Comparison Overview

endeavourX

VS

Wayfair

endeavourX

26 Waterloo St, Surry Hills, New South Wales, 2010, AU
Last Update: 2026-03-21

Introducing endeavourX - A product led innovation business within Endeavour Group that enables the creation of personalised, digital experiences to empower memorable moments for our customers and team members. endeavourX brings the best of data, design and technology to bring discovery, convenience and experience to life through our portfolio of liquor and hospitality brands such as Dan Murphy's, BWS, Jimmy Brings and ALH. Our agile teams are empowered to innovate and deliver an excellent experience for our customers - no matter whether they choose to shop in-store, or online. With an industry-leading technology team, backed by analytics, we’re resourceful and willing to experiment. #endeavourX | #realiseyourX

NAICS: 43
NAICS Definition: Retail Trade
Employees: 55
Subsidiaries: 9
12-month incidents
0
Known data breaches
0
Attack type number
0

Wayfair

4 Copley Place - Floor 7, Boston, 02116, US
Last Update: 2026-04-01

Wayfair is the destination for all things home: helping everyone, anywhere create their feeling of home. From expert customer service, to the development of tools that make the shopping process easier, to carrying one of the widest and deepest selections of items for every space, style, and budget, Wayfair gives everyone the power to create spaces that are just right for them.

NAICS: 43
NAICS Definition: Retail Trade
Employees: 12,292
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/endeavourgroup-endeavourx.jpeg
endeavourX
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/wayfair.jpeg
Wayfair
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
endeavourX
100%
Compliance Rate
0/4 Standards Verified
Wayfair
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Retail Industry Average (This Year)

No incidents recorded for endeavourX in 2026.

Incidents vs Retail Industry Average (This Year)

No incidents recorded for Wayfair in 2026.

Incident History — endeavourX (X = Date, Y = Severity)

endeavourX cyber incidents detection timeline including parent company and subsidiaries

Incident History — Wayfair (X = Date, Y = Severity)

Wayfair cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/endeavourgroup-endeavourx.jpeg
endeavourX
Incidents

No Incident

https://images.rankiteo.com/companyimages/wayfair.jpeg
Wayfair
Incidents

No Incident

FAQ

Wayfair company demonstrates a stronger AI Cybersecurity Score compared to endeavourX company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Wayfair company has disclosed a higher number of cyber incidents compared to endeavourX company.

In the current year, Wayfair company and endeavourX company have not reported any cyber incidents.

Neither Wayfair company nor endeavourX company has reported experiencing a ransomware attack publicly.

Neither Wayfair company nor endeavourX company has reported experiencing a data breach publicly.

Neither Wayfair company nor endeavourX company has reported experiencing targeted cyberattacks publicly.

Neither endeavourX company nor Wayfair company has reported experiencing or disclosing vulnerabilities publicly.

Neither endeavourX nor Wayfair holds any compliance certifications.

Neither company holds any compliance certifications.

endeavourX company has more subsidiaries worldwide compared to Wayfair company.

Wayfair company employs more people globally than endeavourX company, reflecting its scale as a Retail.

Neither endeavourX nor Wayfair holds SOC 2 Type 1 certification.

Neither endeavourX nor Wayfair holds SOC 2 Type 2 certification.

Neither endeavourX nor Wayfair holds ISO 27001 certification.

Neither endeavourX nor Wayfair holds PCI DSS certification.

Neither endeavourX nor Wayfair holds HIPAA certification.

Neither endeavourX nor Wayfair holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.

Description

XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services

Description

Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda and red_url parameters.

Description

A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda parameter.