What is the official website of SEC Consult (Thailand) ?

The official website of SEC Consult (Thailand) is http://www.sec-consult.com.

What is SEC Consult (Thailand)'s cybersecurity risk score?

SEC Consult (Thailand) has an AI-generated cybersecurity risk score of 661 out of 1000, indicating a Weak security posture according to Rankiteo's assessment.

How many security incidents has SEC Consult (Thailand) experienced?

According to Rankiteo, SEC Consult (Thailand) currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has SEC Consult (Thailand) been affected by any supply chain cyber incidents ?

According to Rankiteo, SEC Consult (Thailand) has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does SEC Consult (Thailand) have SOC 2 Type 1 certification ?

According to Rankiteo, SEC Consult (Thailand) is not certified under SOC 2 Type 1.

Does SEC Consult (Thailand) have SOC 2 Type 2 certification ?

According to Rankiteo, SEC Consult (Thailand) does not hold a SOC 2 Type 2 certification.

Does SEC Consult (Thailand) comply with GDPR ?

According to Rankiteo, SEC Consult (Thailand) is not listed as GDPR compliant.

Does SEC Consult (Thailand) have PCI DSS certification ?

According to Rankiteo, SEC Consult (Thailand) does not currently maintain PCI DSS compliance.

Does SEC Consult (Thailand) comply with HIPAA ?

According to Rankiteo, SEC Consult (Thailand) is not compliant with HIPAA regulations.

Does SEC Consult (Thailand) have ISO 27001 certification ?

According to Rankiteo,SEC Consult (Thailand) is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does SEC Consult (Thailand) operate in ?

SEC Consult (Thailand) operates primarily in the IT Services and IT Consulting industry.

How many employees does SEC Consult (Thailand) have ?

SEC Consult (Thailand) employs approximately 13 people worldwide.

Does SEC Consult (Thailand) own any subsidiaries ?

SEC Consult (Thailand) presently has no subsidiaries across any sectors.

How many LinkedIn followers does SEC Consult (Thailand) have ?

SEC Consult (Thailand)'s official LinkedIn profile has approximately 304 followers.

What is the NAICS classification code for SEC Consult (Thailand) ?

SEC Consult (Thailand) is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does SEC Consult (Thailand) have a Crunchbase profile ?

No, SEC Consult (Thailand) does not have a profile on Crunchbase.

Does SEC Consult (Thailand) have a LinkedIn profile ?

Yes, SEC Consult (Thailand) maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/sec-consult-thailand-co-ltd.

How many cybersecurity incidents has SEC Consult (Thailand) experienced ?

As of August 29, 2026, Rankiteo reports that SEC Consult (Thailand) has experienced 1 cybersecurity incidents.

How many peer or competitor companies does SEC Consult (Thailand) have ?

SEC Consult (Thailand) has an estimated 41,463 peer or competitor companies worldwide.

What types of cybersecurity incidents has SEC Consult (Thailand) faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

661

/1000

Weak

686

/1000

Weak

SEC Consult (Thailand) Vendor Cyber Rating & Cyber Score

sec-consult.com

Add Your Compliance Badge

SEC Consult is one of the leading consultancies in the field of cyber and application security. The company specializes in information security management, NIS security audits, penetration testing, ISO 27001 certification support, Cyber Defence and secure software certification. The company is certified in accordance with ISO 27001 as well as CREST at several locations. SEC Consult is part of Eviden.

SC A.I CyberSecurity Scoring

Scoring History

SEC Consult (Thailand) CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

SEC Consult (Thaila...

Ransomware

100

4/2025

SEC419041325

Loading…

A.I.

SC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for SC

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for SEC Consult (Thailand) in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for SEC Consult (Thailand) in 2026.

Incident Types SC vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for SEC Consult (Thailand) in 2026.

Incident History - SC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

SEC Consult (Thailand) Subsidiaries

Parent Company

SC

IT Services and IT Consulting

Website: http://www.sec-consult.com

Company Size: 201-500 employees

No subsidiary data available for this company.

Loading…

SEC Consult (Thailand) Similar Companies

Insight

insight.com

Insight Enterprises, Inc. is a Fortune 500 solutions integrator helping organizations accelerate their digital journey to modernize their business and maximize the value of technology. Insight’s technical expertise spans cloud and edge-based transformation solutions, with global scale and optimization built on 33+ years of deep partnerships with the world’s leading and emerging technology providers.

UST

ust.com

UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients’ organizations. With over 30K+ employees in 30+ countries, UST builds for boundless impact—touching billions of lives in the process.

Amazon Web Services (AWS)

cb amazon.com

Launched in 2006, Amazon Web Services (AWS) began exposing key infrastructure services to businesses in the form of web services -- now widely known as cloud computing. The ultimate benefit of cloud computing, and AWS, is the ability to leverage a new business model and turn capital infrastructure expenses into variable costs. Businesses no longer need to plan and procure servers and other IT resources weeks or months in advance. Using AWS, businesses can take advantage of Amazon's expertise and economies of scale to access resources when their business needs them, delivering results faster and at a lower cost. Today, Amazon Web Services provides a highly reliable, scalable, low-cost infrastructure platform in the cloud that powers hundreds of thousands of businesses in 190 countries around the world. With data center locations in the U.S., Europe, Singapore, and Japan, customers across all industries are taking advantage of our low cost, elastic, open and flexible, secure platform.

Minsait

minsait.com

We are one of the world's leading consultancies in technological services for companies and the public sector. With headquarters in Spain and presence in more than 100 countries, we combine experience in AI, data, cloud and cybersecurity to help companies and organizations generate a positive impact on society. Tech for impact #Minsait

Softtek

softtek.com

Founded in 1982 by a small group of entrepreneurs, Softtek started out in Mexico providing local IT services, and today is a global leader in next-generation digital solutions. The first company to introduce the Nearshore model, Softtek helps Global 2000 organizations build their digital capabilities constantly and seamlessly, from ideation and development to execution and evolution. Its entrepreneurial drive spans 20+ countries and more than 15,000 talented professionals. For more information on what we do, who we are, and career opportunities, visit www.softtek.com / Follow us on Instagram (@softtekofficial), on Twitter (@Softtek), and be our fan on Facebook www.facebook.com/softtek.

Orange Business

orange-business.com

At Orange Business, our ambition is to become the leading european Network and Digital Integrator by leveraging our proven expertise in next-generation connectivity solutions, the cloud and cybersecurity. Our 30,000 women and men are present in 65 countries, where every voice counts. Together, we are driven by the same determination and the same team spirit, to build the digital solutions of today and tomorrow and create a positive impact for our customers, for their employees and for the planet. We offer exciting opportunities through innovative projects in data and digital, cloud, AI, cybersecurity, IoT, or digital workspace and big data. Join us and be part of this adventure!

inDrive

cb inDrive.com

inDrive is a global mobility and urban services platform. The inDrive app has been downloaded over 400 million times, and has been the second most downloaded mobility app for the third consecutive year. In addition to ride-hailing, inDrive provides an expanding list of urban services, including intercity transportation and delivery. In 2023, inDrive launched New Ventures, a venture and M&A arm. inDrive operates in 1065 cities in 48 countries. Driven by its mission of challenging social injustice, the company is committed to having a positive impact on the lives of one billion people by 2030. It pursues this goal both through its core business, which supports local communities via a fair pricing model; and through the work of inVision, its non-profit arm. inVision’s community empowerment programs help to advance education, sports, arts and sciences, gender equality and other vital initiatives. For more information visit www.inDrive.com

TELUS Digital

telusdigital.com

TELUS Digital crafts unique and enduring experiences for customers and employees, and creates future-focused digital transformations that stand the test of time. We are the brand behind the brands. Our global team members are both passionate ambassadors of our clients’ products and services, and visionary technology experts resolute in our pursuit to elevate their end customer journeys, solve business challenges, mitigate risks, and drive continuous innovation. Our portfolio of end-to-end, integrated capabilities include digital IT services, such as cloud solutions and AI-fueled automation, trust and safety services, AI data solutions, including expertise in computer vision, and front-end digital design and consulting services. Fuel iX™ is TELUS Digital’s proprietary GenAI engine at the heart of our innovation, helping enterprises advance their GenAI pilots to working prototypes and production at scale, quickly, securely and responsibly across multiple environments, applications and clouds. Powered by purpose, TELUS Digital leverages technology, human ingenuity and compassion to fuel remarkable outcomes and create inclusive, thriving communities in the regions where we operate around the world. Guided by our Humanity-in-the-loop principles, we take a responsible approach to the transformational technologies we develop and deploy by proactively considering and addressing the broader impacts of our work.

Birlasoft

birlasoft.com

Navigating Change. Powering Progress. | Reimagining the Future with Birlasoft Birlasoft, a powerhouse where domain expertise, enterprise solutions, and digital technologies converge to redefine business processes. We take pride in our consultative and design thinking approach, driving societal progress by enabling our customers to run businesses with unmatched efficiency and innovation. As part of the CKA Birla Group, a multibillion-dollar enterprise, we boast a 12,000+ professional team committed to upholding the Group's 170-year legacy. Our core values prioritize Diversity, Equity, and Inclusion (DEI) initiatives, along with Corporate Social Responsibility (CSR) activities, demonstrating our dedication to building inclusive and sustainable communities. Join us in shaping a future where technology seamlessly aligns with purpose. For further information, visit www.birlasoft.com

Loading…

NEWS

SEC Consult (Thailand) CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

June 18, 2025 01:58 PM

Understanding SEC requirements for cybersecurity disclosures

Here are four practical steps you can take to prepare for and comply with SEC cybersecurity rules for public companies.

Read Article

March 12, 2024 07:00 AM

SEC expectations for the materiality assessment for cybersecurity disclosures

RSM analyzes the key components of the new SEC cybersecurity rule's materiality assessment process and ensuing disclosure requirements.

Read Article

October 05, 2023 06:35 PM

The role of the CISO in cyber disclosure

IT and security teams, on the frontline of the battle against cyber threats, now have to ready their companies for greater cyber transparency. The SEC cyber...

Read Article

August 18, 2023 10:31 PM

Making materiality judgments in cybersecurity incident reporting

What is materiality in the SEC rule for cybersecurity? PwC's new analysis offers the steps to take next to create a defined process and more.

Read Article

August 10, 2023 07:51 PM

SEC’s cyber disclosure rule

Learn how CISOs, CFOs and others can gain confidence in their ability to meet SEC cyber disclosure requirements.

Read Article

March 14, 2022 09:15 PM

Cyber breach reporting to be required by law for better cyber defense

Learn more about the cyber legislation passed by President Biden in the Incident Reporting for Critical Infrastructure Act and the significance it has on...

Read Article

December 18, 2020 08:00 AM

Atos completes the acquisition of leading Cybersecurity consulting company SEC Consult

Atos today announced that it has completed the acquisition of SEC Consult, a leading consulting company with a strong and innovative cybersecurity portfolio.

Read Article

October 23, 2020 07:00 AM

Atos bolsters cybersecurity consulting practice with SEC Consult

Atos has again inorganically beefed up its Cybersecurity practice in the region. The purchase of SEC Consult adds a team of over 200 highly skilled specialists.

Read Article

October 22, 2020 07:00 AM

Atos Acquiring Penetration Testing Company SEC Consult Group -

Atos, a Top 250 MSSP, acquires SEC Consult Group for penetration testing, red teaming, technical assessments & cybersecurity services.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55867

SUMMARY

Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken} endpoint implemented by UsersResource.revokeToken() in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERS_TOKENREMOVE permission against the attacker-controlled userId path parameter before resolving the token selected by idOrToken. An authenticated user can provide an authorized userId while accessTokenService.loadById() or accessTokenService.load() resolves a token belonging to another user, including a service account or administrator, after which accessTokenService.destroy() deletes that token without checking AccessToken.getUserName(). The issue does not expose token contents, but unauthorized deletion causes integrity impact and can disrupt access-token-based integrations. This issue is fixed in versions 6.3.12, 7.0.7, and 7.1.2.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55860

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a secure connection. A hostile or man-in-the-middle MariaDB server can send an AuthSwitchRequest naming mysql_clear_password or dialog (PAM) over a plain-TCP unencrypted connection, and AuthenticationFlow permits ClearPasswordPluginFlow or PamPluginFlow to return the user's password as cleartext bytes on the wire. The disclosed credentials can subsequently be used to authenticate directly to the database server. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55859

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to character_set_client through the OK-packet session-state-tracking mechanism, including through SET NAMES executed by a stored routine or trigger, server configuration, or a hostile or man-in-the-middle server. If the new character set is not UTF-8, the driver continues to exchange UTF-8 while the server interprets the same bytes under a different encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value raises R2dbcNonTransientResourceException with SQLState 08000 and closes the connection. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55858

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The server can report a mid-session change to character_set_client through OK-packet session-state tracking, including a change caused by SET NAMES, a stored routine or trigger, server configuration, or a hostile server. If character_set_client changes to a non-UTF-8 value, the driver continues to read and write UTF-8 while the server interprets the same bytes under another encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value causes SQLException with SQLState 08000 and closes the connection. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55857

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysql_clear_password plugin is gated behind a secure transport, but the sibling PAM handler SendPamAuthPacketFactory, named dialog by the server, does not declare that requirement and inherits the default secure-required value false; older branches implement the same affected behavior in SendPamAuthPacket. A hostile or man-in-the-middle server can send an Authentication Switch Request for dialog over plain TCP, causing the driver to return the user's password in cleartext when sslMode=DISABLE and restrictedAuth=null, which is the default configuration. Properly verified TLS and local Unix sockets are not exposed to this transport vector. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…