Comparison Overview

Vim

VS

Alibaba.com

Vim

575 5th Ave, None, New York, New York, US, 10017
Last Update: 2025-12-09
Between 750 and 799

Vim is a middleware platform for healthcare. Its flexible and scalable cloud-based platform and unique, interactive, integration layer unlock access to provider EHR workflows, allowing for the delivery of data and patient insights when and where providers need it most - at the point of patient care. Vim's partners can choose to leverage Vim's core applications or deploy their custom applications on top of Vim Connect - Vim's in-EHR connectivity layer - accelerating time to market at reduced cost and improved flexibility. Digital health builders of all sizes - from national health plans, leading MSOs and tech companies - leverage Vim's platform to engage with a growing network of 2,000+ provider organizations. For payers and providers, clinical data and workflows are often siloed and disconnected. Vim transforms clinical data into actionable in-EHR insights at the point of care. Vim’s content delivery and provider engagement platform reduces administrative burden, empowers providers, and accelerates performance initiatives for all stakeholders through bidirectional EHR connections. The country’s largest health plans and medical providers of every size – from independent practitioners to integrated delivery systems – use our software to connect data and care across the health system. Our Mission: Vim’s mission is to power affordable, high-quality health care through seamless connectivity. At our core, Vim and its employees, are working to change the future of healthcare by impacting how care is delivered. By giving physician teams the tools and resources they need to operate more efficiently and succeed under value-based care models, Vim is helping providers improve the quality of care for their patients.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 383
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1

Alibaba.com

699 Wang Shang Road, Hangzhou, undefined, 310052, CN
Last Update: 2025-12-11

The first business of Alibaba Group, Alibaba.com (www.alibaba.com) is the leading platform for global wholesale trade serving millions of buyers and suppliers around the world. Through Alibaba.com, small businesses can sell their products to companies in other countries. Sellers on Alibaba.com are typically manufacturers and distributors based in China and other manufacturing countries such as India, Pakistan, the United States and Thailand. Our Mission As part of the Alibaba Group, our mission is to make it easy to do business anywhere. We do this by giving suppliers the tools necessary to reach a global audience for their products, and by helping buyers find products and suppliers quickly and efficiently. One-Stop Sourcing Alibaba.com brings you hundreds of millions of products in over 40 different major categories, including consumer electronics, machinery and apparel. Buyers for these products are located in 190+ countries and regions, and exchange hundreds of thousands of messages with suppliers on the platform each day. Anytime, Anywhere As a platform, we continue to develop services to help businesses do more and discover new opportunities. Whether it’s sourcing from your mobile phone or contacting suppliers in their local language, turn to Alibaba.com for all your global business needs.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 28,148
Subsidiaries: 35
12-month incidents
0
Known data breaches
1
Attack type number
2

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/getvim.jpeg
Vim
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/alibaba-com.jpeg
Alibaba.com
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Vim
100%
Compliance Rate
0/4 Standards Verified
Alibaba.com
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Vim in 2025.

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Alibaba.com in 2025.

Incident History — Vim (X = Date, Y = Severity)

Vim cyber incidents detection timeline including parent company and subsidiaries

Incident History — Alibaba.com (X = Date, Y = Severity)

Alibaba.com cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/getvim.jpeg
Vim
Incidents

Date Detected: 1/1164
Type:Vulnerability
Attack Vector: Maliciously crafted TAR archives
Blog: Blog
https://images.rankiteo.com/companyimages/alibaba-com.jpeg
Alibaba.com
Incidents

Date Detected: 10/2023
Type:Data Leak
Blog: Blog

Date Detected: 09/2020
Type:Data Leak
Attack Vector: Server-based data exfiltration
Motivation: Cyber espionage
Blog: Blog

Date Detected: 01/2020
Type:Data Leak
Attack Vector: Unauthenticated Elastic Search Engine Instances
Blog: Blog

FAQ

Alibaba.com company demonstrates a stronger AI Cybersecurity Score compared to Vim company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Alibaba.com company has faced a higher number of disclosed cyber incidents historically compared to Vim company.

In the current year, Alibaba.com company and Vim company have not reported any cyber incidents.

Neither Alibaba.com company nor Vim company has reported experiencing a ransomware attack publicly.

Alibaba.com company has disclosed at least one data breach, while Vim company has not reported such incidents publicly.

Neither Alibaba.com company nor Vim company has reported experiencing targeted cyberattacks publicly.

Vim company has disclosed at least one vulnerability, while Alibaba.com company has not reported such incidents publicly.

Neither Vim nor Alibaba.com holds any compliance certifications.

Neither company holds any compliance certifications.

Alibaba.com company has more subsidiaries worldwide compared to Vim company.

Alibaba.com company employs more people globally than Vim company, reflecting its scale as a Software Development.

Neither Vim nor Alibaba.com holds SOC 2 Type 1 certification.

Neither Vim nor Alibaba.com holds SOC 2 Type 2 certification.

Neither Vim nor Alibaba.com holds ISO 27001 certification.

Neither Vim nor Alibaba.com holds PCI DSS certification.

Neither Vim nor Alibaba.com holds HIPAA certification.

Neither Vim nor Alibaba.com holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, including 9.3.0.x and 8.3.x display the full server stack trace when encountering an error within the GetCdfResource servlet.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and 8.3.x, deserialize untrusted JSON data without constraining the parser to approved classes and methods.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Risk Information
cvss2
Base: 5.8
Severity: LOW
AV:N/AC:L/Au:M/C:P/I:P/A:P
cvss3
Base: 4.7
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

Risk Information
cvss4
Base: 1.0
Severity: HIGH
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X