Comparison Overview

Mary Kay Global

VS

O Boticário

Mary Kay Global

16251 Dallas Parkway, Addison, TX, US
Last Update: 2025-12-10

About Mary Kay - Then. Now. Always. One of the original glass ceiling breakers, Mary Kay Ash founded her dream beauty brand in Texas in 1963 with one goal: to enrich women’s lives. That dream has blossomed into a global company with unlimited opportunities to do something beautiful for people around the globe – and within our own company. We employ nearly 4,000 people in corporate positions around the world. The role of Mary Kay employees is to serve the beauty needs of our customers and support the needs of our independent sales force members who work with Mary Kay Inc. as independent contractors selling the amazing Mary Kay products directly to their customers in more than 35 countries around the world. Mary Kay’s long-term success has been made possible by our uniquely people-oriented corporate culture and a continual drive for innovation. Corporate teams with expertise in R&D, marketing, communications, legal, logistics, manufacturing, IT, supply chain, quality, engineering, analytics and other areas make sure the independent sales force have the products, marketing strategies, technology and support structure to succeed as entrepreneurs. Mary Kay is dedicated to investing in the science behind beauty and manufacturing cutting-edge skincare, color cosmetics, nutritional supplements, and fragrances. Mary Kay believes in preserving our planet for future generations, protecting women impacted by cancer and domestic abuse, and encouraging youth to follow their dreams. Learn more at marykay.com/corporatecareers, find us on Facebook and Instagram.

NAICS: 32562
NAICS Definition: Toilet Preparation Manufacturing
Employees: 48,964
Subsidiaries: 3
12-month incidents
0
Known data breaches
0
Attack type number
0

O Boticário

Av. Rui Barbosa, 4.110, Parque das Fontes,, São José dos Pinhais, PR, 83.050-010, BR
Last Update: 2025-12-12
Between 750 and 799

A beleza transforma, encanta, conquista e também pode ser conquistada. Eis o ideal de beleza que O Boticário multiplica com seus produtos, lojas e em sua relação com o público. Desde 1977, O Boticário soma inspiração, ousadia, inovação e qualidade, despertando o respeito do mercado, a confiança dos parceiros e a admiração dos consumidores. Conheça mais sobre O Boticário: Instagram: http://instagram.com/oboticario Facebook: http://www.facebook.com/oboticario Youtube: http://www.youtube.com/boticario Twitter: http://twitter.com/oboticario Loja Online: www.boticario.com.br

NAICS: 32562
NAICS Definition: Toilet Preparation Manufacturing
Employees: 19,719
Subsidiaries: 7
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/marykayglobal.jpeg
Mary Kay Global
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/o-boticario.jpeg
O Boticário
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Mary Kay Global
100%
Compliance Rate
0/4 Standards Verified
O Boticário
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Personal Care Product Manufacturing Industry Average (This Year)

No incidents recorded for Mary Kay Global in 2025.

Incidents vs Personal Care Product Manufacturing Industry Average (This Year)

No incidents recorded for O Boticário in 2025.

Incident History — Mary Kay Global (X = Date, Y = Severity)

Mary Kay Global cyber incidents detection timeline including parent company and subsidiaries

Incident History — O Boticário (X = Date, Y = Severity)

O Boticário cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/marykayglobal.jpeg
Mary Kay Global
Incidents

No Incident

https://images.rankiteo.com/companyimages/o-boticario.jpeg
O Boticário
Incidents

No Incident

FAQ

Mary Kay Global company demonstrates a stronger AI Cybersecurity Score compared to O Boticário company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, O Boticário company has disclosed a higher number of cyber incidents compared to Mary Kay Global company.

In the current year, O Boticário company and Mary Kay Global company have not reported any cyber incidents.

Neither O Boticário company nor Mary Kay Global company has reported experiencing a ransomware attack publicly.

Neither O Boticário company nor Mary Kay Global company has reported experiencing a data breach publicly.

Neither O Boticário company nor Mary Kay Global company has reported experiencing targeted cyberattacks publicly.

Neither Mary Kay Global company nor O Boticário company has reported experiencing or disclosing vulnerabilities publicly.

Neither Mary Kay Global nor O Boticário holds any compliance certifications.

Neither company holds any compliance certifications.

O Boticário company has more subsidiaries worldwide compared to Mary Kay Global company.

Mary Kay Global company employs more people globally than O Boticário company, reflecting its scale as a Personal Care Product Manufacturing.

Neither Mary Kay Global nor O Boticário holds SOC 2 Type 1 certification.

Neither Mary Kay Global nor O Boticário holds SOC 2 Type 2 certification.

Neither Mary Kay Global nor O Boticário holds ISO 27001 certification.

Neither Mary Kay Global nor O Boticário holds PCI DSS certification.

Neither Mary Kay Global nor O Boticário holds HIPAA certification.

Neither Mary Kay Global nor O Boticário holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N