Comparison Overview

Color OnDemand Inc.

VS

Oregon Web Press, Inc.

Color OnDemand Inc.

2030 South Westgate Avenue, Los Angeles, CA, 90025, US
Last Update: 2025-12-12
View Profile
Between 750 and 799
http://www.codla.com/

“The art of bringing your print ideas to life…” Color OnDemand is uniquely positioned to offer a wide variety of creative business solutions to our clients from here in the US and across the globe. We specializes in fine lithography, digital and grand format printing. Furthermore, Color OnDemand offers a complete suite of fulfillment and mailing services to handle even the largest of campaigns. Our services include customized inventory management and a personalized storefront portal for your business which allows users across the nation, or around the globe, to order everything they need to capture market opportunities quickly. In addition to our US based facilities, we offer international special packaging solutions from China, India, Mexico and beyond. Color OnDemand delivers solutions to our clients creatively, cost effectively and on time. With over 30 years of experience, we are uniquely positioned to print, manage and distribute all of your printing needs locally or globally

NAICS: 323
NAICS Definition:
Employees: 7
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Oregon Web Press, Inc.

263 29th Ave SW, Albany, OR, 97322, US
Last Update: 2025-12-12
Between 750 and 799
http://oregonwebpress.com

Oregon Web Press, located in beautiful Albany OR, is a 25 year old family owned printing company. We offer full service web printing specializing in magazines, catalogs, newspapers, tabloids, brochures and flyers. We support our printing with a full service bindery, mailing, fulfillment and creative department. Our staff of 35 dedicated employees serve customers all along the I-5 corridor from Seattle to the California Bay Area. Our corporate culture promotes honesty, quality, consistency, and service. We care about the environment we live in and have chosen to become an FSC certified printer.

NAICS: 323
NAICS Definition:
Employees: 18
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/color-ondemand-inc..jpeg
Color OnDemand Inc.
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/oregon-web-pres.jpeg
Oregon Web Press, Inc.
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Color OnDemand Inc.
100%
Compliance Rate
0/4 Standards Verified
Oregon Web Press, Inc.
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Printing Services Industry Average (This Year)

No incidents recorded for Color OnDemand Inc. in 2025.

Incidents vs Printing Services Industry Average (This Year)

No incidents recorded for Oregon Web Press, Inc. in 2025.

Incident History — Color OnDemand Inc. (X = Date, Y = Severity)

Color OnDemand Inc. cyber incidents detection timeline including parent company and subsidiaries

Incident History — Oregon Web Press, Inc. (X = Date, Y = Severity)

Oregon Web Press, Inc. cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/color-ondemand-inc..jpeg
Color OnDemand Inc.
Incidents

No Incident

https://images.rankiteo.com/companyimages/oregon-web-pres.jpeg
Oregon Web Press, Inc.
Incidents

No Incident

FAQ

Color OnDemand Inc. company demonstrates a stronger AI Cybersecurity Score compared to Oregon Web Press, Inc. company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Oregon Web Press, Inc. company has disclosed a higher number of cyber incidents compared to Color OnDemand Inc. company.

In the current year, Oregon Web Press, Inc. company and Color OnDemand Inc. company have not reported any cyber incidents.

Neither Oregon Web Press, Inc. company nor Color OnDemand Inc. company has reported experiencing a ransomware attack publicly.

Neither Oregon Web Press, Inc. company nor Color OnDemand Inc. company has reported experiencing a data breach publicly.

Neither Oregon Web Press, Inc. company nor Color OnDemand Inc. company has reported experiencing targeted cyberattacks publicly.

Neither Color OnDemand Inc. company nor Oregon Web Press, Inc. company has reported experiencing or disclosing vulnerabilities publicly.

Neither Color OnDemand Inc. nor Oregon Web Press, Inc. holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Color OnDemand Inc. company nor Oregon Web Press, Inc. company has publicly disclosed detailed information about the number of their subsidiaries.

Oregon Web Press, Inc. company employs more people globally than Color OnDemand Inc. company, reflecting its scale as a Printing Services.

Neither Color OnDemand Inc. nor Oregon Web Press, Inc. holds SOC 2 Type 1 certification.

Neither Color OnDemand Inc. nor Oregon Web Press, Inc. holds SOC 2 Type 2 certification.

Neither Color OnDemand Inc. nor Oregon Web Press, Inc. holds ISO 27001 certification.

Neither Color OnDemand Inc. nor Oregon Web Press, Inc. holds PCI DSS certification.

Neither Color OnDemand Inc. nor Oregon Web Press, Inc. holds HIPAA certification.

Neither Color OnDemand Inc. nor Oregon Web Press, Inc. holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to the application account can modify this file to introduce malicious code, which is then executed with elevated privileges when the script is run. Successful exploitation results in arbitrary code execution as the root user.

Published
Date
2025-12-16
Updated
Date
2025-12-16
Risk Information
cvss4
Base: 8.6
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Published
Date
2025-12-16
Updated
Date
2025-12-16
References
Description

Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Published
Date
2025-12-16
Updated
Date
2025-12-16
References
Description

SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's `NewResponseFromRequest` function that affects all normal SIP operations. The vulnerability allows remote attackers to crash any SIP application by sending a single malformed SIP request without a To header. The vulnerability occurs when SIP message parsing succeeds for a request missing the To header, but the response creation code assumes the To header exists without proper nil checks. This affects routine operations like call setup, authentication, and message handling - not just error cases. This vulnerability affects all SIP applications using the sipgo library, not just specific configurations or edge cases, as long as they make use of the `NewResponseFromRequest` function. Version 1.0.0-alpha-1 contains a patch for the issue.

Published
Date
2025-12-16
Updated
Date
2025-12-16
Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.

Published
Date
2025-12-16
Updated
Date
2025-12-16
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References