Comparison Overview

Nassal Construtora

VS

AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP

Nassal Construtora

Rua Acre, 2116, Bairro América Aracaju, Sergipe 49080010, BR
Last Update: 2025-03-15 (UTC)

Excellent

Com 34 anos no mercado imobiliário sergipano, a empresa conta hoje com mais de mil colaboradores e já entregou 7.000 unidades residenciais. A carreira concretizada da Nassal é representada pelos empreendimentos que constrói, entregues no prazo, e pelas ações que desenvolve junto aos clientes e colaboradores. A Nassal se preocupa ainda com as ações socioambientais, diminuindo o desperdício e dinamizando processos, através da compra de equipamentos modernos e da adoção de técnicas que reduzem os gastos da obra mesmo depois de entregue, como sensores de movimentos para as lâmpadas e redutores do consumo de água.

NAICS: 23
NAICS Definition:
Employees: 1,001-5,000
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP

Al Fara'a Group Corssing of Delma and Murror Street Abu Dhabi, Abu Dhabi 4157, AE
Last Update: 2025-05-06 (UTC)

Excellent

Between 900 and 1000

Al Fara’a Group is a leading UAE based integrated multi-disciplinary Construction and Industrial Group. Over the last three and half decades, Al Fara’a Group has built a solid reputation in the construction industry with an admirable track record of sustained growth and in delivering quality projects on time in both private and government sectors. Al Fara’a Group has commenced operations in Saudi Arabia and Qatar and is consolidating its presence in these countries. The Group has a large team of top-notch technical experts, specialized project managers, skilled multinational workforce and state-of-the-art-technology and construction systems with an array of the latest sophisticated plant, machinery and tools to ensure timely and successful completion of all projects at the highest quality. Al Fara’a Group has 11 business segments which are vertically and horizontally integrated. In addition to its core competence in construction, the Group has honed its strengths and competitive advantage by setting up Group companies in allied sectors like Ready Mix Concrete, Properties and Development, Precast Structures, Steel Structures, Electromechanical services, Aluminium and Glazing structures, Interiors, Landscaping, Irrigation and Painting as well as Oil and Gas. Over the years, the Group has successfully executed diverse construction projects like high rise towers, hospitals, heritage structures, hotels, defense projects, commercial & residential developments, cinemas, multiplexes & shopping malls. The Group is a member of LEED (Leadership in Energy and Environmental Design). Additionally the Group also holds a responsible position as a corporate member of EGBC (Emirates Green Building Council). The Group drives business excellence through innovation and has made pioneering investments in various construction sectors from green ready mix concrete to reduction of carbon footprint initiatives by minimizing cement content, use of Autoclaved Aerated Concrete in construction etc. Exceeding client expectations is the primary purpose and for this the Group engages clients to understand their needs. The Group engineers value through transforming creative thinking into reality. The Group strives to deliver client requirements successfully and takes great pride in the number of repeat clients which is a true measure of its achievements. Awards 2008: CNBC Arabian Property Award 2009: Dubai Quality Award | Dubai Quality Appreciation Award 2010: Sheikh Khalifa Excellence Award (SKEA) – Silver 2011: Stevies International Business Award | Construction Week Awards 2011 | City Build Abu Dhabi Construction Award 2012: Mohammed Bin Rashid Al Maktoum Business Award | Sheikh Khalifa Excellence Award (SKEA) – Gold | Dubai Chamber CSR Label 2013: MEED Quality Award – GCC Winner 2016: Guinness World Record for largest continuous pour 2017: Mechanical Project of the Year | Middle East MEP Awards 2017

NAICS: 23
NAICS Definition: Construction
Employees: 10,001+
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/nassal-construtora.jpeg
Nassal Construtora
ISO 27001
Not verified
SOC 2
Not verified
GDPR
No public badge
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/al-faraa-construction-and-industrial-group.jpeg
AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP
ISO 27001
Not verified
SOC 2
Not verified
GDPR
No public badge
PCI DSS
No public badge
Compliance Summary
Nassal Construtora
100%
Compliance Rate
0/4 Standards Verified
AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Construction Industry Average (This Year)

No incidents recorded for Nassal Construtora in 2025.

Incidents vs Construction Industry Average (This Year)

No incidents recorded for AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP in 2025.

Incident History — Nassal Construtora (X = Date, Y = Severity)

Nassal Construtora cyber incidents detection timeline including parent company and subsidiaries

Incident History — AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP (X = Date, Y = Severity)

AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/nassal-construtora.jpeg
Nassal Construtora
Incidents

No Incident

https://images.rankiteo.com/companyimages/al-faraa-construction-and-industrial-group.jpeg
AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP
Incidents

No Incident

FAQ

Both Nassal Construtora company and AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP company has disclosed a higher number of cyber incidents compared to Nassal Construtora company.

In the current year, AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP company and Nassal Construtora company have not reported any cyber incidents.

Neither AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP company nor Nassal Construtora company has reported experiencing a ransomware attack publicly.

Neither AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP company nor Nassal Construtora company has reported experiencing a data breach publicly.

Neither AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP company nor Nassal Construtora company has reported experiencing targeted cyberattacks publicly.

Neither Nassal Construtora company nor AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP company has reported experiencing or disclosing vulnerabilities publicly.

Neither Nassal Construtora company nor AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP company has publicly disclosed detailed information about the number of their subsidiaries.

Neither Nassal Construtora company nor AL FARAA CONSTRUCTION AND INDUSTRIAL GROUP company has publicly disclosed the exact number of their employees.

Latest Global CVEs (Not Company-Specific)

Description

Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a specific URL. This issue is fixed in versions 16.34.1, 17.22.2, 18.27.2 and 19.0.0-alpha.6.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Traccar is an open source GPS tracking system. Default installs of Traccar on Windows between versions 6.1- 6.8.1 and non default installs between versions 5.8 - 6.0 are vulnerable to unauthenticated local file inclusion attacks which can lead to leakage of passwords or any file on the file system including the Traccar configuration file. Versions 5.8 - 6.0 are only vulnerable if <entry key='web.override'>./override</entry> is set in the configuration file. Versions 6.1 - 6.8.1 are vulnerable by default as the web override is enabled by default. The vulnerable code is removed in version 6.9.0.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Stalwart is a mail and collaboration server. Versions 0.13.3 and below contain an unbounded memory allocation vulnerability in the IMAP protocol parser which allows remote attackers to exhaust server memory, potentially triggering the system's out-of-memory (OOM) killer and causing a denial of service. The CommandParser implementation enforces size limits on its dynamic buffer in most parsing states, but several state handlers omit these validation checks. This issue is fixed in version 0.13.4. A workaround for this issue is to implement rate limiting and connection monitoring at the network level, however this does not provide complete protection.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Broken Access Control vulnerability, identified in the get_relatorios_socios.php endpoint. This vulnerability allows unauthenticated attackers to directly access sensitive personal and financial information of members without requiring authentication or authorization. This issue is fixed in version 3.5.0.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an Open Redirect vulnerability, identified in the control.php endpoint, specifically in the nextPage parameter (metodo=listarUmnomeClasse=FuncionarioControle). This vulnerability allows attackers to redirect users to arbitrary external domains, enabling phishing campaigns, malicious payload distribution, or user credential theft. This issue is fixed in version 3.5.0.

Risk Information
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X