What is the official website of SSH Design ?

The official website of SSH Design is http://www.sshic.com.

What is SSH Design's cybersecurity risk score?

SSH Design has an AI-generated cybersecurity risk score of 762 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has SSH Design experienced?

According to Rankiteo, SSH Design currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has SSH Design been affected by any supply chain cyber incidents ?

According to Rankiteo, SSH Design has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does SSH Design have SOC 2 Type 1 certification ?

According to Rankiteo, SSH Design is not certified under SOC 2 Type 1.

Does SSH Design have SOC 2 Type 2 certification ?

According to Rankiteo, SSH Design does not hold a SOC 2 Type 2 certification.

Does SSH Design comply with GDPR ?

According to Rankiteo, SSH Design is not listed as GDPR compliant.

Does SSH Design have PCI DSS certification ?

According to Rankiteo, SSH Design does not currently maintain PCI DSS compliance.

Does SSH Design comply with HIPAA ?

According to Rankiteo, SSH Design is not compliant with HIPAA regulations.

Does SSH Design have ISO 27001 certification ?

According to Rankiteo,SSH Design is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does SSH Design operate in ?

SSH Design operates primarily in the Architecture and Planning industry.

How many employees does SSH Design have ?

SSH Design employs approximately 1,261 people worldwide.

Does SSH Design own any subsidiaries ?

SSH Design presently has no subsidiaries across any sectors.

How many LinkedIn followers does SSH Design have ?

SSH Design's official LinkedIn profile has approximately 176,821 followers.

Does SSH Design have a Crunchbase profile ?

No, SSH Design does not have a profile on Crunchbase.

Does SSH Design have a LinkedIn profile ?

Yes, SSH Design maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ssh-international.

How many cybersecurity incidents has SSH Design experienced ?

As of July 6, 2026, Rankiteo reports that SSH Design has not experienced any cybersecurity incidents.

How many peer or competitor companies does SSH Design have ?

SSH Design has an estimated 10,038 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

SSH Design

Boost Score +25 with badge (5 left)

762

/1000

Fair

787

/1000

Fair

SSH Design Vendor Cyber Rating & Cyber Score

sshic.com

Add Your Compliance Badge

As a design-led consulting firm offering world-class, multi-disciplinary engineering consultancy services, SSH has been a trusted partner of choice across the Middle East and Africa for over 63 years. Renowned for its design integrity and a portfolio featuring multiple award-winning landmark projects, SSH now operates 10 regional offices and employs over 800 professionals from across the globe. SSH combines deep regional understanding with international expertise to deliver world-class projects that shape the built environment of the modern Middle East. Vision & Mission To be the architectural and engineering consultant, strategic partner and employer of choice in the MEA Region. In order to realise our vision we will: Provide

SSH Design A.I CyberSecurity Scoring

Scoring History

SSH Design

SSH Design CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

SSH Design Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for SSH Design

Incidents vs Architecture and Planning Industry Avg (This Year)

No incidents recorded for SSH Design in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for SSH Design in 2026.

Incident Types SSH Design vs Architecture and Planning Industry Avg (This Year)

No incidents recorded for SSH Design in 2026.

Incident History - SSH Design (X = Date, Y = Severity)

Loading…

SUBSIDIARY

SSH Design Subsidiaries

SSH Design

Architecture and Planning

Website: http://www.sshic.com

Company Size: 1,261

Kuwait Projects Company (Holding) - KIPCOFinancial Services

Saudia Dairy & Foodstuff Company (SADAFCO)Food and Beverage Services

OSNBroadcast Media Production and Distribution

OSN+Broadcast Media Production and Distribution

OSNtvEntertainment Providers

Burgan BankBanking

Private Banking by BurganBanking

United Real Estate Company (URC)Real Estate

Kamco InvestInvestment Management

American University of Kuwait (AUK)التعليم العالي

CCE AUKHigher Education

PKC AdvisoryBusiness Consulting and Services

Gulf Insurance Group K.S.C.PInsurance

GIG KuwaitInsurance

Kuwait Hotels CompanyHospitality

Safir Hotels & ResortsHospitality

Gulfnet Communications CompanyTechnology, Information and Internet

Takaud Savings and Pensions B.S.C. (c)Financial Services

Al Rayan Holding CompanyEducation Administration Programs

Loading…

SSH Design Similar Companies

CHINA STATE CONSTRUCTION (CSCEC)

cscec.com.cn

China State Construction Engineering Corporation Ltd (in short: China Construction; Stock code: 601668), formally established on December 10, 2007, was co-initiated by four Fortune Global 500 enterprises: China State Construction Engineering Corp. (CSCEC), China National Petroleum Corporation (CNPC), Baosteel Group Corporation Ltd and Sinochem Corporation. China Construction was successfully listed in Shanghai Stock Exchange on July 29, 2009. China Construction has inherited all superior assets and corporate culture of CSCEC, with its business covering housing construction, international contracting, real estate development and investment, infrastructure construction and investment, prospecting and design. China Construction is China’s largest construction and real estate conglomerate and biggest building work contractor. It is the largest transnational construction company in the developing countries and the top home builder in the world, taking the long lead of China’s international contracting business. China Construction is well known in the world for undertaking super high-rise, grand scale, cutting-edge and novel projects and has built up a great number of landmark projects in China and around the world. Such business concept and brand image of China Construction as “Providing Excellent Services across all Continents with Superior Quality as the Top Priority” is universally acknowledged and commended. China Construction is one of the most integrated construction and real estate conglomerates in China with the longest history of specialized operation and market-oriented management. It is the only construction enterprise in China certified for 3 top grade Qualifications of general contracting for building works, municipal public works and highway works, in addition to “1+4” qualifications and first-grade qualification for engineering design of building industry.

Loading…

NEWS

SSH Design CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 27, 2026 06:40 PM

Malicious Go Crypto Module Steals Passwords and Installs Rekoobe Backdoor

Cybersecurity researchers have revealed details of a malicious Go module designed to collect passwords, create persistent SSH access,...

Read Article

February 27, 2026 08:00 AM

Malicious Go Crypto Module Steals Passwords, Deploys Rekoobe Backdoor

Cybersecurity researchers have disclosed details of a malicious Go module that's designed to harvest passwords, create persistent access via...

Read Article

February 19, 2026 08:00 AM

OpenClaw's Top Skill is a Malware that Stole SSH Keys and Opened Reverse Shells in 1,184 Packages

The most downloaded AI agent skill on OpenClaw's ClawHub marketplace was functional malware, not a productivity tool.

Read Article

February 09, 2026 08:00 AM

Vortex Werewolf Attacking Organizations to Gain Tor-Enabled Remote Access Over the RDP, SMB, SFTP, and SSH...

A new cyber espionage cluster has recently emerged, focusing its aggressive targeting on Russian government and defense organizations.

Read Article

February 02, 2026 08:00 AM

Open VSX Supply Chain Attack Used Compromised Dev Account to Spread GlassWorm

Cybersecurity researchers have disclosed details of a supply chain attack targeting the Open VSX Registry in which unidentified threat...

Read Article

February 02, 2026 08:00 AM

Researchers Find 341 Malicious ClawHub Skills Stealing Data from OpenClaw Users

A security audit found 341 malicious ClawHub skills abusing OpenClaw to spread Atomic Stealer and steal credentials on macOS and Windows.

Read Article

November 10, 2025 08:00 AM

APT Groups Attacking Construction Industry Networks to Steal RDP, SSH and Citrix Logins

APT groups from China, Russia, Iran & North Korea target construction firms, stealing RDP, SSH logins & project data via phishing.

Read Article

November 04, 2025 08:00 AM

Operation SkyCloak Deploys Tor-Enabled OpenSSH Backdoor Targeting Defense Sectors

Threat actors are leveraging weaponized attachments distributed via phishing emails to deliver malware likely targeting the defense sector...

Read Article

November 03, 2025 08:00 AM

Hackers Deliver SSH-Tor Backdoor Via Weaponized Military Documents in ZIP Files

Cyble found an Oct 2025 attack using fake Belarus military docs to drop an SSH-Tor backdoor targeting defense and UAV personnel.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-14776

SUMMARY

A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is the function pathinfo of the file /upload_files.php of the component Filename Extension. Performing a manipulation results in unrestricted upload. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The name of the affected product appears to have a typo in it.

Published

Date2026-07-05

Updated

Date2026-07-05

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-14775

SUMMARY

A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /process_lesson.php. Such manipulation of the argument user_id leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used. The name of the affected product appears to have a typo in it.

Published

Date2026-07-05

Updated

Date2026-07-05

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-14774

SUMMARY

A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /paymentdischarge.php. This manipulation of the argument patientid causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Published

Date2026-07-05

Updated

Date2026-07-05

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-14773

SUMMARY

A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /payment.php. The manipulation of the argument patientid results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

Published

Date2026-07-05

Updated

Date2026-07-05

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-10657

SUMMARY

Zephyr's DNS resolver detects mDNS (.local) queries in dns_resolve_name_internal() (subsys/net/lib/dns/resolve.c) with memcmp(strrchr(query, '.'), ".local", 7), which always reads a fixed 7 bytes from the suffix pointer. When the resolved hostname's final label is shorter than 7 bytes (e.g. names ending in .org, .com, .net, .io, or a trailing dot), the comparison reads 1-2 bytes past the string's NUL terminator. The hostname (query) is the caller-supplied name passed through the standard getaddrinfo()/dns_get_addr_info()/dns_resolve_name() path and is influenceable by operators or remote inputs (server names from configuration, parsed URLs, or app-facing interfaces). On a tightly-sized buffer with no slack (for example a userspace getaddrinfo call where the hostname is copied with k_usermode_string_alloc_copy to exactly strlen+1 bytes), the over-read crosses the allocation boundary; if that boundary is unmapped (guard page, memory-domain boundary under MPU, or an address sanitizer) the over-read faults, causing a denial of service. The over-read bytes are never returned, so there is no information disclosure. The flaw is compiled only when CONFIG_MDNS_RESOLVER is enabled, exists since v1.10.0, and is fixed by replacing the fixed-length memcmp with a NUL-safe strcmp(ptr, ".local").

Published

Date2026-07-05

Updated

Date2026-07-05

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…