Comparison Overview

CDW

VS

Amazon Web Services (AWS)

CDW

200 N. Milwaukee Ave., Vernon Hills, 60061, US
Last Update: 2025-12-01
View Profile
Between 750 and 799
http://www.cdw.com

At CDW, we know how to make technology work so people can do great things. Our experts bring a full-stack, full-lifestyle approach with custom solutions, services and relationships to bring your vision to life. Through decades of experience, scale, and deep industry expertise, we deliver the full promise of what technology can do to help you reach your goals and drive innovation. Partner with CDW, and together, let’s Make amazing happen. A Fortune 500 company and member of the S&P 500 Index, CDW helps its customers to navigate an increasingly complex IT market and maximize return on their technology investments. For more information about CDW, please visit www.CDW.com.

NAICS: 5415
NAICS Definition: Computer Systems Design and Related Services
Employees: 18,093
Subsidiaries: 9
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Amazon Web Services (AWS)

410 Terry Ave N, Seattle, WA, US, 98019
Last Update: 2025-12-01
Between 750 and 799
http://aws.amazon.com

Launched in 2006, Amazon Web Services (AWS) began exposing key infrastructure services to businesses in the form of web services -- now widely known as cloud computing. The ultimate benefit of cloud computing, and AWS, is the ability to leverage a new business model and turn capital infrastructure expenses into variable costs. Businesses no longer need to plan and procure servers and other IT resources weeks or months in advance. Using AWS, businesses can take advantage of Amazon's expertise and economies of scale to access resources when their business needs them, delivering results faster and at a lower cost. Today, Amazon Web Services provides a highly reliable, scalable, low-cost infrastructure platform in the cloud that powers hundreds of thousands of businesses in 190 countries around the world. With data center locations in the U.S., Europe, Singapore, and Japan, customers across all industries are taking advantage of our low cost, elastic, open and flexible, secure platform.

NAICS: 5415
NAICS Definition: Computer Systems Design and Related Services
Employees: 143,678
Subsidiaries: 83
12-month incidents
5
Known data breaches
4
Attack type number
5

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/cdw.jpeg
CDW
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/amazon-web-services.jpeg
Amazon Web Services (AWS)
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
CDW
100%
Compliance Rate
0/4 Standards Verified
Amazon Web Services (AWS)
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs IT Services and IT Consulting Industry Average (This Year)

No incidents recorded for CDW in 2025.

Incidents vs IT Services and IT Consulting Industry Average (This Year)

Amazon Web Services (AWS) has 792.86% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — CDW (X = Date, Y = Severity)

CDW cyber incidents detection timeline including parent company and subsidiaries

Incident History — Amazon Web Services (AWS) (X = Date, Y = Severity)

Amazon Web Services (AWS) cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/cdw.jpeg
CDW
Incidents

No Incident

https://images.rankiteo.com/companyimages/amazon-web-services.jpeg
Amazon Web Services (AWS)
Incidents

Date Detected: 12/2025
Type:Vulnerability
Attack Vector: Remote Code Execution (RCE)
Motivation: State-sponsored cyber operations
Blog: Blog

Date Detected: 10/2025
Type:Cyber Attack
Blog: Blog

Date Detected: 9/2025
Type:Cyber Attack
Attack Vector: Exposed Docker API, Misconfigured AWS EC2 Instances, Python Docker SDK
Motivation: Financial Gain, Disruption, Cybercrime-as-a-Service
Blog: Blog

FAQ

CDW company demonstrates a stronger AI Cybersecurity Score compared to Amazon Web Services (AWS) company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Amazon Web Services (AWS) company has historically faced a number of disclosed cyber incidents, whereas CDW company has not reported any.

In the current year, Amazon Web Services (AWS) company has reported more cyber incidents than CDW company.

Amazon Web Services (AWS) company has confirmed experiencing a ransomware attack, while CDW company has not reported such incidents publicly.

Amazon Web Services (AWS) company has disclosed at least one data breach, while CDW company has not reported such incidents publicly.

Amazon Web Services (AWS) company has reported targeted cyberattacks, while CDW company has not reported such incidents publicly.

Amazon Web Services (AWS) company has disclosed at least one vulnerability, while CDW company has not reported such incidents publicly.

Neither CDW nor Amazon Web Services (AWS) holds any compliance certifications.

Neither company holds any compliance certifications.

Amazon Web Services (AWS) company has more subsidiaries worldwide compared to CDW company.

Amazon Web Services (AWS) company employs more people globally than CDW company, reflecting its scale as a IT Services and IT Consulting.

Neither CDW nor Amazon Web Services (AWS) holds SOC 2 Type 1 certification.

Neither CDW nor Amazon Web Services (AWS) holds SOC 2 Type 2 certification.

Neither CDW nor Amazon Web Services (AWS) holds ISO 27001 certification.

Neither CDW nor Amazon Web Services (AWS) holds PCI DSS certification.

Neither CDW nor Amazon Web Services (AWS) holds HIPAA certification.

Neither CDW nor Amazon Web Services (AWS) holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability has been found in TykoDev cherry-studio-TykoFork 0.1. This issue affects the function redirectToAuthorization of the file /.well-known/oauth-authorization-server of the component OAuth Server Discovery. Such manipulation of the argument authorizationUrl leads to os command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Published
Date
2025-12-07
Updated
Date
2025-12-07
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.

Published
Date
2025-12-07
Updated
Date
2025-12-07
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f. Affected by this vulnerability is an unknown functionality of the file /dishsub.php. The manipulation of the argument item.name results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-12-07
Updated
Date
2025-12-07
Risk Information
cvss2
Base: 3.3
Severity: LOW
AV:N/AC:L/Au:M/C:N/I:P/A:N
cvss3
Base: 2.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability has been found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f. Affected is an unknown function of the file /usersub.php of the component Request Pending Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-12-07
Updated
Date
2025-12-07
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:N/I:P/A:N
cvss3
Base: 3.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-12-07
Updated
Date
2025-12-07
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References