Comparison Overview

JJO Plc

VS

Well Made LLC

JJO Plc

Avalon House, Bacup, Lancashire, undefined, OL13 0EA, GB
Last Update: 2025-11-22
Between 750 and 799

JJO Plc is one the UK’s largest designers and manufacturers of quality, eco-friendly kitchen, bedroom and bathroom furniture. We are dedicated to the independent retail sector and to building long term relationships and partnerships with our retail network. All our furniture is crafted in our 1.2m sqft modern production facility in East Lancashire, and by offering an extensive range of appliances, sinks taps and other accessories we have become the default one stop shop for many of our customers. We have four furniture ranges: Avalon Kitchens, Eco Kitchens, Holcombe Bedrooms and Eco Bathrooms. Our Avalon Kitchens brand is only available through a network of selected independent retailers. This is a long-standing conscious decision to make sure our furniture is presented and sold by passionate like-minded kitchen retailers who excel in their areas of expertise. Over half of our 300+ staff have been with us ten years or more, and 70 have amassed at least two decades of service. That commitment is proof that the JJO team is truly invested in the ongoing success of the company, and that going the extra mile comes as standard. Just over two thirds of the shares of the business are held within an employment ownership trust, meaning that the staff own the majority of the business. We recognised many years ago that there are tangible benefits to manufacturing responsibly and have won many awards in recognition of our environmental approach. To further endorse our environmental achievements, our plants have been audited and accredited with ISO 14001 for our environmental awareness and application, and ISO 50001 in recognition of energy efficiency within manufacturing. In 2024 we developed an industry-leading carbon calculator with The Carbon Trust for our kitchen retail network giving them a measurable cradle-to-gate carbon footprint for all our kitchen products that they can confidently share with their customers. Purchasing from JJO ensures you are acting responsibly.

NAICS: 337
NAICS Definition:
Employees: 67
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Well Made LLC

2850 N Pulaski Road, CHICAGO, ILLINOIS, US, 60641
Last Update: 2025-11-28
Between 750 and 799

Well Made is a home decor e-commerce and manufacturer. We specialize in high quality minimalist wood products for framing, display, and organization. Well Made is not just our name, it's our mission. We start with the highest quality raw materials and shape them through expert craftsmanship so they last for generations to come. In a world that moves faster each day, the one place we allow ourselves to slow down is in our own home. It is in this, our safest space, that we are our true selves. Our products are designed simply and unobtrusively to transform your home into a reflection of you.

NAICS: 337
NAICS Definition: Furniture and Related Product Manufacturing
Employees: 18
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/j-&-j-ormerod-plc.jpeg
JJO Plc
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/well-made-llc.jpeg
Well Made LLC
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
JJO Plc
100%
Compliance Rate
0/4 Standards Verified
Well Made LLC
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Furniture and Home Furnishings Manufacturing Industry Average (This Year)

No incidents recorded for JJO Plc in 2025.

Incidents vs Furniture and Home Furnishings Manufacturing Industry Average (This Year)

No incidents recorded for Well Made LLC in 2025.

Incident History — JJO Plc (X = Date, Y = Severity)

JJO Plc cyber incidents detection timeline including parent company and subsidiaries

Incident History — Well Made LLC (X = Date, Y = Severity)

Well Made LLC cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/j-&-j-ormerod-plc.jpeg
JJO Plc
Incidents

No Incident

https://images.rankiteo.com/companyimages/well-made-llc.jpeg
Well Made LLC
Incidents

No Incident

FAQ

Well Made LLC company demonstrates a stronger AI Cybersecurity Score compared to JJO Plc company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Well Made LLC company has disclosed a higher number of cyber incidents compared to JJO Plc company.

In the current year, Well Made LLC company and JJO Plc company have not reported any cyber incidents.

Neither Well Made LLC company nor JJO Plc company has reported experiencing a ransomware attack publicly.

Neither Well Made LLC company nor JJO Plc company has reported experiencing a data breach publicly.

Neither Well Made LLC company nor JJO Plc company has reported experiencing targeted cyberattacks publicly.

Neither JJO Plc company nor Well Made LLC company has reported experiencing or disclosing vulnerabilities publicly.

Neither JJO Plc nor Well Made LLC holds any compliance certifications.

Neither company holds any compliance certifications.

Neither JJO Plc company nor Well Made LLC company has publicly disclosed detailed information about the number of their subsidiaries.

JJO Plc company employs more people globally than Well Made LLC company, reflecting its scale as a Furniture and Home Furnishings Manufacturing.

Neither JJO Plc nor Well Made LLC holds SOC 2 Type 1 certification.

Neither JJO Plc nor Well Made LLC holds SOC 2 Type 2 certification.

Neither JJO Plc nor Well Made LLC holds ISO 27001 certification.

Neither JJO Plc nor Well Made LLC holds PCI DSS certification.

Neither JJO Plc nor Well Made LLC holds HIPAA certification.

Neither JJO Plc nor Well Made LLC holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.