Comparison Overview

Manage My Health

VS

Massage Envy

Manage My Health

48 Market Pl, Auckland, 1010, NZ
Last Update: 2025-12-31
View Profile
Between 650 and 699
http://www.managemyhealth.co.nz

Manage My Health is New Zealand’s most popular patient portal. Since 2008 we have empowered nearly 2 million Kiwis to have their health in their hands and over 680 health centres trust Manage My Health to help them connect more effectively with their patients. Manage My Health is a secure website that lets you manage your personal health information on any device, any time, anywhere in the world. It’s linked up directly to your doctor’s system and can also store other information, like treatments you’ve received or medications you’re taking. We’ll help you stay on top of your health with health-related news, community forums and access to wellness initiatives. We’re on an exciting journey to continue to improve what we offer so Manage My Health becomes your go-to place for managing you and your family’s health and wellness.

NAICS: 71394
NAICS Definition: Fitness and Recreational Sports Centers
Employees: 23
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1
View Profile

Massage Envy

14350 N. 87th St., Suite 200, Scottsdale, AZ, 85260, US
Last Update: 2025-12-25
Between 750 and 799
https://www.MassageEnvy.com/GrowYourCareer

Massage Envy is the nation’s #1 provider of massage collectively across its franchise network and a national leader in skin care. All Massage Envy locations are independently owned and operated franchises, where the franchisee is the sole employer of all positions. Massage Envy combines big-brand recognition with a small-brand feel because at its heart is a caring, supportive community of dedicated wellness professionals who share one purpose: helping people feel and look better so they can live better. Making a difference in clients’ lives is the biggest reward for any wellness professional, but the environment at a Massage Envy franchised location can also offer you the freedom to enjoy more of what you love about your work. Come grow your career at a place that values, supports, and empowers you!

NAICS: 71394
NAICS Definition: Fitness and Recreational Sports Centers
Employees: 16,148
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/managemyhealth.jpeg
Manage My Health
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/massage-envy.jpeg
Massage Envy
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Manage My Health
100%
Compliance Rate
0/4 Standards Verified
Massage Envy
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Wellness and Fitness Services Industry Average (This Year)

No incidents recorded for Manage My Health in 2026.

Incidents vs Wellness and Fitness Services Industry Average (This Year)

No incidents recorded for Massage Envy in 2026.

Incident History — Manage My Health (X = Date, Y = Severity)

Manage My Health cyber incidents detection timeline including parent company and subsidiaries

Incident History — Massage Envy (X = Date, Y = Severity)

Massage Envy cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/managemyhealth.jpeg
Manage My Health
Incidents

Date Detected: 12/2025
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/massage-envy.jpeg
Massage Envy
Incidents

No Incident

FAQ

Massage Envy company demonstrates a stronger AI Cybersecurity Score compared to Manage My Health company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Manage My Health company has historically faced a number of disclosed cyber incidents, whereas Massage Envy company has not reported any.

In the current year, Massage Envy company and Manage My Health company have not reported any cyber incidents.

Neither Massage Envy company nor Manage My Health company has reported experiencing a ransomware attack publicly.

Manage My Health company has disclosed at least one data breach, while the other Massage Envy company has not reported such incidents publicly.

Neither Massage Envy company nor Manage My Health company has reported experiencing targeted cyberattacks publicly.

Neither Manage My Health company nor Massage Envy company has reported experiencing or disclosing vulnerabilities publicly.

Neither Manage My Health nor Massage Envy holds any compliance certifications.

Neither company holds any compliance certifications.

Massage Envy company has more subsidiaries worldwide compared to Manage My Health company.

Massage Envy company employs more people globally than Manage My Health company, reflecting its scale as a Wellness and Fitness Services.

Neither Manage My Health nor Massage Envy holds SOC 2 Type 1 certification.

Neither Manage My Health nor Massage Envy holds SOC 2 Type 2 certification.

Neither Manage My Health nor Massage Envy holds ISO 27001 certification.

Neither Manage My Health nor Massage Envy holds PCI DSS certification.

Neither Manage My Health nor Massage Envy holds HIPAA certification.

Neither Manage My Health nor Massage Envy holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in MadrasThemes MAS Videos allows PHP Local File Inclusion.This issue affects MAS Videos: from n/a through 1.3.2.

Published
Date
2025-12-30
Updated
Date
2025-12-30
Risk Information
cvss3
Base: 7.5
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Description

Cross-Site Request Forgery (CSRF) vulnerability in Hoernerfranz WP-CalDav2ICS allows Stored XSS.This issue affects WP-CalDav2ICS: from n/a through 1.3.4.

Published
Date
2025-12-30
Updated
Date
2025-12-30
Risk Information
cvss3
Base: 7.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
References
Description

Ksenia Security Lares 4.0 Home Automation version 1.6 contains a critical security flaw that exposes the alarm system PIN in the 'basisInfo' XML file after authentication. Attackers can retrieve the PIN from the server response to bypass security measures and disable the alarm system without additional authentication.

Published
Date
2025-12-30
Updated
Date
2025-12-30
Risk Information
cvss3
Base: 9.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 9.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Ksenia Security Lares 4.0 Home Automation version 1.6 contains an unprotected endpoint vulnerability that allows authenticated attackers to upload MPFS File System binary images. Attackers can exploit this vulnerability to overwrite flash program memory and potentially execute arbitrary code on the home automation system's web server.

Published
Date
2025-12-30
Updated
Date
2025-12-30
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Ksenia Security Lares 4.0 version 1.6 contains a URL redirection vulnerability in the 'cmdOk.xml' script that allows attackers to manipulate the 'redirectPage' GET parameter. Attackers can craft malicious links that redirect authenticated users to arbitrary websites when clicking on a specially constructed link hosted on a trusted domain.

Published
Date
2025-12-30
Updated
Date
2025-12-30
Risk Information
cvss3
Base: 8.0
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References