Comparison Overview

Gold's Gym

VS

Purpose Brands, LLC

Gold's Gym

5420 Lyndon B Johnson Fwy, Suite 300, Dallas, Texas, US, 75240
Last Update: 2026-01-17
View Profile
Between 750 and 799
http://www.goldsgym.com

Gold’s Gym has been the world’s trusted fitness authority since 1965. From its beginning as a small gym in Venice, California, Gold’s Gym has grown into a global icon with more than 700 locations serving 3 million people across six continents each day. Whether you are an industry professional or interested in pursuing a dream to make your passion for Fitness a meaningful reality, we want to help you transform your life. Our journey started on a beach in California, yours starts today. Join our Talent Network to receive updates on open positions. http://www.goldsgym.com/join-our-team

NAICS: 71394
NAICS Definition: Fitness and Recreational Sports Centers
Employees: 16,850
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Purpose Brands, LLC

111 Weir Drive, Woodbury, 55125, US
Last Update: 2026-01-18
Between 700 and 749
https://purposebrands.com/

Purpose Brands, LLC provides fitness, nutrition and wellness support and services to more than 7,000 communities and millions of people around the world. We own and operate the world’s largest and most trusted portfolio of fitness, health and wellness franchise brands and services: Anytime Fitness, Orangetheory Fitness, Waxing the City, Basecamp Fitness/SUMHIIT Fitness, The Bar Method, Stronger U Nutrition, Healthy Contributions and Provision Security. Together, these brands generate USD$3.7 billion in revenue, operating across 50 countries on all seven continents with a combined 6 million members. We combine this portfolio with a world-class franchise operating model and suite of services that helps our brands and franchise owners accelerate growth and deliver exceptional member experiences. Above all, our culture, people and franchise owners share a commitment to personal wellness; a spirit of service to help those who seek to improve their own physical and mental wellbeing; tireless advocacy and innovation for fitness, health and wellness experiences; and a daily honor to earn the trust in our brands from our franchise owners and the people who help consumers on their personal wellness journeys.

NAICS: 71394
NAICS Definition: Fitness and Recreational Sports Centers
Employees: 29,223
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/gold's-gym.jpeg
Gold's Gym
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/purpose-brands-llc.jpeg
Purpose Brands, LLC
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Gold's Gym
100%
Compliance Rate
0/4 Standards Verified
Purpose Brands, LLC
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Wellness and Fitness Services Industry Average (This Year)

No incidents recorded for Gold's Gym in 2026.

Incidents vs Wellness and Fitness Services Industry Average (This Year)

No incidents recorded for Purpose Brands, LLC in 2026.

Incident History — Gold's Gym (X = Date, Y = Severity)

Gold's Gym cyber incidents detection timeline including parent company and subsidiaries

Incident History — Purpose Brands, LLC (X = Date, Y = Severity)

Purpose Brands, LLC cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/gold's-gym.jpeg
Gold's Gym
Incidents

No Incident

https://images.rankiteo.com/companyimages/purpose-brands-llc.jpeg
Purpose Brands, LLC
Incidents

Date Detected: 12/2023
Type:Breach
Blog: Blog

FAQ

Gold's Gym company demonstrates a stronger AI Cybersecurity Score compared to Purpose Brands, LLC company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Purpose Brands, LLC company has historically faced a number of disclosed cyber incidents, whereas Gold's Gym company has not reported any.

In the current year, Purpose Brands, LLC company and Gold's Gym company have not reported any cyber incidents.

Neither Purpose Brands, LLC company nor Gold's Gym company has reported experiencing a ransomware attack publicly.

Purpose Brands, LLC company has disclosed at least one data breach, while Gold's Gym company has not reported such incidents publicly.

Neither Purpose Brands, LLC company nor Gold's Gym company has reported experiencing targeted cyberattacks publicly.

Neither Gold's Gym company nor Purpose Brands, LLC company has reported experiencing or disclosing vulnerabilities publicly.

Neither Gold's Gym nor Purpose Brands, LLC holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Gold's Gym company nor Purpose Brands, LLC company has publicly disclosed detailed information about the number of their subsidiaries.

Purpose Brands, LLC company employs more people globally than Gold's Gym company, reflecting its scale as a Wellness and Fitness Services.

Neither Gold's Gym nor Purpose Brands, LLC holds SOC 2 Type 1 certification.

Neither Gold's Gym nor Purpose Brands, LLC holds SOC 2 Type 2 certification.

Neither Gold's Gym nor Purpose Brands, LLC holds ISO 27001 certification.

Neither Gold's Gym nor Purpose Brands, LLC holds PCI DSS certification.

Neither Gold's Gym nor Purpose Brands, LLC holds HIPAA certification.

Neither Gold's Gym nor Purpose Brands, LLC holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
References
Description

Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Description

Azure Entra ID Elevation of Privilege Vulnerability

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
References
Description

Moonraker is a Python web server providing API access to Klipper 3D printing firmware. In versions 0.9.3 and below, instances configured with the "ldap" component enabled are vulnerable to LDAP search filter injection techniques via the login endpoint. The 401 error response message can be used to determine whether or not a search was successful, allowing for brute force methods to discover LDAP entries on the server such as user IDs and user attributes. This issue has been fixed in version 0.10.0.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss4
Base: 2.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single server. Versions 3.7.0 and above allow an authenticated user to execute arbitrary system commands on the host server by injecting shell metacharacters into backup filenames. The BackupManager fails to sanitize the filenames of uploaded backups. The system persists user-uploaded files directly to the host filesystem using the raw originalname provided in the request. This allows an attacker to stage a file containing shell metacharacters (e.g., $(id).tar.gz) at a predictable path, which is later referenced during the restore process. The successful storage of the file is what allows the subsequent restore command to reference and execute it. This issue has been fixed in version 4.7.0.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 8.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
References