Company Details
epiroc
12,558
433,383
237
epiroc.com
71
EPI_1118311
Completed


Epiroc Vendor Cyber Rating & Cyber Score
epiroc.comPerformance to succeed today. Technology to lead tomorrow. Epiroc is your partner for mining and infrastructure equipment. We're excited to build on proven expertise and performance with the same people and a bold new drive to make what's good even better. Just like our name ‘Epiroc’ says, we want to be on top of things. Epiroc means “at or on rock,” coming from Greek and Latin roots. It reflects our core business, our proximity to customers and the strength of our partnerships. You can count on us to listen to your needs and respond with leading-edge solutions. You can call on us to keep your equipment running reliably with expert service. And you can choose us with confidence, knowing we are committed to safety, environmental and social responsibility in everything we do. More than a manufacturer, we aim to be a collaborative partner that keeps its promises. We deliver the performance you need to maximize productivity every day — as well as the technology you need to compete in the future.
Company Details
epiroc
12,558
433,383
237
epiroc.com
71
EPI_1118311
Completed
Between 800 and 849

Epiroc Global Score (TPRM)XXXX



No incidents recorded for Epiroc in 2026.
No incidents recorded for Epiroc in 2026.
No incidents recorded for Epiroc in 2026.
Epiroc cyber incidents detection timeline including parent company and subsidiaries

Performance to succeed today. Technology to lead tomorrow. Epiroc is your partner for mining and infrastructure equipment. We're excited to build on proven expertise and performance with the same people and a bold new drive to make what's good even better. Just like our name ‘Epiroc’ says, we want to be on top of things. Epiroc means “at or on rock,” coming from Greek and Latin roots. It reflects our core business, our proximity to customers and the strength of our partnerships. You can count on us to listen to your needs and respond with leading-edge solutions. You can call on us to keep your equipment running reliably with expert service. And you can choose us with confidence, knowing we are committed to safety, environmental and social responsibility in everything we do. More than a manufacturer, we aim to be a collaborative partner that keeps its promises. We deliver the performance you need to maximize productivity every day — as well as the technology you need to compete in the future.


Ventia provides essential services to make infrastructure work for communities in Australia and New Zealand. We pride ourselves on safe and sustainable services for our corporate and government clients across a broad range of sectors, including transport, telecommunications, utilities, defence, wa
We are the world’s leading Geo-data specialist, collecting and analysing comprehensive information about the Earth and the structures built upon it. Through integrated data acquisition, analysis and advice, we unlock insights from Geo-data to help our clients design, build and operate their assets i

Ferrovial is a leading global infrastructure company transforming highways, airports, and energy around the world. Its distinctive integrated business model supports the entire lifecycle of complex projects, from design and financing to construction, operation and maintenance. The company has a glo
Tetra Tech is the leader in water, environment, and sustainable infrastructure, providing high-end consulting and engineering services for projects worldwide. With 25,000 employees working together, Tetra Tech provides clear solutions to complex problems by Leading with Science® to address the entir

Founded in 1944, Parsons Corporation, a digitally enabled solutions provider, is focused on creating the future of the defense, intelligence, and critical infrastructure markets. From Earth to outer space, we deliver tomorrow’s solutions today. Equipped with the capabilities required to take on any
Egis is a leading global architectural, consulting, construction engineering, operations and mobility services firm. We create and operate intelligent infrastructure and buildings that both respond to the climate emergency and contribute to balanced, sustainable and resilient development. Our 22,00

We are an engineering, management and development consultancy and one of the largest wholly employee-owned firms of our kind. We plan, design, deliver and maintain the transport, energy, water, defence and security, and buildings infrastructure that is integral to people's daily lives. Our core

AECOM is the global infrastructure leader, committed to delivering a better world. As a trusted professional services firm powered by deep technical abilities, we solve our clients’ complex challenges in water, environment, energy, transportation and buildings. Our teams partner with public- and pri
Some 45 years ago, we set out with the ambitious goal of providing affordable housing, working to make Brazilian dreams come true. Over the last few years, we have crafted and shaped our story, becoming a brand-leading platform that offers a variety of housing solutions for individuals and families
.png)
Tech veteran Greg Bazar joins wound care leader's board, bringing AI and cybersecurity expertise to accelerate digital health innovation.
As Epiroc looks to adopt electrification, automation and autonomous capabilities, building robust cybersecurity is essential. “Looking at the...
Markus Kuchler, Head of IT Security at Epiroc, on how it is driving mining innovation and digital transformation with cutting-edge cybersecurity.
By Craig Petrie CSC and Jordan Plotnek PhD from Anchoram Consulting. The Australian mining sector is a critical component of the country's...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Epiroc is https://www.epiroc.com.
According to Rankiteo, Epiroc’s AI-generated cybersecurity score is 804, reflecting their Good security posture.
According to Rankiteo, Epiroc currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Epiroc has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
According to Rankiteo, Epiroc is not certified under SOC 2 Type 1.
According to Rankiteo, Epiroc does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Epiroc is not listed as GDPR compliant.
According to Rankiteo, Epiroc does not currently maintain PCI DSS compliance.
According to Rankiteo, Epiroc is not compliant with HIPAA regulations.
According to Rankiteo,Epiroc is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Epiroc operates primarily in the Civil Engineering industry.
Epiroc employs approximately 12,558 people worldwide.
Epiroc presently has no subsidiaries across any sectors.
Epiroc’s official LinkedIn profile has approximately 433,383 followers.
Epiroc is classified under the NAICS code 237, which corresponds to Heavy and Civil Engineering Construction.
No, Epiroc does not have a profile on Crunchbase.
Yes, Epiroc maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/epiroc.
As of April 04, 2026, Rankiteo reports that Epiroc has not experienced any cybersecurity incidents.
Epiroc has an estimated 5,874 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, Epiroc has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, two peer-facing consensus request handlers assume that the history index is always available and call blockchain.history_store.history_index().unwrap() directly. That assumption is false by construction. HistoryStoreProxy::history_index() explicitly returns None for the valid HistoryStoreProxy::WithoutIndex state. when a full node is syncing or otherwise running without the history index, a remote peer can send RequestTransactionsProof or RequestTransactionReceiptsByAddress and trigger an Option::unwrap() panic on the request path. This issue has been patched in version 1.3.0.
PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream() with follow_redirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata services and internal network services. This issue has been patched in version 1.5.95.
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, OAuthManager.validate_token() returns True for any token not found in its internal store, which is empty by default. Any HTTP request to the MCP server with an arbitrary Bearer token is treated as authenticated, granting full access to all registered tools and agent capabilities. This issue has been patched in version 4.5.97.
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.
PraisonAI is a multi-agent teams system. Prior to version 4.5.90, MCPToolIndex.search_tools() compiles a caller-supplied string directly as a Python regular expression with no validation, sanitization, or timeout. A crafted regex causes catastrophic backtracking in the re engine, blocking the Python thread for hundreds of seconds and causing a complete service outage. This issue has been patched in version 4.5.90.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.