What is the official website of Tüpraş ?

The official website of Tüpraş is https://www.tupras.com.tr/tr/.

What is Tüpraş's cybersecurity risk score?

Tüpraş has an AI-generated cybersecurity risk score of 772 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Tüpraş experienced?

According to Rankiteo, Tüpraş currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Tüpraş been affected by any supply chain cyber incidents ?

According to Rankiteo, Tüpraş has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Tüpraş have SOC 2 Type 1 certification ?

According to Rankiteo, Tüpraş is not certified under SOC 2 Type 1.

Does Tüpraş have SOC 2 Type 2 certification ?

According to Rankiteo, Tüpraş does not hold a SOC 2 Type 2 certification.

Does Tüpraş comply with GDPR ?

According to Rankiteo, Tüpraş is not listed as GDPR compliant.

Does Tüpraş have PCI DSS certification ?

According to Rankiteo, Tüpraş does not currently maintain PCI DSS compliance.

Does Tüpraş comply with HIPAA ?

According to Rankiteo, Tüpraş is not compliant with HIPAA regulations.

Does Tüpraş have ISO 27001 certification ?

According to Rankiteo,Tüpraş is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Tüpraş operate in ?

Tüpraş operates primarily in the Oil and Gas industry.

How many employees does Tüpraş have ?

Tüpraş employs approximately 4,702 people worldwide.

Does Tüpraş own any subsidiaries ?

Tüpraş presently has no subsidiaries across any sectors.

How many LinkedIn followers does Tüpraş have ?

Tüpraş's official LinkedIn profile has approximately 432,038 followers.

What is the NAICS classification code for Tüpraş ?

Tüpraş is classified under the NAICS code 211, which corresponds to Oil and Gas Extraction.

Does Tüpraş have a Crunchbase profile ?

No, Tüpraş does not have a profile on Crunchbase.

Does Tüpraş have a LinkedIn profile ?

Yes, Tüpraş maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/tupras.

How many cybersecurity incidents has Tüpraş experienced ?

As of September 13, 2026, Rankiteo reports that Tüpraş has not experienced any cybersecurity incidents.

How many peer or competitor companies does Tüpraş have ?

Tüpraş has an estimated 11,028 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Tüpraş

Boost Score +25 with badge (5 left)

772

/1000

Fair

797

/1000

Fair

Tüpraş Vendor Cyber Rating & Cyber Score

tupras.com.tr

Add Your Compliance Badge

İzmit, İzmir, Kırıkkale ve Batman’da bulunan dört rafinerisinde yıllık toplam 30 milyon tonluk ham petrol işleme kapasitesine sahip olan Tüpraş; Türkiye’nin en büyük sanayi şirketi ve enerji sektörünün lider oyuncusu olmanın yanında, Avrupa'nın 7. büyük rafineri şirketi ve Akdeniz havzasının en kompleks rafinerilerinden biridir. Şirket, rafinericiliğin yanı sıra; perakende yakıt satışı (OPET), deniz ulaştırma (Ditaş Denizcilik), demiryolu ulaştırma (Körfez Ulaştırma), ham petrol ve petrol ürünleri ticareti (Tüpraş Ticaret Ltd.) ve elektrik enerjisi üretimi (Entek Elektrik) alanlarında iştirakleri ile faaliyet göstermektedir. 2021 yılında 2050 Karbon Nötr hedefini ve uzun vadeli Stratejik Dönüşüm Planı’nı açıklayan Tüpraş, 2022 yılında

Tüpraş

Tüpraş CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Tüpraş Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Tüpraş

Incidents vs Oil and Gas Industry Avg (This Year)

No incidents recorded for Tüpraş in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Tüpraş in 2026.

Incident Types Tüpraş vs Oil and Gas Industry Avg (This Year)

No incidents recorded for Tüpraş in 2026.

Incident History - Tüpraş (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Tüpraş Subsidiaries

Tüpraş

Oil and Gas

Website: https://www.tupras.com.tr/tr/

Company Size: 4,702

Koç HoldingHolding Companies

Arçelik TürkiyeManufacturing

Beko Austria AGManufacturing

Beko GlobalManufacturing

Grundig Ruhun DoysunOnline Audio and Video Media

Ford OtosanMotor Vehicle Manufacturing

Gelecek HayalimNon-profit Organizations

Ford BlogMotor Vehicle Manufacturing

Ford Pro TürkiyeMotor Vehicle Manufacturing

Ford Otosan RomaniaMotor Vehicle Manufacturing

Ford Trucks TürkiyeMotor Vehicle Manufacturing

TOFASMotor Vehicle Manufacturing

FIAT TürkiyeMotor Vehicle Manufacturing

Alfa Romeo TürkiyeMotor Vehicle Manufacturing

Jeep TürkiyeMotor Vehicle Manufacturing

Yapı KrediBanking

Yapı Kredi FRWRDBanking

Yapı Kredi Yarınlara KartopuPublic Assistance Programs

TürkTraktörMotor Vehicle Manufacturing

OTOKAR Otomotiv ve Savunma Sanayi A.Ş.Motor Vehicle Manufacturing

KoçSistemIT Services and IT Consulting

KoçSistem AlumniIT Services and IT Consulting

Otokoç OtomotivRetail

Budget HungaryAutomotive

KoçtaşRetail

Koc Finansman A.S.Financial Services

KoçZerBusiness Consulting and Services

AraçisteTruck Transportation

KoçMedical | BıçakcılarMedical Equipment Manufacturing

Token Finansal TeknolojilerFinancial Services

SendeoTransportation, Logistics, Supply Chain and Storage

Demir Export A.Ş.Mining

OPETOil and Gas

DivanHospitality

AygazOil and Gas

SeturTravel Arrangements

Entek ElektrikElectric Power Generation

DüzeyManufacturing

BilkomComputers and Electronics Manufacturing

Ingage Dijital PazarlamaAdvertising Services

RMK MarineShipbuilding

Arçelik Kurumsal ÇözümlerServices for Renewable Energy

DİTAŞ Deniz İşletmeciliği ve Tankerciliği A.Ş.Maritime Transportation

WAT Motor CompanyEngines and Power Transmission Equipment Manufacturing

KoçDigitalIT Services and IT Consulting

Vehbi Koç Vakfı / Vehbi Koç FoundationNon-profit Organization Management

Setur MarinasMaritime Transportation

ChippinTechnology, Information and Internet

WAT MobiliteRenewable Energy Semiconductor Manufacturing

SeturbizTravel Arrangements

Koç Fiat Kredi Finansman A.Ş.Financial Services

Koç Bilgi ve Savunma TeknolojileriDefense and Space Manufacturing

Promena Strategic Procurement SoftwareSoftware Development

Loading…

Tüpraş Similar Companies

Amec Foster Wheeler

woodplc.com

Wood Group has combined with Amec Foster Wheeler to form a new global leader in the delivery of project, engineering and technical services to energy and industrial markets. To find out more about Wood visit our new website at www.woodplc.com For all the latest updates and job news follow Wood on LinkedIn https://www.linkedin.com/company/wood-group/

Oxy

oxy.com

Oxy is an international energy company that produces, markets and transports oil and natural gas to maximize value and provide resources fundamental to life. The company leverages its global leadership in carbon management to advance lower-carbon technologies and products. Headquartered in Houston, Oxy primarily operates in the United States, the Middle East and North Africa.

ConocoPhillips

cb conocophillips.com

We are a global oil and gas company tasked with an important job—to safely find and deliver energy for the world. We’re experts in what we do—from the well site to the office. Across our operations and activities in 13 countries, we never forget our responsibility to be a great neighbor, and a great place to work. Guided by our SPIRIT Values—Safety, People, Integrity, Responsibility, Innovation and Teamwork—we deliver strong performance, keeping our promises to our stakeholders, communities and each other. We solve problems and develop new approaches together, as a team of people—not job titles. That’s ConocoPhillips. It’s not just what we do. It’s how we do it. At ConocoPhillips, we believe it is important to foster a safe and constructive online environment for our community. To do so, we encourage visitors to contribute to conversations by following a few guidelines: - Please contribute to the dialogue by keeping your comments relevant to the community and on topic. - Direct your comments at issues, rather than individuals. Any of the following violations of these guidelines may warrant, without prior notice, actions such as removing posts and comments or blocking an account: - Comments that are spam, defamatory or offensive (e.g., obscene, indecent, profane, violent, cruel or discriminatory) will be removed. - Content that violates the terms of use stipulated by each social media operating company. - Any other behavior ConocoPhillips deems inappropriate. Community policy: https://bit.ly/3mrTG4d

Petrobras

cb petrobras.com.br

Nosso propósito é prover energia que assegure prosperidade de forma ética, justa, segura e competitiva. Queremos ser a melhor empresa diversificada e integrada de energia na geração de valor, construindo um mundo mais sustentável, conciliando o foco em óleo e gás com a diversificação em negócios de baixo carbono (inclusive produtos petroquímicos e fertilizantes), sustentabilidade, segurança, respeito ao meio ambiente e atenção total às pessoas. Saiba mais em petrobras.com.br

TotalEnergies

totalenergies.com

Have you ever thought of offering your skills and expertise to a multinational company? Give your best to better energy and make the commitment with TotalEnergies. With over 500-plus professions in 130 countries, we offer high safety and environmental standards, strong ethical values, an innovation culture and wide-ranging career development. Be part of the global team whose mission is already shared by 105,000 employees : to be a world-class player in the energy transition

Weatherford

cb weatherford.com

Weatherford International plc (Nasdaq: WFRD) is a leading global energy services company. Operating in approximately 75 countries, the Company answers the challenges of the energy industry with its global talent network of approximately 17,000 team members and approximately 350 operating locations, including manufacturing, research and development, service, and training facilities.

PT Pertamina (Persero)

cb pertamina.com

PT Pertamina (Persero) is an Indonesian state-owned enterprise, which is engaged in the integrated energy in Indonesia. Established on December 10, 1957, Pertamina had the experiences in upstream, midstream, downstream and renewable energy sectors for more than 50 years. This is the official LinkedIn Pertamina account and managed by Pertamina. Any other official social media account link in the corporate website Pertamina subsidiaries. Please kindly check the validity of the account. We support the LinkedIn Terms of Use (User Agreement) and encourage open, lively conversation with a few simple rules: -- We reserve the right to correct factual errors. -- We will reply to comments when appropriate. -- If we disagree with other opinions, we will do so respectfully. -- You may not post anything that is spam or that is abusive, profane, or defamatory toward a person, entity, belief, or symbol. More Information : Website www.pertamina.com Layanan E-PPID : http://ptm.id/ePPID_Pertamina Become a fan on Facebook.com/pertamina Check out YouTube.com/pertamina Follow us on Twitter.com/pertamina Likes us on Instagram.com/pertamina

TechnipFMC

technipfmc.com

TechnipFMC is a leading technology provider to the traditional and new energies industry, delivering fully integrated projects, products, and services. With our proprietary technologies and comprehensive solutions, we are transforming our clients’ project economics, helping them unlock new possibilities to develop energy resources while reducing carbon intensity and supporting their energy transition ambitions. Organized in two business segments — Subsea and Surface Technologies — we will continue to advance the industry with our pioneering integrated ecosystems (such as iEPCI™, iFEED™ and iComplete™), technology leadership and digital innovation. Each of our approximately 20,000 employees is driven by a commitment to our clients’ success, and a culture of strong execution, purposeful innovation, and challenging industry conventions. To learn more about us and how we are enhancing the performance of the world’s energy industry, go to TechnipFMC.com.

Koch Engineered Solutions

kochengineeredsolutions.com

Koch Engineered Solutions (KES) provides uniquely engineered solutions in construction; mass and heat transfer; combustion and emissions controls; filtration; separation; materials applications; automation and actuation. KES is located in Wichita, Kansas, and is a subsidiary of Koch Industries, one of the largest private companies in the world. KES delivers superior value in developing, integrating, and applying innovative technical and service solutions for industrial value chains. More information is available at KochEngineeredSolutions.com. Below is a list of our businesses: Koch-Glitsch John Zink Koch Specialty Plant Services Optimized Process Designs, LLC Koch Technology Solutions DEPCOM Power Inc. DarkVision Technologies Inc.

Loading…

NEWS

Tüpraş CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 06, 2023 08:00 AM

Tüpraş integrates robots to advance digitalization of Turkish refineries

As part of Türkiye Petrol Rafinerileri AS's (Tüpraş) digitalization transformation plan, the operator in 2021-22 began pilot tests using...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-90647

SUMMARY

ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client (Task Mode). This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneous faults, enabling a Man-in-the-Middle attack on protected communications.

Published

Date2026-09-12

Updated

Date2026-09-12

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

cvss4

Base Score: 9.1

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

2.2

REFERENCES

https://www.ase-systems.com/wp-content/uploads/2026/07/CYB_2026_86278_Advisory_v1.0.pdf

CVE-2026-90487

SUMMARY

A vulnerability was found in Xuxueli xxl-job up to 3.4.2. Affected by this issue is some unknown functionality of the file xxl-job-admin/src/main/java/com/xxl/job/admin/business/controller/JobGroupController.java. The manipulation results in improper privilege management. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-09-12

Updated

Date2026-09-12

RISK INFORMATION (Score: 4.3)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:N/A:N

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-90486

SUMMARY

A vulnerability has been found in openstatusHQ openstatus up to f04c827112f30a11d571ebdad3892826034d6265. Affected by this vulnerability is an unknown functionality of the file apps/status-page/src/lib/proxy/resolve-custom-domain-rewrite.ts. The manipulation leads to server-side request forgery. The attack may be initiated remotely. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The identifier of the patch is 86f370c9c20074c3c3fdec53a359874b8e670fd4. It is suggested to install a patch to address this issue. This issue got fixed with a silent patch.

Published

Date2026-09-12

Updated

Date2026-09-12

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-79300

SUMMARY

SEP sesam before 5.2.0.24 mishandles User Authorization with MFA. If AD authentication is configured and MFA is enforced, an attacker can create a second OTP access capability. SEP sesam and Active Directory handle username capitalization differently, which may allow multiple SEP sesam user accounts to be created for the same Active Directory (AD) account. Active Directory treats usernames as case-insensitive, while SEP sesam distinguishes between different letter casing. As a result, the same AD user can be represented by multiple SEP sesam user accounts that differ only in username capitalization. When Active Directory authentication is configured and multi-factor authentication (MFA) is enforced, this behavior may allow an additional OTP Authenticator to be registered for the same AD account, reducing the effectiveness of MFA protection.

Published

Date2026-09-12

Updated

Date2026-09-12

RISK INFORMATION (Score: 3.5)

cvss3

Base Score: 3.5

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N

Impact Score

1.4

Exploitability

1.8

REFERENCES

https://wiki.sep.de/wiki/index.php/Release_Notes_5.2.0_Artemis#fixed

CVE-2026-90485

SUMMARY

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub_11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and may be used. Identical IURegistryFilter.sys ships across multiple IObit families. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-09-12

Updated

Date2026-09-12

RISK INFORMATION (Score: 5.5)

cvss2

Base Score: 4.6

Complexity: LOW

AV:L/AC:L/Au:S/C:N/I:N/A:C

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 5.4

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

1.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Tüpraş Vendor Cyber Rating & Cyber Score

Tüpraş A.I CyberSecurity Scoring

Tüpraş CyberSecurity News & History

Tüpraş Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Tüpraş

Incidents vs Oil and Gas Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Tüpraş vs Oil and Gas Industry Avg (This Year)

Incident History - Tüpraş (X = Date, Y = Severity)

Tüpraş Subsidiaries

Tüpraş

Tüpraş Similar Companies

Amec Foster Wheeler

Oxy

ConocoPhillips

Petrobras

TotalEnergies

Weatherford

PT Pertamina (Persero)

TechnipFMC

Koch Engineered Solutions

Tüpraş CyberSecurity News

Tüpraş integrates robots to advance digitalization of Turkish refineries

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Tüpraş CyberSecurity News & History

Tüpraş Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Tüpraş

Incidents vs Oil and Gas Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Tüpraş vs Oil and Gas Industry Avg (This Year)

Incident History - Tüpraş (X = Date, Y = Severity)

Tüpraş Subsidiaries

Tüpraş

Tüpraş Similar Companies

Amec Foster Wheeler

Oxy

ConocoPhillips

Petrobras

TotalEnergies

Weatherford

PT Pertamina (Persero)

TechnipFMC

Koch Engineered Solutions

Tüpraş CyberSecurity News

Tüpraş integrates robots to advance digitalization of Turkish refineries

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo