Comparison Overview

Booz Allen Hamilton

VS

Oracle

Booz Allen Hamilton

8283 Greensboro Drive, None, McLean, VA, US, 22102
Last Update: 2026-01-01
Between 700 and 749

Whether at the border, up in space, or on the battlefield, we build the advanced technology that makes America stronger, faster, and safer. It’s who we are and what we do. It’s in our code.

NAICS: 5415
NAICS Definition: Computer Systems Design and Related Services
Employees: 39,322
Subsidiaries: 0
12-month incidents
0
Known data breaches
2
Attack type number
1

Oracle

2300 Oracle Way, Austin, Texas, US, 78741
Last Update: 2026-01-02
Between 0 and 549

We’re a cloud technology company that provides organizations around the world with computing infrastructure and software to help them innovate, unlock efficiencies and become more effective. We also created the world’s first – and only – autonomous database to help organize and secure our customers’ data. Oracle Cloud Infrastructure offers higher performance, security, and cost savings. It is designed so businesses can move workloads easily from on-premises systems to the cloud, and between cloud and on-premises and other clouds. Oracle Cloud applications provide business leaders with modern applications that help them innovate, attain sustainable growth, and become more resilient. The work we do is not only transforming the world of business--it's helping defend governments, and advance scientific and medical research. From nonprofits to companies of all sizes, millions of people use our tools to streamline supply chains, make HR more human, quickly pivot to a new financial plan, and connect data and people around the world. At work, we embrace diversity, encourage personal and professional growth, and celebrate a global team of passionate people developing innovative technologies that help people and companies tackle real-world problems head-on. If you’d like to join us, please visit our Careers page: https://www.oracle.com/corporate/careers/ For investor news, SEC filings, and financial information about Oracle (NYSE:ORCL), please visit https://investor.oracle.com/home/. Follow us on X: x.com/oracle Like our page on Facebook: facebook.com/Oracle/ Follow us on Instagram: instagram.com/oracle/

NAICS: 5415
NAICS Definition: Computer Systems Design and Related Services
Employees: 197,447
Subsidiaries: 31
12-month incidents
0
Known data breaches
9
Attack type number
4

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/booz-allen-hamilton.jpeg
Booz Allen Hamilton
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/oracle.jpeg
Oracle
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Booz Allen Hamilton
100%
Compliance Rate
0/4 Standards Verified
Oracle
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs IT Services and IT Consulting Industry Average (This Year)

No incidents recorded for Booz Allen Hamilton in 2026.

Incidents vs IT Services and IT Consulting Industry Average (This Year)

No incidents recorded for Oracle in 2026.

Incident History — Booz Allen Hamilton (X = Date, Y = Severity)

Booz Allen Hamilton cyber incidents detection timeline including parent company and subsidiaries

Incident History — Oracle (X = Date, Y = Severity)

Oracle cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/booz-allen-hamilton.jpeg
Booz Allen Hamilton
Incidents

Date Detected: 4/2022
Type:Breach
Attack Vector: Insider Wrongdoing
Blog: Blog

Date Detected: 3/2021
Type:Breach
Attack Vector: Insider Threat
Blog: Blog
https://images.rankiteo.com/companyimages/oracle.jpeg
Oracle
Incidents

Date Detected: 11/2025
Type:Breach
Attack Vector: Phishing, Software Vulnerability Exploitation
Motivation: Financial Gain, Espionage
Blog: Blog

Date Detected: 11/2025
Type:Vulnerability
Attack Vector: Exploitation of software vulnerability
Blog: Blog

Date Detected: 11/2025
Type:Cyber Attack
Attack Vector: Exploitation of zero-day vulnerability (CVE-2025-61882)
Motivation: Extortion, Data Theft
Blog: Blog

FAQ

Booz Allen Hamilton company demonstrates a stronger AI Cybersecurity Score compared to Oracle company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Oracle company has faced a higher number of disclosed cyber incidents historically compared to Booz Allen Hamilton company.

In the current year, Oracle company and Booz Allen Hamilton company have not reported any cyber incidents.

Oracle company has confirmed experiencing a ransomware attack, while Booz Allen Hamilton company has not reported such incidents publicly.

Both Oracle company and Booz Allen Hamilton company have disclosed experiencing at least one data breach.

Oracle company has reported targeted cyberattacks, while Booz Allen Hamilton company has not reported such incidents publicly.

Oracle company has disclosed at least one vulnerability, while Booz Allen Hamilton company has not reported such incidents publicly.

Neither Booz Allen Hamilton nor Oracle holds any compliance certifications.

Neither company holds any compliance certifications.

Oracle company has more subsidiaries worldwide compared to Booz Allen Hamilton company.

Oracle company employs more people globally than Booz Allen Hamilton company, reflecting its scale as a IT Services and IT Consulting.

Neither Booz Allen Hamilton nor Oracle holds SOC 2 Type 1 certification.

Neither Booz Allen Hamilton nor Oracle holds SOC 2 Type 2 certification.

Neither Booz Allen Hamilton nor Oracle holds ISO 27001 certification.

Neither Booz Allen Hamilton nor Oracle holds PCI DSS certification.

Neither Booz Allen Hamilton nor Oracle holds HIPAA certification.

Neither Booz Allen Hamilton nor Oracle holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a NULL pointer member call vulnerability. This vulnerability affects users of the iccDEV library who process ICC color profiles. Version 2.3.1.2 contains a patch. No known workarounds are available.

Risk Information
cvss3
Base: 5.5
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Description

Unrestricted Upload of File with Dangerous Type vulnerability in Themify Themify Sidepane WordPress Theme, Themify Themify Newsy, Themify Themify Folo, Themify Themify Edmin, Themify Bloggie, Themify Photobox, Themify Wigi, Themify Rezo, Themify Slide allows Upload a Web Shell to a Web Server.This issue affects Themify Sidepane WordPress Theme: from n/a through 1.9.8; Themify Newsy: from n/a through 1.9.9; Themify Folo: from n/a through 1.9.6; Themify Edmin: from n/a through 2.0.0; Bloggie: from n/a through 2.0.8; Photobox: from n/a through 2.0.1; Wigi: from n/a through 2.0.1; Rezo: from n/a through 1.9.7; Slide: from n/a through 1.7.5.

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA-Team Woocommerce Sales Funnel Builder, AA-Team Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) allows Reflected XSS.This issue affects Woocommerce Sales Funnel Builder: from n/a through 1.1; Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer): from n/a through 1.2.

Risk Information
cvss3
Base: 7.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Description

Incorrect Privilege Assignment vulnerability in AA-Team Premium Age Verification / Restriction for WordPress, AA-Team Responsive Coming Soon Landing Page / Holding Page for WordPress allows Privilege Escalation.This issue affects Premium Age Verification / Restriction for WordPress: from n/a through 3.0.2; Responsive Coming Soon Landing Page / Holding Page for WordPress: from n/a through 3.0.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description

An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component (search) across GitHub that could be used to exfiltrate sensitive information. An attacker would require permissions to create or modify the names of milestones, issues, pull requests, or similar entities that are rendered in the vulnerable filter/search components. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.20 and was fixed in versions 3.19.1, and 3.18.2, 3.17.8, 3.16.11, 3.15.15, and 3.14.20. This vulnerability was reported via the GitHub Bug Bounty program.

Risk Information
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X