Comparison Overview

ManageEngine

VS

Zoho

ManageEngine

4708 Highway 71 E, None, Del Valle, Texas, US, 78617
Last Update: 2025-12-01
Between 600 and 649

ManageEngine crafts the industry's broadest suite of IT management software. We have everything you need—more than 60+ enterprise products and 60+ free tools—to manage all of your IT operations, from networks and servers to applications, service desk, Active Directory, security, desktops, and mobile devices. Since 2002, IT teams like yours have turned to us for affordable, feature-rich software that's easy to use. You can find our on-premises and cloud solutions powering the IT of over 280,000 companies around the world, including nine of every ten Fortune 100 companies. As you prepare for the IT management challenges ahead, we'll lead the way with new solutions, contextual integrations, and other advances that can only come from a company singularly dedicated to its customers. And as a division of Zoho Corporation, we'll continue pushing for the tight business-IT alignment you'll need to seize opportunities in the future. About us: https://www.manageengine.com/company.html Our offices are located in the US, India, Singapore, Japan, China, The Netherlands, Australia, Mexico, UAE, Saudi Arabia and South Africa. For more information, ​follow the company blog at http://blogs.manageengine.com/, our Pitstop Community at http://pitstop.manageengine.com/, Facebook at http://www.facebook.com/ManageEngine, and on Twitter @ManageEngine. Try any of our tools for free: https://www.manageengine.com/free-tools.html.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 528
Subsidiaries: 16
12-month incidents
3
Known data breaches
0
Attack type number
2

Zoho

Zoho Corporation Pvt. Ltd, Estancia IT Park, Plot No. 140 & 151,, Chennai, 603202, IN
Last Update: 2025-12-01
Between 800 and 849

Zoho offers beautifully smart software to help you grow your business. With over 100 million users worldwide, Zoho's 55+ products aid your sales and marketing, support and collaboration, finance, and recruitment needs—letting you focus only on your business. Zoho respects user privacy and does not have an ad-revenue model in any part of its business, including its free products. Zoho Corporation is privately held and profitable, with its headquarters in Chennai, India, and offices across the globe.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 29,539
Subsidiaries: 2
12-month incidents
1
Known data breaches
0
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/manageengine.jpeg
ManageEngine
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/zoho.jpeg
Zoho
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
ManageEngine
100%
Compliance Rate
0/4 Standards Verified
Zoho
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Average (This Year)

ManageEngine has 597.67% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Software Development Industry Average (This Year)

Zoho has 132.56% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — ManageEngine (X = Date, Y = Severity)

ManageEngine cyber incidents detection timeline including parent company and subsidiaries

Incident History — Zoho (X = Date, Y = Severity)

Zoho cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/manageengine.jpeg
ManageEngine
Incidents

Date Detected: 8/2025
Type:Ransomware
Attack Vector: SEO Poisoning, Trojanized Software Installer
Motivation: Financial gain, Data exfiltration
Blog: Blog

Date Detected: 6/2025
Type:Vulnerability
Attack Vector: Exploiting input validation flaw in the Content Search module
Motivation: Complete system compromise, Potential data breaches, Establish persistent access, Move laterally within networks, Exfiltrate sensitive data, Deploy additional malicious payloads such as ransomware
Blog: Blog

Date Detected: 3/2025
Type:Vulnerability
Attack Vector: Bypass AD authentication
Motivation: Unauthorized access to user accounts and sensitive data
Blog: Blog
https://images.rankiteo.com/companyimages/zoho.jpeg
Zoho
Incidents

Date Detected: 3/2025
Type:Vulnerability
Attack Vector: Authentication Bypass
Motivation: Account Takeover, Access Sensitive Data
Blog: Blog

FAQ

Zoho company demonstrates a stronger AI Cybersecurity Score compared to ManageEngine company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

ManageEngine company has faced a higher number of disclosed cyber incidents historically compared to Zoho company.

In the current year, ManageEngine company has reported more cyber incidents than Zoho company.

ManageEngine company has confirmed experiencing a ransomware attack, while Zoho company has not reported such incidents publicly.

Neither Zoho company nor ManageEngine company has reported experiencing a data breach publicly.

Neither Zoho company nor ManageEngine company has reported experiencing targeted cyberattacks publicly.

Both ManageEngine company and Zoho company have disclosed vulnerabilities.

Neither ManageEngine nor Zoho holds any compliance certifications.

Neither company holds any compliance certifications.

ManageEngine company has more subsidiaries worldwide compared to Zoho company.

Zoho company employs more people globally than ManageEngine company, reflecting its scale as a Software Development.

Neither ManageEngine nor Zoho holds SOC 2 Type 1 certification.

Neither ManageEngine nor Zoho holds SOC 2 Type 2 certification.

Neither ManageEngine nor Zoho holds ISO 27001 certification.

Neither ManageEngine nor Zoho holds PCI DSS certification.

Neither ManageEngine nor Zoho holds HIPAA certification.

Neither ManageEngine nor Zoho holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

MCP Server Kubernetes is an MCP Server that can connect to a Kubernetes cluster and manage it. Prior to 2.9.8, there is a security issue exists in the exec_in_pod tool of the mcp-server-kubernetes MCP Server. The tool accepts user-provided commands in both array and string formats. When a string format is provided, it is passed directly to shell interpretation (sh -c) without input validation, allowing shell metacharacters to be interpreted. This vulnerability can be exploited through direct command injection or indirect prompt injection attacks, where AI agents may execute commands without explicit user intent. This vulnerability is fixed in 2.9.8.

Risk Information
cvss3
Base: 6.4
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Description

XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted body of a POST request.

Description

An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device (e.g. file upload, firmware update, reboot...) via a crafted authentication bypass.

Description

Cal.com is open-source scheduling software. Prior to 5.9.8, A flaw in the login credentials provider allows an attacker to bypass password verification when a TOTP code is provided, potentially gaining unauthorized access to user accounts. This issue exists due to problematic conditional logic in the authentication flow. This vulnerability is fixed in 5.9.8.

Risk Information
cvss4
Base: 9.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed() function, it might lead to high CPU consumption and a potential Denial of Service. Small numbers go through this call stack: NativeNumber.numTo > DToA.JS_dtostr > DToA.JS_dtoa > DToA.pow5mult where pow5mult attempts to raise 5 to a ridiculous power. This vulnerability is fixed in 1.8.1, 1.7.15.1, and 1.7.14.1.

Risk Information
cvss4
Base: 5.5
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X