Company Details
good-thyngs
None employees
2,334
561499
goodthyngs.com
0
GOO_6968815
In-progress

Good Thyngs Company CyberSecurity Posture
goodthyngs.comGood Thyngs is a cashless donation and engagement platform for charities of all sizes. It comes with all the tools, donor data, and digital experiences required for charities to engage supporters, extend reach and fundraise in the ways they need to. 👉🏻 Charities build their own donor experiences by using ready-made templates on the platform. You can select from a library of experiences such as cashless donations, collectable trails, hybrid challenges, selfies, quizzes and more. 👉🏻 These experiences are attached to their very own link and QR code which means that all physical and online fundraising can be transformed. 👉🏻 We’ve seen physical objects like mascots, medals, leaflets, and wristbands connect with supporters wherever they are. But we've also seen some great online initiatives like virtual adoptions and social media competitions. ⭐ At Good Thyngs we believe that every charity should have the creative control and tools at their fingertips to nurture supporters for life. By removing the technical barriers, we have made innovation possible for charities of all sizes.
Company Details
good-thyngs
None employees
2,334
561499
goodthyngs.com
0
GOO_6968815
In-progress
Between 750 and 799

Good Thyngs Global Score (TPRM)XXXX



No incidents recorded for Good Thyngs in 2025.
No incidents recorded for Good Thyngs in 2025.
No incidents recorded for Good Thyngs in 2025.
Good Thyngs cyber incidents detection timeline including parent company and subsidiaries

Good Thyngs is a cashless donation and engagement platform for charities of all sizes. It comes with all the tools, donor data, and digital experiences required for charities to engage supporters, extend reach and fundraise in the ways they need to. 👉🏻 Charities build their own donor experiences by using ready-made templates on the platform. You can select from a library of experiences such as cashless donations, collectable trails, hybrid challenges, selfies, quizzes and more. 👉🏻 These experiences are attached to their very own link and QR code which means that all physical and online fundraising can be transformed. 👉🏻 We’ve seen physical objects like mascots, medals, leaflets, and wristbands connect with supporters wherever they are. But we've also seen some great online initiatives like virtual adoptions and social media competitions. ⭐ At Good Thyngs we believe that every charity should have the creative control and tools at their fingertips to nurture supporters for life. By removing the technical barriers, we have made innovation possible for charities of all sizes.


Avalon is a full-service fundraising consulting agency helping nonprofits realize the full potential of their direct marketing programs through multi-channel fundraising strategies that lay the foundation for long-term, sustainable growth. Avalon’s services include: fundraising program strategy and

In collaboration with our co-creators we lift entrepreneurs, so that they can create progress for Denmark. We believe in passionate and innovative entrepreneurs, and our passion is to improve their startups’ chances of achieving success. We offer smart startup grants for entrepreneurs, who can pr

The Dreamcatcher Charitable Foundation is a nationally recognized philanthropic organization. Since 2004, the Foundation has continued to provide life-changing opportunities to Aboriginal People through the provision of financial grants. We have granted over one million dollars to those in need righ

Moore Ink. helps clients with a cause build awareness, understanding and support for the vital work they do to improve people’s lives – a homeless mom, a man with multiple sclerosis, an immigrant family, a teen in crisis, a forgotten senior. We work with organizations in Seattle, the Puget Sound reg

Cogeo works with 501c3 organizations to introduce and implement successful fundraising tactics. We work with a wide range of nonprofits -- from those launching their second capital campaign to those with no fundraising experience at all. Our methods and strategies have helped hundreds of nonprofits

We are looking for new business in any types of packaging, shrinkwrapping, labeling, pick and pack. We are located 90 miles south of Chicago. We can warehouse and distribute as well..ISO certified. We have a 300,000 sq. ft. temperature controlled facility. We have 10 high speed shrink lines, do alot
.png)
TechRadar Pro have tested and ranked all the best antivirus software: Bitdefender remains the top choice.
The use of Internet of Things (IoT) devices is exploding, but cybersecurity considerations on the part of device makers continue to lag,...
11 Universidad Nacional Federico Villarreal, Facultad de Ingeniería Industrial y de Sistemas, Lima, Peru. 22 Universidad Nacional Mayor de San Marcos,...
This is the fourth blog in a series of Covington blogs on cybersecurity policies, executive orders (EOs), and other actions of the new Trump Administration.
Cybersecurity is a necessary part of most businesses in order to thwart cybercriminals and hackers from taking over. Keith Rose, CEO of...
Among the most significant cybersecurity threats this year comes via the Internet of Things (IoT), and they are increasingly becoming more sophisticated and...
Recently, Internet of Things (IoT) usage has increased rapidly, and cybersecurity concerns have also improved. Cybersecurity attacks are...
Ghana's agricultural sector faces numerous challenges, including low productivity, climate change, and limited access to modern technologies.
Cybersecurity is a challenging career path, filled with professional opportunities. Learn about the top cybersecurity jobs and the training and background they...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Good Thyngs is https://goodthyngs.com/.
According to Rankiteo, Good Thyngs’s AI-generated cybersecurity score is 759, reflecting their Fair security posture.
According to Rankiteo, Good Thyngs currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Good Thyngs is not certified under SOC 2 Type 1.
According to Rankiteo, Good Thyngs does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Good Thyngs is not listed as GDPR compliant.
According to Rankiteo, Good Thyngs does not currently maintain PCI DSS compliance.
According to Rankiteo, Good Thyngs is not compliant with HIPAA regulations.
According to Rankiteo,Good Thyngs is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Good Thyngs operates primarily in the Fundraising industry.
Good Thyngs employs approximately None employees people worldwide.
Good Thyngs presently has no subsidiaries across any sectors.
Good Thyngs’s official LinkedIn profile has approximately 2,334 followers.
Good Thyngs is classified under the NAICS code 561499, which corresponds to All Other Business Support Services.
No, Good Thyngs does not have a profile on Crunchbase.
Yes, Good Thyngs maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/good-thyngs.
As of December 21, 2025, Rankiteo reports that Good Thyngs has not experienced any cybersecurity incidents.
Good Thyngs has an estimated 1,146 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, Good Thyngs has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service, which performs file system operations without impersonating the requesting user. Due to improper privilege handling and a time-of-check time-of-use race condition combined with symbolic link and mount point manipulation, a local authenticated attacker can coerce the service into deleting arbitrary directories with SYSTEM privileges. This can be exploited to delete protected system folders such as C:\\Config.msi and subsequently achieve execution as NT AUTHORITY\\SYSTEM via MSI rollback techniques.
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capability check on the 'cs_update_application_status_callback' function in all versions up to, and including, 7.7. This makes it possible for authenticated attackers, with Candidate-level access and above, to inject cross-site scripting into the 'status' parameter of applied jobs for any user.
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.7 via the 'cs_update_application_status_callback' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Candidate-level access and above, to send a site-generated email with injected HTML to any user.
The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `thegem_te_search` shortcode in all versions up to, and including, 1.32.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability requires TheGem theme (premium) to be installed with Header Builder mode enabled, and the FiboSearch "Replace search bars" option enabled for TheGem integration.
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajax_get_members function. This is due to the use of a predictable low-entropy token (5 hex characters derived from md5 of post ID) to identify member directories and insufficient authorization checks on the unauthenticated AJAX endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, display names, user roles (including administrator accounts), profile URLs, and user IDs by enumerating predictable directory_id values or brute-forcing the small 16^5 token space.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.