Comparison Overview

Gilt

VS

Amazon

Gilt

20 Channel Center St, Boston, Massachusetts, 02210, US
Last Update: 2025-03-17 (UTC)
View Profile
Between 750 and 799
http://www.gilt.com

Gilt is a part of Rue Gilt Groupe. Rue Gilt Groupe is a leading off-price e-commerce portfolio company, connecting the next-generation shopper to world-class brands. We’ve defined the online treasure hunt through our daily sale events allowing a large, loyal member base to discover over 5,000 premium and luxury brands at prices up to 70% off full-price retail. Our vision at RGG is to spark delight through daily discovery – we make shopping an occasion to celebrate. At the forefront of fashion and technology, we’re also in the business of sparking delight for our Associates. We inspire each other, our Members, and ourselves to push past the expected – every day. Our culture is rooted in our values and together we work to demonstrate being Kind, Passionate, Collaborative, Innovative, Tenacious and Empowered.

NAICS: 513
NAICS Definition: Others
Employees: 295
Subsidiaries: 3
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Amazon

undefined, seattle, Washington, 98102, US
Last Update: 2025-03-12 (UTC)
Between 750 and 799
https://www.amazon.com

Amazon.com is an ecommerce platform that sells many product lines, including media (books, movies, music, and software), apparel, baby products, consumer electronics, beauty products, gourmet food, groceries, health and personal care products, industrial & scientific supplies, kitchen items, jewelry, watches, lawn and garden items, musical instruments, sporting goods, tools, automotive items, toys and games, and farm supplies and consulting services.

NAICS: 513
NAICS Definition: Others
Employees: 31,870
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/giltny.jpeg
Gilt
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/amazon-bestt-offers.jpeg
Amazon
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Gilt
100%
Compliance Rate
0/4 Standards Verified
Amazon
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Technology, Information and Internet Industry Average (This Year)

No incidents recorded for Gilt in 2025.

Incidents vs Technology, Information and Internet Industry Average (This Year)

No incidents recorded for Amazon in 2025.

Incident History — Gilt (X = Date, Y = Severity)

Gilt cyber incidents detection timeline including parent company and subsidiaries

Incident History — Amazon (X = Date, Y = Severity)

Amazon cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/giltny.jpeg
Gilt
Incidents

No Incident

https://images.rankiteo.com/companyimages/amazon-bestt-offers.jpeg
Amazon
Incidents

No Incident

FAQ

Amazon company demonstrates a stronger AI Cybersecurity Score compared to Gilt company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Amazon company has disclosed a higher number of cyber incidents compared to Gilt company.

In the current year, Amazon company and Gilt company have not reported any cyber incidents.

Neither Amazon company nor Gilt company has reported experiencing a ransomware attack publicly.

Neither Amazon company nor Gilt company has reported experiencing a data breach publicly.

Neither Amazon company nor Gilt company has reported experiencing targeted cyberattacks publicly.

Neither Gilt company nor Amazon company has reported experiencing or disclosing vulnerabilities publicly.

Neither Gilt nor Amazon holds any compliance certifications.

Neither company holds any compliance certifications.

Gilt company has more subsidiaries worldwide compared to Amazon company.

Amazon company employs more people globally than Gilt company, reflecting its scale as a Technology, Information and Internet.

Neither Gilt nor Amazon holds SOC 2 Type 1 certification.

Neither Gilt nor Amazon holds SOC 2 Type 2 certification.

Neither Gilt nor Amazon holds ISO 27001 certification.

Neither Gilt nor Amazon holds PCI DSS certification.

Neither Gilt nor Amazon holds HIPAA certification.

Neither Gilt nor Amazon holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: System Configuration). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
Description

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension: from 1.43 before 1.44.

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 6.0
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 6.0
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
References