Comparison Overview

Gewalt Hamilton Associates, Inc.

VS

Egis in ANZ

Gewalt Hamilton Associates, Inc.

625 Forest Edge Dr., Vernon Hills, Illinois, 60061, US
Last Update: 2025-03-05 (UTC)
Between 750 and 799

GHA's VISION - NOW AND INTO THE FUTURE GHA will be the premiere consultant partner in the Midwest, providing high-quality services and designs for our clients and community. GHA will be forward-looking, working toward a common vision that includes diversity and inclusion, a feeling of belonging, and built upon strong internal and external relationships. GHA will be a world-class place to build a career, focused on staff development and training at all levels, creating challenging and rewarding opportunities for all staff. GHA will build and maintain a strong culture, one built upon trust and growth and our common values of Integrity, Dedication, and Passion. Many of our staff have served with us for decades, so our range of expertise is nearly unmatched. It truly is our people that make the difference and provide our clients with the results they want and need. By the same token, many of our clients have been with us for years, providing us with the most authentic assurance that our work consistently meets expectations – their loyalty. Both public and private agencies have come to rely on the professional, personal and timely service we provide. At Gewalt Hamilton, we treat every project as just one shared experience in what we hope will be a long-term relationship. We work with our clients, not for them, bringing a team approach to every assignment. Our clients trust us to hear their needs, provide honest and thoughtful feedback, and deliver exceptional results. Our clients are served by registered professional engineers, land surveyors and experienced technical and administrative support staff. GHA is also prequalified by key government agencies to provide professional services. This collective dedication to leveraging our experience to yield actionable insights drives an overarching firm-wide quest to find efficiencies that protect project budgets, and maximize asset efficacy and useful lifecycle.

NAICS: 237
NAICS Definition: Heavy and Civil Engineering Construction
Employees: 142
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Egis in ANZ

530 Collins St Level 18 Melbourne, Victoria 3000, AU
Last Update: 2025-05-02 (UTC)
Between 750 and 799

Egis is an international player active in architecture, consulting, construction engineering and mobility services. We create and operate intelligent infrastructures and buildings that respond to the climate emergency and contribute to more balanced, sustainable and resilient territorial development. Operating in 100 countries, Egis puts the expertise of its 19,500 employees at the service of its clients and develops cutting-edge innovations accessible to all projects. Through its wide range of activities, Egis is a key player in the collective organisation of society and the living environment of citizens all over the world In ANZ, we partner with our clients and the community to create Joyful Connected Cities every day. Through our expertise in Advisory, Architecture, Engineering Design and Infrastructure Management, we are tackling some of the biggest infrastructure and environmental challenges we face to build a more balanced, sustainable and resilient world. Improving people’s quality of life and supporting communities in their social and economic development, whilst drastically reducing carbon emissions and achieving vital 2050 net zero targets, that’s our purpose. #WeAreAllEgis #ImpactTheFuture

NAICS: 237
NAICS Definition: Heavy and Civil Engineering Construction
Employees: 10,001+
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/gewalt-hamilton-associates-inc-.jpeg
Gewalt Hamilton Associates, Inc.
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/indec-consulting.jpeg
Egis in ANZ
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Gewalt Hamilton Associates, Inc.
100%
Compliance Rate
0/4 Standards Verified
Egis in ANZ
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Civil Engineering Industry Average (This Year)

No incidents recorded for Gewalt Hamilton Associates, Inc. in 2025.

Incidents vs Civil Engineering Industry Average (This Year)

No incidents recorded for Egis in ANZ in 2025.

Incident History — Gewalt Hamilton Associates, Inc. (X = Date, Y = Severity)

Gewalt Hamilton Associates, Inc. cyber incidents detection timeline including parent company and subsidiaries

Incident History — Egis in ANZ (X = Date, Y = Severity)

Egis in ANZ cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/gewalt-hamilton-associates-inc-.jpeg
Gewalt Hamilton Associates, Inc.
Incidents

No Incident

https://images.rankiteo.com/companyimages/indec-consulting.jpeg
Egis in ANZ
Incidents

No Incident

FAQ

Egis in ANZ company demonstrates a stronger AI Cybersecurity Score compared to Gewalt Hamilton Associates, Inc. company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Egis in ANZ company has disclosed a higher number of cyber incidents compared to Gewalt Hamilton Associates, Inc. company.

In the current year, Egis in ANZ company and Gewalt Hamilton Associates, Inc. company have not reported any cyber incidents.

Neither Egis in ANZ company nor Gewalt Hamilton Associates, Inc. company has reported experiencing a ransomware attack publicly.

Neither Egis in ANZ company nor Gewalt Hamilton Associates, Inc. company has reported experiencing a data breach publicly.

Neither Egis in ANZ company nor Gewalt Hamilton Associates, Inc. company has reported experiencing targeted cyberattacks publicly.

Neither Gewalt Hamilton Associates, Inc. company nor Egis in ANZ company has reported experiencing or disclosing vulnerabilities publicly.

Neither Gewalt Hamilton Associates, Inc. nor Egis in ANZ holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Gewalt Hamilton Associates, Inc. company nor Egis in ANZ company has publicly disclosed detailed information about the number of their subsidiaries.

Gewalt Hamilton Associates, Inc. company employs more people globally than Egis in ANZ company, reflecting its scale as a Civil Engineering.

Neither Gewalt Hamilton Associates, Inc. nor Egis in ANZ holds SOC 2 Type 1 certification.

Neither Gewalt Hamilton Associates, Inc. nor Egis in ANZ holds SOC 2 Type 2 certification.

Neither Gewalt Hamilton Associates, Inc. nor Egis in ANZ holds ISO 27001 certification.

Neither Gewalt Hamilton Associates, Inc. nor Egis in ANZ holds PCI DSS certification.

Neither Gewalt Hamilton Associates, Inc. nor Egis in ANZ holds HIPAA certification.

Neither Gewalt Hamilton Associates, Inc. nor Egis in ANZ holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity. An attacker with physical access can replace or reflash the EEPROM to run arbitrary code that persists across reboots. Because this design predates modern secure-boot or signed-update mechanisms, affected systems should be physically protected or retired from service. The vendor has not indicated that firmware updates are available for this legacy model.

Risk Information
cvss4
Base: 7.0
Severity: LOW
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules. Without cryptographic boot verification, an attacker with physical access can modify or replace the bootloader, kernel, or filesystem and gain persistent code execution on reboot. This weakness allows long-term firmware tampering that survives power cycles. The vendor indicates that more recent firmware updates strengthen update-chain integrity and disable physical update ports to mitigate related attack avenues.

Risk Information
cvss4
Base: 7.0
Severity: LOW
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them with a single hard-coded AES key shared across devices, and uses a truncated HMAC for integrity validation. Attackers with access to the update interface - typically via the unit's USB update port - can craft or modify firmware packages to execute arbitrary code as root, allowing persistent compromise of the device's integrity and deck randomization process. Physical or on-premises access remains the most likely attack path, though network-exposed or telemetry-enabled deployments could theoretically allow remote exploitation if misconfigured. The vendor confirmed that firmware updates have been issued to correct these update-chain weaknesses and that USB update access has been disabled on affected units.

Risk Information
cvss4
Base: 7.0
Severity: LOW
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCFB.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeGCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/SHA256NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeEngine.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCBC.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/fips/AESNativeCTR.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCFB.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeEngine.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCBC.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeGCMSIV.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCCM.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/engines/AESNativeCTR.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA256NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA224NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA3NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHAKENativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA512NativeDigest.Java, core/src/main/jdk1.9/org/bouncycastle/crypto/digests/SHA384NativeDigest.Java. This issue affects Bouncy Castle for Java FIPS: from 2.1.0 through 2.1.1; Bouncy Castle for Java LTS: from 2.73.0 through 2.73.7.

Risk Information
cvss4
Base: 5.9
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:U/V:C/RE:M/U:Amber
Description

Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in Wasmtime contained a bug where it's possible to carefully craft a component, which when called in a specific way, would crash the host with a segfault or assert failure. Wasmtime 38.0.3 has been released and is patched to fix this issue. There are no workarounds.

Risk Information
cvss4
Base: 2.1
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X