Comparison Overview

Green Ronin Publishing, LLC

VS

Pieces of Learning

Green Ronin Publishing, LLC

undefined, undefined, undefined, undefined, US
Last Update: 2025-11-26
View Profile
Between 750 and 799
http://greenronin.com

Green Ronin Publishing is a Seattle-based company dedicated to the art of great games. Since the year 2000, Green Ronin has established a reputation for quality and innovation that is second to none, publishing such roleplaying game hits as Fantasy AGE, Modern AGE, The Expanse, Blue Rose, and Mutants & Masterminds, winning over 40 awards for TTRPG excellence. For an unprecedented three years running, Green Ronin won the prestigious GenCon & EnWorld Award for Best Publisher.

NAICS: 511
NAICS Definition: Publishing Industries (except Internet)
Employees: 24
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Pieces of Learning

1112 N. Carbon Street, Marion, IL, 62959, US
Last Update: 2025-11-26
Between 750 and 799
http://www.piecesoflearning.com

Since 1989, Pieces of Learning has offered staff development and differentiated resources focused on research-based differentiated instruction. Our high-quality products meet the needs of teachers dedicated to providing age-, ability-, and learning style-appropriate strategies and activities. Our supplemental activity books improve student thinking and questioning skills, encourage creativity in the language arts, promote critical thinking in math and science, explore character education, present research skills and provide enrichment in science and social studies.

NAICS: 511
NAICS Definition:
Employees: 8
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/green-ronin-publishing.jpeg
Green Ronin Publishing, LLC
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/pieces-of-learning.jpeg
Pieces of Learning
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Green Ronin Publishing, LLC
100%
Compliance Rate
0/4 Standards Verified
Pieces of Learning
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Book and Periodical Publishing Industry Average (This Year)

No incidents recorded for Green Ronin Publishing, LLC in 2025.

Incidents vs Book and Periodical Publishing Industry Average (This Year)

No incidents recorded for Pieces of Learning in 2025.

Incident History — Green Ronin Publishing, LLC (X = Date, Y = Severity)

Green Ronin Publishing, LLC cyber incidents detection timeline including parent company and subsidiaries

Incident History — Pieces of Learning (X = Date, Y = Severity)

Pieces of Learning cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/green-ronin-publishing.jpeg
Green Ronin Publishing, LLC
Incidents

No Incident

https://images.rankiteo.com/companyimages/pieces-of-learning.jpeg
Pieces of Learning
Incidents

No Incident

FAQ

Pieces of Learning company demonstrates a stronger AI Cybersecurity Score compared to Green Ronin Publishing, LLC company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Pieces of Learning company has disclosed a higher number of cyber incidents compared to Green Ronin Publishing, LLC company.

In the current year, Pieces of Learning company and Green Ronin Publishing, LLC company have not reported any cyber incidents.

Neither Pieces of Learning company nor Green Ronin Publishing, LLC company has reported experiencing a ransomware attack publicly.

Neither Pieces of Learning company nor Green Ronin Publishing, LLC company has reported experiencing a data breach publicly.

Neither Pieces of Learning company nor Green Ronin Publishing, LLC company has reported experiencing targeted cyberattacks publicly.

Neither Green Ronin Publishing, LLC company nor Pieces of Learning company has reported experiencing or disclosing vulnerabilities publicly.

Neither Green Ronin Publishing, LLC nor Pieces of Learning holds any compliance certifications.

Neither company holds any compliance certifications.

Green Ronin Publishing, LLC company has more subsidiaries worldwide compared to Pieces of Learning company.

Green Ronin Publishing, LLC company employs more people globally than Pieces of Learning company, reflecting its scale as a Book and Periodical Publishing.

Neither Green Ronin Publishing, LLC nor Pieces of Learning holds SOC 2 Type 1 certification.

Neither Green Ronin Publishing, LLC nor Pieces of Learning holds SOC 2 Type 2 certification.

Neither Green Ronin Publishing, LLC nor Pieces of Learning holds ISO 27001 certification.

Neither Green Ronin Publishing, LLC nor Pieces of Learning holds PCI DSS certification.

Neither Green Ronin Publishing, LLC nor Pieces of Learning holds HIPAA certification.

Neither Green Ronin Publishing, LLC nor Pieces of Learning holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Published
Date
2025-11-27
Updated
Date
2025-11-27
Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Published
Date
2025-11-27
Updated
Date
2025-11-27
Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Published
Date
2025-11-27
Updated
Date
2025-11-27
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Published
Date
2025-11-27
Updated
Date
2025-11-27
References
Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.

Published
Date
2025-11-27
Updated
Date
2025-11-27
References