Comparison Overview

MBRF

VS

Frito-Lay

MBRF

Av das Nações Unidas, N° 14.401 , São Paulo, 04730-090, BR
Last Update: 2025-12-09

We are one of the leading global producers and exporters of quality food, as we believe it is fundamental to a better life for all people. Not only what we do, but the way we do it, is guided by the purpose of a better life for everyone, from farm to fork. That is why we conduct a sustainable management of our chain, which is vivid, long and complex. In our chain, it is vital to know how to manage interdependence, appreciate knowledge and the development of people and their diversity, ensure efficiency and always innovate. That is how we guarantee our results. We never relinquish Safety, Quality and Integrity to reach our goals and, guided by these fundamental commitments, we maintain operations in more than 127 countries, we are responsible for iconic and beloved brands such as Sadia, Perdigão and Qualy, and own over 35 production plants, 40 distribution plants, in addition to more than 4,000 products and 4.5 million tons of food sold around the globe. Producing food in a way that improves the lives of so many people worldwide is a fascinating challenge. This is our greatest passion.

NAICS: 722
NAICS Definition: Food Services and Drinking Places
Employees: 53,864
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Frito-Lay

7701 Legacy Dr, Plano, Texas, US, 75024
Last Update: 2025-12-09
Between 750 and 799

We believe every consumer should have access to their favorite snack, everywhere. We own the manufacturing process from seed to shelf and actively invest in technology to automate key steps of the process. This helps us be more agile in what we need to make, who we need to make it for, and how we can best deliver it to snack lovers from coast to coast.

NAICS: 722
NAICS Definition: Food Services and Drinking Places
Employees: 15,749
Subsidiaries: 6
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/brf.jpeg
MBRF
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/frito-lay.jpeg
Frito-Lay
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
MBRF
100%
Compliance Rate
0/4 Standards Verified
Frito-Lay
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Food and Beverage Services Industry Average (This Year)

No incidents recorded for MBRF in 2025.

Incidents vs Food and Beverage Services Industry Average (This Year)

No incidents recorded for Frito-Lay in 2025.

Incident History — MBRF (X = Date, Y = Severity)

MBRF cyber incidents detection timeline including parent company and subsidiaries

Incident History — Frito-Lay (X = Date, Y = Severity)

Frito-Lay cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/brf.jpeg
MBRF
Incidents

No Incident

https://images.rankiteo.com/companyimages/frito-lay.jpeg
Frito-Lay
Incidents

No Incident

FAQ

Frito-Lay company demonstrates a stronger AI Cybersecurity Score compared to MBRF company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Frito-Lay company has disclosed a higher number of cyber incidents compared to MBRF company.

In the current year, Frito-Lay company and MBRF company have not reported any cyber incidents.

Neither Frito-Lay company nor MBRF company has reported experiencing a ransomware attack publicly.

Neither Frito-Lay company nor MBRF company has reported experiencing a data breach publicly.

Neither Frito-Lay company nor MBRF company has reported experiencing targeted cyberattacks publicly.

Neither MBRF company nor Frito-Lay company has reported experiencing or disclosing vulnerabilities publicly.

Neither MBRF nor Frito-Lay holds any compliance certifications.

Neither company holds any compliance certifications.

Frito-Lay company has more subsidiaries worldwide compared to MBRF company.

MBRF company employs more people globally than Frito-Lay company, reflecting its scale as a Food and Beverage Services.

Neither MBRF nor Frito-Lay holds SOC 2 Type 1 certification.

Neither MBRF nor Frito-Lay holds SOC 2 Type 2 certification.

Neither MBRF nor Frito-Lay holds ISO 27001 certification.

Neither MBRF nor Frito-Lay holds PCI DSS certification.

Neither MBRF nor Frito-Lay holds HIPAA certification.

Neither MBRF nor Frito-Lay holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N