Comparison Overview

Gold's Gym

VS

Herbalife

Gold's Gym

5420 Lyndon B Johnson Fwy, Suite 300, Dallas, Texas, US, 75240
Last Update: 2026-01-17
Between 750 and 799

Gold’s Gym has been the world’s trusted fitness authority since 1965. From its beginning as a small gym in Venice, California, Gold’s Gym has grown into a global icon with more than 700 locations serving 3 million people across six continents each day. Whether you are an industry professional or interested in pursuing a dream to make your passion for Fitness a meaningful reality, we want to help you transform your life. Our journey started on a beach in California, yours starts today. Join our Talent Network to receive updates on open positions. http://www.goldsgym.com/join-our-team

NAICS: 71394
NAICS Definition: Fitness and Recreational Sports Centers
Employees: 16,850
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Herbalife

800 W Olympic Blvd, Los Angeles, CA, US, 90015
Last Update: 2026-01-17
Between 750 and 799

Herbalife is a global health and wellness community born to support you in living your best life. For over 40 years and in more than 90 countries, we’ve empowered millions of people to make real changes to their lives with our science-backed products, the support of a coach – what we call an Herbalife Distributor – and the opportunity to build a business. And we’re just getting started. To us, the best lives are balanced lives. Through our Herbalife Distributors, who foster community, personal growth and business opportunities to help you thrive, we offer a wide range of products designed to help you meet your needs and reach your goals. You bring the will to get started, and we’ll help you every step of the way. Herbalife's focus on improving communities inspires people to come work for us. Our 11,000+ global employees play a crucial role in realizing Herbalife's passion for helping people. Herbalife has been recognized with numerous global employer awards, including Achiever’s Elite 8 of the Top 50 Most Engaged 8 Workplaces in 2018 and 2021, Achiever’s Top 50 Most Engaged Workplaces in 2019, and Best Employers for Women by Forbes in 2020. Herbalife sponsors more than 150 world-class athletes, teams, and events, including Cristiano Ronaldo, the Los Angeles Galaxy soccer team, and 5 National Olympic Committees. In addition, Herbalife created the Herbalife Nutrition Foundation, our Nutrition for Zero Hunger initiative and partnered with several organizations, including Feed the Children.

NAICS: 71394
NAICS Definition: Fitness and Recreational Sports Centers
Employees: 15,103
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/gold's-gym.jpeg
Gold's Gym
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/herbalife.jpeg
Herbalife
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Gold's Gym
100%
Compliance Rate
0/4 Standards Verified
Herbalife
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Wellness and Fitness Services Industry Average (This Year)

No incidents recorded for Gold's Gym in 2026.

Incidents vs Wellness and Fitness Services Industry Average (This Year)

No incidents recorded for Herbalife in 2026.

Incident History — Gold's Gym (X = Date, Y = Severity)

Gold's Gym cyber incidents detection timeline including parent company and subsidiaries

Incident History — Herbalife (X = Date, Y = Severity)

Herbalife cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/gold's-gym.jpeg
Gold's Gym
Incidents

No Incident

https://images.rankiteo.com/companyimages/herbalife.jpeg
Herbalife
Incidents

No Incident

FAQ

Gold's Gym company demonstrates a stronger AI Cybersecurity Score compared to Herbalife company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Herbalife company has disclosed a higher number of cyber incidents compared to Gold's Gym company.

In the current year, Herbalife company and Gold's Gym company have not reported any cyber incidents.

Neither Herbalife company nor Gold's Gym company has reported experiencing a ransomware attack publicly.

Neither Herbalife company nor Gold's Gym company has reported experiencing a data breach publicly.

Neither Herbalife company nor Gold's Gym company has reported experiencing targeted cyberattacks publicly.

Neither Gold's Gym company nor Herbalife company has reported experiencing or disclosing vulnerabilities publicly.

Neither Gold's Gym nor Herbalife holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Gold's Gym company nor Herbalife company has publicly disclosed detailed information about the number of their subsidiaries.

Gold's Gym company employs more people globally than Herbalife company, reflecting its scale as a Wellness and Fitness Services.

Neither Gold's Gym nor Herbalife holds SOC 2 Type 1 certification.

Neither Gold's Gym nor Herbalife holds SOC 2 Type 2 certification.

Neither Gold's Gym nor Herbalife holds ISO 27001 certification.

Neither Gold's Gym nor Herbalife holds PCI DSS certification.

Neither Gold's Gym nor Herbalife holds HIPAA certification.

Neither Gold's Gym nor Herbalife holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Description

Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

Risk Information
cvss3
Base: 9.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description

Azure Entra ID Elevation of Privilege Vulnerability

Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Description

Moonraker is a Python web server providing API access to Klipper 3D printing firmware. In versions 0.9.3 and below, instances configured with the "ldap" component enabled are vulnerable to LDAP search filter injection techniques via the login endpoint. The 401 error response message can be used to determine whether or not a search was successful, allowing for brute force methods to discover LDAP entries on the server such as user IDs and user attributes. This issue has been fixed in version 0.10.0.

Risk Information
cvss4
Base: 2.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single server. Versions 3.7.0 and above allow an authenticated user to execute arbitrary system commands on the host server by injecting shell metacharacters into backup filenames. The BackupManager fails to sanitize the filenames of uploaded backups. The system persists user-uploaded files directly to the host filesystem using the raw originalname provided in the request. This allows an attacker to stage a file containing shell metacharacters (e.g., $(id).tar.gz) at a predictable path, which is later referenced during the restore process. The successful storage of the file is what allows the subsequent restore command to reference and execute it. This issue has been fixed in version 4.7.0.

Risk Information
cvss3
Base: 8.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H