Comparison Overview

Gilt

VS

YouTube

Gilt

20 Channel Center St, Boston, Massachusetts, 02210, US
Last Update: 2025-03-17 (UTC)
View Profile
Between 750 and 799
http://www.gilt.com

Gilt is a part of Rue Gilt Groupe. Rue Gilt Groupe is a leading off-price e-commerce portfolio company, connecting the next-generation shopper to world-class brands. We’ve defined the online treasure hunt through our daily sale events allowing a large, loyal member base to discover over 5,000 premium and luxury brands at prices up to 70% off full-price retail. Our vision at RGG is to spark delight through daily discovery – we make shopping an occasion to celebrate. At the forefront of fashion and technology, we’re also in the business of sparking delight for our Associates. We inspire each other, our Members, and ourselves to push past the expected – every day. Our culture is rooted in our values and together we work to demonstrate being Kind, Passionate, Collaborative, Innovative, Tenacious and Empowered.

NAICS: 513
NAICS Definition: Others
Employees: 295
Subsidiaries: 3
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

YouTube

901 Cherry Ave., San Bruno, CA, 94066, US
Last Update: 2025-05-06 (UTC)
Between 800 and 849
http://www.youtube.com/jobs

YouTube is a team-oriented, creative workplace where every single employee has a voice in the choices we make and the features we implement. We work together in small teams to design, develop, and roll out key features and products in very short time frames. Which means something you write today could be seen by millions of viewers tomorrow. And even though we’re a part of Google and enjoy all of the corporate perks, it still feels like you’re working at a startup. YouTube is headquartered in San Bruno, California, 12 miles south of San Francisco. We also have many job openings in Mountain View, and across the globe

NAICS: 513
NAICS Definition: Others
Employees: 123,138
Subsidiaries: 44
12-month incidents
0
Known data breaches
5
Attack type number
5

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/giltny.jpeg
Gilt
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/youtube.jpeg
YouTube
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Gilt
100%
Compliance Rate
0/4 Standards Verified
YouTube
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Technology, Information and Internet Industry Average (This Year)

No incidents recorded for Gilt in 2025.

Incidents vs Technology, Information and Internet Industry Average (This Year)

No incidents recorded for YouTube in 2025.

Incident History — Gilt (X = Date, Y = Severity)

Gilt cyber incidents detection timeline including parent company and subsidiaries

Incident History — YouTube (X = Date, Y = Severity)

YouTube cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/giltny.jpeg
Gilt
Incidents

No Incident

https://images.rankiteo.com/companyimages/youtube.jpeg
YouTube
Incidents

Date Detected: 8/2025
Type:Cyber Attack
Attack Vector: Email Spoofing, Messaging Platform (WhatsApp)
Motivation: Financial Gain (Fraudulent Services/Products) or Data Theft
Blog: Blog

Date Detected: 8/2025
Type:Vulnerability
Attack Vector: Memory Allocator Manipulation, Heap Spraying, Dangling Pointer Dereference, Function Pointer Overwrite, Virtual Function Table Corruption, Race Conditions in Multithreaded Code, Callback-Based Object Lifetime Exploitation, JavaScript Engine Manipulation (e.g., Chrome FileReader), Pointer Authentication Bypass
Motivation: Arbitrary Code Execution, Privilege Escalation, Data Corruption, Bypassing Security Mitigations (DEP, ASLR, CFI), Exploit Development for Malware Distribution, Targeted Attacks on Browsers/OS/Critical Infrastructure
Blog: Blog

Date Detected: 8/2025
Type:Vulnerability
Attack Vector: Use-After-Free (UAF) vulnerability in the Linux HFSC queuing discipline
Motivation: Security Research and Bounty
Blog: Blog

FAQ

YouTube company demonstrates a stronger AI Cybersecurity Score compared to Gilt company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

YouTube company has historically faced a number of disclosed cyber incidents, whereas Gilt company has not reported any.

In the current year, YouTube company has reported more cyber incidents than Gilt company.

YouTube company has confirmed experiencing a ransomware attack, while Gilt company has not reported such incidents publicly.

YouTube company has disclosed at least one data breach, while Gilt company has not reported such incidents publicly.

YouTube company has reported targeted cyberattacks, while Gilt company has not reported such incidents publicly.

YouTube company has disclosed at least one vulnerability, while Gilt company has not reported such incidents publicly.

Neither Gilt nor YouTube holds any compliance certifications.

Neither company holds any compliance certifications.

YouTube company has more subsidiaries worldwide compared to Gilt company.

YouTube company employs more people globally than Gilt company, reflecting its scale as a Technology, Information and Internet.

Neither Gilt nor YouTube holds SOC 2 Type 1 certification.

Neither Gilt nor YouTube holds SOC 2 Type 2 certification.

Neither Gilt nor YouTube holds ISO 27001 certification.

Neither Gilt nor YouTube holds PCI DSS certification.

Neither Gilt nor YouTube holds HIPAA certification.

Neither Gilt nor YouTube holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: System Configuration). Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
Description

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension: from 1.43 before 1.44.

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 6.0
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Published
Date
2025-10-21
Updated
Date
2025-10-21
Risk Information
cvss3
Base: 6.0
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
References