Comparison Overview

Client Heartbeat

VS

Tencent

Client Heartbeat

None
Last Update: 2025-03-06 (UTC)
Between 900 and 1000
http://www.clientheartbeat.com

Excellent

Client Heartbeat is a customer survey tool that monitors customer satisfaction to intelligently identify how happy or unhappy your customers are. It works by sending automated customer surveys that collect feedback and intuitively displays it back to you on a simple dashboard. Use this feedback to identify unhappy customers and implement customer retention programs so you can retain more customers. Remember, on average it costs a company $234 for every lost customer. Client Heartbeat costs just $25/month. Client Heartbeats gives businesses more insight into which customers love you, like you and might be at risk, with intelligent analysis of their responses. It allows businesses to benchmark the customer feedback they receive against others in their industry. The business can then use this to better serve its customers by identifying the areas in which it underperforms, and get new business by marketing a clear unique selling proposition where it can prove it outperforms the competition. As the only customer feedback tool that trends responses, intelligently analyses data and benchmarks against others, Client Heartbeat makes it easy to identify and improve a businesses’s weaknesses and measure differentiation in the eyes of customers. For more information please visit our website: www.clientheartbeat.com

NAICS: 511
NAICS Definition:
Employees: 1
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Tencent

Tencent Seafront Towers, Shenzhen, Guangdong, undefined, CN
Last Update: 2025-03-05 (UTC)

Excellent

Between 900 and 1000
https://www.tencent.com/en-us/

Tencent is a world-leading internet and technology company that develops innovative products and services to improve the quality of life of people around the world. Founded in 1998 with its headquarters in Shenzhen, China, Tencent's guiding principle is to use technology for good. Our communication and social services connect more than one billion people around the world, helping them to keep in touch with friends and family, access transportation, pay for daily necessities, and even be entertained. Tencent also publishes some of the world's most popular video games and other high-quality digital content, enriching interactive entertainment experiences for people around the globe. Tencent also offers a range of services such as cloud computing, advertising, FinTech, and other enterprise services to support our clients' digital transformation and business growth. Tencent has been listed on the Stock Exchange of Hong Kong since 2004.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 93,035
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/client-heartbeat.jpeg
Client Heartbeat
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/tencentglobal.jpeg
Tencent
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
Client Heartbeat
100%
Compliance Rate
0/4 Standards Verified
Tencent
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Client Heartbeat in 2025.

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Tencent in 2025.

Incident History — Client Heartbeat (X = Date, Y = Severity)

Client Heartbeat cyber incidents detection timeline including parent company and subsidiaries

Incident History — Tencent (X = Date, Y = Severity)

Tencent cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/client-heartbeat.jpeg
Client Heartbeat
Incidents

No Incident

https://images.rankiteo.com/companyimages/tencentglobal.jpeg
Tencent
Incidents

No Incident

FAQ

Both Client Heartbeat company and Tencent company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, Tencent company has disclosed a higher number of cyber incidents compared to Client Heartbeat company.

In the current year, Tencent company and Client Heartbeat company have not reported any cyber incidents.

Neither Tencent company nor Client Heartbeat company has reported experiencing a ransomware attack publicly.

Neither Tencent company nor Client Heartbeat company has reported experiencing a data breach publicly.

Neither Tencent company nor Client Heartbeat company has reported experiencing targeted cyberattacks publicly.

Neither Client Heartbeat company nor Tencent company has reported experiencing or disclosing vulnerabilities publicly.

Tencent company has more subsidiaries worldwide compared to Client Heartbeat company.

Tencent company employs more people globally than Client Heartbeat company, reflecting its scale as a Software Development.

Latest Global CVEs (Not Company-Specific)

Description

Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs (jwt.decode) without verifying their signatures. Both the email verification token login path and the password reset server action use the same validator, which does not check the token’s signature, expiration, issuer, or audience. If an attacker learns the victim’s actual user.id, they can craft an arbitrary JWT with an alg: "none" header and use it to authenticate and reset the victim’s password. This issue has been patched in version 4.0.1.

Published
Date
2025-09-26
Updated
Date
2025-09-26
Risk Information
cvss3
Base: 9.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
References
Description

Apollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL. Prior to Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3, a cross-site request forgery (CSRF) vulnerability was identified. The vulnerability arises from missing origin validation in the client-side code that handles window.postMessage events. A malicious website can send forged messages to the embedding page, causing the victim’s browser to execute arbitrary GraphQL queries or mutations against their GraphQL server while authenticated with the victim’s cookies. This issue has been patched in Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3.

Published
Date
2025-09-26
Updated
Date
2025-09-26
Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N
References
Description

A security vulnerability has been detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /consulta-dispensas. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published
Date
2025-09-26
Updated
Date
2025-09-26
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /module/Api/aluno. This manipulation of the argument aluno_id causes improper authorization. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-09-26
Updated
Date
2025-09-26
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in Tencent WeKnora 0.1.0. This impacts the function testEmbeddingModel of the file /api/v1/initialization/embedding/test. The manipulation of the argument baseUrl results in server-side request forgery. The attack can be launched remotely. The exploit has been released to the public and may be exploited. It is advisable to upgrade the affected component. The vendor responds: "We have confirmed that the issue mentioned in the report does not exist in the latest releases".

Published
Date
2025-09-26
Updated
Date
2025-09-26
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References