Comparison Overview

Goken America

VS

UGL

Goken America

5100 Parkcenter Ave, Dublin, OH, 43016, US
Last Update: 2025-05-06 (UTC)
Between 750 and 799

Goken America is an engineering & technology services company that works collaboratively to make a notable difference for its clients, team members, and the communities in which its employees live and work. Goken understands that to achieve real change, its associates must be empowered. They must have the tools to explore and build, and the passion to share empathy and understanding. The key to Goken’s singular business model is the company’s relentless drive to be more than a technical services company. This means that Goken leaders must place uncommon trust and value in the teams and the talent who facilitate the organization’s fearless approach to problem-solving and client engagement. To uncover the root causes of workforce issues, faltering production cycles, and other challenges, empowered Goken associates take the time to immerse themselves in client cultural underpinnings. Then, Goken adds competitive value with a multi-dimensional approach that requires more than simply adding human capital. Instead, striking the perfect balance between a customer’s wants and needs, Goken infuses change techniques with technology; skills training with organizational development; and staffing projects with managed services. Rather than a blueprint of static deliverables, Goken is a nimble provider of engineering and technology solutions that, because they are sustainable and repeatable, accelerate product development and deliver clients the advantage of time. Time to get ahead of the competition. Time to focus on business development. Time to innovate and shape trends. Headquartered in Columbus, Ohio, Goken has been making a difference for clients in the automotive, medical device, and aerospace industries since 2004. Learn more at www.goken-global.com Check out our youtube! https://www.youtube.com/channel/UCdDGdBxEwzg95OO3QQFEjhw

NAICS: 54139
NAICS Definition: Engineering Services
Employees: 171
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

UGL

Level 8, 40 Miller Street, North Sydney, NSW, 2060, AU
Last Update: 2025-03-04 (UTC)
Between 750 and 799

UGL is CIMIC Group's specialist end-to-end engineering, services and operations provider. We have a rich history dating back to 1899 and since then we have grown to be a market leader in many of the sectors in which we operate. Working with some of the most important companies and governments in Australia and globally, we help to play a role in people’s lives every day. We keep Australia moving through our transport manufacturing, maintenance and operations offering, and we support the energy sector through our renewables, power generation, resources and transmission operations. We are helping to shape the country through our major infrastructure projects across Australia and we’re preparing for the future with our new energy, Defence, telecommunications and technology expertise. We are passionate about our 9000+ people and keeping them safe. We’re experts in what we do, and our in-house engineering team ensures we can provide a true end-to-end outcome for our customers. With projects, operations and offices throughout the country, our footprint means we are involved in communities across Australia, providing expertise for our customers and employment and career opportunities for all Australians. ugllimited.com @UGLPtyLimited

NAICS: 54139
NAICS Definition: Engineering Services
Employees: 11,687
Subsidiaries: 9
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/goken-america.jpeg
Goken America
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/ugl-limited.jpeg
UGL
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Goken America
100%
Compliance Rate
0/4 Standards Verified
UGL
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Engineering Services Industry Average (This Year)

No incidents recorded for Goken America in 2025.

Incidents vs Engineering Services Industry Average (This Year)

No incidents recorded for UGL in 2025.

Incident History — Goken America (X = Date, Y = Severity)

Goken America cyber incidents detection timeline including parent company and subsidiaries

Incident History — UGL (X = Date, Y = Severity)

UGL cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/goken-america.jpeg
Goken America
Incidents

No Incident

https://images.rankiteo.com/companyimages/ugl-limited.jpeg
UGL
Incidents

No Incident

FAQ

UGL company demonstrates a stronger AI Cybersecurity Score compared to Goken America company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, UGL company has disclosed a higher number of cyber incidents compared to Goken America company.

In the current year, UGL company and Goken America company have not reported any cyber incidents.

Neither UGL company nor Goken America company has reported experiencing a ransomware attack publicly.

Neither UGL company nor Goken America company has reported experiencing a data breach publicly.

Neither UGL company nor Goken America company has reported experiencing targeted cyberattacks publicly.

Neither Goken America company nor UGL company has reported experiencing or disclosing vulnerabilities publicly.

Neither Goken America nor UGL holds any compliance certifications.

Neither company holds any compliance certifications.

UGL company has more subsidiaries worldwide compared to Goken America company.

UGL company employs more people globally than Goken America company, reflecting its scale as a Engineering Services.

Neither Goken America nor UGL holds SOC 2 Type 1 certification.

Neither Goken America nor UGL holds SOC 2 Type 2 certification.

Neither Goken America nor UGL holds ISO 27001 certification.

Neither Goken America nor UGL holds PCI DSS certification.

Neither Goken America nor UGL holds HIPAA certification.

Neither Goken America nor UGL holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘percentage’ parameter in all versions up to, and including, 5.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Risk Information
cvss3
Base: 6.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Description

The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number or size of the files it will combine, which allows remote attackers to create very large responses that lead to a denial of service attack via the URL query string.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary directories on the target machine.

Risk Information
cvss3
Base: 4.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and create arbitrary directories on the target machine.

Risk Information
cvss3
Base: 4.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary files on the target machine.

Risk Information
cvss3
Base: 7.5
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H
cvss4
Base: 8.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X