Comparison Overview

Arctic Circle Ltd

VS

Lewis S. Goodfriend & Associates

Arctic Circle Ltd

Coldnose Rd, Hereford, Herefordshire, HR2 6JL, GB
Last Update: 2025-11-28

We are the industry leaders of innovative heat transfer solutions. As a privately owned British manufacturer, we pride ourselves in our vision to exceed customer expectations ethically and responsibly. We have established a reputation for innovative solutions and have grown consistently to become the undisputed market leader in innovation. We have won numerous awards covering product innovation, training and development, and corporate citizenship and endeavour to continue to be the market leaders of our industry. We believe we have an obligation to help improve the global issues affecting us all. At Arctic Circle, we focus on innovation so that the products and services we produce can reduce energy consumption and reduce CO2 emissions. We are committed to the training and development of our staff, this includes providing full four-year Engineering Apprenticeship placements and supporting Foundation Degrees. We are a proud team and believe in investing in our staff as these are the people who will have the skills and ideas to continue to develop the business in the future.

NAICS: None
NAICS Definition:
Employees: 28
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Lewis S. Goodfriend & Associates

415 Route 24, Chester, NJ, 07930, US
Last Update: 2025-11-27
Between 750 and 799

Lewis S. Goodfriend & Associates is a diversified acoustical engineering consulting firm offering professional services in the fields of architectural acoustics, building acoustics, noise evaluation and abatement including environmental, industrial and transportation, HVAC, vibration analysis and expert witness testimony. With more than 60 years of experience in providing consulting engineering services for a wide range of projects and clients, our engineering staff effectively interfaces with professionals in all disciplines. Our clients include corporations, developers, industrial organizations, architectural firms, engineering firms, educational institutions, attorneys, houses of worship, local municipalities and commercial enterprises. Our clients are important. LSG&A strives to develop a working relationship with our clients from the beginning of a project. In order to achieve client and project goals, modern instrumentation and computer modeling tools are used to accurately define problems. Our experienced and responsive professionals develop appropriate solutions that are both cost effective and practical.

NAICS: None
NAICS Definition:
Employees: 7
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/arcticcircleltd.jpeg
Arctic Circle Ltd
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/lewis-s.-goodfriend-&-associates.jpeg
Lewis S. Goodfriend & Associates
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Arctic Circle Ltd
100%
Compliance Rate
0/4 Standards Verified
Lewis S. Goodfriend & Associates
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Mechanical Or Industrial Engineering Industry Average (This Year)

No incidents recorded for Arctic Circle Ltd in 2025.

Incidents vs Mechanical Or Industrial Engineering Industry Average (This Year)

No incidents recorded for Lewis S. Goodfriend & Associates in 2025.

Incident History — Arctic Circle Ltd (X = Date, Y = Severity)

Arctic Circle Ltd cyber incidents detection timeline including parent company and subsidiaries

Incident History — Lewis S. Goodfriend & Associates (X = Date, Y = Severity)

Lewis S. Goodfriend & Associates cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/arcticcircleltd.jpeg
Arctic Circle Ltd
Incidents

No Incident

https://images.rankiteo.com/companyimages/lewis-s.-goodfriend-&-associates.jpeg
Lewis S. Goodfriend & Associates
Incidents

No Incident

FAQ

Both Arctic Circle Ltd company and Lewis S. Goodfriend & Associates company demonstrate a comparable AI Cybersecurity Score, with strong governance and monitoring frameworks in place.

Historically, Lewis S. Goodfriend & Associates company has disclosed a higher number of cyber incidents compared to Arctic Circle Ltd company.

In the current year, Lewis S. Goodfriend & Associates company and Arctic Circle Ltd company have not reported any cyber incidents.

Neither Lewis S. Goodfriend & Associates company nor Arctic Circle Ltd company has reported experiencing a ransomware attack publicly.

Neither Lewis S. Goodfriend & Associates company nor Arctic Circle Ltd company has reported experiencing a data breach publicly.

Neither Lewis S. Goodfriend & Associates company nor Arctic Circle Ltd company has reported experiencing targeted cyberattacks publicly.

Neither Arctic Circle Ltd company nor Lewis S. Goodfriend & Associates company has reported experiencing or disclosing vulnerabilities publicly.

Neither Arctic Circle Ltd nor Lewis S. Goodfriend & Associates holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Arctic Circle Ltd company nor Lewis S. Goodfriend & Associates company has publicly disclosed detailed information about the number of their subsidiaries.

Arctic Circle Ltd company employs more people globally than Lewis S. Goodfriend & Associates company, reflecting its scale as a Mechanical Or Industrial Engineering.

Neither Arctic Circle Ltd nor Lewis S. Goodfriend & Associates holds SOC 2 Type 1 certification.

Neither Arctic Circle Ltd nor Lewis S. Goodfriend & Associates holds SOC 2 Type 2 certification.

Neither Arctic Circle Ltd nor Lewis S. Goodfriend & Associates holds ISO 27001 certification.

Neither Arctic Circle Ltd nor Lewis S. Goodfriend & Associates holds PCI DSS certification.

Neither Arctic Circle Ltd nor Lewis S. Goodfriend & Associates holds HIPAA certification.

Neither Arctic Circle Ltd nor Lewis S. Goodfriend & Associates holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.