Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download

Comparison Overview

AXIS-YAXIS-Y
VS
NaturaNatura
AXIS-Y

AXIS-Y

Seoul, KR

Last Update: 02/04/2026

View Profile
Between 750 and 799
https://www.axis-y.com/
751/1000Fair

AXIS-Y is a global K-beauty brand creating climate-inspired skincare for real lifestyles and real skin concerns. Built around our community and powered by thoughtful formulation, we develop products that balance efficacy, skin comfort, and long-term care. Our approach ...

NAICS:32562
NAICS Definition:Toilet Preparation Manufacturing
Employees:46
Subsidiaries:0
12-month incidents
0
Known data breaches
0
Attack type number
0
Natura

Natura

Av. Alexandre Colares, 1.188, Vila Jaguara, São Paulo, São Paulo, BR, 05106-0000

Last Update: 16/09/2026

View Profile
Between 800 and 849
http://www.natura.com.br
820/1000Good

Founded in 1969, Natura is a Brazilian multinational in the cosmetics and personal care segment, a leader in direct sales in Brazil, and recognized for protecting the Amazon social biodiversity through its sustainable business model. Cruelty free. 100% vegan. With 7,000...

NAICS:32562
NAICS Definition:Toilet Preparation Manufacturing
Employees:47,474
Subsidiaries:0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Ranges Comparison

Based On Specific Ai Models Category
AXIS-Y

AXIS-Y

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA
Natura

Natura

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA

Benchmark & Cyber Underwriting Signals

Incidents vs Personal Care Product Manufacturing Industry Avg (This Year)

No incidents recorded for AXIS-Y in 2026.

Incidents

Incidents vs Personal Care Product Manufacturing Industry Avg (This Year)

No incidents recorded for Natura in 2026.

Incidents

Incident History - AXIS-Y (X = Date, Y = Severity)

AXIS-Y cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Incident History - Natura (X = Date, Y = Severity)

Natura cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...
AXIS-Y

AXIS-Y

Incidents
No explicit notable incidents reported.
Natura

Natura

Incidents
No explicit notable incidents reported.

FAQ

Between AXIS-Y company and Natura company, which one has the best AI Cybersecurity Score ?
Between AXIS-Y company and Natura company, which one has experienced more cyber incidents in the past ?
Between AXIS-Y company and Natura company, which one has experienced more cyber incidents this year ?
Between AXIS-Y company and Natura company, which one has experienced at least one ransomware attack ?
Between AXIS-Y company and Natura company, which one has experienced at least one data breach ?
Between AXIS-Y company and Natura company, which one has experienced at least one targeted cyberattack ?
Between AXIS-Y company and Natura company, which one has experienced at least one vulnerability ?
Between AXIS-Y company and Natura company, which one holds the most compliance certifications ?
Between AXIS-Y company and Natura company, which one holds the fewest compliance certifications ?
Between AXIS-Y company and Natura company, which one has the most subsidiaries ?
Between AXIS-Y company and Natura company, which one has the largest number of employees ?
Between AXIS-Y and Natura, which company holds both SOC 2 Type 1 certifications ?
Between AXIS-Y and Natura, which company holds both SOC 2 Type 2 certifications ?
Which company is ISO 27001 certified - AXIS-Y or Natura ?
Which company is PCI DSS compliant - AXIS-Y or Natura ?
Between AXIS-Y and Natura, which company complies with HIPAA regulations for healthcare data ?
Between AXIS-Y and Natura, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-93892
SUMMARY

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.

PUBLISHED
Date2026-10-12
UPDATED
Date2026-10-12
RISK INFORMATION (Score: 8.1)
CVSS3
Base Score: 8.1
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
IMPACT SCORE
5.2
EXPLOITABILITY
2.8
REFERENCES
CVE-2026-93891
SUMMARY

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

PUBLISHED
Date2026-10-12
UPDATED
Date2026-10-12
RISK INFORMATION (Score: 7.6)
CVSS3
Base Score: 7.6
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
IMPACT SCORE
4.7
EXPLOITABILITY
2.3
REFERENCES
CVE-2026-92832
SUMMARY

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.

PUBLISHED
Date2026-10-12
UPDATED
Date2026-10-12
RISK INFORMATION (Score: 5.1)
CVSS3
Base Score: 5.1
Complexity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
IMPACT SCORE
2.5
EXPLOITABILITY
2.5
REFERENCES
CVE-2026-85457
SUMMARY

IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.

PUBLISHED
Date2026-10-12
UPDATED
Date2026-10-12
RISK INFORMATION (Score: 8.1)
CVSS3
Base Score: 8.1
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
IMPACT SCORE
5.2
EXPLOITABILITY
2.8
REFERENCES
CVE-2026-84418
SUMMARY

IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.

PUBLISHED
Date2026-10-12
UPDATED
Date2026-10-12
RISK INFORMATION (Score: 7.4)
CVSS3
Base Score: 7.4
Complexity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
IMPACT SCORE
5.2
EXPLOITABILITY
2.2
REFERENCES