PRA Health Sciences is a contract research organization that provides clinical development and data solutions to biotechnology and pharmaceutical companies. The company offers services spanning phase I through IV clinical trials, including site selection, patient recruitment, regulatory affairs, and data management to support drug development programs. UpGuard continuously monitors the security posture of PRA using open-source, commercial, and proprietary threat intelligence feeds. Our analysis is centered on objective, externally verifiable information.
PRA's security rating is based on the analysis of their external attack surface. The higher the rating, the better their security posture. Start a free trial to get a more in-depth risk assessment for PRA.
Last updated September 3, 2026
This vendor risk report is based on UpGuard's continuous monitoring of PRA's security posture using open-source, commercial, and proprietary threat intelligence feeds. The results are summarized into a security rating based on the analysis of hundreds of individual checks across five risk categories: website security, email security, phishing & malware, brand & reputation risk, and network security.
DMARC reject policy provides the most effective protection against fraudulent emails being sent from a domain.
DMARC protects against fraudulent emails being sent from a domain.
Sender Policy Framework (SPF) record strictly enforces specific domains allowed to send email on its behalf.
Sender Policy Framework (SPF) record passes basic syntax checks.
DMARC policy percentage is set to default 100%, ensuring all mail is covered by the policy.
Sender Policy Framework (SPF) record does not include the ptr mechanism.
DNSSEC records prevent third parties from forging the records that guarantee a domain's identity. DNSSEC should be configured for this domain.
Domain is not protected from unsolicited deletion requests with the registrar or registry. The domain should have clientDeleteProhibited or serverDeleteProhibited set.
Domain is not protected from unsolicited update requests with the registrar or registry. The domain should have clientUpdateProhibited or serverUpdateProhibited set.
No unregistered MX records that could lead to receiving mail on behalf of the target organization were detected.
Domain has not expired.
Domain does not expire within 30 days.
Domain is not flagged as inactive.
Domain is not pending deletion with the registrar.
Domain is not pending restoration with the registrar.
Domain is protected from unsolicited transfer requests.
Domain is not under a DNS resolution hold with the registrar.
Domain is not under a DNS resolution hold with the registry itself.
Domain is not prohibited from renewal at the registry itself.
This IP/domain has not been reported as a source of botnet activity in the last 30 days.
This IP/domain did not appear on any list of IPs and domains known to perform brute force login attempts in the last 30 days.
This IP/domain has been reported for distributing malware in the last 30 days.
This IP/domain has not been reported for performing unsolicited scanning in the last 30 days.
This IP/domain has not been reported as a phishing site in the last 30 days.
This IP/domain has not been reported as a source of botnet activity in the last 90 days.
This IP/domain did not appear on any list of IPs and domains known to perform brute force login attempts in the last 90 days.
This IP/domain has been reported for distributing malware in the last 90 days.
This IP/domain has not been reported for performing unsolicited scanning in the last 90 days.
This IP/domain has not been reported as a phishing site in the last 90 days.
Compare PRA's security performance with other companies in their industry.
Starbucks operates a chain of coffeehouses serving coffee beverages, tea, food items, and related retail products. The company offers both dine-in and mobile ordering services, along with a customer loyalty program called Starbucks Rewards.
Commonwealth Bank provides financial services including personal and business banking accounts, credit cards, home loans, insurance products, and investment services. The company operates retail branches and digital banking platforms across Australia, offering foreign exchange services and institutional banking solutions.
Alphabet is a holding company that owns and operates Google and several other subsidiary businesses. The company's portfolio includes internet services, technology development, life sciences research, and investment ventures. It was created through a corporate restructuring of Google.
Zappos operates as an online retailer specializing in footwear, including shoes, sneakers, and boots, as well as clothing and accessories. The company offers products from multiple brands and provides free shipping on orders.
Mastercard operates a global payment network that processes electronic transactions between financial institutions, merchants, and cardholders. The company provides credit, debit, and prepaid card services, along with payment processing technology and security solutions for digital commerce.
Microsoft develops and licenses software products, devices, and services. The company's core offerings include the Windows operating system, Office productivity suite, Azure cloud computing platform, and Xbox gaming consoles.
The ultimate guide to attack surface and third-party risk management – actionable advice for security teams, managers, and executives.
Security research and global news about data breaches.
Explore resourcesArticles, news, and research on third-party risk management.
Explore resourcesArticles, news, and research on attack surface management.
Explore resourcesArticles, news, and research on cybersecurity.
Explore resources