Comparison Overview

Bombardier

VS

B/E Aerospace

Bombardier

400 Côte-Vertu Ouest, None, Dorval, Québec, OO, H4S 1Y9
Last Update: 2025-12-09

Bombardier is a global leader in aviation, focused on designing, manufacturing, and servicing the world's most exceptional business jets. Bombardier’s Challenger and Global aircraft families are renowned for their cutting-edge innovation, cabin design, performance, and reliability. Bombardier has a worldwide fleet of approximately 5,000 aircraft in service with a wide variety of multinational corporations, charter and fractional ownership providers, governments, and private individuals. Bombardier aircraft are also trusted around the world in government and military special-mission roles leveraging Bombardier Defense’s proven expertise. Headquartered in Greater Montréal, Québec, Bombardier operates aerostructure, assembly and completion facilities in Canada, the United States and Mexico. The company’s robust customer support network services the Learjet, Challenger and Global families of aircraft, and includes facilities in strategic locations in the United States and Canada, as well as in the United Kingdom, Germany, France, Switzerland, Italy, Austria, the UAE, Singapore, China and Australia. For corporate news and information, including Bombardier’s Environmental, Social and Governance report, as well as the company’s plans to cover all its flight operations with Sustainable Aviation Fuel (SAF) utilizing the Book and Claim system visit bombardier.com. Learn more about Bombardier’s industry-leading products and customer service network at businessaircraft.bombardier.com. Follow us on Twitter @Bombardier.

NAICS: 3364
NAICS Definition: Aerospace Product and Parts Manufacturing
Employees: 24,676
Subsidiaries: 2
12-month incidents
0
Known data breaches
0
Attack type number
1

B/E Aerospace

Corporate Headquarters, Cedar Rapids, Iowa, US
Last Update: 2025-12-09
Between 750 and 799

B/E Aerospace is now part of Rockwell Collins. With the acquisition of B/E Aerospace in April 2017, Rockwell Collins is now a world leader in designing, developing and manufacturing cabin interior products and services that deliver innovation, reliability and efficiency. Our broad range of offerings include aircraft cabin seating, lighting and engineering solutions, oxygen systems, food and beverage preparation and storage equipment, galley systems, water and waste systems, and advanced lavatory systems. We also collaborate closely with our customers to provide customized cabin interior reconfiguration, program management and certification services.

NAICS: 3364
NAICS Definition: Aerospace Product and Parts Manufacturing
Employees: 10,545
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/bombardier.jpeg
Bombardier
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/be-aerospace.jpeg
B/E Aerospace
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Bombardier
100%
Compliance Rate
0/4 Standards Verified
B/E Aerospace
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Aviation and Aerospace Component Manufacturing Industry Average (This Year)

No incidents recorded for Bombardier in 2025.

Incidents vs Aviation and Aerospace Component Manufacturing Industry Average (This Year)

No incidents recorded for B/E Aerospace in 2025.

Incident History — Bombardier (X = Date, Y = Severity)

Bombardier cyber incidents detection timeline including parent company and subsidiaries

Incident History — B/E Aerospace (X = Date, Y = Severity)

B/E Aerospace cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/bombardier.jpeg
Bombardier
Incidents

Date Detected: 2/2021
Type:Ransomware
Attack Vector: Exploit vulnerability in software
Motivation: Financial gain
Blog: Blog
https://images.rankiteo.com/companyimages/be-aerospace.jpeg
B/E Aerospace
Incidents

No Incident

FAQ

B/E Aerospace company demonstrates a stronger AI Cybersecurity Score compared to Bombardier company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Bombardier company has historically faced a number of disclosed cyber incidents, whereas B/E Aerospace company has not reported any.

In the current year, B/E Aerospace company and Bombardier company have not reported any cyber incidents.

Bombardier company has confirmed experiencing a ransomware attack, while B/E Aerospace company has not reported such incidents publicly.

Neither B/E Aerospace company nor Bombardier company has reported experiencing a data breach publicly.

Neither B/E Aerospace company nor Bombardier company has reported experiencing targeted cyberattacks publicly.

Neither Bombardier company nor B/E Aerospace company has reported experiencing or disclosing vulnerabilities publicly.

Neither Bombardier nor B/E Aerospace holds any compliance certifications.

Neither company holds any compliance certifications.

Bombardier company has more subsidiaries worldwide compared to B/E Aerospace company.

Bombardier company employs more people globally than B/E Aerospace company, reflecting its scale as a Aviation and Aerospace Component Manufacturing.

Neither Bombardier nor B/E Aerospace holds SOC 2 Type 1 certification.

Neither Bombardier nor B/E Aerospace holds SOC 2 Type 2 certification.

Neither Bombardier nor B/E Aerospace holds ISO 27001 certification.

Neither Bombardier nor B/E Aerospace holds PCI DSS certification.

Neither Bombardier nor B/E Aerospace holds HIPAA certification.

Neither Bombardier nor B/E Aerospace holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N