Comparison Overview

Givaudan

VS

Bayer

Givaudan

Givaudan International SA, 5, Chemin de la Parfumerie, Vernier, Geneva, CH, 1214
Last Update: 2025-12-09
View Profile
Between 800 and 849
http://www.givaudan.com

Givaudan is a global leader in Fragrance & Beauty and Taste & Wellbeing. We celebrate the beauty of human experience by creating for happier, healthier lives with love for nature. Together with our customers we deliver food experiences, craft inspired fragrances, and develop beauty and wellbeing solutions that make people look and feel good. With over 163 locations in 52 countries and over 78 production sites, of which 31 are located in Europe, 22 in North America, 17 in Latin America, 8 in Asia-Pacific, and 1 across South Asia, the Middle East, and Africa, we are committed to driving purpose-led growth that makes a positive impact. Givaudan: Human by nature. www.givaudan.com

NAICS: 325
NAICS Definition: Chemical Manufacturing
Employees: 13,029
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Bayer

Kaiser-Wilhelm-Allee, Leverkusen, North Rhine-Westphalia, DE, 51373
Last Update: 2025-12-09
Between 750 and 799
https://www.bayer.com/

Bayer is a global enterprise with core competencies in the life science fields of healthcare and nutrition. We design our products and services to serve the most essential human needs of health and nutrition. At the same time, we strive to address some of the world’s biggest challenges presented by a growing and aging global population. At Bayer, we’re committed to driving sustainable development and generate a positive impact with our businesses. Through the power of science, we’re pioneering new possibilities that advance life for all of us. That means reimagining how we care for ourselves and one another by empowering everyday health, improving approaches to patient care, and finding better ways to nourish our communities around the world. Data Privacy Statement & Imprint: https://www.bayer.com/en/glob-li-bayer-en-dps-imprint

NAICS: 325
NAICS Definition: Chemical Manufacturing
Employees: 87,546
Subsidiaries: 13
12-month incidents
1
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/givaudan.jpeg
Givaudan
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/bayer.jpeg
Bayer
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Givaudan
100%
Compliance Rate
0/4 Standards Verified
Bayer
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Chemical Manufacturing Industry Average (This Year)

No incidents recorded for Givaudan in 2025.

Incidents vs Chemical Manufacturing Industry Average (This Year)

Bayer has 0.0% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incident History — Givaudan (X = Date, Y = Severity)

Givaudan cyber incidents detection timeline including parent company and subsidiaries

Incident History — Bayer (X = Date, Y = Severity)

Bayer cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/givaudan.jpeg
Givaudan
Incidents

No Incident

https://images.rankiteo.com/companyimages/bayer.jpeg
Bayer
Incidents

Date Detected: 8/2025
Type:Breach
Attack Vector: Third-Party Vendor Vulnerabilities, Semantic Incompatibilities in Data Systems, Lack of Standardized AI Governance, Cross-Border Data Sharing Weaknesses
Motivation: Financial Gain (Data Monetization), Exploitation of Regulatory Gaps, Competitive Advantage via Unauthorized Data Access
Blog: Blog

FAQ

Givaudan company demonstrates a stronger AI Cybersecurity Score compared to Bayer company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Bayer company has historically faced a number of disclosed cyber incidents, whereas Givaudan company has not reported any.

In the current year, Bayer company has reported more cyber incidents than Givaudan company.

Neither Bayer company nor Givaudan company has reported experiencing a ransomware attack publicly.

Bayer company has disclosed at least one data breach, while Givaudan company has not reported such incidents publicly.

Neither Bayer company nor Givaudan company has reported experiencing targeted cyberattacks publicly.

Neither Givaudan company nor Bayer company has reported experiencing or disclosing vulnerabilities publicly.

Neither Givaudan nor Bayer holds any compliance certifications.

Neither company holds any compliance certifications.

Bayer company has more subsidiaries worldwide compared to Givaudan company.

Bayer company employs more people globally than Givaudan company, reflecting its scale as a Chemical Manufacturing.

Neither Givaudan nor Bayer holds SOC 2 Type 1 certification.

Neither Givaudan nor Bayer holds SOC 2 Type 2 certification.

Neither Givaudan nor Bayer holds ISO 27001 certification.

Neither Givaudan nor Bayer holds PCI DSS certification.

Neither Givaudan nor Bayer holds HIPAA certification.

Neither Givaudan nor Bayer holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
References
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
References
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
References
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Published
Date
2025-12-14
Updated
Date
2025-12-14
Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
References