Comparison Overview

JJO Plc

VS

Krost Business Furniture

JJO Plc

Avalon House, Bacup, Lancashire, undefined, OL13 0EA, GB
Last Update: 2025-11-22
Between 750 and 799

JJO Plc is one the UK’s largest designers and manufacturers of quality, eco-friendly kitchen, bedroom and bathroom furniture. We are dedicated to the independent retail sector and to building long term relationships and partnerships with our retail network. All our furniture is crafted in our 1.2m sqft modern production facility in East Lancashire, and by offering an extensive range of appliances, sinks taps and other accessories we have become the default one stop shop for many of our customers. We have four furniture ranges: Avalon Kitchens, Eco Kitchens, Holcombe Bedrooms and Eco Bathrooms. Our Avalon Kitchens brand is only available through a network of selected independent retailers. This is a long-standing conscious decision to make sure our furniture is presented and sold by passionate like-minded kitchen retailers who excel in their areas of expertise. Over half of our 300+ staff have been with us ten years or more, and 70 have amassed at least two decades of service. That commitment is proof that the JJO team is truly invested in the ongoing success of the company, and that going the extra mile comes as standard. Just over two thirds of the shares of the business are held within an employment ownership trust, meaning that the staff own the majority of the business. We recognised many years ago that there are tangible benefits to manufacturing responsibly and have won many awards in recognition of our environmental approach. To further endorse our environmental achievements, our plants have been audited and accredited with ISO 14001 for our environmental awareness and application, and ISO 50001 in recognition of energy efficiency within manufacturing. In 2024 we developed an industry-leading carbon calculator with The Carbon Trust for our kitchen retail network giving them a measurable cradle-to-gate carbon footprint for all our kitchen products that they can confidently share with their customers. Purchasing from JJO ensures you are acting responsibly.

NAICS: 337
NAICS Definition:
Employees: 67
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Krost Business Furniture

33 Ricketty Street, Mascot, NSW, 2020, AU
Last Update: 2025-11-26
Between 750 and 799

Krost was established in Sydney in 1989. Since then, we have built our business on 3 key promises: • To offer the best service. • To provide the highest quality products. • To always sell at a fair price. Through our furniture, we want to help you shape the right corporate image, have the most productive workplace and create the largest possible return on your investment. We are focused on reducing our impact on the environment and it has become crucial for us to use a high percentage of recyclable materials and efficient processes in our manufacturing. As a result, we’re being awarded with environmental certifications across all our products. We offer a complete selection of high quality office furniture at competitive prices. From executive desks to workstations, office chairs, storage solutions, conference tables through to accessories and more. ‎

NAICS: 337
NAICS Definition:
Employees: 76
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/j-&-j-ormerod-plc.jpeg
JJO Plc
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/krost-business-furniture.jpeg
Krost Business Furniture
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
JJO Plc
100%
Compliance Rate
0/4 Standards Verified
Krost Business Furniture
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Furniture and Home Furnishings Manufacturing Industry Average (This Year)

No incidents recorded for JJO Plc in 2025.

Incidents vs Furniture and Home Furnishings Manufacturing Industry Average (This Year)

No incidents recorded for Krost Business Furniture in 2025.

Incident History — JJO Plc (X = Date, Y = Severity)

JJO Plc cyber incidents detection timeline including parent company and subsidiaries

Incident History — Krost Business Furniture (X = Date, Y = Severity)

Krost Business Furniture cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/j-&-j-ormerod-plc.jpeg
JJO Plc
Incidents

No Incident

https://images.rankiteo.com/companyimages/krost-business-furniture.jpeg
Krost Business Furniture
Incidents

No Incident

FAQ

JJO Plc company demonstrates a stronger AI Cybersecurity Score compared to Krost Business Furniture company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Krost Business Furniture company has disclosed a higher number of cyber incidents compared to JJO Plc company.

In the current year, Krost Business Furniture company and JJO Plc company have not reported any cyber incidents.

Neither Krost Business Furniture company nor JJO Plc company has reported experiencing a ransomware attack publicly.

Neither Krost Business Furniture company nor JJO Plc company has reported experiencing a data breach publicly.

Neither Krost Business Furniture company nor JJO Plc company has reported experiencing targeted cyberattacks publicly.

Neither JJO Plc company nor Krost Business Furniture company has reported experiencing or disclosing vulnerabilities publicly.

Neither JJO Plc nor Krost Business Furniture holds any compliance certifications.

Neither company holds any compliance certifications.

Neither JJO Plc company nor Krost Business Furniture company has publicly disclosed detailed information about the number of their subsidiaries.

Krost Business Furniture company employs more people globally than JJO Plc company, reflecting its scale as a Furniture and Home Furnishings Manufacturing.

Neither JJO Plc nor Krost Business Furniture holds SOC 2 Type 1 certification.

Neither JJO Plc nor Krost Business Furniture holds SOC 2 Type 2 certification.

Neither JJO Plc nor Krost Business Furniture holds ISO 27001 certification.

Neither JJO Plc nor Krost Business Furniture holds PCI DSS certification.

Neither JJO Plc nor Krost Business Furniture holds HIPAA certification.

Neither JJO Plc nor Krost Business Furniture holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.