What is the official website of Xylem Building Services ?

The official website of Xylem Building Services is https://www.xylem.com/.

What is Xylem Building Services's cybersecurity risk score?

Xylem Building Services has an AI-generated cybersecurity risk score of 762 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Xylem Building Services experienced?

According to Rankiteo, Xylem Building Services currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Xylem Building Services been affected by any supply chain cyber incidents ?

According to Rankiteo, Xylem Building Services has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Xylem Building Services have SOC 2 Type 1 certification ?

According to Rankiteo, Xylem Building Services is not certified under SOC 2 Type 1.

Does Xylem Building Services have SOC 2 Type 2 certification ?

According to Rankiteo, Xylem Building Services does not hold a SOC 2 Type 2 certification.

Does Xylem Building Services comply with GDPR ?

According to Rankiteo, Xylem Building Services is not listed as GDPR compliant.

Does Xylem Building Services have PCI DSS certification ?

According to Rankiteo, Xylem Building Services does not currently maintain PCI DSS compliance.

Does Xylem Building Services comply with HIPAA ?

According to Rankiteo, Xylem Building Services is not compliant with HIPAA regulations.

Does Xylem Building Services have ISO 27001 certification ?

According to Rankiteo,Xylem Building Services is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Xylem Building Services operate in ?

Xylem Building Services operates primarily in the Industrial Machinery Manufacturing industry.

How many employees does Xylem Building Services have ?

Xylem Building Services employs approximately None employees people worldwide.

Does Xylem Building Services own any subsidiaries ?

Xylem Building Services presently has no subsidiaries across any sectors.

How many LinkedIn followers does Xylem Building Services have ?

Xylem Building Services's official LinkedIn profile has approximately followers.

What is the NAICS classification code for Xylem Building Services ?

Xylem Building Services is classified under the NAICS code 3332, which corresponds to Industrial Machinery Manufacturing.

Does Xylem Building Services have a Crunchbase profile ?

No, Xylem Building Services does not have a profile on Crunchbase.

Does Xylem Building Services have a LinkedIn profile ?

Yes, Xylem Building Services maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/xylem-buildings.

How many cybersecurity incidents has Xylem Building Services experienced ?

As of June 6, 2026, Rankiteo reports that Xylem Building Services has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Xylem Building Services have ?

Xylem Building Services has an estimated 7,805 peer or competitor companies worldwide.

What types of cybersecurity incidents has Xylem Building Services faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

XBS

Boost Score +25 with badge (5 left)

762

/1000

Fair

787

/1000

Fair

Xylem Building Services Vendor Cyber Rating & Cyber Score

xylem.com

Add Your Compliance Badge

Xylem is a leading water technology provider committed to partner with our customers and to solve the water challenges of today and tomorrow together – for generations to come. With our broad water technology portfolio and training tools, we enable our customers to succeed in improving water efficiency and customer satisfaction through connected water and wastewater management solutions in and around smart buildings. Solve your water challenges in buildings and beyond with our smart water solutions: - Water Supply & Water Boosting - Water Treatment - HVAC - Heating, Ventilation and Air Conditioning - Wastewater & Storm Water - Fire Fighting For more information about Xylem solutions offering beyond building

XBS A.I CyberSecurity Scoring

Scoring History

XBS

Xylem Building Services CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Bell & Gossett

Breach

2/2025

BEL1773210636

Loading…

A.I.

XBS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for XBS

Incidents vs Industrial Machinery Manufacturing Industry Avg (This Year)

No incidents recorded for Xylem Building Services in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Xylem Building Services in 2026.

Incident Types XBS vs Industrial Machinery Manufacturing Industry Avg (This Year)

No incidents recorded for Xylem Building Services in 2026.

Incident History - XBS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Xylem Building Services Subsidiaries

XBS

Industrial Machinery Manufacturing

Website: https://www.xylem.com/

Company Size: 10,001+ employees

XylemIndustrial Machinery Manufacturing

SensusUtilities

Xylem IndiaIndustrial Machinery Manufacturing

Xylem Water Solutions NetherlandsIndustrial Machinery Manufacturing

Xylem Water Solutions UK & IrelandUtilities

Loading…

Xylem Building Services Similar Companies

SKF Group

cb skf.com

We fight friction to move the world forward. 20% of all energy consumed is spent overcoming friction. At SKF, we’re constantly fighting that friction, to reduce energy waste and make the most of the resources we have. Since 1907, we’ve been making some of the world’s most innovative bearings, seals, lubrication systems to reduce friction. But we sell something bigger. Less friction means more energy saved. By seeking out and reducing friction, we’re making industry smarter, more competitive, and more energy efficient. And in collaboration with other forward-thinking companies, actually tackling some of the most pressing challenges of our time. Ultimately, helping to build a more sustainable future where we can all do more with less.

Liebherr Group

liebherr.com

Established in 1949, the Liebherr Group today is not only one of the biggest construction equipment manufacturers in the world, but also offers high-quality, user-oriented products and services in many other areas. The family-run technology company employs nearly 50,000 people in over 150 companies worldwide. Liebherr’s product range includes the segments Earthmoving, Deep Foundation Machines, Mobile and Crawler Cranes, Tower Cranes, Concrete Technology, Material Handling Technology, Mining, Maritime Cranes, Aerospace and Transportation Systems, Gear Technology and Automation Systems, Refrigeration and Freezing, Components as well as Hotels in Ireland, Austria and Germany. The Group’s parent company is Liebherr-International AG located in Bulle, Switzerland, which is entirely owned by members of the Liebherr family. Career possibilities can be found online: https://www.liebherr.com/en/deu/career/career.html Imprint:https://www.liebherr.com/en-de/group/disclaimer/imprint-3705178

Flowserve Corporation

cb flowserve.com

Flowserve is one of the world's largest manufacturers of pumps, valves and seals with over 16,000 employees across 50 countries. Built on more than 50 world-renowned heritage brands, the equity and customer loyalty we have earned over the past 230 years is the foundation of our leadership position across the globe. Flowserve's innovations have benefited a range of industries, including oil and gas, power, chemical, water, pharmaceuticals and food processing. Addressing these industries' challenges has made Flowserve a leader in development and application of advanced solutions for our customers. Experience, leadership and creativity are the tools we use to turn an idea into a solution. Continuing to foster this kind of innovation is key to Flowserve's long-term success. Be a part of a team known for its industry-leading talent, unparalleled portfolio and unmatched commitment to customer success. We invite you to put your talents and experience in motion with Flowserve. Together, we enable the world.

GRUNDFOS

grundfos.to

We’re a global leader in water solutions. Every day, our intelligent, energy-saving pumps and water solutions help provide comfort, deliver drinking water, remove wastewater or sustain crops all over the world. We want to ensure water is accessible and reliable for all. Since 1945, we’ve proudly protected, respected and advanced the flow of water. Our global family of 20,000 innovators is driven by our purpose: to pioneer solutions to the world’s water and climate challenges and improve quality of life for people. Our pioneering drive has recently resulted in acquisitions which further strengthen our capabilities in Water Treatment. At Grundfos, we create possibilities together in a diverse, supportive environment where we succeed together by celebrating our differences. Join us as we take the lead in innovating newer, smarter methods to advance the flow of water and reduce the use of energy.

Mitsubishi Heavy Industries

mhi.com

Mitsubishi Heavy Industries (MHI) Group is one of the world’s leading industrial firms. For more than 130 years, we have channeled big thinking into solutions that move the world forward – advancing the lives of everyone who shares our planet. We deliver innovative and integrated solutions across a wide range of industries, covering land, sea, sky and even space. MHI Group is 80,000 strong in more than 200 companies worldwide, operating in various sectors: power & energy, industrial machinery, urban infrastructure, aerospace and defense. We have a consolidated revenue of around 40 billion USD, and have consistently been a Fortune Global 500 company since the list's inception. We aim to contribute to environmental sustainability while achieving global growth, using our leading-edge technologies. By bringing people and ideas together as one, we continue to pave the way to a future of shared success. Learn more about us at https://www.mhi.com See our solutions in action at https://spectra.mhi.com Explore job opportunities at https://www.mhi.com/recruit By accessing, using or interacting with Mitsubishi Heavy Industries on LinkedIn, you accept and agree to be bound by these guidelines: https://www.mhi.com/conditions/social.html

Alfa Laval

alfalaval.com

Pioneering positive impact! Our pioneering 140-year-old start-up culture is built on the idea that partnership is the key to solving complex problems and unlocking the full potential of resources. So we collaborate closely with our partners, customers, and thought leaders to create game-changing solutions that challenge conventional thinking on quality, efficiency, and innovation. United by a shared commitment to creating positive impact we’re reshaping vital industries, like energy, food, water, and shipping, to optimize efficiency, reduce emissions, and increase yields. Together, we’re building business success, elevating the quality of life across society, and driving progress towards a more sustainable world. Alfa Laval is a leading global provider of first-rate products in the areas of heat transfer, separation and fluid handling. With these as its base, Alfa Laval aims to help enhance the productivity and competitiveness of its customers in various industries throughout the world. We define their challenges and deliver sustainable products and solutions that meet their requirements. Alfa Laval today has customers in some 100 countries, employs more than 21,300 people, and annual sales were SEK 63.6 billion (5.5 BEUR) in 2023. The company is listed on Nasdaq Stockholm. Alfa Laval contributes to 15 of the 17 UN Sustainable Development Goals. Our solutions make a difference in daily life. You can learn more on our website about how our products work, and how they are used in industries worldwide. We welcome your engagement, comments and questions - our guidelines and moderation policy for Alfa Laval channels on social media can be found here: https://www.alfalaval.com/legal/community-guidelines/ Personal data will be handled in accordance with the Alfa Laval Privacy Policy. https://www.alfalaval.com/privacy

thyssenkrupp

cb thyssenkrupp.com

thyssenkrupp is an international industrial and technology group with more than 93,000 employees. In the fiscal year 2024/2025, the company generated sales of around €33 billion in 48 countries. Its business activities are bundled in five segments: Automotive Technology, Decarbon Technologies, Materials Services, Steel Europe and Marine Systems. With extensive technological know-how, outstanding engineering competence and a high level of innovative strength, the group is a technology leader in many of its markets, developing solutions for the challenges of the future. Around 3,900 employees work in research and development worldwide. They are mainly focused on climate protection and the energy transition, the digital transformation in industry and the mobility of the future. The patent portfolio of thyssenkrupp currently includes approximately 17,000 patents and utility models, underlining the Group's leading position in technology and innovation. thyssenkrupp is pursuing ambitious climate protection targets and actively optimizing its own energy and climate efficiency. At the same time, the Group is supporting its customers and industry partners to help in achieving their climate targets, thus playing a key role in advancing the green transformation. As a publicly listed company, thyssenkrupp is part of the MDAX index. thyssenkrupp shares are traded on the Frankfurt Stock Exchange (ticker symbol: TKA) and as American depositary receipts (ticker symbol: TKAMY) in the USA. Since 20 October 2025, TKMS (Marine Systems segment) has also been an independent, If you have any HR related questions, please send us an e-mail to [email protected] or visit our global career site: https://karriere.thyssenkrupp.com/en Follow us on our social media career channels: Facebook: facebook.com/thyssenkruppcareer/ blog: https://www.thyssenkrupp.com/en/stories Imprint: https://www.thyssenkrupp.com/de/impressum.html Privacy policy: https://www.thyssenkrupp.com/en/legal-notes.html

Trane Technologies

tranetechnologies.com

Trane Technologies is a global climate innovator advancing sustainability through our leading brands Trane® and Thermo King®, which bring efficient and sustainable climate solutions to buildings, homes and transportation across the globe. Together, we are one team innovating for a better future. At Trane Technologies, we are driven by a common purpose: to boldly challenge what’s possible for a sustainable world. While our products and services work to transform climate control, our company’s goal is to combat climate change. Sustainability is embedded in everything we do. Every team member has an impact on our bold 2030 Sustainability Commitments and is empowered to act and bring solutions to life. Our employee experience sets us apart as a special place to work. We are committed to fostering a culture of inclusivity, innovation and growth. When you join Trane Technologies, you become part of a team that shares a common purpose and values, working together to create a sustainable future. Our core values—Uplift Others, Make an Impact and Thrive at Work and Home—guide us in supporting our community, driving meaningful change and ensuring work-life balance. Explore our career opportunities and join us as we boldly go.

GEA Group

cb gea.com

GEA is one of the largest technology suppliers for food processing and a wide range of other industries. The global group specializes in machinery, plants, as well as process technology and components. GEA provides resource-efficient solutions for sophisticated production processes in diverse end-user markets and offers a comprehensive service portfolio.

Loading…

NEWS

Xylem Building Services CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

May 13, 2025 07:00 AM

Cyberattacks highlight need for advanced tech in water infrastructure security

Xylem Vue has identified four key technology strategies to strengthen water sector cybersecurity in 2025, as detailed in its recently published report.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-7654

SUMMARY

The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in versions up to and including 7.0.18. This is due to the use of `unserialize()` without an `allowed_classes` restriction in the `IdsToCollection::get_ids_from_string()` function, which processes attacker-controlled post meta values without proper validation. This makes it possible for authenticated attackers with Contributor-level access and above to inject a serialized PHP object into a post's custom meta field and trigger arbitrary code execution by exploiting a bundled POP gadget chain, resulting in remote code execution as the web server user.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-7523

SUMMARY

The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to access arbitrary private alba_card post data, including title, description, assignee, due date, tags, and comments, that is intended to be restricted to Administrators and Editors. The handler is registered via the wp_ajax_nopriv_ hook and its nonce is exposed to all site visitors through wp_localize_script on pages containing the [alba_board] shortcode, making this exploitable by unauthenticated users who can access any such page.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-45409

SUMMARY

Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as `"\u0660" * N` or `"\u30fb" * N + "\u6f22"` utilize the `valid_contexto` function prior to length rejection, and for high values of `N` will take a long time to process. This is the same issue as CVE-2024-3651, however the original remediation in 2024 was not a complete fix. A specially crafted argument to the `idna.encode()` function could consume significant resources. This may lead to a denial-of-service. Starting in version 3.14, the function rejects long inputs as soon as practicable prior to any further processing to minimize resource consumption. In version 3.15, this approach was extended to lesser used alternate functions (i.e. per-label conversions and codec support). A workaround is available. Domain names cannot exceed 253 characters in length. If this length limit is enforced prior to passing the domain to the `idna.encode()` function, it should no longer consume significant resources. This is triggered by arbitrarily large inputs that would not occur in normal usage, but may be passed to the library assuming there is no preliminary input validation by the higher-level application.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/kjd/idna/security/advisories/GHSA-65pc-fj4g-8rjx

CVE-2026-11431

SUMMARY

A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path parameter that bypasses validation, allowing arbitrary files (including entire directories returned as archives) to be read from the server filesystem. Because the readable files include service configuration and credential material, exploitation can be used to gather information enabling further compromise. The issue can be combined with CVE-2026-11424 to reach the cloud-side endpoint. On multi-tenant Altium 365 deployments, the readable configuration could have exposed credentials shared across services. Altium Enterprise Server is fixed in 8.1.1; the issue has been remediated in Altium 365 at the service level.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: )

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://www.altium.com/platform/security-compliance/security-advisories

CVE-2026-11429

SUMMARY

A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. The service accepts a sequence of post-clone file-manipulation operations that use user-supplied paths without validation, allowing an authenticated user with basic git access to move arbitrary files outside the intended repository area. This file-move primitive can be used to place attacker-controlled script content into directories where it is later executed by the service, resulting in remote code execution under the Git Service account. On multi-tenant Altium 365 deployments, this could have allowed access to data belonging to other tenants on the same infrastructure node. Altium Enterprise Server is fixed in 8.1.1; the issue has been remediated in Altium 365 at the service level.

Published

Date2026-06-05

Updated

Date2026-06-05

RISK INFORMATION (Score: )

cvss4

Base Score: 9.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://www.altium.com/platform/security-compliance/security-advisories

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…