Comparison Overview

Nancy Bond Insurance Services

VS

Intact

Nancy Bond Insurance Services

201 W. Lemon Avenue, Monrovia, CA, 91016, US
Last Update: 2025-05-05 (UTC)
Between 900 and 1000
http://www.nancybondinsurance.com

Excellent

NBIS - a full-service independent insurance agency here to help serve your insurance needs! We are STELLAR with customer service, and know just how to help you save money and get top-notch coverage. We have a very knowledgeable staff, and a passion for being involved in the communities that we serve.

NAICS: 524
NAICS Definition: Insurance Carriers and Related Activities
Employees: 10
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Intact

700 University Avenue, Toronto, Ontario, M5G 0A1, CA
Last Update: 2025-05-06 (UTC)

Excellent

Between 900 and 1000
https://www.intactfc.com/English/about-us/default.aspx

We are here to help people, businesses and society prosper in good times and be resilient in bad times. This is our purpose and the foundation of our company – it drives everything we do and gives meaning to our work. - Nous sommes là pour aider les gens, les entreprises et la société à aller de l'avant dans les bons moments et à être résilients dans les moments difficiles. C'est notre raison d'être et l'essence même de notre entreprise.

NAICS: 524
NAICS Definition: Insurance Carriers and Related Activities
Employees: 18,950
Subsidiaries: 6
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/nancy-bond-insurance-services.jpeg
Nancy Bond Insurance Services
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/intact.jpeg
Intact
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
Nancy Bond Insurance Services
100%
Compliance Rate
0/4 Standards Verified
Intact
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Insurance Industry Average (This Year)

No incidents recorded for Nancy Bond Insurance Services in 2025.

Incidents vs Insurance Industry Average (This Year)

No incidents recorded for Intact in 2025.

Incident History — Nancy Bond Insurance Services (X = Date, Y = Severity)

Nancy Bond Insurance Services cyber incidents detection timeline including parent company and subsidiaries

Incident History — Intact (X = Date, Y = Severity)

Intact cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/nancy-bond-insurance-services.jpeg
Nancy Bond Insurance Services
Incidents

No Incident

https://images.rankiteo.com/companyimages/intact.jpeg
Intact
Incidents

No Incident

FAQ

Both Nancy Bond Insurance Services company and Intact company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, Intact company has disclosed a higher number of cyber incidents compared to Nancy Bond Insurance Services company.

In the current year, Intact company and Nancy Bond Insurance Services company have not reported any cyber incidents.

Neither Intact company nor Nancy Bond Insurance Services company has reported experiencing a ransomware attack publicly.

Neither Intact company nor Nancy Bond Insurance Services company has reported experiencing a data breach publicly.

Neither Intact company nor Nancy Bond Insurance Services company has reported experiencing targeted cyberattacks publicly.

Neither Nancy Bond Insurance Services company nor Intact company has reported experiencing or disclosing vulnerabilities publicly.

Intact company has more subsidiaries worldwide compared to Nancy Bond Insurance Services company.

Intact company employs more people globally than Nancy Bond Insurance Services company, reflecting its scale as a Insurance.

Latest Global CVEs (Not Company-Specific)

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44.

Published
Date
2025-10-17
Updated
Date
2025-10-17
Risk Information
cvss4
Base: 2.1
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:M/U:Amber
References
Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki QuizGame extension allows Stored XSS.This issue affects MediaWiki QuizGame extension: 1.39, 1.43, 1.44.

Published
Date
2025-10-17
Updated
Date
2025-10-17
Risk Information
cvss4
Base: 2.0
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:C/RE:M/U:Amber
References
Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki PollNY extension allows Stored XSS.This issue affects MediaWiki PollNY extension: 1.39, 1.43, 1.44.

Published
Date
2025-10-17
Updated
Date
2025-10-17
Risk Information
cvss4
Base: 2.0
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:C/RE:M/U:Amber
References
Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44.

Published
Date
2025-10-17
Updated
Date
2025-10-17
Risk Information
cvss4
Base: 5.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:L/U:Amber
References
Description

pyquokka is a framework for making data lakes work for time series. In versions 0.3.1 and prior, the FlightServer class directly uses pickle.loads() to deserialize action bodies received from Flight clients without any sanitization or validation in the do_action() method. The vulnerable code is located in pyquokka/flight.py at line 283 where arbitrary data from Flight clients is directly passed to pickle.loads(). When FlightServer is configured to listen on 0.0.0.0, this allows attackers across the entire network to perform arbitrary remote code execution by sending malicious pickled payloads through the set_configs action. Additional vulnerability points exist in the cache_garbage_collect, do_put, and do_get functions where pickle.loads is used to deserialize untrusted remote data.

Published
Date
2025-10-17
Updated
Date
2025-10-17
Risk Information
cvss3
Base: 9.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References