Comparison Overview
Kelly

Kelly
999 W Big Beaver Rd, Troy, Michigan, US, 48084
Last Update: 30/03/2026
We’ve been helping organizations find the people they need longer than any other company in the world. Since inventing the staffing industry in 1946, we have become experts in the many industries and markets we serve. With a network of suppliers and partners around the ...

Hays
20 Triton Street, London, England, GB, NW1 3BF
Last Update: 07/09/2026
We are leaders in specialist recruitment and workforce solutions, offering advisory services such as learning and skill development, career transitions and employer brand positioning. As the Leadership Partner to our customers, we invest in lifelong partnerships that e...
Compliance Ranges Comparison

Kelly







Hays






Benchmark & Cyber Underwriting Signals
Incidents vs Staffing and Recruiting Industry Avg (This Year)
No incidents recorded for Kelly in 2026.
Incidents vs Staffing and Recruiting Industry Avg (This Year)
No incidents recorded for Hays in 2026.
Incident History - Kelly (X = Date, Y = Severity)
Kelly cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Hays (X = Date, Y = Severity)
Hays cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Kelly

Hays
FAQ
Latest Global CVEs
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth extension allows Stored XSS. This issue affects Mediawiki - CentralAuth extension: before 1.46.1, 1.45.5, 1.43.10.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation MediaWiki - WikiLambda extension allows Stored XSS. This issue affects MediaWiki - WikiLambda extension: before 1.46.1.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Refreshed skin allows Stored XSS. This issue affects Mediawiki - Refreshed skin: before 1.46.1, 1.45.5, 1.43.10.
XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension allows XML Injection. This issue affects Mediawiki - EasyTimeline extension: before 1.46.1, 1.45.5, 1.43.10.
anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attackers can supply specially crafted input strings with repeated patterns to cause exponential regex engine backtracking, blocking the Node.js event loop and denying service to other requests.
- https://gist.github.com/mmadersbacher/46050b4224eb979431986cdef1dd2ad3
- https://github.com/alexcorvi/anchorme.js
- https://github.com/alexcorvi/anchorme.js/blob/f3ae9850baa344f27b46bb149e9b891831d273b1/src/index.ts#L109
- https://www.npmjs.com/package/anchorme
- https://www.vulncheck.com/advisories/anchorme-through-3.0.8-regular-expression-denial-of-service