Comparison Overview

KCOI LLP

VS

Naftal spa

KCOI LLP

“Temir At” Fabrication Yard , S. Shapagatov Village (km 28) , Mangystau region, 130501, KZ
Last Update: 2025-03-08 (UTC)
Between 800 and 900
http://www.kcoi.kz

Strong

KCOI – Kazakhstan Caspian Offshore Industries LLP are an international enterprise founded in 2008 by Italian Rosetti Marino Group of Companies and Kazakh Mart Machinery Plant LLP. Based in Aktau and operating a branch in Atyrau, KCOI have celebrated their 12th anniversary and have grown into an important player providing EPCI services to the Offshore and Onshore Oil & Gas and Renewable Energy, and Shipbuilding Industry. KCOI believe in people's commitment and empowerment and are looking both for experienced professionals and young potentials to coach, train and develop. The average employee age of less than 35 years provides a young and sparkling reality, stimulating continuous development and building the base for a promising future. If you are a proactive person, like to be empowered and contribute to achieving goals in an international context, don’t hesitate to get in touch with us on LinkedIn or via our website.

NAICS: 211
NAICS Definition:
Employees: 651
Subsidiaries: 5
12-month incidents
0
Known data breaches
0
Attack type number
0

Naftal spa

Route des Dunes BP 73 Chéraga, Algiers, 16000, DZ
Last Update: 2025-03-14 (UTC)

Strong

Between 800 and 900
http://www.naftal.dz

NAFTAL est une Entreprise Nationale Algérienne filiale 100% de SONATRACH chargée de la commercialisation et la distribution des produits pétroliers. Elle est en charge de ses différentes stations services, distribue le Carburant en Algérie, Essence Normale, Essence Super, Essence Sans Plomb, Sirghaz, GPL/C, GPL-C, GPLC, les GPL Les Bouteilles de Gaz Butane et Propane, B13, B3, bouteille camping. Les bitumes en Algérie Les Pneumatiques en Algérie Le JET A1 Le Kérosène L'Avgas Carburant Marine Carburant Aviation Lubrifiants en Algérie Ainsi que les produits spéciaux NAFTAL SPA, Algeria The national company selling petroleum-based fuels (Petroleum Products) for domestic consumption in Algeria. NAFTAL is a 100% subsidiary of Sonatrach Petroleum Group, Algeria. Over 30,000 employees Headquarters: Cheraga, Algiers Algeria

NAICS: 211
NAICS Definition:
Employees: 10,001+
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/kcoi-llp.jpeg
KCOI LLP
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/naftal-spa.jpeg
Naftal spa
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
KCOI LLP
100%
Compliance Rate
0/4 Standards Verified
Naftal spa
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Oil and Gas Industry Average (This Year)

No incidents recorded for KCOI LLP in 2025.

Incidents vs Oil and Gas Industry Average (This Year)

No incidents recorded for Naftal spa in 2025.

Incident History — KCOI LLP (X = Date, Y = Severity)

KCOI LLP cyber incidents detection timeline including parent company and subsidiaries

Incident History — Naftal spa (X = Date, Y = Severity)

Naftal spa cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/kcoi-llp.jpeg
KCOI LLP
Incidents

No Incident

https://images.rankiteo.com/companyimages/naftal-spa.jpeg
Naftal spa
Incidents

No Incident

FAQ

Both KCOI LLP company and Naftal spa company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, Naftal spa company has disclosed a higher number of cyber incidents compared to KCOI LLP company.

In the current year, Naftal spa company and KCOI LLP company have not reported any cyber incidents.

Neither Naftal spa company nor KCOI LLP company has reported experiencing a ransomware attack publicly.

Neither Naftal spa company nor KCOI LLP company has reported experiencing a data breach publicly.

Neither Naftal spa company nor KCOI LLP company has reported experiencing targeted cyberattacks publicly.

Neither KCOI LLP company nor Naftal spa company has reported experiencing or disclosing vulnerabilities publicly.

KCOI LLP company has more subsidiaries worldwide compared to Naftal spa company.

KCOI LLP company employs more people globally than Naftal spa company, reflecting its scale as a Oil and Gas.

Latest Global CVEs (Not Company-Specific)

Description

Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.3.15 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 15 through update 92 allow remote attackers to inject arbitrary web script or HTML via crafted payload injected into a Terms and Condition's Name text field to (1) Payment Terms, or (2) the Delivery Term on the view order page.

Published
Date
2025-10-07
Updated
Date
2025-10-07
Risk Information
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/invoices.php. Performing manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.

Published
Date
2025-10-07
Updated
Date
2025-10-07
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/customer-list.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

Published
Date
2025-10-07
Updated
Date
2025-10-07
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.

Published
Date
2025-10-07
Updated
Date
2025-10-07
Risk Information
cvss2
Base: 1.7
Severity: LOW
AV:L/AC:L/Au:S/C:N/I:N/A:P
cvss3
Base: 3.3
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Cross-site scripting (XSS) vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4 before patch 6, 2023.Q3 before patch 9, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a Commerce Product's Name text field.

Published
Date
2025-10-07
Updated
Date
2025-10-07
Risk Information
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References