HH
Company Details
Linkedin ID:
help-for-heroes
Website:
Employees number:
384
Number of followers:
18,323
NAICS:
561
Industry Type:
Homepage:
helpforheroes.org.uk
IP Addresses:
0
Company ID:
HEL_3503569
Scan Status:
In-progress
Help for Heroes Company CyberSecurity Posture
helpforheroes.org.uk
At Help for Heroes, we believe those who serve our country deserve support when they’re wounded. Every day, men and women have to leave their career in the Armed Forces as a result of physical or psychological wounds; their lives changed forever. We help them, and those still serving, to recover and get on with their lives. We give them physical, psychological, financial and welfare support for as long as they need it. We also support their families, because they too can be affected by their loved one’s wounds. We receive almost no funding from the Government, which means we rely on the spirit and generosity of the great British public, our partners and volunteers to keep going. Rest assured, we continue to put pressure on the Government to do more. So far, with your help, more than 25,000 people have been supported, but we know that many more still need us. We won’t stop until every wounded veteran gets the support they deserve. Find out more about Help for Heroes at: helpforheroes.org.uk You can also follow us on Twitter: twitter.com/HelpforHeroes and Instagram: instagram.com/helpforheroes
Help for Heroes A.I CyberSecurity Scoring
HH Risk Score (AI oriented)Between 750 and 799
HH
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
HH Global Score (TPRM)XXXX
HH
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
HH Company CyberSecurity News & History
Past Incidents
0
Attack Types
0
No data available
HH Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for HH
Incidents vs Fundraising Industry Average (This Year)
No incidents recorded for Help for Heroes in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for Help for Heroes in 2025.
Incident Types HH vs Fundraising Industry Avg (This Year)
No incidents recorded for Help for Heroes in 2025.
Incident History — HH (X = Date, Y = Severity)
HH cyber incidents detection timeline including parent company and subsidiaries
HH Company Subsidiaries
At Help for Heroes, we believe those who serve our country deserve support when they’re wounded. Every day, men and women have to leave their career in the Armed Forces as a result of physical or psychological wounds; their lives changed forever. We help them, and those still serving, to recover and get on with their lives. We give them physical, psychological, financial and welfare support for as long as they need it. We also support their families, because they too can be affected by their loved one’s wounds. We receive almost no funding from the Government, which means we rely on the spirit and generosity of the great British public, our partners and volunteers to keep going. Rest assured, we continue to put pressure on the Government to do more. So far, with your help, more than 25,000 people have been supported, but we know that many more still need us. We won’t stop until every wounded veteran gets the support they deserve. Find out more about Help for Heroes at: helpforheroes.org.uk You can also follow us on Twitter: twitter.com/HelpforHeroes and Instagram: instagram.com/helpforheroes
Loading...
HH Similar Companies
Douglas Shaw & Associates
Results, it’s more than an ad campaign, it’s part of the core values which guide our work. This rigorous pursuit for great results, along with respect for the organizations we serve, and a passion for storytelling, help to explain us, but they don’t define us. Our identity as an organization and a
GoFundMe Charity
Introducing: GoFundMe Charity™, a new fundraising suite for nonprofits. GoFundMe Charity™ gives charities of all sizes enterprise-level fundraising software with new features, powered by the social fundraising expertise of GoFundMe. GoFundMe Charity™ includes new functionality with no paywalls, no c
Transplant Alliance Foundation
Transplant Alliance Foundation, Inc., is a 501(c)(3) non-profit, with the mission to spread awareness about Organ Donation. Founded in 2007 by Mary Lovely, a two-time transplant recipient, in hopes of giving back to a community that she has come to love. Mary has the innate ability to connect with o
Great American Opportunities
Since 1975 Southwestern Fundraising, formally known as Great American Opportunities, has been helping schools and organizations earn more than $5.5 billion in profits - and we've never lost sight of our primary focus: helping kids. Southwestern Fundraising is one of the largest and most reputable f
Lilly & Company
Since its inception, Lilly & Company has built a unique and comprehensive strategy for providing the best possible services available in political fundraising and grassroots consulting in Texas. Founded by Susan Lilly in 1996, Lilly & Company began providing grassroots and government affairs cons
Direct Sud
Depuis 2010, Direct Sud accompagne les associations et fondations dans leurs collectes de fonds. Notre mission : participer à la construction d'un monde plus humain. Nous agissons en France métropolitaine et dans les DROM COM où nous sommes fermement implantés depuis plus de 10 ans. Nous sommes p
.png)
HH CyberSecurity News
November 18, 2025 08:00 AM
The Complete List of Hacker And Cybersecurity Movies
Hacker's Movie Guide” with Foreword by Steve Wozniak, co-founder of Apple.
October 23, 2025 07:00 AM
Darktrace Celebrates Unsung Cybersecurity Heroes with Support of Actor, Writer and Director Clark Gregg
Continues its commitment to championing defenders in cybersecurity as a part of its global 'Defend Beyond' campaign.
October 16, 2025 07:00 AM
Help for Heroes – Community Builder (Community Development) – Portsmouth
Salary: Up to £33,995 per annum. Location: Remote in Portsmouth with travel within the UK. See the “Please Note” section below for further...
October 13, 2025 07:00 AM
From hacker to hero, this startup raised $2.6M to redefine cybersecurity with a conscience
Before he was helping companies protect themselves from hackers, Hector Monsegur was one. Operating under the alias “Sabu,” Monsegur was one...
October 05, 2025 07:00 AM
Sport Clips Haircuts Launches Annual "Help A Hero" Campaign to Raise $1.35 Million for Veteran Scholarships
Sport Clips Haircuts launched its 2025 "Help A Hero" scholarship campaign today in partnership with the Veterans of Foreign Wars of the...
September 29, 2025 07:00 AM
UK failing those leaving military service through injury or illness
The UK risks failing another generation of injured veterans, with almost half saying they were left unprepared for civilian life, a new Help...
September 16, 2025 07:00 AM
Alpharetta nonprofit helps America’s heroes find work
Hire Heroes USA takes anxiety out of job search for service members re-entering civilian life.
September 12, 2025 07:00 AM
Without Federal Help, Cyber Defense Is Up to the Rest of Us
We can foster a culture of collaboration and vigilance, ensuring we are not just waiting for a hero to save us, but working to protect...
August 22, 2025 07:00 AM
Be the inbox hero we need and WIN!
Last month we shon a spotlight on Scam Awareness Week. To help everyone across the University stay one step ahead of scammers,...
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
HH CyberSecurity History Information
Official Website of Help for Heroes
The official website of Help for Heroes is http://www.helpforheroes.org.uk.
Help for Heroes’s AI-Generated Cybersecurity Score
According to Rankiteo, Help for Heroes’s AI-generated cybersecurity score is 761, reflecting their Fair security posture.
How many security badges does Help for Heroes’ have ?
According to Rankiteo, Help for Heroes currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does Help for Heroes have SOC 2 Type 1 certification ?
According to Rankiteo, Help for Heroes is not certified under SOC 2 Type 1.
Does Help for Heroes have SOC 2 Type 2 certification ?
According to Rankiteo, Help for Heroes does not hold a SOC 2 Type 2 certification.
Does Help for Heroes comply with GDPR ?
According to Rankiteo, Help for Heroes is not listed as GDPR compliant.
Does Help for Heroes have PCI DSS certification ?
According to Rankiteo, Help for Heroes does not currently maintain PCI DSS compliance.
Does Help for Heroes comply with HIPAA ?
According to Rankiteo, Help for Heroes is not compliant with HIPAA regulations.
Does Help for Heroes have ISO 27001 certification ?
According to Rankiteo,Help for Heroes is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of Help for Heroes
Help for Heroes operates primarily in the Fundraising industry.
Number of Employees at Help for Heroes
Help for Heroes employs approximately 384 people worldwide.
Subsidiaries Owned by Help for Heroes
Help for Heroes presently has no subsidiaries across any sectors.
Help for Heroes’s LinkedIn Followers
Help for Heroes’s official LinkedIn profile has approximately 18,323 followers.
Help for Heroes’s Presence on Crunchbase
No, Help for Heroes does not have a profile on Crunchbase.
Help for Heroes’s Presence on LinkedIn
Yes, Help for Heroes maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/help-for-heroes.
Cybersecurity Incidents Involving Help for Heroes
As of December 21, 2025, Rankiteo reports that Help for Heroes has not experienced any cybersecurity incidents.
Number of Peer and Competitor Companies
Help for Heroes has an estimated 1,146 peer or competitor companies worldwide.
Help for Heroes CyberSecurity History Information
How many cyber incidents has Help for Heroes faced ?
Total Incidents: According to Rankiteo, Help for Heroes has faced 0 incidents in the past.
What types of cybersecurity incidents have occurred at Help for Heroes ?
Incident Types: The types of cybersecurity incidents that have occurred include .
Incident Details
What are the most common types of attacks the company has faced ?
Additional Questions
.png)
Latest Global CVEs (Not Company-Specific)
Description
Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service, which performs file system operations without impersonating the requesting user. Due to improper privilege handling and a time-of-check time-of-use race condition combined with symbolic link and mount point manipulation, a local authenticated attacker can coerce the service into deleting arbitrary directories with SYSTEM privileges. This can be exploited to delete protected system folders such as C:\\Config.msi and subsequently achieve execution as NT AUTHORITY\\SYSTEM via MSI rollback techniques.
Risk Information
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capability check on the 'cs_update_application_status_callback' function in all versions up to, and including, 7.7. This makes it possible for authenticated attackers, with Candidate-level access and above, to inject cross-site scripting into the 'status' parameter of applied jobs for any user.
Risk Information
cvss3
Base: 7.6
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Description
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.7 via the 'cs_update_application_status_callback' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Candidate-level access and above, to send a site-generated email with injected HTML to any user.
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `thegem_te_search` shortcode in all versions up to, and including, 1.32.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability requires TheGem theme (premium) to be installed with Header Builder mode enabled, and the FiboSearch "Replace search bars" option enabled for TheGem integration.
Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
References
- https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.32.0/partials/themes/thegem-elementor.php#L104
- https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.32.0/partials/themes/thegem-elementor.php#L94
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3420841%40ajax-search-for-woocommerce%2Ftrunk&old=3398612%40ajax-search-for-woocommerce%2Ftrunk&sfp_email=&sfph_mail=#file136
- https://wordpress.org/plugins/ajax-search-for-woocommerce
- https://www.wordfence.com/threat-intel/vulnerabilities/id/8149103e-105d-401d-8a15-b07d131baaac?source=cve
Description
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajax_get_members function. This is due to the use of a predictable low-entropy token (5 hex characters derived from md5 of post ID) to identify member directories and insufficient authorization checks on the unauthenticated AJAX endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, display names, user roles (including administrator accounts), profile URLs, and user IDs by enumerating predictable directory_id values or brute-forcing the small 16^5 token space.
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/class-functions.php#L41
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-ajax-common.php#L61
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-member-directory.php#L205
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-member-directory.php#L2795
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/templates/members.php#L26
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3421362%40ultimate-member%2Ftrunk&old=3408617%40ultimate-member%2Ftrunk&sfp_email=&sfph_mail=
- https://www.wordfence.com/threat-intel/vulnerabilities/id/61337d2d-d15a-45f2-b730-fc034eb3cd31?source=cve
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=help-for-heroes' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
