What is the official website of Startek ?

The official website of Startek is http://www.startek.com.

What is Startek's cybersecurity risk score?

Startek has an AI-generated cybersecurity risk score of 761 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Startek experienced?

According to Rankiteo, Startek currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Startek been affected by any supply chain cyber incidents ?

According to Rankiteo, Startek has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Startek have SOC 2 Type 1 certification ?

According to Rankiteo, Startek is not certified under SOC 2 Type 1.

Does Startek have SOC 2 Type 2 certification ?

According to Rankiteo, Startek does not hold a SOC 2 Type 2 certification.

Does Startek comply with GDPR ?

According to Rankiteo, Startek is not listed as GDPR compliant.

Does Startek have PCI DSS certification ?

According to Rankiteo, Startek does not currently maintain PCI DSS compliance.

Does Startek comply with HIPAA ?

According to Rankiteo, Startek is not compliant with HIPAA regulations.

Does Startek have ISO 27001 certification ?

According to Rankiteo,Startek is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Startek operate in ?

Startek operates primarily in the Outsourcing and Offshoring Consulting industry.

How many employees does Startek have ?

Startek employs approximately 21,110 people worldwide.

Does Startek own any subsidiaries ?

Startek presently has no subsidiaries across any sectors.

How many LinkedIn followers does Startek have ?

Startek's official LinkedIn profile has approximately 111,382 followers.

What is the NAICS classification code for Startek ?

Startek is classified under the NAICS code 541615, which corresponds to Others.

Does Startek have a Crunchbase profile ?

Yes, Startek has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/startek.

Does Startek have a LinkedIn profile ?

Yes, Startek maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/startek.

How many cybersecurity incidents has Startek experienced ?

As of September 26, 2026, Rankiteo reports that Startek has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Startek have ?

Startek has an estimated 1,174 peer or competitor companies worldwide.

What types of cybersecurity incidents has Startek faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Startek

Boost Score +25 with badge (5 left)

761

/1000

Fair

786

/1000

Fair

Startek Vendor Cyber Rating & Cyber Score

startek.com

cb in

Add Your Compliance Badge

A global customer experience (CX) management solutions provider, Startek® delivers best-in-class omnichannel CX, digital transformation and enterprise tech services for leading brands, from Fortune 500s to fast-growing startups. Our innovation and expertise ensure CX excellence across traditional and non-traditional channels. Working both in-center and via work at home, our 40,000 CX experts are present in 13 countries ensuring global reach and local connection no matter where your customers are based. The award-winning Startek Cloud, a hybrid-cloud platform integrated with AI capabilities, empowers remote and home-based team members, to deliver business agility and continuity. At Startek we believe that every organization can deliver

Startek

Startek CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Startek

Breach

6/2021

STA909072825

Loading…

A.I.

Startek Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Startek

Incidents vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

No incidents recorded for Startek in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Startek in 2026.

Incident Types Startek vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

No incidents recorded for Startek in 2026.

Incident History - Startek (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Startek Subsidiaries

Startek

Outsourcing and Offshoring Consulting

Website: http://www.startek.com

Company Size: 10,001+ employees

Startek MalaysiaIT Services and IT Consulting

Startek AustraliaInformation Technology & Services

Loading…

Startek Similar Companies

TaskUs

taskus.com

TaskUs delivers outsourced digital services that power the companies shaping the future. By combining specialized human talent and intelligent technology, we solve complex operational challenges for global category leaders within AI, autonomous vehicles (AV), robotics, social media, financial services, healthcare, and beyond. We enable our clients to elevate their customer experience, protect their platforms, and grow their brands.

Konecta

konecta.com

Konecta is a leading innovative global service provider in customer management business process outsourcing, with 120,000 passionate employees working in 30 languages across 4 continents and 26 countries. Focusing on the unique needs and opportunities of each industry, Konecta offers a full range of end-to-end customer management solutions – including acquisition, retention, customer service, technical support, and collection – all based on a sustainable business model. These services are built on a portfolio of world-class expertise covering customer experience and process management, digital solutions and cutting-edge technologies. Headquartered in Madrid, Konecta delivers global revenues of approximately €2 billion with more than 500 clients, covering some of the biggest names in telecoms, energy, banking, mobility, retail, and e-commerce.

VXI Global Solutions

vxi.com

About VXI Global Solutions VXI Global Solutions is a BPO leader in customer service, customer experience, and digital solutions. Founded in 1998, the company has 40,000+ employees in 43 locations in North America, Asia, Europe, and the Caribbean. VXI delivers omnichannel and multilingual support, revenue generation, software development, quality assurance, and CX advisory, automation, and process excellence to the world’s most respected brands. VXI is backed by private equity investor Bain Capital and is one of the fastest growing, privately held business services organizations in the United States and the Philippines. For more information, visit www.vxi.com. Contact Us: [email protected] Customer Experience Management | Omni Channel | Customer Journey Mapping | Digital Sales Channels | Application Development | Digital CX | Service Excellence | Contact Center | Call Center | Revenue Generation | Business Outcomes | CX Strategy | AI & automation | Business Analytics

Manserv

manserv.com.br

A Manserv tem no ato de servir sua principal vocação. A organização, fundada em 1985, tem estrutura empresarial sólida e abrangente. Especializada nas áreas de Manutenção, Facilities, Logística e Tecnologia, possui extenso portfólio de produtos e serviços, capazes de atender os mais diversificados mercados com soluções inovadoras, inteligentes e customizadas. Somos um time de especialistas e, por isso, garantimos excelência na prestação dos serviços.

VFS Global

cb vfsglobal.com

As the global leader in trusted technology services, empowering secure mobility for governments and citizens, VFS Global embraces technological innovation including Generative AI to support governments and diplomatic missions worldwide. VFS Global continuously transforms its business model with secure and efficient processes, market offerings and advanced technologies including AI/Analytics. With a responsible approach to technology development, adoption and integration, the company prioritizes ethical practices and sustainability while serving as a trusted partner to 69 client governments. VFS Global enhances cross border mobility for global citizens through highly secure, reliable, efficient, and innovative technology solutions. With an extensive global network and reach of over 3,900 Application Centres in 165 countries, VFS Global has efficiently processed more than 514 million transactions since 2001. We are an employee-centric organisation, creating meaningful work opportunities and fostering successful careers. Headquartered in Zurich and Dubai and majority owned through investment funds managed by Blackstone Inc, along with minority stakeholders including Swiss-based Kuoni and Hugentobler Foundation, we have been recognised for our commitment to nurturing a diverse and inclusive workplace, empowering women in our workforce and promoting gender equality at all levels of the organisation. We’re proud to be Great Place to Work-certified in Nigeria, China, India, and UAE, and hold multiple international certifications in data privacy, anti-bribery systems, and customer satisfaction. *Comprised of 325.54 million transactions by VFS Global and 189.12 million transactions by CiX Citizen Experience

Transcom

cb transcom.com

Transcom provides digitally enhanced customer experience (CX) services to some of the world's most ambitious brands. More than 300 clients globally, including disruptive e-commerce players, category redefining fintechs, and technology legends rely on us for on-, off-, and nearshoring services. Transcom’s over 33,000 employees work in 90 contact centers and work-at-home networks across 28 countries, creating brilliant experiences in customer care, sales, content moderation, and backoffice services. We help our clients drive their brands forward, customer satisfaction up, and operating costs down.

Grupo Souza Lima

souzalima.com

Sempre inovador, o Grupo Souza Lima desenvolve soluções completas e híbridas, que realmente funcionam, em serviços de Segurança, Limpeza e Facilities. Essas soluções já são realidade para clientes Souza Lima e integram colaboradores treinados com tecnologia avançada para otimizar recursos e melhorar a performance nos segmentos de indústrias, shoppings, condomínios, instituições de ensino e de saúde, entre diversas outras empresas. Com mais de 30 anos de mercado e atuação nacional, conta com mais de 30.000 colaboradores, 2000 clientes e 22 filiais em 14 estados.

INTELCIA

Intelcia.com

Intelcia is a global player in outsourcing, which has supported its clients for 20 years combining talents, technologies, and processes to offer a tailor-made service and skills that meet international standards. In order to allow its customers to focus on their challenges and core business, Intelcia offers a global offer on shore, near shore and offshore around a cluster of 4 main solutions: Multichannel CX Solutions, Business Processes, IT Solutions, and Innovative & Consulting Solutions. Present in Europe (France, Portugal, Spain, United Kingdom), in North Africa (Morocco, Egypt) in Sub-Saharan Africa (Cameroon, Senegal, Ivory Coast), in the Indian Ocean (Mauritius, Madagascar), in North America (United States United) in Latin America (Colombia, Chile) and the Caribbean (Jamaica, Dominican Republic), the group currently has more than 35,000 employees, spread across 85 operational centers. Intelcia has announced its ambition to be in the top 10 global outsourcing players and to reach 1.5 billion euros in turnover by 2025.

TDCX

tdcx.com

Singapore-headquartered TDCX provides transformative digital CX solutions, enabling world-leading and disruptive brands to acquire new customers, to build customer loyalty, and to protect their online communities. TDCX helps clients achieve their customer experience aspirations by harnessing technology, human intelligence, and its global footprint. It serves clients in fintech, gaming, technology, travel and hospitality, digital advertising and social media, streaming and e-commerce. TDCX’s expertise and strong footprint in Asia have made it a trusted partner for clients, particularly high-growth, new economy companies, looking to tap the region’s growth potential. TDCX’s commitment to delivering positive outcomes for our clients extends to its role as a responsible corporate citizen. Its Corporate Social Responsibility program focuses on positively transforming the lives of its people, its communities, and the environment. TDCX employs more than 19,000 employees across 34 campuses globally, specifically in Brazil, Colombia, Hong Kong, India, Japan, Malaysia, Mainland China, Philippines, Türkiye, Singapore, South Korea, Spain, Thailand, Türkiye, and Vietnam. For more information, please visit www.tdcx.com. Community Guideline: We respect all feedback and do not remove comments unless they are deemed as spam or disrespectful to our community. We may remove repetitive posts to keep our pages clear and easy to navigate while facilitating transparent discussion.

Loading…

NEWS

Startek CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

June 23, 2025 07:00 AM

Startek® recognized for cybersecurity excellence and innovation leadership in 2025

Startek®, a digital-first global customer experience (CX) solutions provider, announced today that it has received multiple awards in 2025,...

Read Article

June 03, 2025 07:00 AM

Fraud prevention and CX: How AI is enhancing security without adding friction

In today's hyper-digital world, cybersecurity has evolved beyond firewalls and passwords—it's now central to the customer experience (CX).

Read Article

October 08, 2024 07:00 AM

Driving Positive, Meaningful Human Experiences

Abhinandan Jain is a dynamic business leader with a distinguished record of steering technology services businesses to success on a global scale.

Read Article

April 04, 2023 07:00 AM

When Cyberattacks Happen, How Much Damage Do They Cause for Outsourcers?

Beyond the hassle and the unwanted media attention, cyberattacks can be quite costly for BPOs. Cybersecurity is a growing concern for...

Read Article

February 17, 2022 08:00 AM

Startek appoints Global CIO and Global CFO

Jayanta Lahiri, Global CIO, Startek, will continue the organisation's IT transformation, embracing new technologies to drive greater agility...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-96795

SUMMARY

Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/generic/cbv/views.py accepts an authenticated user's columns POST parameter, takes field_tuple[1], interpolates it into dynamic_fn_str as Python source, and passes the generated function definition to exec(). A crafted string that remains valid under ast.literal_eval can inject Python syntax into a default argument evaluated during function definition, allowing arbitrary operating-system commands to execute with the application process privileges, including root privileges in the shipped Docker image. This issue is fixed in version 2.0.0.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-86066

SUMMARY

Horilla is an HR and CRM software. Prior to 2.0.0, approve_validate_attendance_request at /attendance/approve-validate-attendance-request/ changes attendance_validated, is_validate_request_approved, approved_by, and related pending-request state through an HTTP GET before calling attendance.save(), so Django does not require CSRF validation for the action. An unauthenticated attacker can cause a logged-in manager with attendance.change_attendance to make a top-level request that carries the manager's SameSite=Lax session cookie, silently approving attendance with the victim's privileges and attributing the approval to the victim in the audit trail. This issue is fixed in version 2.0.0.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: )

cvss4

Base Score: 5.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-57449

SUMMARY

Actual is a local-first personal finance tool. Prior to 26.7.0, Actual Sync Server's CORS proxy is intended to let authenticated users fetch resources only from repositories listed in the official plugin allowlist. When `ACTUAL_GITHUB_TOKEN` is configured, the proxy automatically attaches the server's GitHub token to GitHub requests. The GitHub API allowlist check uses a raw `startsWith()` prefix test for `/repos/{owner}/{repo}` without requiring a path boundary after the repository name. If an allowlisted public plugin repository is `https://github.com/acme/plugin`, the proxy also accepts GitHub API URLs. Those URLs are outside the allowlisted repository but still pass because their API path starts with `/repos/acme/plugin`. The proxy then forwards the request with the server's `ACTUAL_GITHUB_TOKEN`, allowing any authenticated Actual user to read private GitHub resources reachable by that token. Version 26.7.0 fixes the issue.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/actualbudget/actual/security/advisories/GHSA-m62c-5q34-f3cf

CVE-2026-92842

SUMMARY

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup(), which stops at the first NUL byte, while keeping the original length. When the filter later emits a line break it copies the recorded length out of the truncated allocation, reading past its end and placing adjacent heap bytes into the filter output.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

https://github.com/php/php-src/security/advisories/GHSA-88hq-2827-7pg6

CVE-2026-91768

SUMMARY

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and reaches the FastCGI endpoint.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/php/php-src/security/advisories/GHSA-62xp-839h-2637

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Startek Vendor Cyber Rating & Cyber Score

Startek A.I CyberSecurity Scoring

Startek CyberSecurity News & History

Startek Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Startek

Incidents vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Startek vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

Incident History - Startek (X = Date, Y = Severity)

Startek Subsidiaries

Startek

Startek Similar Companies

TaskUs

Konecta

VXI Global Solutions

Manserv

VFS Global

Transcom

Grupo Souza Lima

INTELCIA

TDCX

Startek CyberSecurity News

Startek® recognized for cybersecurity excellence and innovation leadership in 2025

Fraud prevention and CX: How AI is enhancing security without adding friction

Driving Positive, Meaningful Human Experiences

When Cyberattacks Happen, How Much Damage Do They Cause for Outsourcers?

Startek appoints Global CIO and Global CFO

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Startek CyberSecurity News & History

Startek Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Startek

Incidents vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Startek vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

Incident History - Startek (X = Date, Y = Severity)

Startek Subsidiaries

Startek

Startek Similar Companies

TaskUs

Konecta

VXI Global Solutions

Manserv

VFS Global

Transcom

Grupo Souza Lima

INTELCIA

TDCX

Startek CyberSecurity News

Startek® recognized for cybersecurity excellence and innovation leadership in 2025

Fraud prevention and CX: How AI is enhancing security without adding friction

Driving Positive, Meaningful Human Experiences

When Cyberattacks Happen, How Much Damage Do They Cause for Outsourcers?

Startek appoints Global CIO and Global CFO

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo