Company Details
mott-macdonald
24,383
870,590
237
mottmac.com
0
MOT_3303110
In-progress


Mott MacDonald Vendor Cyber Rating & Cyber Score
mottmac.comWe are an engineering, management and development consultancy and one of the largest wholly employee-owned firms of our kind. We plan, design, deliver and maintain the transport, energy, water, defence and security, and buildings infrastructure that is integral to people's daily lives. Our core strength is using our expertise to overcome complex challenges to deliver benefits for our clients and the communities they serve.
Company Details
mott-macdonald
24,383
870,590
237
mottmac.com
0
MOT_3303110
In-progress
Between 800 and 849

Mott MacDonald Global Score (TPRM)XXXX



No incidents recorded for Mott MacDonald in 2026.
No incidents recorded for Mott MacDonald in 2026.
No incidents recorded for Mott MacDonald in 2026.
Mott MacDonald cyber incidents detection timeline including parent company and subsidiaries

We are an engineering, management and development consultancy and one of the largest wholly employee-owned firms of our kind. We plan, design, deliver and maintain the transport, energy, water, defence and security, and buildings infrastructure that is integral to people's daily lives. Our core strength is using our expertise to overcome complex challenges to deliver benefits for our clients and the communities they serve.

Tetra Tech is the leader in water, environment, and sustainable infrastructure, providing high-end consulting and engineering services for projects worldwide. With 25,000 employees working together, Tetra Tech provides clear solutions to complex problems by Leading with Science® to address the entir

Performance to succeed today. Technology to lead tomorrow. Epiroc is your partner for mining and infrastructure equipment. We're excited to build on proven expertise and performance with the same people and a bold new drive to make what's good even better. Just like our name ‘Epiroc’ says, we w
We are committed to addressing the world’s biggest challenges in the areas of water, energy and communities. GHD is a global network of multi-disciplinary professionals providing clients with integrated solutions through engineering, environmental, design and construction expertise. Our future-focu
Egis is a leading global architectural, consulting, construction engineering, operations and mobility services firm. We create and operate intelligent infrastructure and buildings that both respond to the climate emergency and contribute to balanced, sustainable and resilient development. Our 22,00

AECOM is the global infrastructure leader, committed to delivering a better world. As a trusted professional services firm powered by deep technical abilities, we solve our clients’ complex challenges in water, environment, energy, transportation and buildings. Our teams partner with public- and pri

Founded in 1944, Parsons Corporation, a digitally enabled solutions provider, is focused on creating the future of the defense, intelligence, and critical infrastructure markets. From Earth to outer space, we deliver tomorrow’s solutions today. Equipped with the capabilities required to take on any

Ferrovial is a leading global infrastructure company transforming highways, airports, and energy around the world. Its distinctive integrated business model supports the entire lifecycle of complex projects, from design and financing to construction, operation and maintenance. The company has a glo
We are the world’s leading Geo-data specialist, collecting and analysing comprehensive information about the Earth and the structures built upon it. Through integrated data acquisition, analysis and advice, we unlock insights from Geo-data to help our clients design, build and operate their assets i

A civil engineer is a person who practices civil engineering – the application of planning, designing, constructing, maintaining, and operating infrastructures while protecting the public and environmental health, as well as improving existing infrastructures that have been neglected. Civil enginee
.png)
Cyber security expert Emmanuel Olorunnisola has been shortlisted for the 2026 Cyber Security Leader of the Year award, recognising global...
IT security expert Emmanuel Olorunnisola says organisations must design operational excellence into their systems rather than treat it as a...
Engineering firm Mott MacDonald leases 25372 sq ft floor at Empire State Building for North America HQ while maintaining 27226 sq ft at 1400...
Explore how EY teams helped a global firm establish and accelerate AI governance to enable them to transform responsibly and ethically.
As the Olympics in Paris draws to a close, and the Paralympics gets under way, the International Olympic Committee have announced a new...
The company has enlisted Arup, AtkinsRéalis, Mott MacDonald, and Stantec for this £160 million (over US$204 million) initiative.
HAZARDS 31 will feature a talk by cybersecurity expert Sarabjit Purewal – from the UK's Health and Safety Executive – about the challenges in this area.
Agria Pet Insurance has selected a new trusted cyber-security partner to help it minimise its security risks, ensure continued compliance with latest...
In recent years, the consulting division of Crossword Cybersecurity has grown in a range of high profile sectors including legal,...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Mott MacDonald is https://mottmac.com.
According to Rankiteo, Mott MacDonald’s AI-generated cybersecurity score is 800, reflecting their Good security posture.
According to Rankiteo, Mott MacDonald currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Mott MacDonald has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.
According to Rankiteo, Mott MacDonald is not certified under SOC 2 Type 1.
According to Rankiteo, Mott MacDonald does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Mott MacDonald is not listed as GDPR compliant.
According to Rankiteo, Mott MacDonald does not currently maintain PCI DSS compliance.
According to Rankiteo, Mott MacDonald is not compliant with HIPAA regulations.
According to Rankiteo,Mott MacDonald is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Mott MacDonald operates primarily in the Civil Engineering industry.
Mott MacDonald employs approximately 24,383 people worldwide.
Mott MacDonald presently has no subsidiaries across any sectors.
Mott MacDonald’s official LinkedIn profile has approximately 870,590 followers.
Mott MacDonald is classified under the NAICS code 237, which corresponds to Heavy and Civil Engineering Construction.
No, Mott MacDonald does not have a profile on Crunchbase.
Yes, Mott MacDonald maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mott-macdonald.
As of April 04, 2026, Rankiteo reports that Mott MacDonald has not experienced any cybersecurity incidents.
Mott MacDonald has an estimated 5,874 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, Mott MacDonald has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, two peer-facing consensus request handlers assume that the history index is always available and call blockchain.history_store.history_index().unwrap() directly. That assumption is false by construction. HistoryStoreProxy::history_index() explicitly returns None for the valid HistoryStoreProxy::WithoutIndex state. when a full node is syncing or otherwise running without the history index, a remote peer can send RequestTransactionsProof or RequestTransactionReceiptsByAddress and trigger an Option::unwrap() panic on the request path. This issue has been patched in version 1.3.0.
PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream() with follow_redirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata services and internal network services. This issue has been patched in version 1.5.95.
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, OAuthManager.validate_token() returns True for any token not found in its internal store, which is empty by default. Any HTTP request to the MCP server with an arbitrary Bearer token is treated as authenticated, granting full access to all registered tools and agent capabilities. This issue has been patched in version 4.5.97.
PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.
PraisonAI is a multi-agent teams system. Prior to version 4.5.90, MCPToolIndex.search_tools() compiles a caller-supplied string directly as a Python regular expression with no validation, sanitization, or timeout. A crafted regex causes catastrophic backtracking in the re engine, blocking the Python thread for hundreds of seconds and causing a complete service outage. This issue has been patched in version 4.5.90.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.