What is the official website of STSI d.o.o. ?

The official website of STSI d.o.o. is http://www.stsi.hr.

What is STSI d.o.o.'s cybersecurity risk score?

STSI d.o.o. has an AI-generated cybersecurity risk score of 745 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has STSI d.o.o. experienced?

According to Rankiteo, STSI d.o.o. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has STSI d.o.o. been affected by any supply chain cyber incidents ?

According to Rankiteo, STSI d.o.o. has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does STSI d.o.o. have SOC 2 Type 1 certification ?

According to Rankiteo, STSI d.o.o. is not certified under SOC 2 Type 1.

Does STSI d.o.o. have SOC 2 Type 2 certification ?

According to Rankiteo, STSI d.o.o. does not hold a SOC 2 Type 2 certification.

Does STSI d.o.o. comply with GDPR ?

According to Rankiteo, STSI d.o.o. is not listed as GDPR compliant.

Does STSI d.o.o. have PCI DSS certification ?

According to Rankiteo, STSI d.o.o. does not currently maintain PCI DSS compliance.

Does STSI d.o.o. comply with HIPAA ?

According to Rankiteo, STSI d.o.o. is not compliant with HIPAA regulations.

Does STSI d.o.o. have ISO 27001 certification ?

According to Rankiteo,STSI d.o.o. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does STSI d.o.o. operate in ?

STSI d.o.o. operates primarily in the Oil and Gas industry.

How many employees does STSI d.o.o. have ?

STSI d.o.o. employs approximately 224 people worldwide.

Does STSI d.o.o. own any subsidiaries ?

STSI d.o.o. presently has no subsidiaries across any sectors.

How many LinkedIn followers does STSI d.o.o. have ?

STSI d.o.o.'s official LinkedIn profile has approximately 4,177 followers.

Does STSI d.o.o. have a Crunchbase profile ?

No, STSI d.o.o. does not have a profile on Crunchbase.

Does STSI d.o.o. have a LinkedIn profile ?

Yes, STSI d.o.o. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/stsi_2.

How many cybersecurity incidents has STSI d.o.o. experienced ?

As of October 18, 2026, Rankiteo reports that STSI d.o.o. has not experienced any cybersecurity incidents.

How many peer or competitor companies does STSI d.o.o. have ?

STSI d.o.o. has an estimated 11,046 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

STSI d.o.o.

Boost Score +25 with badge (5 left)

745

/1000

Moderate

770

/1000

Fair

STSI d.o.o. Vendor Cyber Rating & Cyber Score

stsi.hr

Add Your Compliance Badge

STSI - Integrated technical services Ltd. is a leading company for maintenance, engineering and performance of investment projects in Croatia, resulting from technology and resources integration. United individual services, together with highly educated and trained staff and newest technology, successfully meet all customers' needs. Throughout its longtime history, as well as today, STSI aims at research and the production of oil and gas, processing, sale and distribution of oil, gas and petroleum products. In different organization forms, STSI includes domains of mechanical engineering, electrical engineering, civil engineering and transport.

STSI d.o.o.

STSI d.o.o. CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

STSI d.o.o. Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for STSI d.o.o.

Incidents vs Oil and Gas Industry Avg (This Year)

No incidents recorded for STSI d.o.o. in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for STSI d.o.o. in 2026.

Incident Types STSI d.o.o. vs Oil and Gas Industry Avg (This Year)

No incidents recorded for STSI d.o.o. in 2026.

Incident History - STSI d.o.o. (X = Date, Y = Severity)

Loading…

SUBSIDIARY

STSI d.o.o. Subsidiaries

STSI d.o.o.

Oil and Gas

Website: http://www.stsi.hr

Company Size: 224

INA GrupaOil and Gas

MOL GroupOil and Gas

MOL Pakistan Oil & Gas Co. B.V.Oil and Gas

MOL MagyarországOil and Gas

MOL RomaniaOil and Gas

SlovnaftOil and Gas

MOL Serbia doo, Member of MOL GroupOil and Gas

IES - Italiana Energia e Servizi S.p.A. MEMBER OF MOL GROUPOil and Gas

MOL Česká republikaOil and Gas

TIFON (Member of MOL Group)Oil and Gas

MOL Petrolkémia Zrt.Chemical Manufacturing

MOL Austria Handels GmbHOil and Gas

MOL SlovenijaOil and Gas

UPPP programOil and Gas

Petrolszolg KftIndustrial Machinery Manufacturing

Slovnaft Polska S.A.Oil and Gas

MOL Oman Ltd. Oman BranchOil and Gas

MOL-Russ LLCOil and Gas

MOL Group's Top 10 TipsOil and Gas

Crosco, Integrated Drilling & Well Services Co., Ltd.Oil and Gas

Holdina d.o.o. SarajevoOil and Gas

INA MAZIVAOil and Gas

Energopetrol d.d. SarajevoOil and Gas

Plavi tim d.o.o.IT Services and IT Consulting

Loading…

STSI d.o.o. Similar Companies

repsol

repsol.com

What do you do with the energy that drives you every day? We strive to turn it into something useful for you—your decisions and your next steps. We are a company that explores multi-energy solutions through innovation, technology, and the curiosity of our team. With over 25,000 colleagues and presence in 27 countries, we deliver real solutions to the challenges of mobility, home, and industry. And we do it the way we know best: #AllOurEnergy.

Valero

valero.com

Valero is an international manufacturer and marketer of transportation fuels and petrochemical products. We are a Fortune 500 company based in San Antonio, Texas, fueled by nearly 10,000 employees and 15 petroleum refineries with a combined throughput capacity of approximately 3.2 million barrels per day. We also proudly operate 12 ethanol plants in the Mid-Continent of the U.S., with a combined production capacity of 1.6 billion gallons per year. Our petroleum refineries are located in the United States, Canada and the United Kingdom. Valero also is a joint venture partner in Diamond Green Diesel, which operates a renewable diesel plant in Norco, Louisiana. Diamond Green Diesel is North America’s largest biomass-based diesel plant. Valero sells its products in the wholesale rack or bulk markets in the U.S., Canada, the U.K., Ireland and Latin America. Approximately 7,000 outlets carry Valero’s brand names. Visit www.valero.com for more information, and click 'Careers' to explore opportunities!

Amec Foster Wheeler

woodplc.com

Wood Group has combined with Amec Foster Wheeler to form a new global leader in the delivery of project, engineering and technical services to energy and industrial markets. To find out more about Wood visit our new website at www.woodplc.com For all the latest updates and job news follow Wood on LinkedIn https://www.linkedin.com/company/wood-group/

PDVSA Petróleos de Venezuela S.A.

pdvsa.com

Petróleos de Venezuela S.A. is a Venezuelan state company, began operations on January 1st, 1976 and whose activities are the oil exploration, production, refining, marketing and transportation of Venezuelan oil as well as the orimulsion, chemical, petrochemical businesses and coal. We have the largest oil reserves in the world, reaching at the end of 2013, a total certified sum of 298,353 million barrels, which represent 20% of the world reserves of this resource. Also we manage 197.1 trillion cubic feet of natural gas in proven reserves, a figure that places us in eighth place worldwide. PDVSA carries out its crude processing operations through 14 refineries: six in Venezuela, and nine in the rest of the world. The national refining system is made up of 6 refineries that have a processing capacity of 1 million 303 MBD of which 52% is destined for the local market and 48% for export. The international refining system is made up of 9 refineries located in the Caribbean region, United States and Europe. Our subsidiaries and affiliates are located across the globe in Venezuela, Belgium, China, Dominican Republic, Netherlands, Sweden, the United Kingdom and the United States. Headquartered in Caracas, Venezuela, with offices and operations throughout the country, we employ more than 140,000 workers worldwide.

NOV

nov.com

NOV delivers technology-driven solutions to empower the global energy industry. For more than 150 years, NOV has pioneered innovations that enable its customers to safely produce abundant energy while minimizing environmental impact. The energy industry depends on NOV’s deep expertise and technology to continually improve oilfield operations and assist in efforts to advance the energy transition towards a more sustainable future. NOV powers the industry that powers the world.

Marathon Petroleum Corporation

cb marathonpetroleum.com

Marathon Petroleum Corporation (MPC) is a leading, integrated, downstream and midstream energy company headquartered in Findlay, Ohio. The company operates the nation's largest refining system. MPC's marketing system includes branded locations across the United States, including Marathon brand retail outlets. MPC also owns the general partner and majority limited partner interest in MPLX LP, a midstream company that owns and operates gathering, processing, and fractionation assets, as well as crude oil and light product transportation and logistics infrastructure. More information is available at www.marathonpetroleum.com.

Equinor

equinor.com

We're Equinor, an international energy company with a proud history. Formerly Statoil, we are 20,000 committed colleagues developing oil, gas, wind and solar energy in more than 30 countries worldwide. We’re the largest operator in Norway, among the world’s largest offshore operators, and a growing force in renewables. Driven by our Nordic urge to explore beyond the horizon, and our dedication to safety, equality and sustainability, we’re building a global business on our values and the energy needs of the future. We're the leading operator on the Norwegian continental shelf and have substantial international activities. We are engaged in exploration, development and production of oil and gas, as well as wind and solar power. We sell crude oil and are a major supplier of natural gas, with activities in processing, refining, and trading. Our activities are managed through eight business areas, staffs and support divisions, and we have operations in North and South America, Africa, Asia, Europe and Oceania, and Norway. ______ On this page we encourage you to share your views on energy, sustainability, technology and innovation. We appreciate all feedback, but encourage politeness and a respectful tone. See our full privacy policy here: https://www.equinor.com/about-us/privacy-policy-and-data-protection See our policy for social media here: En: https://www.equinor.com/about-us/social-media#social-media-guidelines

YPF

cb ypf.com

Somos el mayor productor de Oil & Gas de la Argentina, con sólidos resultados y capacidad para llevar adelante los proyectos que convertirán al país en un exportador de energía a nivel mundial. Nuestro objetivo es convertirnos en una empresa no convencional de clase mundial y que Argentina pueda exportar USD 30.000 millones en petróleo y gas para el 2031. Hoy, estamos al frente de los proyectos industriales más ambiciosos del país. Lideramos el Vaca Muerta Oil Sur (VMOS), que potenciará la producción de crudo, y el Argentina LNG, un proyecto de escala global que permitirá exportar gas al mundo. Buscamos constantemente innovación y nuevas tecnologías. Con nuestros Real Time Intelligence Centers, tomamos decisiones más eficientes basadas en datos en tiempo real, aumentando la rentabilidad. Trabajamos por los combustibles del futuro y de calidad internacional. Si te digo un compañía de clase mundial con el corazón que no tiene ninguna otra, decís YPF. Una empresa argentina. #YPFEnergíaArgentina #YPFClaseMundial

ADNOC Group

cb adnoc.ae

We are one of the world's leading energy producers, and a primary catalyst for Abu Dhabi’s growth and diversification. We operate across the entire hydrocarbon value chain, through a network of fully-integrated businesses, with interests that range from exploration, production, storage, refining and distribution, to the development of a wide-range of petrochemical products. Since 1971, we have created thousands of jobs, driven the growth of a diverse knowledge-based economy, and played a key role in Abu Dhabi’s global emergence. Today, we continue to look for new and innovative ways to maximize the value of our resources, pioneering those approaches and technologies that will ensure we are able to meet the demands of an ever-changing energy market, and continue to have a positive impact on the Abu Dhabi economy for generations to come.

Loading…

NEWS

STSI d.o.o. CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-111865

SUMMARY

A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. The manipulation of the argument imgsz/names/kpt_shape results in improper neutralization of directives in dynamically evaluated code. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-111934

SUMMARY

Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts the leftmost, client-supplied X-Forwarded-For value instead of the client IP appended by a reverse proxy. Attackers can send forged X-Forwarded-For values through appending proxies to bypass per-IP rate limits on login, one-time passcode, and password validation endpoints, enabling brute-force attacks, and to falsify IP addresses recorded in audit logs.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-111933

SUMMARY

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration vulnerability because userpassword.Compare() substitutes a placeholder hash derived from the string "hunter2" when a stored password hash is empty. Unauthenticated attackers can submit logins with the password "hunter2" and distinguish HTTP 403 from 401 responses to enumerate valid accounts and reveal the authentication provider of SSO-only users.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 6.3

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-111932

SUMMARY

Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML injection vulnerability because the ApplicationName and LogoURL appearance settings are rendered into HTML output without sufficient escaping. Attackers with the Owner role can store HTML markup in these settings that renders in the Coder dashboard and in SMTP notification emails sent to other deployment users.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 3.4)

cvss3

Base Score: 3.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

1.7

REFERENCES

CVE-2026-111931

SUMMARY

Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to redirect users externally via unsanitized r.URL.Path values. Attackers can craft links on trusted workspace app subdomains with paths beginning with double slashes, which become scheme-relative redirects to attacker sites for phishing.

Published

Date2026-10-17

Updated

Date2026-10-17

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

STSI d.o.o. Vendor Cyber Rating & Cyber Score

STSI d.o.o. A.I CyberSecurity Scoring

STSI d.o.o. CyberSecurity News & History

STSI d.o.o. Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for STSI d.o.o.

Incidents vs Oil and Gas Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types STSI d.o.o. vs Oil and Gas Industry Avg (This Year)

Incident History - STSI d.o.o. (X = Date, Y = Severity)

STSI d.o.o. Subsidiaries

STSI d.o.o.

STSI d.o.o. Similar Companies

repsol

Valero

Amec Foster Wheeler

PDVSA Petróleos de Venezuela S.A.

NOV

Marathon Petroleum Corporation

Equinor

YPF

ADNOC Group

STSI d.o.o. CyberSecurity News

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

STSI d.o.o. CyberSecurity News & History

STSI d.o.o. Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for STSI d.o.o.

Incidents vs Oil and Gas Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types STSI d.o.o. vs Oil and Gas Industry Avg (This Year)

Incident History - STSI d.o.o. (X = Date, Y = Severity)

STSI d.o.o. Subsidiaries

STSI d.o.o.

STSI d.o.o. Similar Companies

repsol

Valero

Amec Foster Wheeler

PDVSA Petróleos de Venezuela S.A.

NOV

Marathon Petroleum Corporation

Equinor

YPF

ADNOC Group

STSI d.o.o. CyberSecurity News

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo