Comparison Overview

Convenntus

VS

United States Conference of Mayors

Convenntus

750 9th St NW, Washington, District of Columbia, 20001, US
Last Update: 2025-12-13
Between 750 and 799

At Convenntus, our job is to make Washington work for your organization. We offer a complete suite of services to make your next annual meeting or fly-in effective and seamless, and to make you look good in the process. As advocates, you know that nothing wins battles like bringing your members and their stories to Washington. But the logistics of bringing large groups to DC can be overwhelming. With decades of experience, the Convenntus team will place your members in front of decision-makers, elevate their advocacy experience, and maximize their ability to move your agenda forward. We ensure that every detail of your fly-in is handled efficiently and professionally, empowering you to achieve your public policy goals.

NAICS: None
NAICS Definition: Others
Employees: 2
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

United States Conference of Mayors

1620 I St. NW, Washington, DC, 20006, US
Last Update: 2025-12-11
Between 750 and 799

The United States Conference of Mayors is the official non-partisan organization of cities with populations of 30,000 or more. There are over 1,400 such cities in the country today. Each city is represented in the Conference by its chief elected official, the mayor. The primary roles of The U.S. Conference of Mayors are to: - Promote the development of effective national urban/suburban policy; - Strengthen federal-city relationships; - Ensure that federal policy meets urban needs; - Provide mayors with leadership and management tools; and - Create a forum in which mayors can share ideas and information. The Conference holds its Winter Meeting each January in Washington, D.C. and an Annual Meeting each June in a different U.S. city. Additional meetings and events are held as directed by the Conference leadership.

NAICS: None
NAICS Definition: Others
Employees: 58
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/convenntus.jpeg
Convenntus
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/u.s.-conference-of-mayors.jpeg
United States Conference of Mayors
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Convenntus
100%
Compliance Rate
0/4 Standards Verified
United States Conference of Mayors
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Government Relations Industry Average (This Year)

No incidents recorded for Convenntus in 2025.

Incidents vs Government Relations Industry Average (This Year)

No incidents recorded for United States Conference of Mayors in 2025.

Incident History — Convenntus (X = Date, Y = Severity)

Convenntus cyber incidents detection timeline including parent company and subsidiaries

Incident History — United States Conference of Mayors (X = Date, Y = Severity)

United States Conference of Mayors cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/convenntus.jpeg
Convenntus
Incidents

No Incident

https://images.rankiteo.com/companyimages/u.s.-conference-of-mayors.jpeg
United States Conference of Mayors
Incidents

No Incident

FAQ

Convenntus company demonstrates a stronger AI Cybersecurity Score compared to United States Conference of Mayors company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, United States Conference of Mayors company has disclosed a higher number of cyber incidents compared to Convenntus company.

In the current year, United States Conference of Mayors company and Convenntus company have not reported any cyber incidents.

Neither United States Conference of Mayors company nor Convenntus company has reported experiencing a ransomware attack publicly.

Neither United States Conference of Mayors company nor Convenntus company has reported experiencing a data breach publicly.

Neither United States Conference of Mayors company nor Convenntus company has reported experiencing targeted cyberattacks publicly.

Neither Convenntus company nor United States Conference of Mayors company has reported experiencing or disclosing vulnerabilities publicly.

Neither Convenntus nor United States Conference of Mayors holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Convenntus company nor United States Conference of Mayors company has publicly disclosed detailed information about the number of their subsidiaries.

United States Conference of Mayors company employs more people globally than Convenntus company, reflecting its scale as a Government Relations.

Neither Convenntus nor United States Conference of Mayors holds SOC 2 Type 1 certification.

Neither Convenntus nor United States Conference of Mayors holds SOC 2 Type 2 certification.

Neither Convenntus nor United States Conference of Mayors holds ISO 27001 certification.

Neither Convenntus nor United States Conference of Mayors holds PCI DSS certification.

Neither Convenntus nor United States Conference of Mayors holds HIPAA certification.

Neither Convenntus nor United States Conference of Mayors holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to the application account can modify this file to introduce malicious code, which is then executed with elevated privileges when the script is run. Successful exploitation results in arbitrary code execution as the root user.

Risk Information
cvss4
Base: 8.6
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Description

Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Description

SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's `NewResponseFromRequest` function that affects all normal SIP operations. The vulnerability allows remote attackers to crash any SIP application by sending a single malformed SIP request without a To header. The vulnerability occurs when SIP message parsing succeeds for a request missing the To header, but the response creation code assumes the To header exists without proper nil checks. This affects routine operations like call setup, authentication, and message handling - not just error cases. This vulnerability affects all SIP applications using the sipgo library, not just specific configurations or edge cases, as long as they make use of the `NewResponseFromRequest` function. Version 1.0.0-alpha-1 contains a patch for the issue.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N