PRA Health Sciences is a contract research organization that provides clinical development and data solutions to biotechnology and pharmaceutical companies. The company offers services spanning phase I through IV clinical trials, including site selection, patient recruitment, regulatory affairs, and data management to support drug development programs. UpGuard continuously monitors the security posture of PRA using open-source, commercial, and proprietary threat intelligence feeds. Our analysis is centered on objective, externally verifiable information.
PRA's security rating is based on the analysis of their external attack surface. The higher the rating, the better their security posture. Start a free trial to get a more in-depth risk assessment for PRA.
Last updated April 13, 2026
This vendor risk report is based on UpGuard's continuous monitoring of PRA's security posture using open-source, commercial, and proprietary threat intelligence feeds. The results are summarized into a security rating based on the analysis of hundreds of individual checks across five risk categories: website security, email security, phishing & malware, brand & reputation risk, and network security.
DMARC reject policy provides the most effective protection against fraudulent emails being sent from a domain.
DMARC protects against fraudulent emails being sent from a domain.
Sender Policy Framework (SPF) record strictly enforces specific domains allowed to send email on its behalf.
Sender Policy Framework (SPF) record passes basic syntax checks.
DMARC policy percentage is set to default 100%, ensuring all mail is covered by the policy.
Sender Policy Framework (SPF) record does not include the ptr mechanism.
DNSSEC records prevent third parties from forging the records that guarantee a domain's identity. DNSSEC should be configured for this domain.
Domain is not protected from unsolicited deletion requests with the registrar or registry. The domain should have clientDeleteProhibited or serverDeleteProhibited set.
Domain is not protected from unsolicited update requests with the registrar or registry. The domain should have clientUpdateProhibited or serverUpdateProhibited set.
No unregistered MX records that could lead to receiving mail on behalf of the target organization were detected.
Domain has not expired.
Domain does not expire within 30 days.
Domain is not flagged as inactive.
Domain is not pending deletion with the registrar.
Domain is not pending restoration with the registrar.
Domain is protected from unsolicited transfer requests.
Domain is not under a DNS resolution hold with the registrar.
Domain is not under a DNS resolution hold with the registry itself.
Domain is not prohibited from renewal at the registry itself.
This IP/domain has not been reported as a source of botnet activity in the last 30 days.
This IP/domain did not appear on any list of IPs and domains known to perform brute force login attempts in the last 30 days.
This IP/domain has been reported for distributing malware in the last 30 days.
This IP/domain has not been reported for performing unsolicited scanning in the last 30 days.
This IP/domain has not been reported as a phishing site in the last 30 days.
This IP/domain has not been reported as a source of botnet activity in the last 90 days.
This IP/domain did not appear on any list of IPs and domains known to perform brute force login attempts in the last 90 days.
This IP/domain has been reported for distributing malware in the last 90 days.
This IP/domain has not been reported for performing unsolicited scanning in the last 90 days.
This IP/domain has not been reported as a phishing site in the last 90 days.
Compare PRA's security performance with other companies in their industry.
Mastercard operates a global payment network that processes electronic transactions between financial institutions, merchants, and cardholders. The company provides credit, debit, and prepaid card services, along with payment processing technology and security solutions for digital commerce.
Adobe develops and publishes software products for creative professionals, marketers, and enterprises. The company offers applications for graphic design, video editing, web development, photography, and document management. Its products are primarily delivered through cloud-based subscription services.
YouTube operates an online video-sharing platform where users can upload, view, rate, share, and comment on content. The service hosts a wide variety of user-generated and corporate media videos, including music videos, educational content, and entertainment programming.
Stripe provides financial infrastructure and payment processing services for businesses of all sizes to accept online and in-person payments. The company offers tools for managing subscriptions, billing models, fraud prevention, money movement, and embedded financial services through APIs and integrations.
Starbucks operates a chain of coffeehouses serving coffee beverages, tea, food items, and related retail products. The company offers both dine-in and mobile ordering services, along with a customer loyalty program called Starbucks Rewards.
BlackRock operates as a global investment management firm providing asset management services, exchange-traded funds (ETFs), and financial technology solutions. The company offers a range of investment products including iShares ETFs, managed funds, and model portfolios across equity, fixed income, and alternative asset classes for retail and institutional clients.
The ultimate guide to attack surface and third-party risk management – actionable advice for security teams, managers, and executives.
Security research and global news about data breaches.
Explore resourcesArticles, news, and research on third-party risk management.
Explore resourcesArticles, news, and research on attack surface management.
Explore resourcesArticles, news, and research on cybersecurity.
Explore resources