Comparison Overview

Folsom Custom Skis

VS

Toledo Physical Education Supply

Folsom Custom Skis

7100 Broadway, Denver, Colorado, 80221, US
Last Update: 2025-11-26
View Profile
Between 750 and 799
https://www.folsomskis.com/

As a locally, skier owned company, Folsom builds custom skis that are designed, engineered, and built specifically for you. With a focus on our experiential-based Custom Fit process, we get to know you as a skier and take those unique attributes into account as we handcraft the perfect pair of skis at our private manufacturing facility in Denver, CO. With the ability to customize any ski from the core to the topsheet graphic, Folsom Skis are backed by a satisfaction guarantee and are promised to outlast any mass-produced product on the market. As a favorite of clientele from around the world, celebrities, and professional skiers alike, Folsom products have received numerous honors and awards from publications such as Freeskier Magazine, Powder Magazine, and Skiing Magazine, just to name a few. To get started with the Folsom Custom Fit experience, fill out a custom fit form or feel free to shop our online store if you already know what you want.

NAICS: None
NAICS Definition:
Employees: 12
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Toledo Physical Education Supply

5101 Advantage Dr., Toledo, OH 43612, US
Last Update: 2025-11-21
Between 750 and 799
http://www.tpesonline.com/

Toledo Physical Education Supply is a privately held company owned by Thomas and Stephen McNutt. We've been selling physical education, fitness, athletic, recreation, gymnastics and dance equipment, primarily to the K-12 school market since 1974. In addition, we own Great Lakes Sports and Gym Closet. Sales are generated through our catalogs, mailed nationwide and through our 3 websites.

NAICS: None
NAICS Definition:
Employees: 4
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/folsom-custom-skis.jpeg
Folsom Custom Skis
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/toledo-physical-education-supply.jpeg
Toledo Physical Education Supply
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Folsom Custom Skis
100%
Compliance Rate
0/4 Standards Verified
Toledo Physical Education Supply
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Sporting Goods Industry Average (This Year)

No incidents recorded for Folsom Custom Skis in 2025.

Incidents vs Sporting Goods Industry Average (This Year)

No incidents recorded for Toledo Physical Education Supply in 2025.

Incident History — Folsom Custom Skis (X = Date, Y = Severity)

Folsom Custom Skis cyber incidents detection timeline including parent company and subsidiaries

Incident History — Toledo Physical Education Supply (X = Date, Y = Severity)

Toledo Physical Education Supply cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/folsom-custom-skis.jpeg
Folsom Custom Skis
Incidents

No Incident

https://images.rankiteo.com/companyimages/toledo-physical-education-supply.jpeg
Toledo Physical Education Supply
Incidents

No Incident

FAQ

Both Folsom Custom Skis company and Toledo Physical Education Supply company demonstrate a comparable AI Cybersecurity Score, with strong governance and monitoring frameworks in place.

Historically, Toledo Physical Education Supply company has disclosed a higher number of cyber incidents compared to Folsom Custom Skis company.

In the current year, Toledo Physical Education Supply company and Folsom Custom Skis company have not reported any cyber incidents.

Neither Toledo Physical Education Supply company nor Folsom Custom Skis company has reported experiencing a ransomware attack publicly.

Neither Toledo Physical Education Supply company nor Folsom Custom Skis company has reported experiencing a data breach publicly.

Neither Toledo Physical Education Supply company nor Folsom Custom Skis company has reported experiencing targeted cyberattacks publicly.

Neither Folsom Custom Skis company nor Toledo Physical Education Supply company has reported experiencing or disclosing vulnerabilities publicly.

Neither Folsom Custom Skis nor Toledo Physical Education Supply holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Folsom Custom Skis company nor Toledo Physical Education Supply company has publicly disclosed detailed information about the number of their subsidiaries.

Folsom Custom Skis company employs more people globally than Toledo Physical Education Supply company, reflecting its scale as a Sporting Goods.

Neither Folsom Custom Skis nor Toledo Physical Education Supply holds SOC 2 Type 1 certification.

Neither Folsom Custom Skis nor Toledo Physical Education Supply holds SOC 2 Type 2 certification.

Neither Folsom Custom Skis nor Toledo Physical Education Supply holds ISO 27001 certification.

Neither Folsom Custom Skis nor Toledo Physical Education Supply holds PCI DSS certification.

Neither Folsom Custom Skis nor Toledo Physical Education Supply holds HIPAA certification.

Neither Folsom Custom Skis nor Toledo Physical Education Supply holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Published
Date
2025-11-26
Updated
Date
2025-11-26
Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Published
Date
2025-11-26
Updated
Date
2025-11-26
Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Published
Date
2025-11-26
Updated
Date
2025-11-26
Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Published
Date
2025-11-26
Updated
Date
2025-11-26
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Published
Date
2025-11-26
Updated
Date
2025-11-26
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References