Comparison Overview

Horizon Controls Group

VS

Echo Automation & Controls

Horizon Controls Group

1777 Sentry Parkway West, Blue Bell, Pennsylvania, 19422, US
Last Update: 2025-11-20

Horizon Controls Group: A global leader in automation consulting, enabling both clients and employees to live on the forefront of evolving technology. Horizon Controls Group is a modern, global technology company, specializing in automation consulting, engineering, and training. Founded on the belief that our people are the difference​, we have grown entirely from customer references and successive projects. Our people and their established reputation are our most valued assets. This belief has created a great place to work, enabling us to attract the very best and to give our customers confidence in our superior solutions. Our business is comprised of excellence at every level. We employ a pro-active and comprehensive approach to projects -- asking the right questions, analyzing client needs, and engineering a skilled solution. We are committed to understanding the entire spectrum of your automation challenges and to developing uniquely tailored innovative solutions. Our decision to be vendor-independent enables us to offer tailored solutions and represent your needs free of any conflict of interest. We are aligned exclusively with our customers'​ goals and system requirements, enabling us to provide maximum value. Ultimately, the ability to harvest maximum value from new systems is dependent on the quality and training of your people. Just as we expect and ensure absolute expertise in our people, we work with you to ensure your team is trained to the specific needs of your organization and remain at the forefront of industry trends. We are a global company operating in the United States from our headquarters in Blue Bell, PA and offices in Indiana, Massachusetts, North Carolina, and California and from Cork in Ireland. This is Horizon Controls Group’s official company LinkedIn page.

NAICS: None
NAICS Definition:
Employees: 55
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Echo Automation & Controls

4325 Gifford Rd, Council Bluffs, Iowa, US, 51501
Last Update: 2025-11-20

ECHO is a market leading Electrical Supply company with 15 locations serving the Nebraska, Iowa, Southern Minnesota and Southern South Dakota markets. The ECHO Automation & Controls Group provides a complete line of Industrial Automation products from world-class manufacturers. Specializing in Industrial Automation - Machine Vision, PLC’s, HMI’s, Variable Frequency Drives, Standard Control, MCC’s, Motion Control, Sensors and Safety products. Going beyond the products, Echo Automation & Controls works closely with our customers to understand the problem and determine the correct solution. Echo Automation & Controls customers have access to unparalleled technical expertise, cutting edge training, onsite technical assistance and drive startup. With ECHO Automation and Control, innovation, quality and solutions come together seamlessly.

NAICS: None
NAICS Definition: Others
Employees: 12
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/horizon-controls-group.jpeg
Horizon Controls Group
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/echo-automation-&-controls.jpeg
Echo Automation & Controls
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Horizon Controls Group
100%
Compliance Rate
0/4 Standards Verified
Echo Automation & Controls
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Industrial Automation Industry Average (This Year)

No incidents recorded for Horizon Controls Group in 2025.

Incidents vs Industrial Automation Industry Average (This Year)

No incidents recorded for Echo Automation & Controls in 2025.

Incident History — Horizon Controls Group (X = Date, Y = Severity)

Horizon Controls Group cyber incidents detection timeline including parent company and subsidiaries

Incident History — Echo Automation & Controls (X = Date, Y = Severity)

Echo Automation & Controls cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/horizon-controls-group.jpeg
Horizon Controls Group
Incidents

No Incident

https://images.rankiteo.com/companyimages/echo-automation-&-controls.jpeg
Echo Automation & Controls
Incidents

No Incident

FAQ

Horizon Controls Group company demonstrates a stronger AI Cybersecurity Score compared to Echo Automation & Controls company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Echo Automation & Controls company has disclosed a higher number of cyber incidents compared to Horizon Controls Group company.

In the current year, Echo Automation & Controls company and Horizon Controls Group company have not reported any cyber incidents.

Neither Echo Automation & Controls company nor Horizon Controls Group company has reported experiencing a ransomware attack publicly.

Neither Echo Automation & Controls company nor Horizon Controls Group company has reported experiencing a data breach publicly.

Neither Echo Automation & Controls company nor Horizon Controls Group company has reported experiencing targeted cyberattacks publicly.

Neither Horizon Controls Group company nor Echo Automation & Controls company has reported experiencing or disclosing vulnerabilities publicly.

Neither Horizon Controls Group nor Echo Automation & Controls holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Horizon Controls Group company nor Echo Automation & Controls company has publicly disclosed detailed information about the number of their subsidiaries.

Horizon Controls Group company employs more people globally than Echo Automation & Controls company, reflecting its scale as a Industrial Automation.

Neither Horizon Controls Group nor Echo Automation & Controls holds SOC 2 Type 1 certification.

Neither Horizon Controls Group nor Echo Automation & Controls holds SOC 2 Type 2 certification.

Neither Horizon Controls Group nor Echo Automation & Controls holds ISO 27001 certification.

Neither Horizon Controls Group nor Echo Automation & Controls holds PCI DSS certification.

Neither Horizon Controls Group nor Echo Automation & Controls holds HIPAA certification.

Neither Horizon Controls Group nor Echo Automation & Controls holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H