Comparison Overview

Casa de Salud

VS

Massage Envy

Casa de Salud

3200 CHOUTEAU AVE, Saint Louis, Missouri, 63103, US
Last Update: 2025-12-19
View Profile
Between 700 and 749
http://www.casadesaludstl.org

Casa de Salud (Casa) is a non-profit health clinic located in the City of St. Louis. Casa opened its doors in January 2010 with a mission to deliver high quality clinical and mental healthcare for uninsured and underinsured patients, focusing on new immigrants and refugees who encounter barriers to accessing other sources of care. Casa promotes better health outcomes through prevention and treatment, while also acting as a portal to other services through collaborations with many health and social service organizations in the metro St. Louis area.

NAICS: 71394
NAICS Definition: Fitness and Recreational Sports Centers
Employees: 65
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1
View Profile

Massage Envy

14350 N. 87th St., Suite 200, Scottsdale, AZ, 85260, US
Last Update: 2025-12-17
Between 750 and 799
https://www.MassageEnvy.com/GrowYourCareer

Massage Envy is the nation’s #1 provider of massage collectively across its franchise network and a national leader in skin care. All Massage Envy locations are independently owned and operated franchises, where the franchisee is the sole employer of all positions. Massage Envy combines big-brand recognition with a small-brand feel because at its heart is a caring, supportive community of dedicated wellness professionals who share one purpose: helping people feel and look better so they can live better. Making a difference in clients’ lives is the biggest reward for any wellness professional, but the environment at a Massage Envy franchised location can also offer you the freedom to enjoy more of what you love about your work. Come grow your career at a place that values, supports, and empowers you!

NAICS: 71394
NAICS Definition: Fitness and Recreational Sports Centers
Employees: 16,148
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/casa-de-salud.jpeg
Casa de Salud
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/massage-envy.jpeg
Massage Envy
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Casa de Salud
100%
Compliance Rate
0/4 Standards Verified
Massage Envy
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Wellness and Fitness Services Industry Average (This Year)

No incidents recorded for Casa de Salud in 2025.

Incidents vs Wellness and Fitness Services Industry Average (This Year)

No incidents recorded for Massage Envy in 2025.

Incident History — Casa de Salud (X = Date, Y = Severity)

Casa de Salud cyber incidents detection timeline including parent company and subsidiaries

Incident History — Massage Envy (X = Date, Y = Severity)

Massage Envy cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/casa-de-salud.jpeg
Casa de Salud
Incidents

Date Detected: 6/2020
Type:Breach
Attack Vector: Email Account Compromise
Blog: Blog
https://images.rankiteo.com/companyimages/massage-envy.jpeg
Massage Envy
Incidents

No Incident

FAQ

Massage Envy company demonstrates a stronger AI Cybersecurity Score compared to Casa de Salud company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Casa de Salud company has historically faced a number of disclosed cyber incidents, whereas Massage Envy company has not reported any.

In the current year, Massage Envy company and Casa de Salud company have not reported any cyber incidents.

Neither Massage Envy company nor Casa de Salud company has reported experiencing a ransomware attack publicly.

Casa de Salud company has disclosed at least one data breach, while the other Massage Envy company has not reported such incidents publicly.

Neither Massage Envy company nor Casa de Salud company has reported experiencing targeted cyberattacks publicly.

Neither Casa de Salud company nor Massage Envy company has reported experiencing or disclosing vulnerabilities publicly.

Neither Casa de Salud nor Massage Envy holds any compliance certifications.

Neither company holds any compliance certifications.

Massage Envy company has more subsidiaries worldwide compared to Casa de Salud company.

Massage Envy company employs more people globally than Casa de Salud company, reflecting its scale as a Wellness and Fitness Services.

Neither Casa de Salud nor Massage Envy holds SOC 2 Type 1 certification.

Neither Casa de Salud nor Massage Envy holds SOC 2 Type 2 certification.

Neither Casa de Salud nor Massage Envy holds ISO 27001 certification.

Neither Casa de Salud nor Massage Envy holds PCI DSS certification.

Neither Casa de Salud nor Massage Envy holds HIPAA certification.

Neither Casa de Salud nor Massage Envy holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyDevs TempTool allows Stored XSS.This issue affects TempTool: from n/a through 1.3.1.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
References
Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tormorten WP Microdata allows Stored XSS.This issue affects WP Microdata: from n/a through 1.0.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
References
Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HappyDevs TempTool allows Retrieve Embedded Sensitive Data.This issue affects TempTool: from n/a through 1.3.1.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
Description

A vulnerability has been found in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Published
Date
2025-12-21
Updated
Date
2025-12-21
Risk Information
cvss2
Base: 9.0
Severity: LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References