Comparison Overview

Concept2 Ltd

VS

Fusheng Precision Company

Concept2 Ltd

Nottingham City, GB
Last Update: 2025-03-15 (UTC)
Between 900 and 1000

Excellent

Concept2 began in 1976 in the back of a bread truck when Dick and Pete Dreissigacker, fresh from Olympic training, started making composite racing oars. Concept2 oars have since gone on to become the oar of choice among the world's rowers, and innovations continue right to the present-day. In 1981, Dick and Pete created the Concept2 Indoor Rower, which swiftly became the best-selling rowing machine in the world. Now several models later, itโ€™s used every day by Olympic athletes, cardiac rehab patients, individuals at home and every caliber of rower in-between. Since those early days we've grown to over 50 employees, and our product line includes oars, the indoor rower and the SkiErg. Though weโ€™re much larger now, we remain dedicated to our philosophy of providing the most innovative products and programs to our customers. By selling factory direct, Concept2 eliminates the middleman so that we can provide our customers with the best value. You buy direct from our manufacturing facility in Morrisville, Vermont. Rowing is our reason for being, and every machine and oar we produce comes from a background of over thirty-five years of excellence. Our primary goal is to promote and encourage the growth of rowing, both indoors and outdoors. We believe that rowing is a lifelong activity, accessible to all.

NAICS: 339
NAICS Definition:
Employees: 11-50
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Fusheng Precision Company

None
Last Update: 2025-05-01 (UTC)

Excellent

Between 900 and 1000

Fusheng Precision Company, formally the Sporting Goods Division of Fusheng Industrial Company, is the largest contract manufacturer of golf club equipment. We proudly supply our goods and services, including titanium drivers, stainless steel irons and metal woods, graphite shafts and club assembly, to the best golf companies worldwide. Fusheng Precision was founded in 1953. It is headquartered in Taiwan, with operations in Taiwan and China. Our subsidiary includes FS Precision Tech located in California, USA.

NAICS: 33992
NAICS Definition: Sporting and Athletic Goods Manufacturing
Employees: 10,001+
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/concept2-ltd.jpeg
Concept2 Ltd
โ€”
ISO 27001
Not verified
โ€”
SOC 2
Not verified
โ€”
GDPR
No public badge
โ€”
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/fusheng-precision-company.jpeg
Fusheng Precision Company
โ€”
ISO 27001
Not verified
โ€”
SOC 2
Not verified
โ€”
GDPR
No public badge
โ€”
PCI DSS
No public badge
Compliance Summary
Concept2 Ltd
100%
Compliance Rate
0/4 Standards Verified
Fusheng Precision Company
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Sporting Goods Manufacturing Industry Average (This Year)

No incidents recorded for Concept2 Ltd in 2025.

Incidents vs Sporting Goods Manufacturing Industry Average (This Year)

No incidents recorded for Fusheng Precision Company in 2025.

Incident History โ€” Concept2 Ltd (X = Date, Y = Severity)

Concept2 Ltd cyber incidents detection timeline including parent company and subsidiaries

Incident History โ€” Fusheng Precision Company (X = Date, Y = Severity)

Fusheng Precision Company cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/concept2-ltd.jpeg
Concept2 Ltd
Incidents

No Incident

https://images.rankiteo.com/companyimages/fusheng-precision-company.jpeg
Fusheng Precision Company
Incidents

No Incident

FAQ

Both Concept2 Ltd company and Fusheng Precision Company company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, Fusheng Precision Company company has disclosed a higher number of cyber incidents compared to Concept2 Ltd company.

In the current year, Fusheng Precision Company company and Concept2 Ltd company have not reported any cyber incidents.

Neither Fusheng Precision Company company nor Concept2 Ltd company has reported experiencing a ransomware attack publicly.

Neither Fusheng Precision Company company nor Concept2 Ltd company has reported experiencing a data breach publicly.

Neither Fusheng Precision Company company nor Concept2 Ltd company has reported experiencing targeted cyberattacks publicly.

Neither Concept2 Ltd company nor Fusheng Precision Company company has reported experiencing or disclosing vulnerabilities publicly.

Neither Concept2 Ltd company nor Fusheng Precision Company company has publicly disclosed detailed information about the number of their subsidiaries.

Neither Concept2 Ltd company nor Fusheng Precision Company company has publicly disclosed the exact number of their employees.

Latest Global CVEs (Not Company-Specific)

Description

Better Auth is an authentication and authorization library for TypeScript. In versions prior to 1.3.26, unauthenticated attackers can create or modify API keys for any user by passing that user's id in the request body to the `api/auth/api-key/create` route. `session?.user ?? (authRequired ? null : { id: ctx.body.userId })`. When no session exists but `userId` is present in the request body, `authRequired` becomes false and the user object is set to the attacker-controlled ID. Server-only field validation only executes when `authRequired` is true (lines 280-295), allowing attackers to set privileged fields. No additional authentication occurs before the database operation, so the malicious payload is accepted. The same pattern exists in the update endpoint. This is a critical authentication bypass enabling full an unauthenticated attacker can generate an API key for any user and immediately gain complete authenticated access. This allows the attacker to perform any action as the victim user using the api key, potentially compromise the user data and the application depending on the victim's privileges. Version 1.3.26 contains a patch for the issue.

Risk Information
cvss4
Base: 9.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Allstar is a GitHub App to set and enforce security policies. In versions prior to 4.5, a vulnerability in Allstarโ€™s Reviewbot component caused inbound webhook requests to be validated against a hard-coded, shared secret. The value used for the secret token was compiled into the Allstar binary and could not be configured at runtime. In practice, this meant that every deployment using Reviewbot would validate requests with the same secret unless the operator modified source code and rebuilt the component - an expectation that is not documented and is easy to miss. All Allstar releases prior to v4.5 that include the Reviewbot code path are affected. Deployments on v4.5 and later are not affected. Those who have not enabled or exposed the Reviewbot endpoint are not exposed to this issue.

Risk Information
cvss4
Base: 4.6
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Multiple cross-site scripting (XSS) vulnerabilities with Calendar events in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 update 35 through update 92, and 7.3 update 25 through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a userโ€™s (1) First Name, (2) Middle Name or (3) Last Name text field.

Risk Information
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Python Social Auth is a social authentication/registration mechanism. In versions prior to 5.6.0, upon authentication, the user could be associated by e-mail even if the `associate_by_email` pipeline was not included. This could lead to account compromise when a third-party authentication service does not validate provided e-mail addresses or doesn't require unique e-mail addresses. Version 5.6.0 contains a patch. As a workaround, review the authentication service policy on e-mail addresses; many will not allow exploiting this vulnerability.

Risk Information
cvss4
Base: 6.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them. In versions prior to 0.15.0, the attestation-policy endpoint didn't check if the kbs-client submitting the request was actually authenticated (had the right key). This allowed any kbs-client to actually change the attestation policy. Version 0.15.0 fixes the issue.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X