RBGlobal operates the plumbing behind a multi-billion-dollar commercial asset ecosystem. The company's portfolio - Ritchie Bros., IAA, Rouse Services, SmartEquip, Xcira, and VeriTread - collectively runs digital marketplaces and live simulcast auction platforms that move heavy equipment, vehicles, and industrial assets across 170+ countries. Auction sites span 13 countries. The tech surface area is broad: real-time bidding engines, equipment lifecycle management systems, data-driven asset intelligence pipelines, and heavy haul logistics marketplaces. Industry verticals include construction, automotive, energy, mining, agriculture, and government surplus.
From a security standpoint, the attack surface is non-trivial. These platforms handle high-value financial transactions at global scale, connect buyers and sellers across disparate regulatory regimes, and sit on top of asset data intelligence that has direct market value. The threat model spans payment fraud, platform integrity in live auction environments, supply chain risk across acquired technology stacks, and the usual suspects around data exfiltration and credential abuse. Teams here are operating across heterogeneous systems - some built organically, others absorbed through acquisitions like Xcira's simulcast tech and SmartEquip's lifecycle platform - meaning interoperability and consistent security posture across the stack are real engineering challenges, not just talking points.
