Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download

Comparison Overview

Diff, a VML CompanyDiff, a VML Company
VS
DarazDaraz
Diff, a VML Company

Diff, a VML Company

1435 Saint-Alexandre Street, Montreal, QC, H3A 2G4, CA

Last Update: 02/04/2026

View Profile
Between 750 and 799
http://diffagency.com
752/1000Fair

Diff, a VML Company, is a full-service eCommerce agency shaping the future of retail. As one of the world’s longest-standing Shopify partners, Diff has built the platform's most innovative and complex stores. Our experts create modern solutions that streamline operation...

NAICS:511
NAICS Definition:N/A
Employees:92
Subsidiaries:34
12-month incidents
0
Known data breaches
0
Attack type number
0
Daraz

Daraz

Daraz Head Office, 1st Floor, NASTP Silicone Building, Main Shahrah-e-Faisal, Karachi, Karachi, 75500, PK

Last Update: 01/10/2026

View Profile
Between 750 and 799
https://daraz.com/
790/1000Fair

Founded in 2015, Daraz is the leading e-commerce platform in South Asia with operations in Pakistan, Bangladesh, Sri Lanka, Nepal, and Myanmar. It provides sellers and consumers with cutting-edge marketplace technology, targeting a rapidly growing region of over 500 mil...

NAICS:5112
NAICS Definition:Software Publishers
Employees:13,534
Subsidiaries:0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Ranges Comparison

Based On Specific Ai Models Category
Diff, a VML Company

Diff, a VML Company

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA
Daraz

Daraz

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for Diff, a VML Company in 2026.

Incidents

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for Daraz in 2026.

Incidents

Incident History - Diff, a VML Company (X = Date, Y = Severity)

Diff, a VML Company cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Incident History - Daraz (X = Date, Y = Severity)

Daraz cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...
Diff, a VML Company

Diff, a VML Company

Incidents
No explicit notable incidents reported.
Daraz

Daraz

Incidents
No explicit notable incidents reported.

FAQ

Between Diff, a VML Company company and Daraz company, which one has the best AI Cybersecurity Score ?
Between Diff, a VML Company company and Daraz company, which one has experienced more cyber incidents in the past ?
Between Diff, a VML Company company and Daraz company, which one has experienced more cyber incidents this year ?
Between Diff, a VML Company company and Daraz company, which one has experienced at least one ransomware attack ?
Between Diff, a VML Company company and Daraz company, which one has experienced at least one data breach ?
Between Diff, a VML Company company and Daraz company, which one has experienced at least one targeted cyberattack ?
Between Diff, a VML Company company and Daraz company, which one has experienced at least one vulnerability ?
Between Diff, a VML Company company and Daraz company, which one holds the most compliance certifications ?
Between Diff, a VML Company company and Daraz company, which one holds the fewest compliance certifications ?
Between Diff, a VML Company company and Daraz company, which one has the most subsidiaries ?
Between Diff, a VML Company company and Daraz company, which one has the largest number of employees ?
Between Diff, a VML Company and Daraz, which company holds both SOC 2 Type 1 certifications ?
Between Diff, a VML Company and Daraz, which company holds both SOC 2 Type 2 certifications ?
Which company is ISO 27001 certified - Diff, a VML Company or Daraz ?
Which company is PCI DSS compliant - Diff, a VML Company or Daraz ?
Between Diff, a VML Company and Daraz, which company complies with HIPAA regulations for healthcare data ?
Between Diff, a VML Company and Daraz, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-84411
SUMMARY

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of service, using a single crafted request.

PUBLISHED
Date2026-10-02
UPDATED
Date2026-10-02
RISK INFORMATION (Score: 9.8)
CVSS3
Base Score: 9.8
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS4
Base Score: 9.3
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
5.9
EXPLOITABILITY
3.9
REFERENCES
CVE-2026-105051
SUMMARY

Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel).

PUBLISHED
Date2026-10-02
UPDATED
Date2026-10-02
RISK INFORMATION (Score: 1.9)
CVSS3
Base Score: 1.9
Complexity: HIGH
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N
IMPACT SCORE
1.4
EXPLOITABILITY
0.5
REFERENCES
CVE-2026-105050
SUMMARY

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.

PUBLISHED
Date2026-10-02
UPDATED
Date2026-10-02
RISK INFORMATION (Score: )
CVSS4
Base Score: 7.1
Complexity: LOW
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
NA
EXPLOITABILITY
NA
REFERENCES
CVE-2026-105049
SUMMARY

Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet.

PUBLISHED
Date2026-10-02
UPDATED
Date2026-10-02
RISK INFORMATION (Score: 5.8)
CVSS3
Base Score: 5.8
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
IMPACT SCORE
1.4
EXPLOITABILITY
3.9
REFERENCES
CVE-2026-105048
SUMMARY

The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).

PUBLISHED
Date2026-10-02
UPDATED
Date2026-10-02
RISK INFORMATION (Score: 4)
CVSS3
Base Score: 4.0
Complexity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
IMPACT SCORE
1.4
EXPLOITABILITY
2.2
REFERENCES