What is the official website of Tupy ?

The official website of Tupy is http://www.tupy.com.br.

What is Tupy's cybersecurity risk score?

Tupy has an AI-generated cybersecurity risk score of 784 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Tupy experienced?

According to Rankiteo, Tupy currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Tupy been affected by any supply chain cyber incidents ?

According to Rankiteo, Tupy has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Tupy have SOC 2 Type 1 certification ?

According to Rankiteo, Tupy is not certified under SOC 2 Type 1.

Does Tupy have SOC 2 Type 2 certification ?

According to Rankiteo, Tupy does not hold a SOC 2 Type 2 certification.

Does Tupy comply with GDPR ?

According to Rankiteo, Tupy is not listed as GDPR compliant.

Does Tupy have PCI DSS certification ?

According to Rankiteo, Tupy does not currently maintain PCI DSS compliance.

Does Tupy comply with HIPAA ?

According to Rankiteo, Tupy is not compliant with HIPAA regulations.

Does Tupy have ISO 27001 certification ?

According to Rankiteo,Tupy is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Tupy operate in ?

Tupy operates primarily in the Manufacturing industry.

How many employees does Tupy have ?

Tupy employs approximately 10,906 people worldwide.

Does Tupy own any subsidiaries ?

Tupy presently has no subsidiaries across any sectors.

How many LinkedIn followers does Tupy have ?

Tupy's official LinkedIn profile has approximately 177,851 followers.

What is the NAICS classification code for Tupy ?

Tupy is classified under the NAICS code 30, which corresponds to Manufacturing.

Does Tupy have a Crunchbase profile ?

No, Tupy does not have a profile on Crunchbase.

Does Tupy have a LinkedIn profile ?

Yes, Tupy maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/tupy.

How many cybersecurity incidents has Tupy experienced ?

As of September 7, 2026, Rankiteo reports that Tupy has not experienced any cybersecurity incidents.

How many peer or competitor companies does Tupy have ?

Tupy has an estimated 8,234 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Tupy

Boost Score +25 with badge (5 left)

784

/1000

Fair

809

/1000

Good

Tupy Vendor Cyber Rating & Cyber Score

tupy.com.br

Add Your Compliance Badge

Tupy is a Brazilian company specialized in developing and manufacturing highly-engineered structural cast iron components applied to complex metallurgical and geometrical components extensively used in capital goods that serve freight transport, construction industry, agriculture and many others industrial applications. These solutions contribute to the improvement of life standards such as, sanitation, drinking water, health, housing and the production and distribution of food. The technological innovation involved in our production and development processes is the company’s specialty that dates back more than 80 years. Tupy’s manufacturing facilities are located in Brazil and Mexico.

Tupy A.I CyberSecurity Scoring

Scoring History

Tupy

Tupy CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Tupy Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Tupy

Incidents vs Manufacturing Industry Avg (This Year)

No incidents recorded for Tupy in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Tupy in 2026.

Incident Types Tupy vs Manufacturing Industry Avg (This Year)

No incidents recorded for Tupy in 2026.

Incident History - Tupy (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Tupy Subsidiaries

Tupy

Manufacturing

Website: http://www.tupy.com.br

Company Size: 10,001+ employees

MWM Motores e GeradoresMechanical Or Industrial Engineering

Loading…

Tupy Similar Companies

Ternium

ternium.com

Ternium (NYSE:TX) is the largest steel producer in Latin America. With production centers in Argentina, Brazil, Colombia, the United States, Guatemala, and Mexico, Ternium has an extensive network of service and distribution centers in the continent, in addition to participating in the control group of Usiminas, a leading company in the Brazilian steel market. More than 35,000 people throughout the Americas make up a multicultural and highly-qualified team and are the foundation for an industrial project with a production capacity of 15.4 million tons of crude steel per year. A strong integration of the production process, industrial excellence, and constant innovation are part of our identity and drive Ternium's growth along with its extensive value chain, with customers and suppliers from industries such as construction, automotive, household appliances, capital goods, packaging, food, and energy. Thanks to digital transformation, research, development processes, as well as the creation of new products with the highest technology, today we are at the forefront of the steel industry, which has an important role to play in the sustainable development of our societies. Every day, in every part of the continent where we work, we grow together with communities, and we seek to support our commitment to safety and the environment in everything we do.

Godrej Enterprises Group

godrejenterprises.com

Since 1897, Godrej Enterprises Group (which includes Godrej & Boyce and its affiliates) has contributed significantly to India’s economic growth and self-reliance by providing complex engineering, design led innovation, and sustainable manufacturing solutions. From the world’s first patented springless lock, and safes to pioneering Indian made typewriters and refrigerators, the conglomerate has also paved the way for the growth of key sectors like aerospace, energy, and security. Today, Godrej Enterprises Group, has presence across 5 continents with a market-leading presence across diverse consumer and industrial businesses spanning Aerospace, Aviation, Defence, Energy, Locks & Security Solutions, Green Building Consulting, Construction and EPC Services, Intralogistics, Tooling, Healthcare Equipment, Consumer Durables, Furniture, Architectural Fittings, IT Solutions and Vending Machines. At Godrej Enterprises, we enable you to do work that’s good for you, your customers, your community and good for the people around you - essentially, work that you can be proud of.

FEMSA

cb femsa.com

FEMSA is a company that creates economic and social value through companies and institutions and strives to be the best employer and neighbor to the communities in which it operates. It participates in the retail industry through Proximity Americas Division operating OXXO, a small-format store chain, and other related retail formats, and Proximity Europe which includes Valora, our European retail unit which operates convenience and foodvenience formats. In the retail industry it also participates though a Health Division, which includes drugstores and related activities and Spin, which includes Spin by OXXO and Spin Premia, among other digital financial services initiatives. In the beverage industry, it participates through Coca-Cola FEMSA, the largest franchise bottler of Coca-Cola products in the world by volume. Across its business units, FEMSA has more than 392,000 employees in 18 countries. FEMSA is a member of the Dow Jones Bestin-Class World Index & Dow Jones Best-in-Class MILA Pacific Alliance Index, both from S&P Global; FTSE4Good Emerging Index; MSCI EM Latin America ESG Leaders Index; S&P/BMV Total México ESG, among other indexes.

A. O. Smith Corporation

aosmith.com

Celebrating its 150th year of business, A. O. Smith is a leading global water technology and manufacturing company that proudly employs more than 12,000 people who together provide water heating and water treatment solutions. The company is headquartered in Milwaukee, Wisconsin, with operations in the United States, Canada, Mexico, China, India, the United Kingdom and the Netherlands. The company also has sales and distribution in more than 60 countries around the world. As a global water technology leader, A. O. Smith applies innovative technology and energy-efficient solutions to products marketed worldwide. Our focus is on building this platform through new product development, global expansion, strategic acquisitions and partnerships.

The Hershey Company

cb thehersheycompany.com

The Hershey Company is headquartered in Hershey, Pa., and is an industry-leading snacks company with a purpose to make more moments of goodness through its iconic brands. Hershey has approximately 20,000 employees around the world who work every day to deliver delicious, quality products. The company has more than 70 brands around the world that drive more than $11 billion in annual revenues, including such beloved brands like HERSHEY'S, REESE'S, KIT KAT®, JOLLY RANCHER, ICE BREAKERS, SHAQ-A-LICIOUS, SKINNYPOP and DOT'S HOMESTYLE PRETZEL'S. For more than 130 years, Hershey has been committed to operating responsibly and supporting its people and communities. Hershey founder, Milton Hershey, created Milton Hershey School in 1909, and since then, the company has focused on helping children succeed through access to education. 

the LEGO Group

lego.com

We are the LEGO Group, the company behind the world’s most loved LEGO® bricks. Our brand name derived from the two Danish words Leg Godt, which mean “Play Well”. We’ve been sparking imaginations and inspiring the builders of tomorrow since 1932. This is our mission and what motivates our colleagues around the world every day. Today, we remain proudly family-owned with headquarters in Billund, Denmark. We have regional hubs in Boston, USA; London, UK; Shanghai, China; and Singapore, as well as 7 manufacturing facilities around the world. These places are home to 31,000+ colleagues in everything from design and engineering to digital technology and marketing. Together we learn, imagine and build – creating play experiences that are sold in over 130 countries worldwide. A purposeful and responsible global brand where creativity helps to inspire builders all around the world. Just imagine being part of that!

Alpargatas S.A.

alpargatas.com.br

We are a global company, founded and based in Brazil for over 115 years. We are committed to delight the world with amazing brands, that convey lightness and joy to the everyday lives of our consumers. We own Havaianas brand, world leader in open shoes, known for the iconic flip-flops that represent Brazilianness, comfort and style. We have 49.2% of Rothy’s a north-american sustainable footwear Brand. The Havaianas brand is one of the largest open-toe footwear brands in the world, with a significant presence and operation in dozens of countries. Rothy’s is present in the United States. Our growth is based on sustainability and economy, always valuing the socio-environmental responsibility of our operations. Our supply chain is vertical, with four manufacturing units in Brazil, and we own ioasys, our digital transformation company. We are more than 10 thousand employees, passionate about make it happen, who want to inspire the world to walk a lighter path. #WeAreAlpaLovers – Inspired by consumers and we walk together to make it happen!

Celestica

cb celestica.com

Celestica is a technology leader dedicated to driving customer success and market advancements. With deep expertise in design, engineering, manufacturing, supply chain and platform solutions, Celestica enables critical data center infrastructure for AI, cloud, and hybrid cloud and advances technologies in high-growth markets. With a talented team and a strategic global network, Celestica helps its customers achieve a competitive advantage.

Grendene S/A

grendene.com.br

Se você deseja construir uma carreira em uma das maiores empresas do Brasil, a Grendene é o seu lugar. Se você quer estar em uma empresa diferente, com criatividade brasileira, tecnologia global e inovação constante, faça parte da nossa equipe. Se você busca desenvolvimento profissional, onde o ambiente diferenciado - ágil e transparente - proporciona desafios constantes, venha para cá! Se você é como a gente, que transforma oportunidades em resultados, trilhe os seus próximos passos profissionais com as nossas marcas! ..................................................................................................................................................................................................... Quem somos Somos umas das maiores fabricantes de calçados do mundo. A nossa primeira unidade fabril foi fundada no município de Farroupilha (RS), em 1971. Atualmente, contamos também com três unidades no Ceará (Fortaleza, Sobral e Crato) e uma unidade na Bahia (Teixeira de Freitas); além das Galerias Melissa (São Paulo, Nova Iorque e Londres) e da Casa Ipanema (Rio de Janeiro). Com mais de 20 mil funcionários, o nosso portfólio contempla marcas como Melissa, Rider, Grendha, Ipanema, Zaxy, Cartago e Grendene Kids, além de vários licenciamentos. Nossas marcas estão presentes em mais de 90 países, em todos os continentes, o que nos possibilita ser a maior exportadora de calçados do Brasil - posição que ocupamos há mais de dez anos.

Loading…

NEWS

Tupy CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 24, 2024 07:00 AM

Petrobras aims to boost Tupi oilfield output to 1 mln bpd by 2027

Brazil state-run firm Petrobras plans to bring oil production at its Tupi oil field back to 1 million barrels per day by 2027 as it plans...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-86304

SUMMARY

MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust anchor. parse_assertion in MojoX::Authentication::Model::SAML2 calls Net::SAML2::Binding::POST->new with no cacert, cert_text or anchors argument, then passes the returned XML to Net::SAML2::Protocol::Assertion->new_from_xml with the IdP signing certificate as cacert. In Net::SAML2 before 0.86 that certificate guards only encrypted assertions, so the signature on an unencrypted assertion is checked against the certificate the response itself carries. An attacker starts a SAML login, then posts a response signed with a certificate of their own. The audience, InResponseTo and timestamp checks that follow are all satisfiable by the attacker, so the response authenticates any NameID it carries.

Published

Date2026-09-06

Updated

Date2026-09-06

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-86232

SUMMARY

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup_del.php?type=supplier. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

Published

Date2026-09-06

Updated

Date2026-09-06

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-86231

SUMMARY

A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraft/jsch/KnownHosts.java. Performing a manipulation of the argument known_hosts results in improper check for certificate revocation. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is told to be difficult. The exploit has been released to the public and may be used for attacks. Upgrading to version 2.28.6 is able to address this issue. The patch is named 194a2f76a5c0f1c3f778565be3fd66bcafc42d23. You should upgrade the affected component.

Published

Date2026-09-06

Updated

Date2026-09-06

RISK INFORMATION (Score: 3.7)

cvss2

Base Score: 2.6

Complexity: HIGH

AV:N/AC:H/Au:N/C:N/I:P/A:N

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

cvss4

Base Score: 2.9

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-86228

SUMMARY

A security vulnerability has been detected in JeecgBoot up to 3.9.3. This vulnerability affects the function exportXls of the file jeecg-boot/jeecg-boot-module/jeecg-boot-module-airag/src/main/java/org/jeecg/modules/airag/llm/controller/AiragModelController.java. Such manipulation of the argument credential leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 3.9.5 is able to resolve this issue. The name of the patch is a2be896f753936956ee6863b632b8e5a0231345c. You should upgrade the affected component.

Published

Date2026-09-06

Updated

Date2026-09-06

RISK INFORMATION (Score: 4.3)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:N/A:N

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-86227

SUMMARY

A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks. Patch name: 4691888e7fab3df128f0bde5750c9fde2ae552fa. To fix this issue, it is recommended to deploy a patch. Exploitation requires cluster mode plus attacker-controlled dump.rdb at startup (data-dir write access, replication feed, or a stored crafted RDB) - an attacker-position DoS at boot, not network pre-auth. The issue report was closed stating it "is worth fixing for the sake of memory safety… but I don't think it meets our bar for a security disclosure."

Published

Date2026-09-06

Updated

Date2026-09-06

RISK INFORMATION (Score: 3.1)

cvss2

Base Score: 2.1

Complexity: HIGH

AV:N/AC:H/Au:S/C:N/I:N/A:P

cvss3

Base Score: 3.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 1.3

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

1.6

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…