Cybersecurity

Protecting data. Ensuring trust. Enabling progress.

At Henkel, we combine advanced technologies, strong governance, and a culture of security awareness to safeguard our systems, data, and the trust of our customers, consumers, and partners worldwide.

CyberVadis Security Assessment

CyberVadis cybersecurity assessment certificate for Henkel. The certificate shows a score of 997 out of 1000 points, a Mature rating level, and a Platinum badge for 2026. The assessment was completed on 4 August 2026 and is valid until 3 August 2027.
Close

CyberVadis is an independent cybersecurity rating platform that assesses organizations against recognized security standards and best practices. Henkel has successfully completed the CyberVadis assessment, achieving a score of 997 out of 1,000 points and a Platinum rating – reflecting  our ongoing commitment to protecting data and strengthening trust across our digital ecosystem.

Working Together to improve Security

Cybersecurity is a shared responsibility. We value the expertise of the global security research community and welcome responsible reports of potential vulnerabilities that may affect Henkel websites, applications, or systems.

If you believe you have identified a security vulnerability, we encourage you to report it to us. Your contribution helps us strengthen our defenses and better protect our stakeholders.

Responsible Vulnerability Disclosure

To help us investigate and address vulnerabilities efficiently, you can submit your report through:

Please include the following information in your report:

  • A clear description of the identified vulnerability.
  • The affected website, application, or other asset.
  • Steps required to reproduce the issue.
  • Proof of concept, screenshots, or supporting evidence where available.
  • Your contact details for potential follow-up questions ‏(optional but appreciated).

We ask security researchers to follow the principles of responsible disclosure:

  • Act in good faith and avoid activities that could disrupt services, compromise data, or impact users.
  • Allow Henkel reasonable time to investigate and remediate reported vulnerabilities.
  • Refrain from publicly disclosing technical details until remediation efforts have been completed or a mutually agreed disclosure timeline has been reached.
  • Comply with all applicable laws and regulations while conducting security research.

We sincerely appreciate the efforts of security researchers and cybersecurity professionals who help us continuously improve our security posture.