Comparison Overview

NAKIVO

VS

TOTVS

NAKIVO

4894 Sparks Blvd. , Sparks, NV, 89436-8202, US
Last Update: 2025-11-23
Between 750 and 799

NAKIVO is a US-based corporation dedicated to delivering the ultimate backup, ransomware protection and disaster recovery solution for virtual, physical, cloud and SaaS environments. As one of the fastest-growing backup and ransomware recovery software vendors in the industry, NAKIVO boasts 24 consecutive quarters of double-digit growth, 5-star online community reviews, 98% customer satisfaction with support and a network of over 8000 partners worldwide. Over 30,000 active customers in 183 countries trust NAKIVO with protecting their data, including major companies like Honda, Cisco, Coca-Cola and Siemens.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 176
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1

TOTVS

Av Braz Leme, 1000, Sao Paulo, SP, BR, 02511-900
Last Update: 2025-11-27
Between 750 and 799

Olá, somos a TOTVS! A maior empresa de tecnologia do Brasil. 🤓 Líder absoluta em sistemas e plataformas para empresas, a TOTVS possui mais de 70 mil clientes. Indo muito além do ERP, oferece tecnologia completa para digitalização dos negócios por meio de 3 unidades de negócio: - Gestão: ERPs, soluções cross e sistemas especializados visando garantir mais produtividade, eficiência e governança para os negócios; 💻 - Techfin: ERP Banking que oferece soluções de crédito B2B e pagamento, integrados a sistemas de gestão; 💸 - RD Station: Ferramentas digitais de marketing, vendas e relacionamento, para empresas de todos os portes e segmentos. 🚀 Nos últimos 5 anos, a companhia investiu R$3 bilhões em pesquisa e desenvolvimento para atender de maneira cada vez mais especializada empresas de 12 segmentos da economia, tornando-se um trusted advisor de seus clientes. A TOTVS é uma potência tecnológica que apoia a evolução de empresas de norte a sul do país. O Brasil, que faz, faz com TOTVS.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 16,304
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/nakivo.jpeg
NAKIVO
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/totvs.jpeg
TOTVS
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
NAKIVO
100%
Compliance Rate
0/4 Standards Verified
TOTVS
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for NAKIVO in 2025.

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for TOTVS in 2025.

Incident History — NAKIVO (X = Date, Y = Severity)

NAKIVO cyber incidents detection timeline including parent company and subsidiaries

Incident History — TOTVS (X = Date, Y = Severity)

TOTVS cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/nakivo.jpeg
NAKIVO
Incidents

Date Detected: 6/2024
Type:Vulnerability
Attack Vector: Unauthenticated Arbitrary File Reads
Blog: Blog

Date Detected: 6/2024
Type:Vulnerability
Attack Vector: Unauthorized Arbitrary File Reads
Motivation: Data Exfiltration, Potential Ransomware
Blog: Blog
https://images.rankiteo.com/companyimages/totvs.jpeg
TOTVS
Incidents

No Incident

FAQ

TOTVS company demonstrates a stronger AI Cybersecurity Score compared to NAKIVO company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

NAKIVO company has historically faced a number of disclosed cyber incidents, whereas TOTVS company has not reported any.

In the current year, TOTVS company and NAKIVO company have not reported any cyber incidents.

Neither TOTVS company nor NAKIVO company has reported experiencing a ransomware attack publicly.

Neither TOTVS company nor NAKIVO company has reported experiencing a data breach publicly.

Neither TOTVS company nor NAKIVO company has reported experiencing targeted cyberattacks publicly.

NAKIVO company has disclosed at least one vulnerability, while TOTVS company has not reported such incidents publicly.

Neither NAKIVO nor TOTVS holds any compliance certifications.

Neither company holds any compliance certifications.

Neither NAKIVO company nor TOTVS company has publicly disclosed detailed information about the number of their subsidiaries.

TOTVS company employs more people globally than NAKIVO company, reflecting its scale as a Software Development.

Neither NAKIVO nor TOTVS holds SOC 2 Type 1 certification.

Neither NAKIVO nor TOTVS holds SOC 2 Type 2 certification.

Neither NAKIVO nor TOTVS holds ISO 27001 certification.

Neither NAKIVO nor TOTVS holds PCI DSS certification.

Neither NAKIVO nor TOTVS holds HIPAA certification.

Neither NAKIVO nor TOTVS holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Exposure of credentials in unintended requests in Devolutions Server, Remote Desktop Manager on Windows.This issue affects Devolutions Server: through 2025.3.8.0; Remote Desktop Manager: through 2025.3.23.0.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description

Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

Risk Information
cvss4
Base: 8.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Reveals plaintext credentials in the MONITOR command vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 1.0.0 through 2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description

Improper Privilege Management vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from v2.9.0 through v2.13.0. Users are recommended to upgrade to version 2.14.0, which fixes the issue.

Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Description

File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0.

Risk Information
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L