Comparison Overview

Flexjet

VS

NASA - National Aeronautics and Space Administration

Flexjet

26180 Curtiss-Wright Parkway, Cleveland, Ohio, US, 44143
Last Update: 2025-12-23
View Profile
Between 650 and 699
https://www.flexjet.com/

Flexjet first entered the fractional jet ownership market in 1995. Flexjet offers fractional jet ownership and leasing. Flexjet’s fractional aircraft program is the first in the world to be recognized as achieving the Air Charter Safety Foundation’s Industry Audit Standard, is the first and only company to be honored with 21 FAA Diamond Awards for Excellence, upholds an ARG/US Platinum Safety Rating and is IS-BAO compliant at Level 2. Flexjet’s fractional program fields an exclusive array of business aircraft—some of the youngest in the fractional jet industry, with an average age of approximately six years. In 2015, Flexjet introduced Red Label by Flexjet, which features the youngest fleet in the industry, flight crews dedicated to a single aircraft and the LXi Cabin Collection of interiors. To date there are more than 40 different interior designs across its fleet, which includes the Embraer Phenom 300, Challenger 350, the Embraer Legacy 450 and Praetor 500, Global Express, the Gulfstream G450, G500, G650 and G700, and the Aerion AS2 supersonic business jets. Flexjet is a member of the Directional Aviation family of companies. For more details on innovative programs and flexible offerings, visit www.flexjet.com or follow us on Twitter @Flexjet and on Instagram @FlexjetLLC.

NAICS: 3364
NAICS Definition: Aerospace Product and Parts Manufacturing
Employees: 2,518
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1
View Profile

NASA - National Aeronautics and Space Administration

300 E Street SW, Washington, DC, US, 20546
Last Update: 2025-12-25
Between 750 and 799
http://www.nasa.gov

For more than 60 years, NASA has been breaking barriers to achieve the seemingly impossible—from walking on the Moon to pushing the boundaries of human spaceflight farther than ever before. We work in space and around the world in laboratories and wind tunnels, on airfields and in control rooms to explore some of life’s fundamental mysteries: What’s out there in space? How do we get there? And what can we learn that will make life better here on Earth? We are passionate professionals united by a common purpose: to pioneer the future in space exploration, scientific discovery and aeronautics research. Today, we continue NASA’s legacy of excellence and innovation through an unprecedented array of missions. We are developing the most advanced rockets and spacecraft ever designed, studying the Earth for answers to critical challenges facing our planet, improving the air transportation experience, and so much more. Join us as we reach for new heights and reveal the unknown for the benefit of humanity.

NAICS: 3364
NAICS Definition: Aerospace Product and Parts Manufacturing
Employees: 46,373
Subsidiaries: 7
12-month incidents
2
Known data breaches
1
Attack type number
3

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/flexjet.jpeg
Flexjet
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/nasa.jpeg
NASA - National Aeronautics and Space Administration
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Flexjet
100%
Compliance Rate
0/4 Standards Verified
NASA - National Aeronautics and Space Administration
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Aviation and Aerospace Component Manufacturing Industry Average (This Year)

No incidents recorded for Flexjet in 2025.

Incidents vs Aviation and Aerospace Component Manufacturing Industry Average (This Year)

NASA - National Aeronautics and Space Administration has 159.74% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — Flexjet (X = Date, Y = Severity)

Flexjet cyber incidents detection timeline including parent company and subsidiaries

Incident History — NASA - National Aeronautics and Space Administration (X = Date, Y = Severity)

NASA - National Aeronautics and Space Administration cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/flexjet.jpeg
Flexjet
Incidents

Date Detected: 3/2023
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/nasa.jpeg
NASA - National Aeronautics and Space Administration
Incidents

Date Detected: 6/2025
Type:Breach
Blog: Blog

Date Detected: 5/2025
Type:Vulnerability
Attack Vector: Exploitation of vulnerabilities in software
Motivation: To compromise computer systems at NASA and other institutions using the vulnerable software
Blog: Blog

Date Detected: 6/1999
Type:Cyber Attack
Attack Vector: Unauthorized Access
Blog: Blog

FAQ

NASA - National Aeronautics and Space Administration company demonstrates a stronger AI Cybersecurity Score compared to Flexjet company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

NASA - National Aeronautics and Space Administration company has faced a higher number of disclosed cyber incidents historically compared to Flexjet company.

In the current year, NASA - National Aeronautics and Space Administration company has reported more cyber incidents than Flexjet company.

Neither NASA - National Aeronautics and Space Administration company nor Flexjet company has reported experiencing a ransomware attack publicly.

Both NASA - National Aeronautics and Space Administration company and Flexjet company have disclosed experiencing at least one data breach.

NASA - National Aeronautics and Space Administration company has reported targeted cyberattacks, while Flexjet company has not reported such incidents publicly.

NASA - National Aeronautics and Space Administration company has disclosed at least one vulnerability, while Flexjet company has not reported such incidents publicly.

Neither Flexjet nor NASA - National Aeronautics and Space Administration holds any compliance certifications.

Neither company holds any compliance certifications.

NASA - National Aeronautics and Space Administration company has more subsidiaries worldwide compared to Flexjet company.

NASA - National Aeronautics and Space Administration company employs more people globally than Flexjet company, reflecting its scale as a Aviation and Aerospace Component Manufacturing.

Neither Flexjet nor NASA - National Aeronautics and Space Administration holds SOC 2 Type 1 certification.

Neither Flexjet nor NASA - National Aeronautics and Space Administration holds SOC 2 Type 2 certification.

Neither Flexjet nor NASA - National Aeronautics and Space Administration holds ISO 27001 certification.

Neither Flexjet nor NASA - National Aeronautics and Space Administration holds PCI DSS certification.

Neither Flexjet nor NASA - National Aeronautics and Space Administration holds HIPAA certification.

Neither Flexjet nor NASA - National Aeronautics and Space Administration holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

httparty is an API tool. In versions 0.23.2 and prior, httparty is vulnerable to SSRF. This issue can pose a risk of leaking API keys, and it can also allow third parties to issue requests to internal servers. This issue has been patched via commit 0529bcd.

Published
Date
2025-12-23
Updated
Date
2025-12-23
Risk Information
cvss4
Base: 8.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. In versions 0.15.2 and prior, an RCE vulnerability exists in useMarkdown.ts, where the markdown-it-mermaid plugin is initialized with securityLevel: 'loose'. This configuration explicitly permits the rendering of HTML tags within Mermaid diagram nodes. This issue has not been patched at time of publication.

Published
Date
2025-12-23
Updated
Date
2025-12-23
Risk Information
cvss3
Base: 9.6
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
References
Description

continuwuity is a Matrix homeserver written in Rust. Prior to version 0.5.0, this vulnerability allows a remote, unauthenticated attacker to force the target server to cryptographically sign arbitrary membership events. The flaw exists because the server fails to validate the origin of a signing request, provided the event's state_key is a valid user ID belonging to the target server. This issue has been patched in version 0.5.0. A workaround for this issue involves blocking access to the PUT /_matrix/federation/v2/invite/{roomId}/{eventId} endpoint using the reverse proxy.

Published
Date
2025-12-23
Updated
Date
2025-12-23
Risk Information
cvss4
Base: 9.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

LangChain is a framework for building LLM-powered applications. Prior to @langchain/core versions 0.3.80 and 1.1.8, and prior to langchain versions 0.3.37 and 1.2.3, a serialization injection vulnerability exists in LangChain JS's toJSON() method (and subsequently when string-ifying objects using JSON.stringify(). The method did not escape objects with 'lc' keys when serializing free-form data in kwargs. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in @langchain/core versions 0.3.80 and 1.1.8, and langchain versions 0.3.37 and 1.2.3

Published
Date
2025-12-23
Updated
Date
2025-12-23
Risk Information
cvss3
Base: 8.6
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
References
Description

LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys when serializing free-form dictionaries. The 'lc' key is used internally by LangChain to mark serialized objects. When user-controlled data contains this key structure, it is treated as a legitimate LangChain object during deserialization rather than plain user data. This issue has been patched in versions 0.3.81 and 1.2.5.

Published
Date
2025-12-23
Updated
Date
2025-12-23
Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
References