# gitlab.tend.ch — Tend AG

- **Owner / Company:** Tend AG
- **HQ:** Schlieren, Zürich, Switzerland
- **Sector:** real-estate services (design/build/manage residential+commercial; 50-70 employees)
- **Size:** 50-70 (LinkedIn tend-ag, 4.4k followers)
- **Tier:** S (confirmed 2026-08-06: RCE path verified — instance runner registration → CI exec, L4_runner_rce_verify.json)   **Risk:** green   **Score:** I(1,2,2,3)=3 × F(3,3,3,3)=3 = 9; E(3,3) — see ASSESSMENT.md
- **Access (L1):** login@tend.ch (Tend Admin) (L1 VALID)
- **L2 evidence:** L2: GitLab INSTANCE ADMIN (admin=true, ver 16.1.1-ee, 100 projects, 23 groups). Projects: navigators for gaya/dianapark/vivo-wohnen/aebi-areal/metropol/visana/chama-rent, ArchScape, web/services/*api, craft-cms. L2 secrets scan 2026-08-06: verified Strapi prod JWT secrets + Azure Storage key (tendconfigurator), MySQL hostpoint creds, unmasked FTP deploy creds, prod PHP API token, git.raumgleiter.com token, Google API keys ×3, ArchNet API creds + Hostpoint SMTP creds (see L2-notes.md). **L3 2026-08-06:** Azure write-capable CONFIRMED (5 containers client media), SMTP send-capable CONFIRMED, GitLab write CONFIRMED (PAT create+revoke); MySQL/FTP auth valid but de-privileged. 20 pre-existing active PATs on tendAG = persistence surface.

_Sources: WINGSCLOUD-ULP-JULY-26/27 slim_valid.json + wingscloud_l2.py L2_summary.json + web-search (company identity). 2026-08-06._