ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

Sonatrach (Société Nationale pour la Recherche, la Production, le Transport, la Transformation, et la Commercialisation des Hydrocarbures s.p.a.) is an Algerian government-owned company formed to exploit the hydrocarbon resources of the country. Its diversified activities cover all aspects of Oil & Gas industry chain. Upstream (E&P), Midstream (Transport) and Downstream (Marketing, Refining and Petchems).

Sonatrach A.I CyberSecurity Scoring

Sonatrach

Company Details

Linkedin ID:

sonatrach

Employees number:

44,430

Number of followers:

525,563

NAICS:

211

Industry Type:

Oil and Gas

Homepage:

sonatrach.com

IP Addresses:

0

Company ID:

SON_2252545

Scan Status:

In-progress

AI scoreSonatrach Risk Score (AI oriented)

Between 750 and 799

https://images.rankiteo.com/companyimages/sonatrach.jpeg
Sonatrach Oil and Gas
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreSonatrach Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/sonatrach.jpeg
Sonatrach Oil and Gas
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

Sonatrach Company CyberSecurity News & History

Past Incidents
0
Attack Types
0
No data available
Ailogo

Sonatrach Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for Sonatrach

Incidents vs Oil and Gas Industry Average (This Year)

No incidents recorded for Sonatrach in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Sonatrach in 2025.

Incident Types Sonatrach vs Oil and Gas Industry Avg (This Year)

No incidents recorded for Sonatrach in 2025.

Incident History — Sonatrach (X = Date, Y = Severity)

Sonatrach cyber incidents detection timeline including parent company and subsidiaries

Sonatrach Company Subsidiaries

SubsidiaryImage

Sonatrach (Société Nationale pour la Recherche, la Production, le Transport, la Transformation, et la Commercialisation des Hydrocarbures s.p.a.) is an Algerian government-owned company formed to exploit the hydrocarbon resources of the country. Its diversified activities cover all aspects of Oil & Gas industry chain. Upstream (E&P), Midstream (Transport) and Downstream (Marketing, Refining and Petchems).

Loading...
similarCompanies

Sonatrach Similar Companies

TotalEnergies

Have you ever thought of offering your skills and expertise to a multinational company? Give your best to better energy and make the commitment with TotalEnergies. With over 500-plus professions in 130 countries, we offer high safety and environmental standards, strong ethical values, an innovatio

En YPF, tenemos un Plan 4x4 para convertirnos en una compañía de clase mundial y lograr transformarnos en grandes exportadores de hidrocarburos. Nuestros cuatro pilares son: la aceleración de la producción de petróleo en Vaca Muerta, el activo más importante que tiene nuestro país; la disciplina f

Reliance Industries Limited

Our motto “Growth is Life” aptly captures the ever-evolving spirit of Reliance. Our activities span hydrocarbon exploration and production, petroleum refining and marketing, petrochemicals, retail, and telecommunications. In each of these areas, we are committed to innovation-led, exponential growth

ExxonMobil

The need for energy is universal. That's why ExxonMobil scientists and engineers are pioneering new research and pursuing new technologies to reduce emissions while creating more efficient fuels. We're committed to responsibly meeting the world's energy needs. We aim to achieve #netzero emissions

Aker Solutions

Aker Solutions delivers integrated solutions, products and services to the global energy industry. We enable low-carbon oil and gas production and develop renewable solutions to meet future energy needs. By combining innovative digital solutions and predictable project execution we accelerate the tr

Amec Foster Wheeler

Wood Group has combined with Amec Foster Wheeler to form a new global leader in the delivery of project, engineering and technical services to energy and industrial markets. To find out more about Wood visit our new website at www.woodplc.com For all the latest updates and job news follow Wood on L

Tenaris

Tenaris is a leading supplier of tubes and related services for the world’s energy industry and certain other industrial applications. Our mission is to deliver value to our customers through product development, manufacturing excellence, and supply chain management. Tenaris employees around the wor

Oxy is an international energy company with assets primarily in the United States, the Middle East and North Africa. We are one of the largest oil producers in the U.S., including a leading producer in the Permian and DJ basins, and offshore Gulf of Mexico. Our midstream and marketing segment provid

PEMEX

Petróleos Mexicanos es la mayor empresa de México, el mayor contribuyente fiscal del país, así como una de las empresas más grandes de América Latina. Es de las pocas empresas petroleras del mundo que desarrolla toda la cadena productiva de la industria, desde la exploración, hasta la distribució

newsone

Sonatrach CyberSecurity News

July 14, 2025 07:00 AM
Cybersecurity: Users’ digital safety will never be compromised – Huawei

Huawei's vision is a secure, intelligent future for Nigeria and the world. And we believe that begins with trust,” Iweze said.

April 16, 2025 07:00 AM
ICT Africa Summit 2025 to Be Held in Algiers from April 21 to 23

The ICT Africa Summit 2025, a major event focused on strategic digital and innovation issues across the African continent, will be held from April 21 to 23

September 19, 2024 07:00 AM
Gastech 2024: Sonatrach Holds Key Meetings with Energy Firms

Rachid Hachichi, the CEO of the Algerian oil company Sonatrach, along with his delegation at the global energy conference “Gastech” in...

June 11, 2024 07:00 AM
Sonatrach Partners with Huawei to Enhance Digital Capabilities

BY: Dr. Hana Saada. Algiers, Algeria | June 11th, 2024 — In a major development aimed at boosting its digital infrastructure,...

April 05, 2020 07:00 AM
Maze Ransomware Leaked Files of Groupement Berkine

Maze ransomware operators have leaked their files. Cyble researchers have verified that leak includes details about the employees (including phone numbers),...

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

Sonatrach CyberSecurity History Information

Official Website of Sonatrach

The official website of Sonatrach is http://www.sonatrach.com.

Sonatrach’s AI-Generated Cybersecurity Score

According to Rankiteo, Sonatrach’s AI-generated cybersecurity score is 789, reflecting their Fair security posture.

How many security badges does Sonatrach’ have ?

According to Rankiteo, Sonatrach currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Sonatrach have SOC 2 Type 1 certification ?

According to Rankiteo, Sonatrach is not certified under SOC 2 Type 1.

Does Sonatrach have SOC 2 Type 2 certification ?

According to Rankiteo, Sonatrach does not hold a SOC 2 Type 2 certification.

Does Sonatrach comply with GDPR ?

According to Rankiteo, Sonatrach is not listed as GDPR compliant.

Does Sonatrach have PCI DSS certification ?

According to Rankiteo, Sonatrach does not currently maintain PCI DSS compliance.

Does Sonatrach comply with HIPAA ?

According to Rankiteo, Sonatrach is not compliant with HIPAA regulations.

Does Sonatrach have ISO 27001 certification ?

According to Rankiteo,Sonatrach is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Sonatrach

Sonatrach operates primarily in the Oil and Gas industry.

Number of Employees at Sonatrach

Sonatrach employs approximately 44,430 people worldwide.

Subsidiaries Owned by Sonatrach

Sonatrach presently has no subsidiaries across any sectors.

Sonatrach’s LinkedIn Followers

Sonatrach’s official LinkedIn profile has approximately 525,563 followers.

NAICS Classification of Sonatrach

Sonatrach is classified under the NAICS code 211, which corresponds to Oil and Gas Extraction.

Sonatrach’s Presence on Crunchbase

No, Sonatrach does not have a profile on Crunchbase.

Sonatrach’s Presence on LinkedIn

Yes, Sonatrach maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/sonatrach.

Cybersecurity Incidents Involving Sonatrach

As of December 14, 2025, Rankiteo reports that Sonatrach has not experienced any cybersecurity incidents.

Number of Peer and Competitor Companies

Sonatrach has an estimated 10,551 peer or competitor companies worldwide.

Sonatrach CyberSecurity History Information

How many cyber incidents has Sonatrach faced ?

Total Incidents: According to Rankiteo, Sonatrach has faced 0 incidents in the past.

What types of cybersecurity incidents have occurred at Sonatrach ?

Incident Types: The types of cybersecurity incidents that have occurred include .

Incident Details

What are the most common types of attacks the company has faced ?

Additional Questions

cve

Latest Global CVEs (Not Company-Specific)

Description

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 2.6
Severity: HIGH
AV:N/AC:H/Au:N/C:N/I:P/A:N
cvss3
Base: 3.7
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=sonatrach' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge