Comparison Overview

Candela Books + Gallery

VS

The Studio Potter

Candela Books + Gallery

214 West Broad Street, Richmond, Virginia, 23220, US
Last Update: 2025-11-27
Between 750 and 799

Candela Books was founded in 2010 to produce a book featuring the work of New York photographer Gita Lenz, whose striking imagery had been all but forgotten since originally being produced in the 1940s and 1950s. Lenz’ story is a compelling one. She had been exhibited at the Museum of Modern Art and elsewhere, but her career was cut short due to the inherent challenges facing most anyone making a career in photography in the mid-20th century. Though Lenz had many noteworthy accomplishments, and her work is represented in both public and private collections, no book existed to document her life’s work. So in an attempt to augment the legacy of this talented photographer, Gordon Stettinius created Candela Books and published Gita Lenz. Candela Books’ second book, Salt & Truth with photographer Shelby Lee Adams, coincided with the opening of Candela Gallery in downtown Richmond, Virginia in December 2011. The gallery exists in a renovated historical building and includes a rear working studio space and darkroom. Since opening its joint doors Candela Books + Gallery has exhibited the work of Shelby Lee Adams, Gita Lenz, Julio Mitchel, and Chris McCaw, whose work is the subject of our third book, Sunburn. We have also initiated an annual summer juried invitational exhibition called UnBound!, which is designed for the sole purpose of supporting fine art photographers. As a publisher we are committed to the quality and design of the printed medium. Partnering with D.A.P. for our distribution, our books have a great reach, in hopes that each of our books will contribute to the history of photography. As a gallery we exhibit established and less recognized photographers alike, the emphasis being on work that contributes to the discourse of photography as a fine art medium.

NAICS: 511
NAICS Definition: Publishing Industries (except Internet)
Employees: 3
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

The Studio Potter

116 Pleasant St, Easthampton, MA, 01027, US
Last Update: 2025-11-26
Between 750 and 799

MISSION Centered in studio practice, Studio Potter (SP) promotes discussion of technology, criticism, aesthetics, and history within the ceramics community. more VISION Studio Potter provides a dynamic platform for bringing together the ceramics community, prompting new dialogs and strengthening existing narratives within it. It provides a direct connection between artists, educators, collectors, curators, gallerists, critics, and many others through in-depth storytelling and personal interviews. CORE VALUES SP fosters quality writing in the field and is often where many artists' writing is first published. Our editorial style gives artists critical feedback about their writing, cultivating individual authorial growth through the process. SP is an educational provider of new information to the field, and sets the standard for autonomous authorship. An emphasis on first-person narratives places the reader within the studio of the artist. SP is the only journal in the ceramics field that publishes deep, intellectual and critical discussions. We champion connectivity among ceramists, a practice that began with our founding editor, Gerry Williams. We believe Studio Potter journal is a form of art that thoughtfully unifies high-caliber writing with excellence in design. GOALS AND GROWTH The following are our top priorities. Please help us achieve these goals by becoming a member or making a tax-deductible donation. A full-time executive director A self-sustaining writers' honorarium fund Increased membership and membership connectivity A consistent internship program A full-color journal, and increased page count Further development of our website and archive

NAICS: 511
NAICS Definition:
Employees: 3
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/the-studio-potter.jpeg
The Studio Potter
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Candela Books + Gallery
Compliance Rate
0/4 Standards Verified
The Studio Potter
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Book and Periodical Publishing Industry Average (This Year)

No incidents recorded for Candela Books + Gallery in 2025.

Incidents vs Book and Periodical Publishing Industry Average (This Year)

No incidents recorded for The Studio Potter in 2025.

Incident History — Candela Books + Gallery (X = Date, Y = Severity)

Candela Books + Gallery cyber incidents detection timeline including parent company and subsidiaries

Incident History — The Studio Potter (X = Date, Y = Severity)

The Studio Potter cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/candela-books.jpeg
Candela Books + Gallery
Incidents

No Incident

https://images.rankiteo.com/companyimages/the-studio-potter.jpeg
The Studio Potter
Incidents

No Incident

FAQ

The Studio Potter company demonstrates a stronger AI Cybersecurity Score compared to Candela Books + Gallery company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, The Studio Potter company has disclosed a higher number of cyber incidents compared to Candela Books + Gallery company.

In the current year, The Studio Potter company and Candela Books + Gallery company have not reported any cyber incidents.

Neither The Studio Potter company nor Candela Books + Gallery company has reported experiencing a ransomware attack publicly.

Neither The Studio Potter company nor Candela Books + Gallery company has reported experiencing a data breach publicly.

Neither The Studio Potter company nor Candela Books + Gallery company has reported experiencing targeted cyberattacks publicly.

Neither Candela Books + Gallery company nor The Studio Potter company has reported experiencing or disclosing vulnerabilities publicly.

Neither Candela Books + Gallery nor The Studio Potter holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Candela Books + Gallery company nor The Studio Potter company has publicly disclosed detailed information about the number of their subsidiaries.

Both Candela Books + Gallery company and The Studio Potter company employ a similar number of people globally.

Neither Candela Books + Gallery nor The Studio Potter holds SOC 2 Type 1 certification.

Neither Candela Books + Gallery nor The Studio Potter holds SOC 2 Type 2 certification.

Neither Candela Books + Gallery nor The Studio Potter holds ISO 27001 certification.

Neither Candela Books + Gallery nor The Studio Potter holds PCI DSS certification.

Neither Candela Books + Gallery nor The Studio Potter holds HIPAA certification.

Neither Candela Books + Gallery nor The Studio Potter holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.