ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

Gestamp is a multinational specialized in the design, development and manufacture of highly engineered metal components for the main vehicle manufacturers. It develops products with an innovative design to produce lighter and safer vehicles, which offer lower energy consumption and a lower environmental impact. Its products cover the areas of BiW, chassis and mechanisms. Gestamp is present in 24 countries with 115 production plants, 13 R&D centers and a workforce of more than 44,000 employees worldwide.

Gestamp A.I CyberSecurity Scoring

Gestamp

Company Details

Linkedin ID:

gestamp

Employees number:

15,647

Number of followers:

378,171

NAICS:

3361

Industry Type:

Motor Vehicle Manufacturing

Homepage:

gestamp.com

IP Addresses:

0

Company ID:

GES_1493047

Scan Status:

In-progress

AI scoreGestamp Risk Score (AI oriented)

Between 750 and 799

https://images.rankiteo.com/companyimages/gestamp.jpeg
Gestamp Motor Vehicle Manufacturing
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreGestamp Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/gestamp.jpeg
Gestamp Motor Vehicle Manufacturing
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

Gestamp Company CyberSecurity News & History

Past Incidents
0
Attack Types
0
No data available
Ailogo

Gestamp Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for Gestamp

Incidents vs Motor Vehicle Manufacturing Industry Average (This Year)

No incidents recorded for Gestamp in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Gestamp in 2025.

Incident Types Gestamp vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Gestamp in 2025.

Incident History — Gestamp (X = Date, Y = Severity)

Gestamp cyber incidents detection timeline including parent company and subsidiaries

Gestamp Company Subsidiaries

SubsidiaryImage

Gestamp is a multinational specialized in the design, development and manufacture of highly engineered metal components for the main vehicle manufacturers. It develops products with an innovative design to produce lighter and safer vehicles, which offer lower energy consumption and a lower environmental impact. Its products cover the areas of BiW, chassis and mechanisms. Gestamp is present in 24 countries with 115 production plants, 13 R&D centers and a workforce of more than 44,000 employees worldwide.

Loading...
similarCompanies

Gestamp Similar Companies

Volkswagen Group

The Volkswagen Group with its headquarters in Wolfsburg is one of the world’s leading automobile manufacturers and the largest carmaker in Europe. The Group is made up of ten brands from seven European countries: Volkswagen, Volkswagen Nutzfahrzeuge, ŠKODA, SEAT, CUPRA, Audi, Lamborghini, Bentley, P

Marcopolo S.A.

A Marcopolo S.A é uma empresa brasileira fundada em 1949 que participa ativamente no desenvolvimento de soluções para a mobilidade nos principais mercados mundiais. Atualmente com 11 unidades fabris no exterior, é composta por empresas dedicadas à fabricação de ônibus, micro-ônibus e peças, soluções

Sumitomo Electric Bordnetze SE

Sumitomo Electric Bordnetze SE (SEBN) is a global automotive supplier with over 36,000 employees in 13 countries. SEBN is part of the Japanese group Sumitomo Electric Industries, which has 380 subsidiaries in various industries worldwide. The more than 400-year-old Sumitomo Electric Group employs 28

Adient

Adient (NYSE: ADNT) is a global leader in automotive seating. With 70,000+ employees in 29 countries, Adient operates more than 200 manufacturing/assembly plants worldwide. We produce and deliver automotive seating for all major OEMs. From complete seating systems to individual foam, trim and metal

Established in 1995, BYD is a top high-tech enterprise in China specializing in IT, automobile, and new energy.BYD is the largest supplier of rechargeable batteries in the globe, and has the largest market share for Nickel-cadmium batteries, handset Li-ion batteries, cell-phone chargers and keypads

Mercedes-Benz AG

"Love of invention will never end." - Carl Benz Learn more about us as we continue to pioneer the future of driving excellence. Data privacy: mb4.me/provider_privacy Mercedes-Benz AG Mercedesstraße 120 70372 Stuttgart Germany Phone: +49 7 11 17-0 E-Mail: [email protected] For inquiries

DENSO

DENSO is one of the world's largest automotive suppliers with a 75-year history of providing advanced automotive systems and technology to automakers worldwide. While our products are featured on nearly every vehicle make and model on the road today, we're also looking to innovate beyond automotive

Lear Corporation

Lear, a global automotive technology leader in Seating and E-Systems, enables superior in-vehicle experiences for consumers around the world. Our diverse team of talented employees in 37 countries is driven by a commitment to innovation, operational excellence, and sustainability. Lear is Making eve

We don't just make history -- we make the future. Ford put the world on wheels over a century ago, and our teams are re-inventing icons and creating groundbreaking connected and electric vehicles for the next century. We believe in serving our customers, our communities, and the world. If you do, to

newsone

Gestamp CyberSecurity News

October 07, 2025 07:00 AM
Jaguar Land Rover bailout shows rising cost of cybercrime

Much of Jaguar Land Rover's IT infrastructure is said to date back to Ford's ownership of the company, leaving a complicated set of...

September 29, 2025 07:00 AM
Nia Griffith: JLR rescue package ‘must’ protect Llanelli jobs after cyber‑attack

Llanelli MP Dame Nia Griffith has urged Jaguar Land Rover to use its £1.5bn Government rescue package to protect local suppliers like...

September 22, 2025 07:00 AM
Gestamp’s digital pathway to flexible, efficient manufacturing

Gestamp is leveraging Industry 4.0, digitalisation, and AI to enhance efficiency and flexibility in automotive manufacturing, driving global...

February 13, 2024 08:00 AM
Gestamp redefines supply chain management for industry 4.0

Gestamp's digitalisation lead, Diego Mallada, explains how the tier one supplier is navigating the digital future, as well as creating it.

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

Gestamp CyberSecurity History Information

Official Website of Gestamp

The official website of Gestamp is http://www.gestamp.com.

Gestamp’s AI-Generated Cybersecurity Score

According to Rankiteo, Gestamp’s AI-generated cybersecurity score is 754, reflecting their Fair security posture.

How many security badges does Gestamp’ have ?

According to Rankiteo, Gestamp currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Gestamp have SOC 2 Type 1 certification ?

According to Rankiteo, Gestamp is not certified under SOC 2 Type 1.

Does Gestamp have SOC 2 Type 2 certification ?

According to Rankiteo, Gestamp does not hold a SOC 2 Type 2 certification.

Does Gestamp comply with GDPR ?

According to Rankiteo, Gestamp is not listed as GDPR compliant.

Does Gestamp have PCI DSS certification ?

According to Rankiteo, Gestamp does not currently maintain PCI DSS compliance.

Does Gestamp comply with HIPAA ?

According to Rankiteo, Gestamp is not compliant with HIPAA regulations.

Does Gestamp have ISO 27001 certification ?

According to Rankiteo,Gestamp is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Gestamp

Gestamp operates primarily in the Motor Vehicle Manufacturing industry.

Number of Employees at Gestamp

Gestamp employs approximately 15,647 people worldwide.

Subsidiaries Owned by Gestamp

Gestamp presently has no subsidiaries across any sectors.

Gestamp’s LinkedIn Followers

Gestamp’s official LinkedIn profile has approximately 378,171 followers.

NAICS Classification of Gestamp

Gestamp is classified under the NAICS code 3361, which corresponds to Motor Vehicle Manufacturing.

Gestamp’s Presence on Crunchbase

No, Gestamp does not have a profile on Crunchbase.

Gestamp’s Presence on LinkedIn

Yes, Gestamp maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/gestamp.

Cybersecurity Incidents Involving Gestamp

As of December 11, 2025, Rankiteo reports that Gestamp has not experienced any cybersecurity incidents.

Number of Peer and Competitor Companies

Gestamp has an estimated 12,645 peer or competitor companies worldwide.

Gestamp CyberSecurity History Information

How many cyber incidents has Gestamp faced ?

Total Incidents: According to Rankiteo, Gestamp has faced 0 incidents in the past.

What types of cybersecurity incidents have occurred at Gestamp ?

Incident Types: The types of cybersecurity incidents that have occurred include .

Incident Details

What are the most common types of attacks the company has faced ?

Additional Questions

cve

Latest Global CVEs (Not Company-Specific)

Description

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.

Risk Information
cvss3
Base: 9.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Description

Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.

Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Description

Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.

Risk Information
cvss3
Base: 8.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
Description

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Risk Information
cvss3
Base: 5.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=gestamp' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge