What is the official website of Sonaca ?

The official website of Sonaca is http://www.sonaca.com.

What is Sonaca's cybersecurity risk score?

Sonaca has an AI-generated cybersecurity risk score of 753 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Sonaca experienced?

According to Rankiteo, Sonaca currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Sonaca been affected by any supply chain cyber incidents ?

According to Rankiteo, Sonaca has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Sonaca have SOC 2 Type 1 certification ?

According to Rankiteo, Sonaca is not certified under SOC 2 Type 1.

Does Sonaca have SOC 2 Type 2 certification ?

According to Rankiteo, Sonaca does not hold a SOC 2 Type 2 certification.

Does Sonaca comply with GDPR ?

According to Rankiteo, Sonaca is not listed as GDPR compliant.

Does Sonaca have PCI DSS certification ?

According to Rankiteo, Sonaca does not currently maintain PCI DSS compliance.

Does Sonaca comply with HIPAA ?

According to Rankiteo, Sonaca is not compliant with HIPAA regulations.

Does Sonaca have ISO 27001 certification ?

According to Rankiteo,Sonaca is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Sonaca operate in ?

Sonaca operates primarily in the Aviation and Aerospace Component Manufacturing industry.

How many employees does Sonaca have ?

Sonaca employs approximately 1,145 people worldwide.

Does Sonaca own any subsidiaries ?

Sonaca presently has no subsidiaries across any sectors.

How many LinkedIn followers does Sonaca have ?

Sonaca's official LinkedIn profile has approximately 37,960 followers.

What is the NAICS classification code for Sonaca ?

Sonaca is classified under the NAICS code 3364, which corresponds to Aerospace Product and Parts Manufacturing.

Does Sonaca have a Crunchbase profile ?

Yes, Sonaca has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/sonaca.

Does Sonaca have a LinkedIn profile ?

Yes, Sonaca maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/sonaca.

How many cybersecurity incidents has Sonaca experienced ?

As of June 9, 2026, Rankiteo reports that Sonaca has not experienced any cybersecurity incidents.

How many peer or competitor companies does Sonaca have ?

Sonaca has an estimated 2,815 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Sonaca

Boost Score +25 with badge (5 left)

753

/1000

Fair

778

/1000

Fair

Sonaca Vendor Cyber Rating & Cyber Score

sonaca.com

cb in

Add Your Compliance Badge

Sonaca is an aerospace company active in aerostructure, services, innovation, space and defense. Sonaca has one-stop shops and integrated teams of design and industrial professionals who can provide responsive solutions tailored to customers' needs. Sonaca can offer the best price combination with the latest automation technologies, low cost country manufacturing facilities and worldwide engineering offices. Thanks to its global footprint, Sonaca is close to customers, accompanying them from early design stages to in-service support.

Sonaca A.I CyberSecurity Scoring

Scoring History

Sonaca

Sonaca CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Sonaca Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Sonaca

Incidents vs Aviation and Aerospace Component Manufacturing Industry Avg (This Year)

No incidents recorded for Sonaca in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Sonaca in 2026.

Incident Types Sonaca vs Aviation and Aerospace Component Manufacturing Industry Avg (This Year)

No incidents recorded for Sonaca in 2026.

Incident History - Sonaca (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Sonaca Subsidiaries

Parent Company

Sonaca

Aviation and Aerospace Component Manufacturing

Website: http://www.sonaca.com

Company Size: 1,145

No subsidiary data available for this company.

Loading…

Sonaca Similar Companies

Bombardier

bombardier.com

Bombardier is a global leader in aviation, focused on designing, manufacturing, and servicing the world's most exceptional business jets. Bombardier’s Challenger and Global aircraft families are renowned for their cutting-edge innovation, cabin design, performance, and reliability. Bombardier has a worldwide fleet of approximately 5,000 aircraft in service with a wide variety of multinational corporations, charter and fractional ownership providers, governments, and private individuals. Bombardier aircraft are also trusted around the world in government and military special-mission roles leveraging Bombardier Defense’s proven expertise.   Headquartered in Greater Montréal, Québec, Bombardier operates aerostructure, assembly and completion facilities in Canada, the United States and Mexico. The company’s robust customer support network services the Learjet, Challenger and Global families of aircraft, and includes facilities in strategic locations in the United States and Canada, as well as in the United Kingdom, Germany, France, Switzerland, Italy, Austria, the UAE, Singapore, China and Australia.   For corporate news and information, including Bombardier’s Environmental, Social and Governance report, as well as the company’s plans to cover all its flight operations with Sustainable Aviation Fuel (SAF) utilizing the Book and Claim system visit bombardier.com. Learn more about Bombardier’s industry-leading products and customer service network at businessaircraft.bombardier.com. Follow us on Twitter @Bombardier.   

Federal Aviation Administration

faa.gov

The FAA is on the leading edge of a new frontier in commercial space transportation, building the next generation (NextGen) of satellite-based navigation systems, and fostering the safe integration of unmanned aerial systems into our airspace. We can only dream of what the next 50 years of American ingenuity will look like, but FAA employees will be working to ensure that the United States continues to lead the world in aerospace safety, innovation and advancements that continue to push the limits of science and technology. The FAA is an operating administration within the Department of Transportation (DOT) and a proud partner in the DOT mission to serve the United States by ensuring a fast, safe, efficient, accessible and convenient transportation system that meets our vital national interests and enhances the quality of life of the American people, today and into the future. Specifically, the FAA mission is to provide the safest, most efficient aerospace system in the world.

CAE

cae.com

At CAE, we exist to make the world safer. We deliver cutting-edge training, simulation, and critical operations solutions to prepare aviation professionals and defence forces for the moments that matter. Every day, we empower pilots, cabin crew, maintenance technicians, airlines, business aviation operators, and defence and security personnel to perform at their best and when the stakes are the highest. Around the globe, we’re everywhere customers need us to be with approximately 13,000 employees at around 240 sites and training locations in over 40 countries. For nearly 80 years, CAE has been at the forefront of innovation, consistently seeking to set the standard by delivering excellence in high-fidelity flight simulators and training solutions, while embedding sustainability at the heart of everything we do. By harnessing technology and enhancing human performance, we strive to be the trusted partner in advancing safety and mission readiness - today and tomorrow.

Textron

cb textron.com

Textron Inc. is a multi-industry company that leverages its global network of aircraft, defense, industrial and finance businesses to provide customers with innovative solutions and services. Textron is known around the world for its powerful brands such as Bell, Cessna, Beechcraft, Pipistrel, Jacobsen, Kautex, Lycoming, E-Z-GO, and Textron Systems. For more information, visit: www.textron.com.

Embraer

cb embraer.com

A global aerospace company headquartered in Brazil, Embraer has businesses in Commercial and Executive Aviation, Defense & Security, and Agricultural Aviation. The company designs, develops, manufactures and markets aircraft and systems, providing Services and Support to customer after-sales. Since it was founded in 1969, Embraer has delivered more than 8,000 aircraft. On average, about every 10 seconds an aircraft manufactured by Embraer takes off somewhere in the world, transporting over 145 million passengers a year.

Safran

cb safran-group.com

Safran is an international high-technology group, operating in the aviation (propulsion, equipment and interiors), defense and space markets. Its core purpose is to contribute to a safer, more sustainable world, where air transport is more environmentally friendly, comfortable and accessible. Safran has a global presence, with 100,000 employees and holds, alone or in partnership, world or European leadership positions in its core markets.

Blue Origin

cb blueorigin.com

We are building a road to space for the benefit of Earth, humanity’s blue origin. Our team is focused on radically reducing the cost of access to space and harnessing its vast resources while mobilizing future generations to realize this mission. Blue Origin builds reusable rocket engines, launch vehicles, in-space systems, and lunar landers. Discover more at BlueOrigin.com. *We hope you engage with us and our community. However, we reserve the right to remove derogatory or off-topic comments from our social media accounts. Thank you for understanding.*

Spirit AeroSystems

spiritaero.com

Inventing, designing and building what’s best in aerospace. Spirit AeroSystems is one of the world’s largest manufacturers of aerostructures for commercial airplanes, defense platforms, and business/regional jets. With expertise in aluminum and advanced composite manufacturing solutions, the company’s core products include fuselages, integrated wings and wing components, pylons, and nacelles. Also, Spirit serves the aftermarket for commercial and business/regional jets. Headquartered in Wichita, Kansas, Spirit has facilities in the U.S., U.K., France, Malaysia and Morocco.

B/E Aerospace

beaerospace.com

B/E Aerospace is now part of Rockwell Collins. With the acquisition of B/E Aerospace in April 2017, Rockwell Collins is now a world leader in designing, developing and manufacturing cabin interior products and services that deliver innovation, reliability and efficiency. Our broad range of offerings include aircraft cabin seating, lighting and engineering solutions, oxygen systems, food and beverage preparation and storage equipment, galley systems, water and waste systems, and advanced lavatory systems. We also collaborate closely with our customers to provide customized cabin interior reconfiguration, program management and certification services.

Loading…

NEWS

Sonaca CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-44541

SUMMARY

Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fides_description override. This issue has been patched in version 2.84.5.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: )

cvss4

Base Score: 7.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-49141

SUMMARY

WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticated attackers to access and modify contacts belonging to other tenants by supplying an arbitrary caller-controlled contact_id in the POST request body without tenant ownership verification. Attackers can exploit the service-role client that bypasses row-level security to modify victim contact fields including name, email, and company across tenant boundaries using only a known contact UUID.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N

cvss4

Base Score: 5.1

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

4.7

Exploitability

1.8

REFERENCES

CVE-2026-47345

SUMMARY

Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: )

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-47344

SUMMARY

When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., </style\t>) are not recognized by the sanitizer but accepted by browsers as valid end tags, allowing subsequent content to escape sanitization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: )

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-46484

SUMMARY

Headplane is a feature-complete Web UI for Headscale. Prior to versions 0.6.3 and 0.7.0-beta.3, Headplane was vulnerable to a path traversal / authorization bypass in the Headscale API client used by node and user rename operations. This issue has been patched in versions 0.6.3 and 0.7.0-beta.3.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…