What is the official website of Alera Group, Formerly Compensation Works ?

The official website of Alera Group, Formerly Compensation Works is https://www.compensationworks.com.

What is Alera Group, Formerly Compensation Works's cybersecurity risk score?

Alera Group, Formerly Compensation Works has an AI-generated cybersecurity risk score of 748 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Alera Group, Formerly Compensation Works experienced?

According to Rankiteo, Alera Group, Formerly Compensation Works currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Alera Group, Formerly Compensation Works been affected by any supply chain cyber incidents ?

According to Rankiteo, Alera Group, Formerly Compensation Works has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Alera Group, Formerly Compensation Works have SOC 2 Type 1 certification ?

According to Rankiteo, Alera Group, Formerly Compensation Works is not certified under SOC 2 Type 1.

Does Alera Group, Formerly Compensation Works have SOC 2 Type 2 certification ?

According to Rankiteo, Alera Group, Formerly Compensation Works does not hold a SOC 2 Type 2 certification.

Does Alera Group, Formerly Compensation Works comply with GDPR ?

According to Rankiteo, Alera Group, Formerly Compensation Works is not listed as GDPR compliant.

Does Alera Group, Formerly Compensation Works have PCI DSS certification ?

According to Rankiteo, Alera Group, Formerly Compensation Works does not currently maintain PCI DSS compliance.

Does Alera Group, Formerly Compensation Works comply with HIPAA ?

According to Rankiteo, Alera Group, Formerly Compensation Works is not compliant with HIPAA regulations.

Does Alera Group, Formerly Compensation Works have ISO 27001 certification ?

According to Rankiteo,Alera Group, Formerly Compensation Works is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Alera Group, Formerly Compensation Works operate in ?

Alera Group, Formerly Compensation Works operates primarily in the Human Resources Services industry.

How many employees does Alera Group, Formerly Compensation Works have ?

Alera Group, Formerly Compensation Works employs approximately 3 people worldwide.

Does Alera Group, Formerly Compensation Works own any subsidiaries ?

Alera Group, Formerly Compensation Works presently has no subsidiaries across any sectors.

How many LinkedIn followers does Alera Group, Formerly Compensation Works have ?

Alera Group, Formerly Compensation Works's official LinkedIn profile has approximately 1,978 followers.

What is the NAICS classification code for Alera Group, Formerly Compensation Works ?

Alera Group, Formerly Compensation Works is classified under the NAICS code 541612, which corresponds to Human Resources Consulting Services.

Does Alera Group, Formerly Compensation Works have a Crunchbase profile ?

No, Alera Group, Formerly Compensation Works does not have a profile on Crunchbase.

Does Alera Group, Formerly Compensation Works have a LinkedIn profile ?

Yes, Alera Group, Formerly Compensation Works maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/compensationworks.

How many cybersecurity incidents has Alera Group, Formerly Compensation Works experienced ?

As of August 31, 2026, Rankiteo reports that Alera Group, Formerly Compensation Works has not experienced any cybersecurity incidents.

How many peer or competitor companies does Alera Group, Formerly Compensation Works have ?

Alera Group, Formerly Compensation Works has an estimated 4,507 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

AGFCW

Boost Score +25 with badge (5 left)

748

/1000

Moderate

773

/1000

Fair

Alera Group, Formerly Compensation Works Vendor Cyber Rating & Cyber Score

compensationworks.com

Add Your Compliance Badge

As Alera Group, we continue to provide tailored compensation solutions designed to support organizations in today’s dynamic business environment. Our core services remain focused on benchmarking, pay structure development, sales compensation design, executive compensation, pay equity compliance, and more—helping companies attract and retain talent through comprehensive remuneration strategies. Building on the legacy of Compensation Works, we leverage years of industry expertise to design, implement, and manage compensation strategies that align with your organization's unique objectives. Our mission remains to foster a culture of equity and transparency by ensuring competitive and fair compensation for your people. Now, as part of the

AGFCW A.I CyberSecurity Scoring

Scoring History

AGFCW

Alera Group, Formerly Compensation Works CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

AGFCW Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for AGFCW

Incidents vs Human Resources Services Industry Avg (This Year)

No incidents recorded for Alera Group, Formerly Compensation Works in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Alera Group, Formerly Compensation Works in 2026.

Incident Types AGFCW vs Human Resources Services Industry Avg (This Year)

No incidents recorded for Alera Group, Formerly Compensation Works in 2026.

Incident History - AGFCW (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Alera Group, Formerly Compensation Works Subsidiaries

Parent Company

AGFCW

Human Resources Services

Website: https://www.compensationworks.com

Company Size: 11-50 employees

No subsidiary data available for this company.

Loading…

Alera Group, Formerly Compensation Works Similar Companies

Alight Solutions

alight.com

Alight is a leading cloud-based human capital technology and services provider for many of the world’s largest organizations. Through the administration of employee benefits, Alight powers confident health, wealth, leaves and wellbeing decisions for 35 million people and dependents. Our Alight Worklife® platform empowers employers to gain a deeper understanding of their workforce and engage them throughout life’s most important moments with personalized benefits management and data-driven insights, leading to increased employee wellbeing, engagement and productivity. Learn how Alight unlocks growth for organizations of all sizes at alight.com.

Randstad

randstad.com

Randstad is the world’s largest talent company and a partner of choice to clients. We are committed to providing equitable opportunities to people from all backgrounds and help them remain relevant in the rapidly changing world of work. We have a deep understanding of the labor market and help our clients to create the high-quality, diverse and agile workforces they need to succeed. Our 46,000 employees around the world make a positive impact on society by helping people to realize their true potential throughout their working life. Randstad was founded in 1960 and is headquartered in Diemen, the Netherlands. In 2022, in our 39 markets, we helped more than 2 million people find a job that feels good and advised over 230,000 clients on their talent needs. We generated revenue of €27.6 billion. Randstad N.V. is listed on the Euronext Amsterdam. For more information, see www.randstad.com

Remote

cb remote.com

Talent is everywhere. Opportunity is not. Remote's mission is to create opportunity everywhere, empowering employers to find and hire the best talent, and enabling individuals to build financial and personal freedom. Remote is the all-in-one HR and payroll platform to find, hire, manage, and pay your entire team everywhere. Whether onboarding your first cross-border hire or scaling across continents, Remote delivers enterprise-grade compliance, intuitive design, and dedicated local expertise. With one platform for every contract, payslip, and regulation, Remote helps you grow without borders through our comprehensive set of core solutions including, HRIS, payroll, international employment, contractor management, and more. Whether you’re just starting your global journey, or looking to optimize your existing operations, sign up or book a demo - and see how Remote makes global HR simple.

The Adecco Group

adeccogroup.com

The Adecco Group is a world leading talent company. Our purpose is making the future work for everyone. Through our three global business units - Adecco, Akkodis and LHH - across 60 countries, we enable sustainable and lifelong employability for individuals, deliver digital and engineering solutions to power the Smart Industry transformation and empower organisations to optimise their workforces. The Adecco Group leads by example and is committed to an inclusive culture, fostering sustainable employability, and supporting resilient economies and communities.

Paychex

cb paychex.com

As the future of work continues to evolve, Paychex leads the way by making complex HR, payroll, and benefits brilliantly simple. Our unique combination of digital HR technology and advisory solutions meets the changing needs of employers and their employees. You can see the results in our growth as an HR leader and the positive returns we deliver to our shareholders. Paychex, Inc. (Nasdaq: PAYX) is a leading provider of integrated human capital management solutions for payroll, benefits, human resources, and insurance services. -Industry expertise since 1971 ~740,000 business clients in the U.S. and Europe -Pays 1 in 12 U.S. private sector employees -A top HR outsourcer — serving 2.2M worksite employees through our HR outsourcing solutions Information regarding money transmitter licensing can be found on the NMLS Consumer Access website, www.nmlsconsumeraccess.org, and Paychex at www.paychex.com/corporate/legal. The Commissioner of Financial Regulation for the State of Maryland will accept all questions or complaints from Maryland residents regarding Paychex, Inc. (1029977) at: 100 S. Charles Street, Tower I, Suite 5300 Baltimore, Maryland 21201 888-784-0136

HR Rail

hr-rail.be

HR Rail recrute et engage pour Infrabel et la SNCB. Deux sociétés avec des missions différentes mais un objectif commun : assurer le transport ferroviaire de manière optimale. Dans ce contexte nous sommes continuellement à la recherche de nouveaux talents prêts à relever des défis dans le domaine de la mobilité. Innovations techniques, nouvelle infrastructure, développement du transport national de passagers : les grands projets sont nombreux aux Chemins de Fer. Venez rejoindre nos collègues et participez avec nous à cette passionnante aventure. -- Train@Rail, la cellule de formation de HR Rail, est reconnu par NSA Rail Belgium (SSICF) comme institut linguistique pour les conducteurs de train. Nous organisons des tests et examens linguistiques destinés aux conducteurs de trains de tous les opérateurs belges. Les opérateurs intéressés peuvent s'inscrire à nos formations et examens à l'adresse [email protected] ------------------------------------------------------------------------------------------------------------------- HR Rail werft aan voor Infrabel en NMBS. Twee bedrijven met verschillende missies, maar één enkel doel: het optimaal verzekeren van het vervoer per spoor. In die context zijn we constant op zoek naar nieuw talent om de verschillende uitdagingen op het vlak van mobiliteit aan te gaan. Technische innovaties, nieuwe infrastructuur, de groei van het nationale reizigersverkeer: er zijn meer dan genoeg belangrijke projecten. Voeg je bij onze collega's en ga deze boeiende uitdaging aan. -- Train@Rail, onze opleidingscel, is bovendien erkend door NSA Rail Belgium (DVIS) als taalinstituut voor treinbestuurders. We organiseren taaltesten en taalexamens voor de treinbestuurders van alle Belgische operatoren. Geïnteresseerde operatoren kunnen intekenen voor onze opleidingen en examens via [email protected]

LHH

lhh.com

At LHH, we believe work should be meaningful, fulfilling, and connected. Our vision? To create a beautiful working world—a world where people and businesses are empowered to achieve bold ambitions. That's why we've designed solutions to address each stage of the talent journey, crafted with human care and proven expertise. These include: HR & Talent Advisory Recruitment Solutions Leadership Development & Coaching Career Transition & Mobility Upskilling & Reskilling With more than 50 years of experience, our network of over 12,000 professionals, across 60+ countries, support organizations worldwide, and we are strengthened by our position within The Adecco Group, the world’s leading talent company. Visit our website to find out more about how we can support your business: www.lhh.com Embarking on a career transition? We're here to help. Register to start your LHH career transition journey: www.register.lhh.com Looking for your next role? Search our open jobs: www.lhh.com/us/en/search-jobs/ LHH. A beautiful working world.

Loading…

NEWS

Alera Group, Formerly Compensation Works CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 16, 2023 08:00 AM

Infosys Cybersecurity Issue Hits Ascensus, Newport Nonqualified Platforms

Ascensus and its subsidiary, Newport Group Inc., have had their nonqualified retirement plan services affected by a cyberattack on business...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-82592

SUMMARY

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.

Published

Date2026-08-30

Updated

Date2026-08-30

RISK INFORMATION (Score: 9.9)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 9.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

3.1

REFERENCES

CVE-2026-82591

SUMMARY

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of the file code/AssetLib/MD5/MD5Loader.cpp. The manipulation of the argument iNewIndex leads to heap-based buffer overflow. The attack can only be performed from a local environment. The identifier of the patch is bf9dabb617c46e5133dac65cca6bff177917afcb. Applying a patch is the recommended action to fix this issue.

Published

Date2026-08-30

Updated

Date2026-08-30

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-82590

SUMMARY

A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of the file src/smf/nudm-handler.c of the component SMF. Executing a manipulation of the argument preemptCap can lead to reachable assertion. The attack may be launched remotely. Upgrading to version 2.8.0 is sufficient to fix this issue. This patch is called 4554405f29bffd7562abedbee63484825bd90cd5. You should upgrade the affected component.

Published

Date2026-08-30

Updated

Date2026-08-30

RISK INFORMATION (Score: 4.3)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:N/A:P

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-82589

SUMMARY

A security flaw has been discovered in Open5GS up to 2.7.7. Impacted is the function amf_namf_comm_handle_n1_n2_message_transfer of the file src/amf/namf-handler.c of the component N1-N2 Message Handler. Performing a manipulation of the argument N1N2MessageTransferReqData.n2InfoContainer.smInfo.n2InfoContent.ngapIeType results in denial of service. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 2.8.0 is recommended to address this issue. The patch is named abf8a836564b966b5141110fc25ed413c4f17522. It is advisable to upgrade the affected component.

Published

Date2026-08-30

Updated

Date2026-08-30

RISK INFORMATION (Score: 4.3)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:N/A:P

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-82588

SUMMARY

A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer Endpoint. Such manipulation leads to null pointer dereference. The attack can be launched remotely. Upgrading to version 2.8.0 is capable of addressing this issue. The name of the patch is abf8a836564b966b5141110fc25ed413c4f17522. Upgrading the affected component is advised.

Published

Date2026-08-30

Updated

Date2026-08-30

RISK INFORMATION (Score: 4.3)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:N/A:P

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…