Comparison Overview

Battlefy

VS

Booking Holdings (NASDAQ: BKNG)

Battlefy

Last Update: 2025-12-02
Between 750 and 799

Our industry and company: Welcome to the world of competitive video games: multi-million dollar prize pools, packed events at the Staples Center, Madison Square Garden, Seoul World Cup Stadium, and 500 million players worldwide. Battlefy is leading this next seismic revolution in sports. Trusted by over 350,000 organizations globally, Battlefy is the easiest and most scalable way to create, manage, market and find video game competitions (esports). We power the entire competitive pyramid – from casual, to academic / collegiate, to professional. Our customers include game publishers like EA, Riot, Nintendo, Activision-Blizzard; sports organizations like the NFL, NHL, MLB, The Premier League; and brands like Coca-Cola, British Telecom, Bain & Company. If you’re an organizer, game studio/publisher, or brand interested in leveling up your game in esports, let us know what you play and we’ll see you on Discord! Our culture: Esports and gaming are in our DNA. We write award-winning blogs discussing the ethics of face hunting in Hearthstone, settle disagreements by counting headshots in CS:GO, and fanatically play League of Legends as part of our product testing. If you’re interested in joining Battlefy and working at one of the leading esports companies, head to https://boards.greenhouse.io/battlefytechnologiesinc. We’re a flat organization built on meritocracy - your role and responsibilities will match your horsepower and capabilities. You don’t need to be a hardcore gamer, but you do need to believe Han Solo shot first and that Dungeons and Dragons was the Big Bang of gaming. You do not need to be in Vancouver. We have team members in NYC, Sao Paulo, Vilnius, and Iowa City. If you’re willing to devote the energy and fortitude to make Battlefy awesome, you’ll have one hell of a ride.

NAICS: 513
NAICS Definition: Others
Employees: 38
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1

Booking Holdings (NASDAQ: BKNG)

800 Connecticut Avenue, Norwalk, CT, 06854, US
Last Update: 2025-12-01

Booking Holdings is the world’s leading provider of online travel & related services, provided to consumers and local partners in more than 220 countries and territories through six primary consumer-facing brands: Booking.com, Priceline, Agoda, Rentalcars.com, KAYAK and OpenTable. Collectively, Booking Holdings operates in more than 40 languages across Europe, North America, South America, the Asia-Pacific region, the Middle East and Africa. The mission of Booking Holdings is to make it easier for everyone to experience the world.

NAICS: 513
NAICS Definition: Others
Employees: 16,824
Subsidiaries: 6
12-month incidents
0
Known data breaches
0
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/battlefy.jpeg
Battlefy
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/bookingholdings.jpeg
Booking Holdings (NASDAQ: BKNG)
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Battlefy
100%
Compliance Rate
0/4 Standards Verified
Booking Holdings (NASDAQ: BKNG)
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Technology, Information and Internet Industry Average (This Year)

No incidents recorded for Battlefy in 2025.

Incidents vs Technology, Information and Internet Industry Average (This Year)

No incidents recorded for Booking Holdings (NASDAQ: BKNG) in 2025.

Incident History — Battlefy (X = Date, Y = Severity)

Battlefy cyber incidents detection timeline including parent company and subsidiaries

Incident History — Booking Holdings (NASDAQ: BKNG) (X = Date, Y = Severity)

Booking Holdings (NASDAQ: BKNG) cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/battlefy.jpeg
Battlefy
Incidents

Date Detected: 1/2016
Type:Data Leak
Blog: Blog
https://images.rankiteo.com/companyimages/bookingholdings.jpeg
Booking Holdings (NASDAQ: BKNG)
Incidents

Date Detected: 6/2025
Type:Cyber Attack
Attack Vector: Mass-phishing, Infostealer trojans
Motivation: Financial gain
Blog: Blog

Date Detected: 4/2025
Type:Cyber Attack
Attack Vector: compromised email accounts, phishing links, fake reCAPTCHA challenge, malware download (PureRAT), personalized WhatsApp messages, fake Booking/Expedia websites
Motivation: financial gain, data theft, fraudulent transactions
Blog: Blog

Date Detected: 2/2025
Type:Cyber Attack
Attack Vector: malicious domain registration, social engineering, phishing emails/websites
Motivation: financial gain, theft of payment details
Blog: Blog

FAQ

Booking Holdings (NASDAQ: BKNG) company demonstrates a stronger AI Cybersecurity Score compared to Battlefy company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Booking Holdings (NASDAQ: BKNG) company has faced a higher number of disclosed cyber incidents historically compared to Battlefy company.

In the current year, Booking Holdings (NASDAQ: BKNG) company has reported more cyber incidents than Battlefy company.

Neither Booking Holdings (NASDAQ: BKNG) company nor Battlefy company has reported experiencing a ransomware attack publicly.

Neither Booking Holdings (NASDAQ: BKNG) company nor Battlefy company has reported experiencing a data breach publicly.

Booking Holdings (NASDAQ: BKNG) company has reported targeted cyberattacks, while Battlefy company has not reported such incidents publicly.

Neither Battlefy company nor Booking Holdings (NASDAQ: BKNG) company has reported experiencing or disclosing vulnerabilities publicly.

Neither Battlefy nor Booking Holdings (NASDAQ: BKNG) holds any compliance certifications.

Neither company holds any compliance certifications.

Booking Holdings (NASDAQ: BKNG) company has more subsidiaries worldwide compared to Battlefy company.

Booking Holdings (NASDAQ: BKNG) company employs more people globally than Battlefy company, reflecting its scale as a Technology, Information and Internet.

Neither Battlefy nor Booking Holdings (NASDAQ: BKNG) holds SOC 2 Type 1 certification.

Neither Battlefy nor Booking Holdings (NASDAQ: BKNG) holds SOC 2 Type 2 certification.

Neither Battlefy nor Booking Holdings (NASDAQ: BKNG) holds ISO 27001 certification.

Neither Battlefy nor Booking Holdings (NASDAQ: BKNG) holds PCI DSS certification.

Neither Battlefy nor Booking Holdings (NASDAQ: BKNG) holds HIPAA certification.

Neither Battlefy nor Booking Holdings (NASDAQ: BKNG) holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. Prior to 2.9.8, there is a security issue exists in the exec_in_pod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string format is provided, it is passed directly to shell interpretation (sh -c) without input validation, allowing shell metacharacters to be interpreted. This vulnerability can be exploited through direct command injection or indirect prompt injection attacks, where AI agents may execute commands without explicit user intent. This vulnerability is fixed in 2.9.8.

Risk Information
cvss3
Base: 6.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Description

XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request.

Description

An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g. file upload, firmware update, reboot...) via a crafted authentication bypass.

Description

Cal.com is open-source scheduling software. Prior to 5.9.8, A flaw in the login credentials provider allows an attacker to bypass password verification when a TOTP code is provided, potentially gaining unauthorized access to user accounts. This issue exists due to problematic conditional logic in the authentication flow. This vulnerability is fixed in 5.9.8.

Risk Information
cvss4
Base: 9.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed() function, it might lead to high CPU consumption and a potential Denial of Service. Small numbers go through this call stack: NativeNumber.numTo > DToA.JS_dtostr > DToA.JS_dtoa > DToA.pow5mult where pow5mult attempts to raise 5 to a ridiculous power. This vulnerability is fixed in 1.8.1, 1.7.15.1, and 1.7.14.1.

Risk Information
cvss4
Base: 5.5
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X