Comparison Overview

John W. Danforth Company

VS

PT. Yasa Patria Perkasa

John W. Danforth Company

300 Colvin Woods Parkway, Tonawanda, NY, 14150, US
Last Update: 2025-03-04 (UTC)
Between 900 and 1000
http://jwdanforth.com

Excellent

We are powered by the best people in the industry. We are a rarity in that our cutting edge solutions sit on a foundation dating back to 1884. Whether it’s a high-rise orifice, hospital, manufacturing plant, date center, convention center or a ski resort, we do more than build systems. We engineer efficiency. As one of the largest contractors in the Northeast, we are known for • Installation of heating ventilation, air conditioning, and plumbing systems. Design and build services •Custom sheet metal and pipe fabrication •Energy Performance Contracting •Comprehensive maintenance programs Fine Tuned Designs Created for You. No Compromises.

NAICS: 23
NAICS Definition: Construction
Employees: 376
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

PT. Yasa Patria Perkasa

Gedung Granadi JL. H.R. Rasuna Said No. 8-9, Kav. X-1 Kuningan Timur South Jakarta, Jakarta 12950, ID
Last Update: 2025-03-16 (UTC)

Excellent

Between 900 and 1000
http://yasapatriaperkasa.co.id

It took more than 30 years of credible experience to construct our identity. To establish the proven quality works of YASA Construction which all began in 1981. Throughout that precious time, our hands have made us impregnated in practical knowledge and right-minded integrity in the business of construction services in Indonesia. We planned from the beginning that our services in engineering, procurement, and construction are seamlessly designed to add value. Setting the best possible outcome by crafting tangible asset both for us and valuable clients. YASA Construction have gained an enviable reputation through the provision of engineering solutions, prompt deliveries, competitive budgets, and unsurpassed customer service to our clients and partners. From Joint Operation with State Owned Companies to Private Companies, we deliver more than just a physical settings. We look for the positive respond on what we do as an extension to succeed our client’s business objective. Our initial team members have been participated in numerous considerable size projects. We are the one that built the first toll road in Indonesia, the Jagorawi highway. Furthermore, we ensure our long term commitment in social awareness that would lead us to become a sustainable company in construction field. We push ourselves on each scale to encounter every project’s unique challenges. By combining today’s technology and our best people’s skill, YASA Construction is now suitable to expand its service at regional and global scale. To proceed with our proven portfolio in delivering valuable assets that could be yours in the future.

NAICS: 23
NAICS Definition: Construction
Employees: 10,001+
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/john-w--danforth-company.jpeg
John W. Danforth Company
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/defaultcompany.jpeg
PT. Yasa Patria Perkasa
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
John W. Danforth Company
100%
Compliance Rate
0/4 Standards Verified
PT. Yasa Patria Perkasa
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Construction Industry Average (This Year)

No incidents recorded for John W. Danforth Company in 2025.

Incidents vs Construction Industry Average (This Year)

No incidents recorded for PT. Yasa Patria Perkasa in 2025.

Incident History — John W. Danforth Company (X = Date, Y = Severity)

John W. Danforth Company cyber incidents detection timeline including parent company and subsidiaries

Incident History — PT. Yasa Patria Perkasa (X = Date, Y = Severity)

PT. Yasa Patria Perkasa cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/john-w--danforth-company.jpeg
John W. Danforth Company
Incidents

No Incident

https://images.rankiteo.com/companyimages/defaultcompany.jpeg
PT. Yasa Patria Perkasa
Incidents

No Incident

FAQ

Both John W. Danforth Company company and PT. Yasa Patria Perkasa company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, PT. Yasa Patria Perkasa company has disclosed a higher number of cyber incidents compared to John W. Danforth Company company.

In the current year, PT. Yasa Patria Perkasa company and John W. Danforth Company company have not reported any cyber incidents.

Neither PT. Yasa Patria Perkasa company nor John W. Danforth Company company has reported experiencing a ransomware attack publicly.

Neither PT. Yasa Patria Perkasa company nor John W. Danforth Company company has reported experiencing a data breach publicly.

Neither PT. Yasa Patria Perkasa company nor John W. Danforth Company company has reported experiencing targeted cyberattacks publicly.

Neither John W. Danforth Company company nor PT. Yasa Patria Perkasa company has reported experiencing or disclosing vulnerabilities publicly.

Neither John W. Danforth Company company nor PT. Yasa Patria Perkasa company has publicly disclosed detailed information about the number of their subsidiaries.

John W. Danforth Company company employs more people globally than PT. Yasa Patria Perkasa company, reflecting its scale as a Construction.

Latest Global CVEs (Not Company-Specific)

Description

An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.

Published
Date
2025-09-25
Updated
Date
2025-09-25
References
Description

A weakness has been identified in JeecgBoot up to 3.8.2. The impacted element is an unknown function of the file /sys/role/exportXls. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in JeecgBoot up to 3.8.2. The affected element is an unknown function of the file /sys/user/exportXls of the component Filter Handler. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in JeecgBoot up to 3.8.2. Impacted is an unknown function of the file /sys/tenant/deleteBatch. The manipulation of the argument ids leads to improper authorization. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was determined in JeecgBoot up to 3.8.2. This issue affects some unknown processing of the file /api/getDepartUserList. Executing manipulation of the argument departId can lead to improper authorization. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-09-25
Updated
Date
2025-09-25
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References