What is the official website of YKK AP America Inc. ?

The official website of YKK AP America Inc. is https://www.ykkap.com/.

What is YKK AP America Inc.'s cybersecurity risk score?

YKK AP America Inc. has an AI-generated cybersecurity risk score of 692 out of 1000, indicating a Weak security posture according to Rankiteo's assessment.

How many security incidents has YKK AP America Inc. experienced?

According to Rankiteo, YKK AP America Inc. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has YKK AP America Inc. been affected by any supply chain cyber incidents ?

According to Rankiteo, YKK AP America Inc. has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does YKK AP America Inc. have SOC 2 Type 1 certification ?

According to Rankiteo, YKK AP America Inc. is not certified under SOC 2 Type 1.

Does YKK AP America Inc. have SOC 2 Type 2 certification ?

According to Rankiteo, YKK AP America Inc. does not hold a SOC 2 Type 2 certification.

Does YKK AP America Inc. comply with GDPR ?

According to Rankiteo, YKK AP America Inc. is not listed as GDPR compliant.

Does YKK AP America Inc. have PCI DSS certification ?

According to Rankiteo, YKK AP America Inc. does not currently maintain PCI DSS compliance.

Does YKK AP America Inc. comply with HIPAA ?

According to Rankiteo, YKK AP America Inc. is not compliant with HIPAA regulations.

Does YKK AP America Inc. have ISO 27001 certification ?

According to Rankiteo,YKK AP America Inc. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does YKK AP America Inc. operate in ?

YKK AP America Inc. operates primarily in the Manufacturing industry.

How many employees does YKK AP America Inc. have ?

YKK AP America Inc. employs approximately 570 people worldwide.

Does YKK AP America Inc. own any subsidiaries ?

YKK AP America Inc. presently has no subsidiaries across any sectors.

How many LinkedIn followers does YKK AP America Inc. have ?

YKK AP America Inc.'s official LinkedIn profile has approximately 8,975 followers.

What is the NAICS classification code for YKK AP America Inc. ?

YKK AP America Inc. is classified under the NAICS code 30, which corresponds to Manufacturing.

Does YKK AP America Inc. have a Crunchbase profile ?

No, YKK AP America Inc. does not have a profile on Crunchbase.

Does YKK AP America Inc. have a LinkedIn profile ?

Yes, YKK AP America Inc. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ykk-ap-america-inc.

How many cybersecurity incidents has YKK AP America Inc. experienced ?

As of July 14, 2026, Rankiteo reports that YKK AP America Inc. has experienced 1 cybersecurity incidents.

How many peer or competitor companies does YKK AP America Inc. have ?

YKK AP America Inc. has an estimated 8,170 peer or competitor companies worldwide.

What types of cybersecurity incidents has YKK AP America Inc. faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

YAAI

Boost Score +25 with badge (5 left)

692

/1000

Weak

717

/1000

Moderate

YKK AP America Inc. Vendor Cyber Rating & Cyber Score

ykkap.com

Add Your Compliance Badge

YKK AP America is the North American arm of the global YKK AP Group—an innovation-driven, award-winning manufacturer of commercial façade systems and residential windows and doors. Proudly made in the USA, our products support forward-thinking architecture through advanced manufacturing, sustainable design, and strong customer relationships. We believe our people are our greatest strength. From engineering to production, we invest in employee growth and engagement to fuel innovation and deliver long-term value to our customers and communities. Through our subsidiary, Erie Architectural Products, we partner with glazing contractors to produce custom unitized curtain wall systems for large-scale commercial projects across North

YAAI A.I CyberSecurity Scoring

Scoring History

YAAI

YKK AP America Inc. CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

YKK AP America Inc.

Breach

100

7/2026

YKK1783449583

Loading…

A.I.

YAAI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for YAAI

Incidents vs Manufacturing Industry Avg (This Year)

YKK AP America Inc. has 61.69% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

YKK AP America Inc. has 4.76% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types YAAI vs Manufacturing Industry Avg (This Year)

YKK AP America Inc. reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.

Incident History - YAAI (X = Date, Y = Severity)

Loading…

SUBSIDIARY

YKK AP America Inc. Subsidiaries

Parent Company

YAAI

Manufacturing

Website: https://www.ykkap.com/

Company Size: 1,001-5,000 employees

No subsidiary data available for this company.

Loading…

YKK AP America Inc. Similar Companies

Ferrero

ferrerocareers.com

Founded in 1946 by Pietro and Giovanni Ferrero, the Ferrero Group is a family-owned business in its third generation. It has been built by talented people who share a commitment towards continuous improvement to achieve the highest quality and care. This same commitment is put into everything we do for our consumers and characterizes the environment in which we operate. Some of the world’s most iconic confectionery products come from Ferrero, including Nutella®, Tic Tac®, Ferrero Rocher®, and Kinder Surprise®. Sold in more than 170 countries, our products are part of the collective memory and traditions of consumers all around the world; loved by generations. In 2015, we entered a new era of acquisitions. Since then, we have acquired several brands and businesses, including Fannie May, the confectionary division of Nestlé, and Eat Natural, expanding our footprint and product offering also into the healthy snack segment. The secret to our global success is our 38,767 employees across the world, all dedicated to delivering the care and quality to craft the business, the careers and the brands we are proud of. From the moment you join us, we make sure you can nurture your curiosity and natural abilities. We provide the resources you need to succeed personally and professionally in a diverse work environment that is multicultural, innovative, and highly rewarding. In 2021, Ferrero was the confectionary company with the best reputation in the world, according to RepTrak. This achievement reflects our determination to bring consumers only the very best; an approach which is at the heart of everything we do. Our dedication to quality and excellence, our heritage and our family values, as well as our respect for the environment and the communities in which we work, are all seen in our desire to sustain and celebrate life’s special moments. Be part of it! Visit www.ferrerocareers.com to explore the opportunities Ferrero can offer when you craft your career with us.

Ternium

ternium.com

Ternium (NYSE:TX) is the largest steel producer in Latin America. With production centers in Argentina, Brazil, Colombia, the United States, Guatemala, and Mexico, Ternium has an extensive network of service and distribution centers in the continent, in addition to participating in the control group of Usiminas, a leading company in the Brazilian steel market. More than 35,000 people throughout the Americas make up a multicultural and highly-qualified team and are the foundation for an industrial project with a production capacity of 15.4 million tons of crude steel per year. A strong integration of the production process, industrial excellence, and constant innovation are part of our identity and drive Ternium's growth along with its extensive value chain, with customers and suppliers from industries such as construction, automotive, household appliances, capital goods, packaging, food, and energy. Thanks to digital transformation, research, development processes, as well as the creation of new products with the highest technology, today we are at the forefront of the steel industry, which has an important role to play in the sustainable development of our societies. Every day, in every part of the continent where we work, we grow together with communities, and we seek to support our commitment to safety and the environment in everything we do.

Tupy

tupy.com.br

Tupy is a Brazilian company specialized in developing and manufacturing highly-engineered structural cast iron components applied to complex metallurgical and geometrical components extensively used in capital goods that serve freight transport, construction industry, agriculture and many others industrial applications. These solutions contribute to the improvement of life standards such as, sanitation, drinking water, health, housing and the production and distribution of food. The technological innovation involved in our production and development processes is the company’s specialty that dates back more than 80 years. Tupy’s manufacturing facilities are located in Brazil and Mexico.

A. O. Smith Corporation

aosmith.com

Celebrating its 150th year of business, A. O. Smith is a leading global water technology and manufacturing company that proudly employs more than 12,000 people who together provide water heating and water treatment solutions. The company is headquartered in Milwaukee, Wisconsin, with operations in the United States, Canada, Mexico, China, India, the United Kingdom and the Netherlands. The company also has sales and distribution in more than 60 countries around the world. As a global water technology leader, A. O. Smith applies innovative technology and energy-efficient solutions to products marketed worldwide. Our focus is on building this platform through new product development, global expansion, strategic acquisitions and partnerships.

Unilever

unilever.com

Every day, 3.4 billion people around the world enjoy our products - from ground-breaking brands like Hellmann's, Domestos, Dove and Rexona (to name just a few). Our brands lead the way - innovating in their fields, delighting their consumers and powering our business forward. And it is our people who make everything happen. Our bright and curious people who imagine and create the future - diverse, passionate and ambitious people. A role with us means endless opportunities with global brands that make markets and people who play to win. We make markets and create cultures through some of the biggest brands and best-known products in the world. Talented teams in 190 countries redefine the way we do business and set new standards for our brands. Always learning, always innovating. Is this your moment?

Vorwerk Group

vorwerk.com

For more than 140 years, Vorwerk has been an internationally active family-owned company focused on improving life everywhere we call home. Our superior products and services come with a human touch, from the way we develop and sell them, to the way they are used. Vorwerk is the number-one direct sales company in Europe, and a worldwide leader in direct sales of high-quality household devices. Today, over 108.000 people in more than 61 countries work for us and help us generate an overall revenue of 3.17 million euros (excl. turnover tax; 2024). Our products, which we develop, manufacture and successfully distribute include Thermomix® / Bimby® as well as the Kobold / Folletto vacuum cleaners. The akf group is also part of the Vorwerk family.

the LEGO Group

https

We are the LEGO Group, the company behind the world’s most loved LEGO® bricks. Our brand name derived from the two Danish words Leg Godt, which mean “Play Well”. We’ve been sparking imaginations and inspiring the builders of tomorrow since 1932. This is our mission and what motivates our colleagues around the world every day. Today, we remain proudly family-owned with headquarters in Billund, Denmark. We have regional hubs in Boston, USA; London, UK; Shanghai, China; and Singapore, as well as 7 manufacturing facilities around the world. These places are home to 31,000+ colleagues in everything from design and engineering to digital technology and marketing. Together we learn, imagine and build – creating play experiences that are sold in over 130 countries worldwide. A purposeful and responsible global brand where creativity helps to inspire builders all around the world. Just imagine being part of that!

ITC Limited

itcportal.com

ITC is one of India's foremost private sector companies with a Gross Revenue of ₹ 73,465 crores and EBITDA of ₹ 24,025 crores (as on 31.03.2025). ITC has a diversified presence in FMCG, Packaging, Paperboards & Specialty Papers and Agri-Business. ITC's aspiration to be an exemplar in sustainability practices is manifest in its status as the only company in the world, of its size and diversity, to be carbon, water and solid waste recycling positive. In addition, ITC's businesses and value chains create sustainable livelihoods for nearly 9 million people, a majority of whom represent the poorest in rural India.

Dabur India Limited

dabur.com

We are Dabur, an Indian Transnational offering the best nature-based solutions to provide holistic Health & Well-Being to households in more than 120 markets spanning Asia, Europe and The US. A world leader in Ayurveda, we are a family of over 7,000 individuals continuously striving to conduct business in an environmentally sustainable manner. Home to trusted household brands like Dabur Chyawanprash, Dabur Honey, Dabur Red Paste, Dabur Amla, Vatika and Real, we are recognized the world over for our leadership, innovation and ability to reinvent ourselves and stay relevant for consumers across generations and geographies. At the heart of our success is our team of diverse, experienced and talented employees. They play a key role in seamlessly driving of our operations, developing and delivering nature-based solutions on time, every time, with their passion, excellence and innovative spirit. Be a part of one of the world’s Most Trusted brands... It’s an opportunity to learn, develop and enhance your skills, while improving the lives of consumers and communities.

Loading…

NEWS

YKK AP America Inc. CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-58489

SUMMARY

HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.0, the GitHub Gist export flow created an OAuth2 state value but only checked that it was present rather than validating it against the value expected for the user's session. Because the state was not properly validated, an attacker could forge a callback URL containing their own valid GitHub OAuth code. When processing the callback, HedgeDoc used the victim's logged-in session to select which note to export, but the attacker's authorization code to determine which GitHub account received it. As a result, a logged-in victim who clicked a crafted link could export their own private, protected, or limited note directly into a Gist controlled by the attacker. This issue has been fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 6.8

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58486

SUMMARY

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, HedgeDoc was vulnerable to a YAML alias bomb due to unsafe processing of the note frontmatter. HedgeDoc parsed frontmatter with js-yaml.load (js-yaml v3) via @hedgedoc/meta-marked, which resolved YAML anchor aliases. A compact malicious payload could therefore expand into a huge object structure, consuming excessive CPU. This expansion ran on every request to the publish view (/s/<shortid>) and, when placed under the opengraph key, the editor view (/<noteId>). A ten-level alias bomb could block the single Node.js event loop for roughly 235 seconds per request, causing concurrent requests to hang or drop and rendering the instance unavailable (DoS). Because the note was stored in the database, the impact survived process restarts until the note was removed. toobusy-js did not reliably mitigate the worst cases, as the event loop was saturated before the middleware could respond. This issue was fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58102

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via extensions(), extensions_by_long_name(), extensions_by_oid(), or has_extension_oid()), the code passes OBJ_obj2txt()'s return value as the hash-key length; because that value is the OID's full text length rather than the bytes written to the fixed-size buffer (129 bytes), an OID whose text is longer than the 129-byte buffer causes a read past the allocation, exposing adjacent heap memory as the returned hash key. extensions_by_name() uses the static shortname path and is not affected.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-58101

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check. keyid_data also dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when the parse succeeds. A caller invoking an affected helper on an extension from an untrusted certificate triggers a SIGSEGV that crashes the Perl process.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-57856

SUMMARY

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php sanitizes the bucket name with preg_replace('/[^a-zA-Z0-9-_\\.]/','', $bucket), which permits '..' and '../' sequences. The sanitized value is interpolated into a Flysystem path as uploads://buckets/{bucket}. Flysystem's WhitespacePathNormalizer resolves 'buckets/..' to the empty string (the uploads storage root) without raising PathTraversalDetected because the '..' has a preceding component to consume. An authenticated low-privileged user can send a crafted request with a '../' bucket name to list, upload, and delete files across all buckets, including those belonging to other users or roles

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…