Comparison Overview

JJO Plc

VS

Aura Seating

JJO Plc

Avalon House, Bacup, Lancashire, undefined, OL13 0EA, GB
Last Update: 2025-11-22
Between 750 and 799

JJO Plc is one the UK’s largest designers and manufacturers of quality, eco-friendly kitchen, bedroom and bathroom furniture. We are dedicated to the independent retail sector and to building long term relationships and partnerships with our retail network. All our furniture is crafted in our 1.2m sqft modern production facility in East Lancashire, and by offering an extensive range of appliances, sinks taps and other accessories we have become the default one stop shop for many of our customers. We have four furniture ranges: Avalon Kitchens, Eco Kitchens, Holcombe Bedrooms and Eco Bathrooms. Our Avalon Kitchens brand is only available through a network of selected independent retailers. This is a long-standing conscious decision to make sure our furniture is presented and sold by passionate like-minded kitchen retailers who excel in their areas of expertise. Over half of our 300+ staff have been with us ten years or more, and 70 have amassed at least two decades of service. That commitment is proof that the JJO team is truly invested in the ongoing success of the company, and that going the extra mile comes as standard. Just over two thirds of the shares of the business are held within an employment ownership trust, meaning that the staff own the majority of the business. We recognised many years ago that there are tangible benefits to manufacturing responsibly and have won many awards in recognition of our environmental approach. To further endorse our environmental achievements, our plants have been audited and accredited with ISO 14001 for our environmental awareness and application, and ISO 50001 in recognition of energy efficiency within manufacturing. In 2024 we developed an industry-leading carbon calculator with The Carbon Trust for our kitchen retail network giving them a measurable cradle-to-gate carbon footprint for all our kitchen products that they can confidently share with their customers. Purchasing from JJO ensures you are acting responsibly.

NAICS: 337
NAICS Definition:
Employees: 67
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Aura Seating

None, None, Torrance, None, US, None
Last Update: 2025-11-24

8(a), Minority Woman Owned Design Manufacturer Aura Seating is a Yoga based design-manufacturer of Seating products. We serve the Hospitality, Contract and Home office customers with unique products. We take pride in using sustainable, eco-friendly and recycled materials that are good for the body and good for the nature. Intelligence for the Body!

NAICS: 337
NAICS Definition: Furniture and Related Product Manufacturing
Employees: 4
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/j-&-j-ormerod-plc.jpeg
JJO Plc
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/aura-seating.jpeg
Aura Seating
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
JJO Plc
100%
Compliance Rate
0/4 Standards Verified
Aura Seating
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Furniture and Home Furnishings Manufacturing Industry Average (This Year)

No incidents recorded for JJO Plc in 2025.

Incidents vs Furniture and Home Furnishings Manufacturing Industry Average (This Year)

No incidents recorded for Aura Seating in 2025.

Incident History — JJO Plc (X = Date, Y = Severity)

JJO Plc cyber incidents detection timeline including parent company and subsidiaries

Incident History — Aura Seating (X = Date, Y = Severity)

Aura Seating cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/j-&-j-ormerod-plc.jpeg
JJO Plc
Incidents

No Incident

https://images.rankiteo.com/companyimages/aura-seating.jpeg
Aura Seating
Incidents

No Incident

FAQ

JJO Plc company demonstrates a stronger AI Cybersecurity Score compared to Aura Seating company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Aura Seating company has disclosed a higher number of cyber incidents compared to JJO Plc company.

In the current year, Aura Seating company and JJO Plc company have not reported any cyber incidents.

Neither Aura Seating company nor JJO Plc company has reported experiencing a ransomware attack publicly.

Neither Aura Seating company nor JJO Plc company has reported experiencing a data breach publicly.

Neither Aura Seating company nor JJO Plc company has reported experiencing targeted cyberattacks publicly.

Neither JJO Plc company nor Aura Seating company has reported experiencing or disclosing vulnerabilities publicly.

Neither JJO Plc nor Aura Seating holds any compliance certifications.

Neither company holds any compliance certifications.

Neither JJO Plc company nor Aura Seating company has publicly disclosed detailed information about the number of their subsidiaries.

JJO Plc company employs more people globally than Aura Seating company, reflecting its scale as a Furniture and Home Furnishings Manufacturing.

Neither JJO Plc nor Aura Seating holds SOC 2 Type 1 certification.

Neither JJO Plc nor Aura Seating holds SOC 2 Type 2 certification.

Neither JJO Plc nor Aura Seating holds ISO 27001 certification.

Neither JJO Plc nor Aura Seating holds PCI DSS certification.

Neither JJO Plc nor Aura Seating holds HIPAA certification.

Neither JJO Plc nor Aura Seating holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.