million cards in force, as of September 2024. Its wide array of products and services caters to a diverse range of customer segments across India, right from new-to-credit to super premium. The SBI Card brand is based on the value proposition of 'Make Life Simple'. The proposition manifests in SBI Card’s continuous efforts to simplify the lives of its customers, employees and other key stakeholders. Customer-centricity, supported by the values of trust and transparency, is core to SBI Card’s ethos.

SBI Card A.I CyberSecurity Scoring

SBI Card

Company Details

Linkedin ID:

sbi-card

Employees number:

21,634

Number of followers:

181,627

NAICS:

52

Industry Type:

Financial Services

Homepage:

sbicard.com

IP Addresses:

4

Company ID:

SBI_3287845

Scan Status:

Completed

AI scoreSBI Card Risk Score (AI oriented)

Between 750 and 799

https://images.rankiteo.com/companyimages/sbi-card.jpeg
SBI Card Financial Services
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreSBI Card Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/sbi-card.jpeg
SBI Card Financial Services
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

SBI Card Company CyberSecurity News & History

Past Incidents
0
Attack Types
0
No data available
Ailogo

SBI Card Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for SBI Card

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for SBI Card in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for SBI Card in 2025.

Incident Types SBI Card vs Financial Services Industry Avg (This Year)

No incidents recorded for SBI Card in 2025.

Incident History — SBI Card (X = Date, Y = Severity)

SBI Card cyber incidents detection timeline including parent company and subsidiaries

SBI Card Company Subsidiaries

SubsidiaryImage

SBI Card was launched in 1998 with the State Bank of India, India's largest bank, as the majority stakeholder. In March 2020, SBI Card was listed on BSE and NSE. Today, SBI Card is India’s largest pure-play credit card issuer with over 19.5 million cards in force, as of September 2024. Its wide array of products and services caters to a diverse range of customer segments across India, right from new-to-credit to super premium. The SBI Card brand is based on the value proposition of 'Make Life Simple'. The proposition manifests in SBI Card’s continuous efforts to simplify the lives of its customers, employees and other key stakeholders. Customer-centricity, supported by the values of trust and transparency, is core to SBI Card’s ethos.

Loading...
similarCompanies

SBI Card Similar Companies

Dubai Holding

Dubai Holding is a diversified global investment company that continues to power Dubai’s growth across 10 key sectors, including real estate, hospitality, leisure & entertainment, media, ICT, design, education, retail, manufacturing & logistics and science. Since 2004, we have made strides with an

Truist

Truist Financial Corporation is a purpose-driven financial services company committed to inspiring and building better lives and communities. As a leading U.S. commercial bank, Truist has leading market share in many of the high-growth markets across the country. Truist offers a wide range of produc

Prudential plc

In Asia and Africa, Prudential has been providing familiar, trusted financial security to people for 100 years. Today, headquartered in Hong Kong and London, we are ranked top three in 12 Asian markets with 18 million customers, around 68,000 average monthly active agents and access to over 27,000 b

Empower

Built on a foundation of trust, integrity and promise, we proudly serve over 71,000 outstanding organizations and more than 17 million individuals. ¹ We take great pride in helping people with saving, investing and advice, while providing them with the tools and resources they need to help reach the

State Street

At State Street, we partner with institutional investors all over the world to provide comprehensive financial services, including investment management, investment research and trading, and investment servicing. Whether you are an asset manager, asset owner, alternative asset manager, insurance com

KBC Bank & Verzekering

Welkom op de officiële LinkedIn-pagina van KBC! Bekijk onze vacatures op de tab ‘Vacatures’. KBC is een geïntegreerde bank-verzekeraar die zich hoofdzakelijk richt op particulieren en privatebankingcliënten, en op kleine en middelgrote ondernemingen. KBC heeft een leidende positie in zijn thuisma

The Max Group

Max Group is a $7 billion diversified Indian conglomerate founded by Mr. Analjit Singh with a strong presence across Senior Care, Life Insurance, and Real Estate. Guided by a purpose-driven approach, we aim to create meaningful solutions that improve lives and deliver lasting value. Max India Lim

BBVA en México

Bienvenido a la página oficial del Banco BBVA Bancomer. Institución financiera de México desde 1932. Es una empresa filial de Banco Bilbao Vizcaya Argentaria (BBVA), uno de los grupos financieros líderes en Europa y considerado entre uno de los más grandes de la Zona Euro. El Grupo trabaja por un f

M&T Bank

Great companies have an enduring sense of purpose. At M&T, our purpose is a simple one: make a difference in people’s lives and uplift the diverse communities we serve. Founded in 1856 in Buffalo, NY we are now a top 11 full-service US-based commercial bank with a retail footprint across the east co

newsone

SBI Card CyberSecurity News

November 01, 2025 07:00 AM
7 key financial rule changes effective November 2025: From online Aadhaar update to life certificate submission

The Reserve Bank of India (RBI) had asked banks to move their net banking website addresses to the exclusive internet domain - '.bank.in'...

October 31, 2025 07:00 AM
SBI Clerk Prelims result 2025 expected soon at sbi.co.in: Check how to download scorecards, once out

News News: SBI Clerk Prelims 2025 results are anticipated between October 30 and November 2. Candidates who took the exam on September 20,...

October 28, 2025 07:00 AM
Why has Nuvama downgraded SBI Cards but maintained target – What next for investors?

SBI Cards downgraded to 'Hold' by Nuvama, but target price maintained; review your investment strategy now.

October 24, 2025 07:00 AM
SBI Cards and Payment Services Limited Reports Earnings Results for the Second Quarter and Six Months Ended September 30, 2025

SBI Cards and Payment Services Limited reported earnings results for the second quarter and six months ended September 30, 2025.

October 20, 2025 07:00 AM
Rajnickant Patel Appointed as Independent Director and IT Strategy Committee Chairman at SBI Card

SBI Card, one of India's leading credit card issuers, has announced the appointment of Rajnickant Patel as an Independent Director on its.

October 07, 2025 07:00 AM
Aarti Bansal Lamba Elevated as Head – Cyber Risk Governance at Wipro

Wipro has announced the elevation of Aarti Bansal Lamba as Head – Cyber Risk Governance, recognizing her expertise and leadership in...

September 24, 2025 07:00 AM
Buy or Sell: 3 Stocks to Keep on Your Radar as Morgan Stanley Sets New Target Prices

Synopsis: Aditya Birla Fashion & Retail Ltd, SBI Cards & Payment Services Ltd, and HCL Technologies Ltd are in focus after Morgan Stanley...

September 08, 2025 07:00 AM
Amazon Great Indian Festival dates confirmed with deals, discounts and early access for Prime members

Amazon has announced details of its upcoming Great Indian Festival Sale, one of the most anticipated online shopping events of the year.

August 23, 2025 07:00 AM
SBI & IIT Guwahati Celebrate FINNOVATION 2025 Winners in Gurugram, Empowering Young Innovators to Solve Banking Challenges

SBI & IIT Guwahati conclude FINNOVATION 2025 Hackathon on loan defaulter detection. DFS, IBA laud youth fintech innovation in Gurugram.

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

SBI Card CyberSecurity History Information

Official Website of SBI Card

The official website of SBI Card is https://www.sbicard.com.

SBI Card’s AI-Generated Cybersecurity Score

According to Rankiteo, SBI Card’s AI-generated cybersecurity score is 781, reflecting their Fair security posture.

How many security badges does SBI Card’ have ?

According to Rankiteo, SBI Card currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does SBI Card have SOC 2 Type 1 certification ?

According to Rankiteo, SBI Card is not certified under SOC 2 Type 1.

Does SBI Card have SOC 2 Type 2 certification ?

According to Rankiteo, SBI Card does not hold a SOC 2 Type 2 certification.

Does SBI Card comply with GDPR ?

According to Rankiteo, SBI Card is not listed as GDPR compliant.

Does SBI Card have PCI DSS certification ?

According to Rankiteo, SBI Card does not currently maintain PCI DSS compliance.

Does SBI Card comply with HIPAA ?

According to Rankiteo, SBI Card is not compliant with HIPAA regulations.

Does SBI Card have ISO 27001 certification ?

According to Rankiteo,SBI Card is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of SBI Card

SBI Card operates primarily in the Financial Services industry.

Number of Employees at SBI Card

SBI Card employs approximately 21,634 people worldwide.

Subsidiaries Owned by SBI Card

SBI Card presently has no subsidiaries across any sectors.

SBI Card’s LinkedIn Followers

SBI Card’s official LinkedIn profile has approximately 181,627 followers.

NAICS Classification of SBI Card

SBI Card is classified under the NAICS code 52, which corresponds to Finance and Insurance.

SBI Card’s Presence on Crunchbase

Yes, SBI Card has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/sbi-card.

SBI Card’s Presence on LinkedIn

Yes, SBI Card maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/sbi-card.

Cybersecurity Incidents Involving SBI Card

As of November 27, 2025, Rankiteo reports that SBI Card has not experienced any cybersecurity incidents.

Number of Peer and Competitor Companies

SBI Card has an estimated 29,517 peer or competitor companies worldwide.

SBI Card CyberSecurity History Information

How many cyber incidents has SBI Card faced ?

Total Incidents: According to Rankiteo, SBI Card has faced 0 incidents in the past.

What types of cybersecurity incidents have occurred at SBI Card ?

Incident Types: The types of cybersecurity incidents that have occurred include .

Incident Details

What are the most common types of attacks the company has faced ?

Additional Questions

cve

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=sbi-card' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge