ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

About Washington National Insurance Company At Washington National, we're dedicated to serving the needs of Americans who've worked hard and want to protect the health and well-being of themselves and their loved ones. Our supplemental health and life insurance products have helped provide peace of mind since 1911. Washington National offers a full line of supplemental health and life insurance products, through a nationwide network of independent insurance agents serving middle-income Americans. Washington National is an experienced leader in the voluntary worksite and individual markets.

Washington National Insurance Company A.I CyberSecurity Scoring

WNIC

Company Details

Linkedin ID:

washington-national-insurance-company

Employees number:

429

Number of followers:

3,829

NAICS:

524

Industry Type:

Insurance

Homepage:

washingtonnational.com

IP Addresses:

0

Company ID:

WAS_3144027

Scan Status:

In-progress

AI scoreWNIC Risk Score (AI oriented)

Between 650 and 699

https://images.rankiteo.com/companyimages/washington-national-insurance-company.jpeg
WNIC Insurance
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreWNIC Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/washington-national-insurance-company.jpeg
WNIC Insurance
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

WNIC Company CyberSecurity News & History

Past Incidents
6
Attack Types
1
EntityTypeSeverityImpactSeenBlog DetailsIncident DetailsView
Bankers Life and Casualty CompanyBreach5029/2021
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The Maine Office of the Attorney General reported a data breach involving Bankers Life and Casualty Company on December 30, 2021. The breach, which occurred on September 29, 2021, involved a business email compromise that potentially compromised the Social Security Numbers of 377 individuals, including 1 resident. Twelve months of identity theft protection services through IDX were offered as a response.

Bankers LifeBreach8545/2018
Rankiteo Explanation :
Attack with significant impact with customers data leaks

Description: The California Office of the Attorney General reported on October 25, 2018, that Bankers Life experienced a data breach that occurred between May 30, 2018, and September 13, 2018. Unauthorized third parties accessed employee credentials, potentially exposing personal information of policyholders including names, addresses, dates of birth, and insurance information.

Bankers LifeBreach100411/2023
Rankiteo Explanation :
Attack with significant impact with customers data leaks

Description: The breach was reported by Bankers Life on January 26, 2024, concerning a SIM swapping attack that occurred on November 29, 2023. The incident potentially exposed personal information, including names, social security numbers, dates of birth, and policy numbers, although it is believed that the threat actor primarily targeted company data rather than individual personal information.

CNO Financial Group, Inc.Breach60312/2020
Rankiteo Explanation :
Attack with significant impact with internal employee data leaks

Description: The Maine Office of the Attorney General reported a data breach involving CNO Financial Group, Inc. on July 20, 2021. The breach, which occurred from December 1, 2020 to January 20, 2021, involved an external system breach (hacking) affecting a total of 562 individuals, with at least 1 resident of Maine affected. The compromised information includes Social Security numbers.

Washington National Insurance CompanyBreach50210/2023
Rankiteo Explanation :
Attack limited on finance or reputation

Description: The Maine Office of the Attorney General reported that Washington National Insurance Company experienced a data breach on October 6, 2023, involving inadvertent disclosure of information affecting 424 individuals total, including 1 resident. The company offered identity theft protection services through IDX, a ZeroFox Company, for 12 months following the incident.

Washington National Insurance CompanyBreach85411/2023
Rankiteo Explanation :
Attack with significant impact with customers data leaks

Description: On January 30, 2024, the Maine Office of the Attorney General reported a data breach involving Washington National Insurance Company that occurred on November 28, 2023. The breach involved unauthorized access through a SIM swapping attack, affecting 20,360 individuals, including compromised Social Security numbers.

Bankers Life and Casualty Company
Breach
Severity: 50
Impact: 2
Seen: 9/2021
Blog:
Rankiteo Explanation
Attack limited on finance or reputation

Description: The Maine Office of the Attorney General reported a data breach involving Bankers Life and Casualty Company on December 30, 2021. The breach, which occurred on September 29, 2021, involved a business email compromise that potentially compromised the Social Security Numbers of 377 individuals, including 1 resident. Twelve months of identity theft protection services through IDX were offered as a response.

Bankers Life
Breach
Severity: 85
Impact: 4
Seen: 5/2018
Blog:
Rankiteo Explanation
Attack with significant impact with customers data leaks

Description: The California Office of the Attorney General reported on October 25, 2018, that Bankers Life experienced a data breach that occurred between May 30, 2018, and September 13, 2018. Unauthorized third parties accessed employee credentials, potentially exposing personal information of policyholders including names, addresses, dates of birth, and insurance information.

Bankers Life
Breach
Severity: 100
Impact: 4
Seen: 11/2023
Blog:
Rankiteo Explanation
Attack with significant impact with customers data leaks

Description: The breach was reported by Bankers Life on January 26, 2024, concerning a SIM swapping attack that occurred on November 29, 2023. The incident potentially exposed personal information, including names, social security numbers, dates of birth, and policy numbers, although it is believed that the threat actor primarily targeted company data rather than individual personal information.

CNO Financial Group, Inc.
Breach
Severity: 60
Impact: 3
Seen: 12/2020
Blog:
Rankiteo Explanation
Attack with significant impact with internal employee data leaks

Description: The Maine Office of the Attorney General reported a data breach involving CNO Financial Group, Inc. on July 20, 2021. The breach, which occurred from December 1, 2020 to January 20, 2021, involved an external system breach (hacking) affecting a total of 562 individuals, with at least 1 resident of Maine affected. The compromised information includes Social Security numbers.

Washington National Insurance Company
Breach
Severity: 50
Impact: 2
Seen: 10/2023
Blog:
Rankiteo Explanation
Attack limited on finance or reputation

Description: The Maine Office of the Attorney General reported that Washington National Insurance Company experienced a data breach on October 6, 2023, involving inadvertent disclosure of information affecting 424 individuals total, including 1 resident. The company offered identity theft protection services through IDX, a ZeroFox Company, for 12 months following the incident.

Washington National Insurance Company
Breach
Severity: 85
Impact: 4
Seen: 11/2023
Blog:
Rankiteo Explanation
Attack with significant impact with customers data leaks

Description: On January 30, 2024, the Maine Office of the Attorney General reported a data breach involving Washington National Insurance Company that occurred on November 28, 2023. The breach involved unauthorized access through a SIM swapping attack, affecting 20,360 individuals, including compromised Social Security numbers.

Ailogo

WNIC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for WNIC

Incidents vs Insurance Industry Average (This Year)

No incidents recorded for Washington National Insurance Company in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Washington National Insurance Company in 2025.

Incident Types WNIC vs Insurance Industry Avg (This Year)

No incidents recorded for Washington National Insurance Company in 2025.

Incident History — WNIC (X = Date, Y = Severity)

WNIC cyber incidents detection timeline including parent company and subsidiaries

WNIC Company Subsidiaries

SubsidiaryImage

About Washington National Insurance Company At Washington National, we're dedicated to serving the needs of Americans who've worked hard and want to protect the health and well-being of themselves and their loved ones. Our supplemental health and life insurance products have helped provide peace of mind since 1911. Washington National offers a full line of supplemental health and life insurance products, through a nationwide network of independent insurance agents serving middle-income Americans. Washington National is an experienced leader in the voluntary worksite and individual markets.

Loading...
similarCompanies

WNIC Similar Companies

GNP Seguros

Somos la empresa aseguradora multirramo 100% mexicana de mayor experiencia y solidez de nuestro país. Por más de 116 años hemos protegido a las familias mexicanas, respaldando sus sueños, historias, emociones y vivencias. Estamos orgullosos de formar parte de uno de los conglomerados empresariales

MAPFRE

At MAPFRE, we’re committed to protecting what matters most to you. That’s why we’re the largest Spanish-owned insurer in the world, the largest multinational insurance company in Latin America and among the 15 largest European groups by premium volume. With a legacy spanning more than 90 years, we’r

Sunshine Insurance Group

Established in July 2005, Sunshine Insurance Group has experienced sustainable development, now ranking among the Top 7 insurance groups in China, with an annual business income of $12.6 billion in 2016. Sunshine is composed of Property and Casualty Insurance, Life Insurance, Credit and Guarantee In

GEICO

GEICO (Government Employees Insurance Company) offers a variety of insurance such as vehicle, property, business, life, umbrella, travel, pet, jewelry and more. The company, which was founded in 1936, is the third-largest auto insurer in the United States and insures vehicles in all 50 states an

Bajaj Allianz Life Insurance

Bajaj Allianz Life Insurance, one of the fastest-growing life insurers, is a joint venture between Bajaj Finserv Limited, one of the most diversified financial institutions in India, and Allianz SE, a leading global financial services provider with a presence in 70+ countries. Our remarkable journe

State Farm

At State Farm®, our mission is to help people manage the risks of everyday life, recover from the unexpected, and realize their dreams. We are passionate and driven to create possibilities, and we’re serious about helping customers by providing solutions for all of life’s moments. Like a good neighb

Nationwide

Nationwide, a Fortune 100 company based in Columbus, Ohio, is one of the largest and strongest diversified insurance and financial services organizations in the United States. Nationwide is rated A+ by Standard & Poor's. An industry leader in driving customer-focused innovation, Nationwide provides

MetLife

We live in a time of unprecedented change. A time when economies, regulations, and social safety nets are all in flux. Customers around the globe have told us they’re overwhelmed by the pace of change and are looking for a trusted partner to help them manage life’s twists and turns. MetLife is com

QBE Insurance

QBE is an international insurer and reinsurer listed on the Australian Securities Exchange and headquartered in Sydney. We employ over 13,000 people in 26 countries. Leveraging our deep expertise and insights, QBE offers commercial, personal and specialty products and risk management solutions to h

newsone

WNIC CyberSecurity News

November 19, 2025 08:00 AM
EY US - Home | Building a better working world

Our commitment to audit quality. At EY US, we are bringing our bold vision for the future of audit to life with quality at the center,...

November 04, 2025 08:00 AM
E&E News: Washington National Cathedral to host service for Jane Goodall

E&E NEWS PM | A funeral service for Jane Goodall, the trailblazing primatologist and conservationist who transformed the world's...

October 16, 2025 07:00 AM
Shutdown Or Meltdown? The Real Cybersecurity Risk Behind Washington Gridlock

A prolonged U.S. government shutdown is straining the nation's cybersecurity defenses, leaving key agencies understaffed as our adversaries...

October 10, 2025 07:00 AM
Cybersecurity agency that clashed with Trump one of first hit with firings during gov't shutdown

WASHINGTON — The Cybersecurity and Infrastructure Security Agency (CISA) is among the offices being permanently downsized as a result of the...

September 30, 2025 07:00 AM
Most Powerful Women in Washington 2025

The most influential women in Washington who are shaping government, business, the arts, education, law, media, and nonprofits.

September 08, 2025 07:00 AM
Best Medicare Supplement Plans In Florida 2025

Medicare Supplement plans are a great way to save on out-of-pocket costs if you have Original Medicare. Thirty private health insurance...

September 08, 2025 07:00 AM
Best Medicare Supplement Plans In Texas 2025

Discover the best Medicare Supplement plans in Texas in 2025, and learn the average cost of premiums, the variety of providers available and...

September 08, 2025 07:00 AM
Best Medicare Supplement Plans In California 2025

Medicare is a federal health insurance program designed to provide coverage for Americans over 65 or with certain disabilities.

August 20, 2025 07:00 AM
5 Best Homeowners Insurance Companies in Washington State in 2025

The best home insurance companies of 2025, including Amica (Best Overall), State Farm (Best for Bundling Policies), AIG (Best for High Value...

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

WNIC CyberSecurity History Information

Official Website of Washington National Insurance Company

The official website of Washington National Insurance Company is http://www.WashingtonNational.com.

Washington National Insurance Company’s AI-Generated Cybersecurity Score

According to Rankiteo, Washington National Insurance Company’s AI-generated cybersecurity score is 654, reflecting their Weak security posture.

How many security badges does Washington National Insurance Company’ have ?

According to Rankiteo, Washington National Insurance Company currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Washington National Insurance Company have SOC 2 Type 1 certification ?

According to Rankiteo, Washington National Insurance Company is not certified under SOC 2 Type 1.

Does Washington National Insurance Company have SOC 2 Type 2 certification ?

According to Rankiteo, Washington National Insurance Company does not hold a SOC 2 Type 2 certification.

Does Washington National Insurance Company comply with GDPR ?

According to Rankiteo, Washington National Insurance Company is not listed as GDPR compliant.

Does Washington National Insurance Company have PCI DSS certification ?

According to Rankiteo, Washington National Insurance Company does not currently maintain PCI DSS compliance.

Does Washington National Insurance Company comply with HIPAA ?

According to Rankiteo, Washington National Insurance Company is not compliant with HIPAA regulations.

Does Washington National Insurance Company have ISO 27001 certification ?

According to Rankiteo,Washington National Insurance Company is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Washington National Insurance Company

Washington National Insurance Company operates primarily in the Insurance industry.

Number of Employees at Washington National Insurance Company

Washington National Insurance Company employs approximately 429 people worldwide.

Subsidiaries Owned by Washington National Insurance Company

Washington National Insurance Company presently has no subsidiaries across any sectors.

Washington National Insurance Company’s LinkedIn Followers

Washington National Insurance Company’s official LinkedIn profile has approximately 3,829 followers.

NAICS Classification of Washington National Insurance Company

Washington National Insurance Company is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Washington National Insurance Company’s Presence on Crunchbase

No, Washington National Insurance Company does not have a profile on Crunchbase.

Washington National Insurance Company’s Presence on LinkedIn

Yes, Washington National Insurance Company maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/washington-national-insurance-company.

Cybersecurity Incidents Involving Washington National Insurance Company

As of December 10, 2025, Rankiteo reports that Washington National Insurance Company has experienced 6 cybersecurity incidents.

Number of Peer and Competitor Companies

Washington National Insurance Company has an estimated 15,004 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at Washington National Insurance Company ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

How does Washington National Insurance Company detect and respond to cybersecurity incidents ?

Detection and Response: The company detects and responds to cybersecurity incidents through an remediation measures with offered 12 months of identity theft protection services through idx, and third party assistance with idx, a zerofox company, and remediation measures with identity theft protection services for 12 months..

Incident Details

Can you provide details on each incident ?

Incident : Data Breach

Title: Bankers Life and Casualty Company Data Breach

Description: A business email compromise potentially compromised the Social Security Numbers of 377 individuals.

Date Detected: 2021-09-29

Date Publicly Disclosed: 2021-12-30

Type: Data Breach

Attack Vector: Business Email Compromise

Incident : Data Breach

Title: Data Breach at Washington National Insurance Company

Description: Unauthorized access through a SIM swapping attack affecting 20,360 individuals, including compromised Social Security numbers.

Date Detected: 2024-01-30

Date Publicly Disclosed: 2024-01-30

Type: Data Breach

Attack Vector: SIM Swapping

Incident : Data Breach

Title: CNO Financial Group Data Breach

Description: The Maine Office of the Attorney General reported a data breach involving CNO Financial Group, Inc. on July 20, 2021. The breach, which occurred from December 1, 2020 to January 20, 2021, involved an external system breach (hacking) affecting a total of 562 individuals, with at least 1 resident of Maine affected. The compromised information includes Social Security numbers.

Date Detected: 2021-07-20

Date Publicly Disclosed: 2021-07-20

Type: Data Breach

Attack Vector: External System Breach (Hacking)

Incident : Data Breach

Title: Washington National Insurance Company Data Breach

Description: The Maine Office of the Attorney General reported that Washington National Insurance Company experienced a data breach on October 6, 2023, involving inadvertent disclosure of information affecting 424 individuals total, including 1 resident. The company offered identity theft protection services through IDX, a ZeroFox Company, for 12 months following the incident.

Date Detected: 2023-10-06

Type: Data Breach

Incident : Data Breach

Title: Bankers Life Data Breach

Description: Unauthorized third parties accessed employee credentials, potentially exposing personal information of policyholders including names, addresses, dates of birth, and insurance information.

Date Detected: 2018-09-13

Date Publicly Disclosed: 2018-10-25

Type: Data Breach

Attack Vector: Compromised Credentials

Vulnerability Exploited: Employee Credentials

Threat Actor: Unauthorized Third Parties

Incident : Data Breach

Title: Bankers Life SIM Swapping Attack

Description: A SIM swapping attack on Bankers Life potentially exposed personal information, including names, social security numbers, dates of birth, and policy numbers. The threat actor primarily targeted company data rather than individual personal information.

Date Detected: 2024-01-26

Type: Data Breach

Attack Vector: SIM Swapping

Motivation: Data Theft

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Breach.

Impact of the Incidents

What was the impact of each incident ?

Incident : Data Breach BAN204072625

Data Compromised: Social security numbers

Identity Theft Risk: High

Incident : Data Breach WAS433072625

Data Compromised: Social security numbers

Incident : Data Breach CNO912072825

Data Compromised: Social security numbers

Incident : Data Breach WAS348072825

Data Compromised: Personal Information

Identity Theft Risk: High

Incident : Data Breach BAN311072825

Data Compromised: Names, Addresses, Dates of birth, Insurance information

Incident : Data Breach BAN357072925

Data Compromised: Names, Social security numbers, Dates of birth, Policy numbers

What types of data are most commonly compromised in incidents ?

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Social Security Numbers, Social Security Numbers, , Social Security Numbers, , Personal Information, Names, Addresses, Dates Of Birth, Insurance Information, , Personal Information, Company Data and .

Which entities were affected by each incident ?

Incident : Data Breach BAN204072625

Entity Name: Bankers Life and Casualty Company

Entity Type: Insurance Company

Industry: Insurance

Customers Affected: 377

Incident : Data Breach WAS433072625

Entity Name: Washington National Insurance Company

Entity Type: Insurance Company

Industry: Insurance

Customers Affected: 20360

Incident : Data Breach CNO912072825

Entity Name: CNO Financial Group, Inc.

Entity Type: Company

Industry: Financial Services

Customers Affected: 562

Incident : Data Breach WAS348072825

Entity Name: Washington National Insurance Company

Entity Type: Insurance Company

Industry: Insurance

Customers Affected: 424

Incident : Data Breach BAN311072825

Entity Name: Bankers Life

Entity Type: Insurance Company

Industry: Insurance

Incident : Data Breach BAN357072925

Entity Name: Bankers Life

Entity Type: Company

Industry: Insurance

Response to the Incidents

What measures were taken in response to each incident ?

Incident : Data Breach BAN204072625

Remediation Measures: Offered 12 months of identity theft protection services through IDX

Incident : Data Breach WAS348072825

Third Party Assistance: IDX, a ZeroFox Company

Remediation Measures: Identity theft protection services for 12 months

How does the company involve third-party assistance in incident response ?

Third-Party Assistance: The company involves third-party assistance in incident response through IDX, a ZeroFox Company.

Data Breach Information

What type of data was compromised in each breach ?

Incident : Data Breach BAN204072625

Type of Data Compromised: Social Security Numbers

Number of Records Exposed: 377

Sensitivity of Data: High

Personally Identifiable Information: Social Security Numbers

Incident : Data Breach WAS433072625

Type of Data Compromised: Social security numbers

Number of Records Exposed: 20360

Incident : Data Breach CNO912072825

Type of Data Compromised: Social security numbers

Number of Records Exposed: 562

Sensitivity of Data: High

Incident : Data Breach WAS348072825

Type of Data Compromised: Personal Information

Number of Records Exposed: 424

Incident : Data Breach BAN311072825

Type of Data Compromised: Names, Addresses, Dates of birth, Insurance information

Incident : Data Breach BAN357072925

Type of Data Compromised: Personal information, Company data

Sensitivity of Data: High

Personally Identifiable Information: NamesSocial Security NumbersDates of BirthPolicy Numbers

What measures does the company take to prevent data exfiltration ?

Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Offered 12 months of identity theft protection services through IDX, , Identity theft protection services for 12 months.

References

Where can I find more information about each incident ?

Incident : Data Breach BAN204072625

Source: Maine Office of the Attorney General

Date Accessed: 2021-12-30

Incident : Data Breach WAS433072625

Source: Maine Office of the Attorney General

Date Accessed: 2024-01-30

Incident : Data Breach CNO912072825

Source: Maine Office of the Attorney General

Date Accessed: 2021-07-20

Incident : Data Breach WAS348072825

Source: Maine Office of the Attorney General

Incident : Data Breach BAN311072825

Source: California Office of the Attorney General

Date Accessed: 2018-10-25

Where can stakeholders find additional resources on cybersecurity best practices ?

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Maine Office of the Attorney GeneralDate Accessed: 2021-12-30, and Source: Maine Office of the Attorney GeneralDate Accessed: 2024-01-30, and Source: Maine Office of the Attorney GeneralDate Accessed: 2021-07-20, and Source: Maine Office of the Attorney General, and Source: California Office of the Attorney GeneralDate Accessed: 2018-10-25.

Post-Incident Analysis

What is the company's process for conducting post-incident analysis ?

Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as IDX, a ZeroFox Company.

Additional Questions

General Information

Who was the attacking group in the last incident ?

Last Attacking Group: The attacking group in the last incident was an Unauthorized Third Parties.

Incident Details

What was the most recent incident detected ?

Most Recent Incident Detected: The most recent incident detected was on 2021-09-29.

What was the most recent incident publicly disclosed ?

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2018-10-25.

Impact of the Incidents

What was the most significant data compromised in an incident ?

Most Significant Data Compromised: The most significant data compromised in an incident were Social Security Numbers, , Social Security numbers, , Social Security numbers, , Personal Information, Names, Addresses, Dates of Birth, Insurance Information, , Names, Social Security Numbers, Dates of Birth, Policy Numbers and .

Response to the Incidents

What third-party assistance was involved in the most recent incident ?

Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was IDX, a ZeroFox Company.

Data Breach Information

What was the most sensitive data compromised in a breach ?

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Policy Numbers, Names, Social Security Numbers, Personal Information, Social Security numbers, Addresses, Insurance Information and Dates of Birth.

What was the number of records exposed in the most significant breach ?

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 1.6K.

References

What is the most recent source of information about an incident ?

Most Recent Source: The most recent source of information about an incident are Maine Office of the Attorney General and California Office of the Attorney General.

cve

Latest Global CVEs (Not Company-Specific)

Description

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain a Stored Cross-Site Scripting (XSS) vulnerability in the /WeGIA/html/geral/configurar_senhas.php endpoint. The application does not sanitize user-controlled data before rendering it inside the employee selection dropdown. The application retrieves employee names from the database and injects them directly into HTML <option> elements without proper escaping. This issue is fixed in version 3.5.5.

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

ZITADEL is an open-source identity infrastructure tool. Versions 4.0.0-rc.1 through 4.7.0 are vulnerable to DOM-Based XSS through the Zitadel V2 logout endpoint. The /logout endpoint insecurely routes to a value that is supplied in the post_logout_redirect GET parameter. As a result, unauthenticated remote attacker can execute malicious JS code on Zitadel users’ browsers. To carry out an attack, multiple user sessions need to be active in the same browser, however, account takeover is mitigated when using Multi-Factor Authentication (MFA) or Passwordless authentication. This issue is fixed in version 4.7.1.

Risk Information
cvss3
Base: 8.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Description

ZITADEL is an open-source identity infrastructure tool. Versions 4.7.0 and below are vulnerable to an unauthenticated, full-read SSRF vulnerability. The ZITADEL Login UI (V2) treats the x-zitadel-forward-host header as a trusted fallback for all deployments, including self-hosted instances. This allows an unauthenticated attacker to force the server to make HTTP requests to arbitrary domains, such as internal addresses, and read the responses, enabling data exfiltration and bypassing network-segmentation controls. This issue is fixed in version 4.7.1.

Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Description

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to directory traversal through the App.add_media_files() function, which allows a remote attacker to read arbitrary files on the server filesystem. This issue is fixed in version 3.4.0.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an Authorization header with an arbitrary value, a session is associated with the target user regardless of valid credentials. This issue is fixed in versions 16.0.44 and 17.0.23.

Risk Information
cvss4
Base: 9.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=washington-national-insurance-company' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge