Comparison Overview

JJO Plc

VS

Nolte Kitchens Contracts

JJO Plc

Avalon House, Bacup, Lancashire, undefined, OL13 0EA, GB
Last Update: 2025-11-22
Between 750 and 799

JJO Plc is one the UK’s largest designers and manufacturers of quality, eco-friendly kitchen, bedroom and bathroom furniture. We are dedicated to the independent retail sector and to building long term relationships and partnerships with our retail network. All our furniture is crafted in our 1.2m sqft modern production facility in East Lancashire, and by offering an extensive range of appliances, sinks taps and other accessories we have become the default one stop shop for many of our customers. We have four furniture ranges: Avalon Kitchens, Eco Kitchens, Holcombe Bedrooms and Eco Bathrooms. Our Avalon Kitchens brand is only available through a network of selected independent retailers. This is a long-standing conscious decision to make sure our furniture is presented and sold by passionate like-minded kitchen retailers who excel in their areas of expertise. Over half of our 300+ staff have been with us ten years or more, and 70 have amassed at least two decades of service. That commitment is proof that the JJO team is truly invested in the ongoing success of the company, and that going the extra mile comes as standard. Just over two thirds of the shares of the business are held within an employment ownership trust, meaning that the staff own the majority of the business. We recognised many years ago that there are tangible benefits to manufacturing responsibly and have won many awards in recognition of our environmental approach. To further endorse our environmental achievements, our plants have been audited and accredited with ISO 14001 for our environmental awareness and application, and ISO 50001 in recognition of energy efficiency within manufacturing. In 2024 we developed an industry-leading carbon calculator with The Carbon Trust for our kitchen retail network giving them a measurable cradle-to-gate carbon footprint for all our kitchen products that they can confidently share with their customers. Purchasing from JJO ensures you are acting responsibly.

NAICS: 337
NAICS Definition:
Employees: 67
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Nolte Kitchens Contracts

Ash Road S, Wrexham, LL13 9UG, GB
Last Update: 2025-11-28

Nolte Kitchens Contracts have a dedicated team delivering projects solely for the contract market throughout the South of the UK. We work with your team to ensure we create projects which inspire end users and add value to any development. Our experienced team undertake projects from small developer schemes through to large scale developments with national house builders

NAICS: 337
NAICS Definition: Furniture and Related Product Manufacturing
Employees: 27
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/j-&-j-ormerod-plc.jpeg
JJO Plc
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/nolte-kitchens-contracts.jpeg
Nolte Kitchens Contracts
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
JJO Plc
100%
Compliance Rate
0/4 Standards Verified
Nolte Kitchens Contracts
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Furniture and Home Furnishings Manufacturing Industry Average (This Year)

No incidents recorded for JJO Plc in 2025.

Incidents vs Furniture and Home Furnishings Manufacturing Industry Average (This Year)

No incidents recorded for Nolte Kitchens Contracts in 2025.

Incident History — JJO Plc (X = Date, Y = Severity)

JJO Plc cyber incidents detection timeline including parent company and subsidiaries

Incident History — Nolte Kitchens Contracts (X = Date, Y = Severity)

Nolte Kitchens Contracts cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/j-&-j-ormerod-plc.jpeg
JJO Plc
Incidents

No Incident

https://images.rankiteo.com/companyimages/nolte-kitchens-contracts.jpeg
Nolte Kitchens Contracts
Incidents

No Incident

FAQ

JJO Plc company demonstrates a stronger AI Cybersecurity Score compared to Nolte Kitchens Contracts company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Nolte Kitchens Contracts company has disclosed a higher number of cyber incidents compared to JJO Plc company.

In the current year, Nolte Kitchens Contracts company and JJO Plc company have not reported any cyber incidents.

Neither Nolte Kitchens Contracts company nor JJO Plc company has reported experiencing a ransomware attack publicly.

Neither Nolte Kitchens Contracts company nor JJO Plc company has reported experiencing a data breach publicly.

Neither Nolte Kitchens Contracts company nor JJO Plc company has reported experiencing targeted cyberattacks publicly.

Neither JJO Plc company nor Nolte Kitchens Contracts company has reported experiencing or disclosing vulnerabilities publicly.

Neither JJO Plc nor Nolte Kitchens Contracts holds any compliance certifications.

Neither company holds any compliance certifications.

Neither JJO Plc company nor Nolte Kitchens Contracts company has publicly disclosed detailed information about the number of their subsidiaries.

JJO Plc company employs more people globally than Nolte Kitchens Contracts company, reflecting its scale as a Furniture and Home Furnishings Manufacturing.

Neither JJO Plc nor Nolte Kitchens Contracts holds SOC 2 Type 1 certification.

Neither JJO Plc nor Nolte Kitchens Contracts holds SOC 2 Type 2 certification.

Neither JJO Plc nor Nolte Kitchens Contracts holds ISO 27001 certification.

Neither JJO Plc nor Nolte Kitchens Contracts holds PCI DSS certification.

Neither JJO Plc nor Nolte Kitchens Contracts holds HIPAA certification.

Neither JJO Plc nor Nolte Kitchens Contracts holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.