Company Details
repsol
24,615
853,183
211
repsol.com
42
REP_8888961
Completed

Repsol Company CyberSecurity Posture
repsol.comAt Repsol, we are at the forefront of the energy sector to build the future of energy with innovation and sustainability. We are a strong multienergy company that creates value in an integrated, diversified, and sustainable way to promote progress in society. We leverage our past experience to be present in the future of energy. Our global presence ensures the diversity that characterizes us as seen in our multicultural and multidisciplinary team that as of today comprises more than 25,000 people representing 77 nationalities who work across 27 countries. If you would like to learn more about us and join the Repsol team, go to the “Life” section.
Company Details
repsol
24,615
853,183
211
repsol.com
42
REP_8888961
Completed
Between 750 and 799

Repsol Global Score (TPRM)XXXX



No incidents recorded for Repsol in 2025.
No incidents recorded for Repsol in 2025.
No incidents recorded for Repsol in 2025.
Repsol cyber incidents detection timeline including parent company and subsidiaries

At Repsol, we are at the forefront of the energy sector to build the future of energy with innovation and sustainability. We are a strong multienergy company that creates value in an integrated, diversified, and sustainable way to promote progress in society. We leverage our past experience to be present in the future of energy. Our global presence ensures the diversity that characterizes us as seen in our multicultural and multidisciplinary team that as of today comprises more than 25,000 people representing 77 nationalities who work across 27 countries. If you would like to learn more about us and join the Repsol team, go to the “Life” section.


Koch Engineered Solutions (KES) provides uniquely engineered solutions in construction; mass and heat transfer; combustion and emissions controls; filtration; separation; materials applications; automation and actuation. KES is located in Wichita, Kansas, and is a subsidiary of Koch Industries, one
We’re a leading producer of the energy and chemicals that drive global commerce and enhance the daily lives of people around the globe by continuing delivering an uninterrupted supply of energy to the world. Our resilience and agility has built one of the world’s largest integrated energy and chemi

Ecopetrol (NYSE: EC) es la compañía más grande en Colombia y uno de los principales grupos de energía de Latinoamérica. Cuenta con más de 18.000 empleados y es responsable del 60% de la producción de hidrocarburos en Colombia. Es propietaria de las dos refinerías del Colombia y de la gran parte de l

Tenaris is a leading supplier of tubes and related services for the world’s energy industry and certain other industrial applications. Our mission is to deliver value to our customers through product development, manufacturing excellence, and supply chain management. Tenaris employees around the wor
We are a global oil and gas company tasked with an important job—to safely find and deliver energy for the world. We’re experts in what we do—from the well site to the office. Across our operations and activities in 13 countries, we never forget our responsibility to be a great neighbor, and a gre

We collaborate and engineer solutions to maximize asset value for our customers. Founded in 1919, Halliburton is one of the world's largest providers of products and services to the energy industry. With more than 45,000 employees, representing 130 nationalities in more than 80 countries, the compan

Maharatna ONGC is the largest producer of crude oil and natural gas in India, contributing around 70 per cent of Indian domestic production. The crude oil is the raw material used by downstream companies like IOC, BPCL, HPCL to produce petroleum products like Petrol, Diesel, Kerosene, Naphtha, Cooki
Fortune Global 500 Company, Bharat Petroleum is the second largest Indian Oil Marketing Company and one of the premier integrated energy companies in India, engaged in refining of crude oil and marketing of petroleum products, with a significant presence in the upstream and downstream sectors of the
PT Pertamina (Persero) is an Indonesian state-owned enterprise, which is engaged in the integrated energy in Indonesia. Established on December 10, 1957, Pertamina had the experiences in upstream, midstream, downstream and renewable energy sectors for more than 50 years. This is the official Link
.png)
Indra eyes a cybersecurity alliance with Leonardo, BBVA gains ground in its bid for Sabadell, and top Spanish stocks face fresh analyst moves and executive...
Do you know what the professions of the future are? The development of technology leads to the emergence of new professional profiles and emerging sectors...
Harvard Business School professor and business consultant, Clayton Christensen, coined the term “disruptive innovation” in the magazine Harvard Business...
Medco Energi Internasional—backed by tycoon Hilmi Panigoro and his family—has agreed to buy Spanish energy giant Repsol's 24% stake in the...
Spain suffered several power glitches and industry officials sounded repeated warnings about the instability of its power grid in the build...
The European solar sector has proposed new recommendations to help EU policymakers mitigate cybersecurity risks.
The "Power Parasites" phishing campaign has targeted global energy giants and major brands since 2024, a new threat report reveals.
A sophisticated phishing and scam campaign dubbed "Power Parasites" has been actively targeting the global energy sector.
Orchid Security, an emerging leader in identity-first security orchestration, announced it has raised $36 million in seed funding.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Repsol is http://www.repsol.com.
According to Rankiteo, Repsol’s AI-generated cybersecurity score is 787, reflecting their Fair security posture.
According to Rankiteo, Repsol currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Repsol is not certified under SOC 2 Type 1.
According to Rankiteo, Repsol does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Repsol is not listed as GDPR compliant.
According to Rankiteo, Repsol does not currently maintain PCI DSS compliance.
According to Rankiteo, Repsol is not compliant with HIPAA regulations.
According to Rankiteo,Repsol is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Repsol operates primarily in the Oil and Gas industry.
Repsol employs approximately 24,615 people worldwide.
Repsol presently has no subsidiaries across any sectors.
Repsol’s official LinkedIn profile has approximately 853,183 followers.
Repsol is classified under the NAICS code 211, which corresponds to Oil and Gas Extraction.
Yes, Repsol has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/repsol-energy-ventures.
Yes, Repsol maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/repsol.
As of December 11, 2025, Rankiteo reports that Repsol has not experienced any cybersecurity incidents.
Repsol has an estimated 10,530 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, Repsol has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.