Comparison Overview

Applied Minds

VS

New Policy Institute

Applied Minds

None
Last Update: 2025-12-01
View Profile
Between 750 and 799
https://www.appliedminds.com

Applied Minds delivers innovation through technology, design and engineering. We combine vision development, creative design, and engineering with a core competency in storytelling, to build innovative products and services. For over 20 years, our highly experienced staff and well equipped technical facilities allow us to rapid prototype and fabricate novel solutions, solving the most challenging creative and technical problems facing our clients and enabling new business opportunities. We work in a broad range of industries including aerospace & defense, agriculture, automotive & transportation, command & control, energy, entertainment, healthcare, innovation, product design, and creative facilities design. We also develop specialized software with emphases in visualization, user interface, and new directions in AI. Our inventions have resulted in over 1,000 issued patents, empowering our clients and helping make the world a better place. If you have exceptional talent and passion, join Applied Minds and help us create for the ages.

NAICS: 54172
NAICS Definition: Research and Development in the Social Sciences and Humanities
Employees: 87
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

New Policy Institute

Oxford House, London, undefined, E2 6HG, GB
Last Update: 2025-12-02
Between 700 and 749
http://npi.org.uk/

The New Policy Institute (NPI) is a British think tank based in London. NPI was founded in 1996 with a mission of advancing social justice in a market economy. It conducts research and consultancy work across a range of economic and social policy areas including poverty, social security, housing, and economics.

NAICS: 541
NAICS Definition:
Employees: 2
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/applied-minds.jpeg
Applied Minds
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/new-policy-institute.jpeg
New Policy Institute
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Applied Minds
100%
Compliance Rate
0/4 Standards Verified
New Policy Institute
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Think Tanks Industry Average (This Year)

No incidents recorded for Applied Minds in 2025.

Incidents vs Think Tanks Industry Average (This Year)

No incidents recorded for New Policy Institute in 2025.

Incident History — Applied Minds (X = Date, Y = Severity)

Applied Minds cyber incidents detection timeline including parent company and subsidiaries

Incident History — New Policy Institute (X = Date, Y = Severity)

New Policy Institute cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/applied-minds.jpeg
Applied Minds
Incidents

No Incident

https://images.rankiteo.com/companyimages/new-policy-institute.jpeg
New Policy Institute
Incidents

No Incident

FAQ

Applied Minds company demonstrates a stronger AI Cybersecurity Score compared to New Policy Institute company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, New Policy Institute company has disclosed a higher number of cyber incidents compared to Applied Minds company.

In the current year, New Policy Institute company and Applied Minds company have not reported any cyber incidents.

Neither New Policy Institute company nor Applied Minds company has reported experiencing a ransomware attack publicly.

Neither New Policy Institute company nor Applied Minds company has reported experiencing a data breach publicly.

Neither New Policy Institute company nor Applied Minds company has reported experiencing targeted cyberattacks publicly.

Neither Applied Minds company nor New Policy Institute company has reported experiencing or disclosing vulnerabilities publicly.

Neither Applied Minds nor New Policy Institute holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Applied Minds company nor New Policy Institute company has publicly disclosed detailed information about the number of their subsidiaries.

Applied Minds company employs more people globally than New Policy Institute company, reflecting its scale as a Think Tanks.

Neither Applied Minds nor New Policy Institute holds SOC 2 Type 1 certification.

Neither Applied Minds nor New Policy Institute holds SOC 2 Type 2 certification.

Neither Applied Minds nor New Policy Institute holds ISO 27001 certification.

Neither Applied Minds nor New Policy Institute holds PCI DSS certification.

Neither Applied Minds nor New Policy Institute holds HIPAA certification.

Neither Applied Minds nor New Policy Institute holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. Prior to 2.9.8, there is a security issue exists in the exec_in_pod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string format is provided, it is passed directly to shell interpretation (sh -c) without input validation, allowing shell metacharacters to be interpreted. This vulnerability can be exploited through direct command injection or indirect prompt injection attacks, where AI agents may execute commands without explicit user intent. This vulnerability is fixed in 2.9.8.

Published
Date
2025-12-03
Updated
Date
2025-12-03
Risk Information
cvss3
Base: 6.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
References
Description

XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request.

Published
Date
2025-12-03
Updated
Date
2025-12-03
References
Description

An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g. file upload, firmware update, reboot...) via a crafted authentication bypass.

Published
Date
2025-12-03
Updated
Date
2025-12-03
References
Description

Cal.com is open-source scheduling software. Prior to 5.9.8, A flaw in the login credentials provider allows an attacker to bypass password verification when a TOTP code is provided, potentially gaining unauthorized access to user accounts. This issue exists due to problematic conditional logic in the authentication flow. This vulnerability is fixed in 5.9.8.

Published
Date
2025-12-03
Updated
Date
2025-12-03
Risk Information
cvss4
Base: 9.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed() function, it might lead to high CPU consumption and a potential Denial of Service. Small numbers go through this call stack: NativeNumber.numTo > DToA.JS_dtostr > DToA.JS_dtoa > DToA.pow5mult where pow5mult attempts to raise 5 to a ridiculous power. This vulnerability is fixed in 1.8.1, 1.7.15.1, and 1.7.14.1.

Published
Date
2025-12-03
Updated
Date
2025-12-03
Risk Information
cvss4
Base: 5.5
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References