What is the official website of Xplain ?

The official website of Xplain is https://xplain.ch.

What is Xplain's cybersecurity risk score?

Xplain has an AI-generated cybersecurity risk score of 720 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Xplain experienced?

According to Rankiteo, Xplain currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Xplain been affected by any supply chain cyber incidents ?

According to Rankiteo, Xplain has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Xplain have SOC 2 Type 1 certification ?

According to Rankiteo, Xplain is not certified under SOC 2 Type 1.

Does Xplain have SOC 2 Type 2 certification ?

According to Rankiteo, Xplain does not hold a SOC 2 Type 2 certification.

Does Xplain comply with GDPR ?

According to Rankiteo, Xplain is not listed as GDPR compliant.

Does Xplain have PCI DSS certification ?

According to Rankiteo, Xplain does not currently maintain PCI DSS compliance.

Does Xplain comply with HIPAA ?

According to Rankiteo, Xplain is not compliant with HIPAA regulations.

Does Xplain have ISO 27001 certification ?

According to Rankiteo,Xplain is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Xplain operate in ?

Xplain operates primarily in the IT Services and IT Consulting industry.

How many employees does Xplain have ?

Xplain employs approximately 40 people worldwide.

Does Xplain own any subsidiaries ?

Xplain presently has no subsidiaries across any sectors.

How many LinkedIn followers does Xplain have ?

Xplain's official LinkedIn profile has approximately 691 followers.

What is the NAICS classification code for Xplain ?

Xplain is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Xplain have a Crunchbase profile ?

No, Xplain does not have a profile on Crunchbase.

Does Xplain have a LinkedIn profile ?

Yes, Xplain maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/xplaingroup.

How many cybersecurity incidents has Xplain experienced ?

As of July 29, 2026, Rankiteo reports that Xplain has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Xplain have ?

Xplain has an estimated 41,189 peer or competitor companies worldwide.

What types of cybersecurity incidents has Xplain faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Xplain

Boost Score +25 with badge (5 left)

720

/1000

Moderate

745

/1000

Moderate

Xplain Vendor Cyber Rating & Cyber Score

xplain.ch

Add Your Compliance Badge

Xplain has been active as a supplier of IT solutions in the field of internal security since its foundation in 2000. We work for authorities and organisations with security, migration, law enforcement and correctional tasks. For these authorities and organisations, we offer innovative software products with complete coverage of work processes from initial intake to archiving. The focus of the solutions is on the high automation of "kilowashing" and compliance with legal requirements, in particular also the formal requirements of the Code of Criminal Procedure, as well as the fast and comprehensible exchange of information between all parties involved. Facts & Figures - Founded in 2000 - +80 employees - ISO 9001:2015 certified - Focus on

Xplain A.I CyberSecurity Scoring

Scoring History

Xplain

Xplain CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Xplain

Breach

06/2023

XPL01012623

Loading…

A.I.

Xplain Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Xplain

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Xplain in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Xplain in 2026.

Incident Types Xplain vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Xplain in 2026.

Incident History - Xplain (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Xplain Subsidiaries

Parent Company

Xplain

IT Services and IT Consulting

Website: https://xplain.ch

Company Size: 51-200 employees

No subsidiary data available for this company.

Loading…

Xplain Similar Companies

Amazon Web Services (AWS)

cb amazon.com

Launched in 2006, Amazon Web Services (AWS) began exposing key infrastructure services to businesses in the form of web services -- now widely known as cloud computing. The ultimate benefit of cloud computing, and AWS, is the ability to leverage a new business model and turn capital infrastructure expenses into variable costs. Businesses no longer need to plan and procure servers and other IT resources weeks or months in advance. Using AWS, businesses can take advantage of Amazon's expertise and economies of scale to access resources when their business needs them, delivering results faster and at a lower cost. Today, Amazon Web Services provides a highly reliable, scalable, low-cost infrastructure platform in the cloud that powers hundreds of thousands of businesses in 190 countries around the world. With data center locations in the U.S., Europe, Singapore, and Japan, customers across all industries are taking advantage of our low cost, elastic, open and flexible, secure platform.

Inetum

inetum.com

Inetum is a European leader in digital services. Inetum’s team of 27,000 consultants and specialists strive every day to make a digital impact for businesses, public sector entities and society. Inetum’s solutions aim at contributing to its clients’ performance and innovation as well as the common good. Present in 19 countries with a dense network of sites, Inetum partners with major software publishers to meet the challenges of digital transformation with proximity and flexibility. Driven by its ambition for growth and scale, Inetum generated sales of 2.4 billion euros in 2024. 🏅 Top Employer Europe 2025

Sutherland

sutherlandglobal.com

Artificial Intelligence. Automation. Cloud Engineering. Advanced Analytics. For Enterprises, these are key factors of success. For us, they’re our core expertise. We work with global iconic brands. We bring them a unique value proposition through market-leading technologies and business process excellence. At the heart of it all is Digital Engineering services – the foundation that powers rapid innovation and scalable business transformation. We’ve created 363 unique and independent inventions, 250 of which are AI-based and rolled up under several patent grants in critical technologies. Leveraging our advanced products and platforms, we drive digital transformation at scale, optimize critical business operations, reinvent experiences, and pioneer new solutions, all provided through a seamless “as-a-service” model. For each company, we provide new keys for their businesses, the people they work with, and the customers they serve. With proven strategies and agile execution, we don’t just enable change — we engineer digital outcomes.

Birlasoft

birlasoft.com

Navigating Change. Powering Progress. | Reimagining the Future with Birlasoft Birlasoft, a powerhouse where domain expertise, enterprise solutions, and digital technologies converge to redefine business processes. We take pride in our consultative and design thinking approach, driving societal progress by enabling our customers to run businesses with unmatched efficiency and innovation. As part of the CKA Birla Group, a multibillion-dollar enterprise, we boast a 12,000+ professional team committed to upholding the Group's 170-year legacy. Our core values prioritize Diversity, Equity, and Inclusion (DEI) initiatives, along with Corporate Social Responsibility (CSR) activities, demonstrating our dedication to building inclusive and sustainable communities. Join us in shaping a future where technology seamlessly aligns with purpose. For further information, visit www.birlasoft.com

Mastercard

mastercard.com

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re building a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Nagarro

cb nagarro.com

Nagarro helps future-proof your business through a forward-thinking, fluidic, and CARING mindset. We excel at digital engineering and help our clients become human-centric, digital-first organizations, augmenting their ability to be responsive, efficient, intimate, creative, and sustainable. Today, we are 18,000+ experts across 38 countries, forming a Nation of Nagarrians, ready to help our customers succeed.

Reply

reply.com

Reply [EXM, STAR: REY] specialises in the design and implementation of solutions based on new communication channels and digital media. As a network of highly specialised companies, Reply defines and develops business models enabled by the new models of AI, big data, cloud computing, digital media and the internet of things. Reply delivers consulting, system integration and digital services to organisations across the telecom and media; industry and services; banking and insurance; and public sectors.

Diebold Nixdorf

cb DieboldNixdorf.com

Diebold Nixdorf automates, digitizes and transforms the way people bank and shop. Its integrated solutions connect digital and physical channels conveniently, securely and efficiently for millions of consumers every day. As an innovation partner for nearly all of the world's top 100 financial institutions and a majority of the top 25 global retailers, Diebold Nixdorf delivers unparalleled services and technology that power the daily operations and consumer experience of financial institutions and retailers around the world.

Iron Mountain

cb ironmountain.com

In the era of AI, your data is your advantage. Yet too often it remains untapped: disconnected from systems, underutilized, untrained, and exposed to risk. Iron Mountain is the trusted partner for organizations of all sizes to unlock what’s possible, transforming information into intelligence and assets into advantage. How? By seamlessly managing digital and physical assets of all kinds across their lifecycle—making them visible, secure, accessible, and AI-ready. From payments to pathology, mortgages to media, fine art to IT, we’ve helped more than 240,000 customers around the world, including 95% of the Fortune 1000, unlock more value from what’s already within reach. All with unparalleled security, governance, and sustainability at every step. What can we unlock together?

Loading…

NEWS

Xplain CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 11, 2025 05:40 PM

How to communicate clearly (and legally) during a cybersecurity crisis

Trying to duck the consequences of a breach can be dangerous: better to quickly explain what you know and keep affected parties in the loop about next...

Read Article

August 21, 2024 07:00 AM

An explanation of cybersecurity

Cybersecurity safeguards internet-connected systems from attacks. Learn how all organizations, big or small, need to focus on security.

Read Article

August 13, 2024 07:00 AM

ANZ Bank educates about cyber security risks via Keep Left

Creative and PR agency Keep Left has created an educational content series with ANZ to explain cybersecurity risks, what people can do to protect themselves.

Read Article

August 13, 2024 07:00 AM

ANZ enlists Cybersecurity ranger Perry to educate Aussies about cyber security risks in newly launched content campaign via Keep Left

Keep Left has created an educational and engaging content series with ANZ to explain cybersecurity risks, what Aussies can do to protect...

Read Article

March 08, 2024 08:00 AM

Switzerland’s cybersecurity experts still can’t Xplain how federal documents made it to the dark web

Though a ransomware attack on Xplain, a Swiss software developer contracted by the country's federal government, became known almost as it...

Read Article

March 07, 2024 08:00 AM

Play ransomware leaked 65,000 Swiss government documents, investigation finds

Switzerland's National Cyber Security Centre (NCSC) published analysis of the data stolen during the attack last May — when hackers...

Read Article

March 07, 2024 08:00 AM

Xplain hack: National Cyber Security Centre publishes data analysis report

The NCSC released a report today explaining its analysis and providing information on what type of data was affected and the challenges as-sociated with...

Read Article

October 13, 2023 07:00 AM

NCSAM 2023: Cybersecurity Starter-Pack for Kids

This piece is aimed at helping parents/guardians explain cybersecurity to their children in a way they can easily understand and connect with their immediate...

Read Article

June 09, 2023 07:00 AM

Switzerland cyberattack: Government data leaks after Xplain hack

Swiss government data may have been posted on the dark web after a ransomware attack on software provider Xplain.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66064

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection and block-list checks. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-66063

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-64863

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-62325

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allowed unauthenticated file access. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-59921

SUMMARY

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without validating or sanitizing CRLF characters (\r\n). Since MIME headers are delimited by CRLF, an attacker who controls the filename can inject arbitrary MIME headers into the multipart body part. The root cause is that neither the encoder nor the FileUpload implementations' setFilename() methods, which only check for null, neutralize CRLF characters before the filename is embedded into the header. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.1

REFERENCES

https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…