Comparison Overview

Liberty IT

VS

DiDi

Liberty IT

Adelaide Exchange, 24-26 Adelaide Street, Belfast, Co Antrim, GB, BT2 8GD
Last Update: 2026-01-21
View Profile
Between 750 and 799
https://www.liberty-it.co.uk/careers/overview?utm_source=LinkedIn&utm_medium=Organic&utm_campaign=Profilebutton

We’re a bunch of inventors, problem solvers, business brains and tech transformers. We revel in a challenge and stop at nothing to provide the solution, exceeding expectations, breaking new ground and transforming customer interactions. With over 25 years’ experience we’ve got the backing of global giant Liberty Mutual Insurance, with fresh talent to push every boundary. And that’s what makes us exciting. We’re your best tech secret! We're proud to be an official "Great Place to Work,®"​ but as our name suggests, it's all about the technology. We don't just get things done, we excel at engineering, and we build creative solutions through team collaboration across all levels of experience, allowing us to deliver business value in a big way. We’re also quite a social bunch – meet ups, BBQs, parties, even weekends away if that takes your fancy. Our teams hold community and well-being close to their hearts, looking after and supporting each other and themselves through a range of activities and initiatives.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 764
Subsidiaries: 18
12-month incidents
0
Known data breaches
1
Attack type number
2
View Profile

DiDi

-, Global, CN
Last Update: 2026-01-17
Between 750 and 799
http://www.didiglobal.com

DiDi Global Inc. is a leading mobility technology platform. It offers a wide range of app-based services across Asia Pacific, Latin America, and other global markets, including ride hailing, taxi hailing, designated driving, hitch and other forms of shared mobility as well as certain energy and vehicle services, food delivery, and intra-city freight services. DiDi provides car owners, drivers, and delivery partners with flexible work and income opportunities. It is committed to collaborating with policymakers, the taxi industry, the automobile industry, and the communities to solve the world’s transportation, environmental, and employment challenges through the use of AI technology and localized smart transportation innovations. DiDi strives to create better life experiences and greater social value, by building a safe, inclusive, and sustainable transportation and local services ecosystem for cities of the future.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 30,646
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/libertyit.jpeg
Liberty IT
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/didiglobal.jpeg
DiDi
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Liberty IT
100%
Compliance Rate
0/4 Standards Verified
DiDi
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Liberty IT in 2026.

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for DiDi in 2026.

Incident History — Liberty IT (X = Date, Y = Severity)

Liberty IT cyber incidents detection timeline including parent company and subsidiaries

Incident History — DiDi (X = Date, Y = Severity)

DiDi cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/libertyit.jpeg
Liberty IT
Incidents

Date Detected: 11/2020
Type:Breach
Attack Vector: Fraudulent auto insurance applications
Blog: Blog

Date Detected: 06/2018
Type:Cyber Attack
Motivation: Financial Gain
Blog: Blog
https://images.rankiteo.com/companyimages/didiglobal.jpeg
DiDi
Incidents

Date Detected: 6/2021
Type:Breach
Motivation: Regulatory Enforcement, Data Privacy Compliance, Investor Protection
Blog: Blog

FAQ

DiDi company demonstrates a stronger AI Cybersecurity Score compared to Liberty IT company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Liberty IT company has faced a higher number of disclosed cyber incidents historically compared to DiDi company.

In the current year, DiDi company and Liberty IT company have not reported any cyber incidents.

Neither DiDi company nor Liberty IT company has reported experiencing a ransomware attack publicly.

Both DiDi company and Liberty IT company have disclosed experiencing at least one data breach.

Liberty IT company has reported targeted cyberattacks, while DiDi company has not reported such incidents publicly.

Neither Liberty IT company nor DiDi company has reported experiencing or disclosing vulnerabilities publicly.

Neither Liberty IT nor DiDi holds any compliance certifications.

Neither company holds any compliance certifications.

Liberty IT company has more subsidiaries worldwide compared to DiDi company.

DiDi company employs more people globally than Liberty IT company, reflecting its scale as a Software Development.

Neither Liberty IT nor DiDi holds SOC 2 Type 1 certification.

Neither Liberty IT nor DiDi holds SOC 2 Type 2 certification.

Neither Liberty IT nor DiDi holds ISO 27001 certification.

Neither Liberty IT nor DiDi holds PCI DSS certification.

Neither Liberty IT nor DiDi holds HIPAA certification.

Neither Liberty IT nor DiDi holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
References
Description

Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Description

Azure Entra ID Elevation of Privilege Vulnerability

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
References
Description

Moonraker is a Python web server providing API access to Klipper 3D printing firmware. In versions 0.9.3 and below, instances configured with the "ldap" component enabled are vulnerable to LDAP search filter injection techniques via the login endpoint. The 401 error response message can be used to determine whether or not a search was successful, allowing for brute force methods to discover LDAP entries on the server such as user IDs and user attributes. This issue has been fixed in version 0.10.0.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss4
Base: 2.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single server. Versions 3.7.0 and above allow an authenticated user to execute arbitrary system commands on the host server by injecting shell metacharacters into backup filenames. The BackupManager fails to sanitize the filenames of uploaded backups. The system persists user-uploaded files directly to the host filesystem using the raw originalname provided in the request. This allows an attacker to stage a file containing shell metacharacters (e.g., $(id).tar.gz) at a predictable path, which is later referenced during the restore process. The successful storage of the file is what allows the subsequent restore command to reference and execute it. This issue has been fixed in version 4.7.0.

Published
Date
2026-01-22
Updated
Date
2026-01-22
Risk Information
cvss3
Base: 8.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
References