Comparison Overview

JJO Plc

VS

Casamilano

JJO Plc

Avalon House, Bacup, Lancashire, undefined, OL13 0EA, GB
Last Update: 2025-11-22
Between 750 and 799

JJO Plc is one the UK’s largest designers and manufacturers of quality, eco-friendly kitchen, bedroom and bathroom furniture. We are dedicated to the independent retail sector and to building long term relationships and partnerships with our retail network. All our furniture is crafted in our 1.2m sqft modern production facility in East Lancashire, and by offering an extensive range of appliances, sinks taps and other accessories we have become the default one stop shop for many of our customers. We have four furniture ranges: Avalon Kitchens, Eco Kitchens, Holcombe Bedrooms and Eco Bathrooms. Our Avalon Kitchens brand is only available through a network of selected independent retailers. This is a long-standing conscious decision to make sure our furniture is presented and sold by passionate like-minded kitchen retailers who excel in their areas of expertise. Over half of our 300+ staff have been with us ten years or more, and 70 have amassed at least two decades of service. That commitment is proof that the JJO team is truly invested in the ongoing success of the company, and that going the extra mile comes as standard. Just over two thirds of the shares of the business are held within an employment ownership trust, meaning that the staff own the majority of the business. We recognised many years ago that there are tangible benefits to manufacturing responsibly and have won many awards in recognition of our environmental approach. To further endorse our environmental achievements, our plants have been audited and accredited with ISO 14001 for our environmental awareness and application, and ISO 50001 in recognition of energy efficiency within manufacturing. In 2024 we developed an industry-leading carbon calculator with The Carbon Trust for our kitchen retail network giving them a measurable cradle-to-gate carbon footprint for all our kitchen products that they can confidently share with their customers. Purchasing from JJO ensures you are acting responsibly.

NAICS: 337
NAICS Definition:
Employees: 67
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Casamilano

Piazza della Chiesa 1, Meda, 20821, IT
Last Update: 2025-11-21
Between 750 and 799

Casamilano was founded in 1998. Casamilano cooperates with internationally renowned designers, whose creative style corresponds to the features of its project: Paola Navone, Laboratorio Avallone, Roberto Lazzeroni, Massimiliano Raggi, Marco Boga, Enrico Franzolini, Gordon Guillaumier, Studio Opera, Lievore Altherr Molina. Casamilano project Division signs the furnishing of hotels, restaurants, fashion bars, boutiques and common areas. More and more Casamilano collection is appreciated and used by architects and interior decorators in their projects, worldwide. In addition to the standard production, even made in special sizes and adapted dimensionally, Casamilano Project Division is able to provide a service, by proposing and realizing also products, finishes and materials not present in the collection, till the realization of the project, characterized by a custom solution. Casamilano uses the best materials and work, made in Italy, thanks to a dedicated staff for the contract sector. All Casamilano products are made in Italy. A contemporary design, able to fit into any location. Casamilano collections combine design elegance and functionality. The choice of wisely mixed materials and the care of details, produce unique objects for the contemporary home. A modern way to conceive and decorate the house.

NAICS: 337
NAICS Definition: Furniture and Related Product Manufacturing
Employees: 17
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/j-&-j-ormerod-plc.jpeg
JJO Plc
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/casamilano.jpeg
Casamilano
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
JJO Plc
100%
Compliance Rate
0/4 Standards Verified
Casamilano
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Furniture and Home Furnishings Manufacturing Industry Average (This Year)

No incidents recorded for JJO Plc in 2025.

Incidents vs Furniture and Home Furnishings Manufacturing Industry Average (This Year)

No incidents recorded for Casamilano in 2025.

Incident History — JJO Plc (X = Date, Y = Severity)

JJO Plc cyber incidents detection timeline including parent company and subsidiaries

Incident History — Casamilano (X = Date, Y = Severity)

Casamilano cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/j-&-j-ormerod-plc.jpeg
JJO Plc
Incidents

No Incident

https://images.rankiteo.com/companyimages/casamilano.jpeg
Casamilano
Incidents

No Incident

FAQ

JJO Plc company demonstrates a stronger AI Cybersecurity Score compared to Casamilano company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Casamilano company has disclosed a higher number of cyber incidents compared to JJO Plc company.

In the current year, Casamilano company and JJO Plc company have not reported any cyber incidents.

Neither Casamilano company nor JJO Plc company has reported experiencing a ransomware attack publicly.

Neither Casamilano company nor JJO Plc company has reported experiencing a data breach publicly.

Neither Casamilano company nor JJO Plc company has reported experiencing targeted cyberattacks publicly.

Neither JJO Plc company nor Casamilano company has reported experiencing or disclosing vulnerabilities publicly.

Neither JJO Plc nor Casamilano holds any compliance certifications.

Neither company holds any compliance certifications.

Neither JJO Plc company nor Casamilano company has publicly disclosed detailed information about the number of their subsidiaries.

JJO Plc company employs more people globally than Casamilano company, reflecting its scale as a Furniture and Home Furnishings Manufacturing.

Neither JJO Plc nor Casamilano holds SOC 2 Type 1 certification.

Neither JJO Plc nor Casamilano holds SOC 2 Type 2 certification.

Neither JJO Plc nor Casamilano holds ISO 27001 certification.

Neither JJO Plc nor Casamilano holds PCI DSS certification.

Neither JJO Plc nor Casamilano holds HIPAA certification.

Neither JJO Plc nor Casamilano holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.