Comparison Overview

National Academy of Design

VS

Northwest African American Museum

National Academy of Design

15 Gramercy Park S, None, New York, NY, US, 10003
Last Update: 2025-12-03
View Profile
Between 750 and 799
http://www.nationalacademy.org/

Founded in 1825, the National Academy of Design promotes art and architecture in America through exhibition and instruction. As the leading honorary society for visual artists and architects in the United States, we advocate for the arts as a tool for education, celebrate the role of artists and architects in public life, and serve as a catalyst for cultural conversations that propel society forward. Our National Academician membership is a vibrant, intergenerational community of artists and architects from many backgrounds that honors the full diversity of practitioners in the United States. Across our varied creative practices, we are unified in our shared belief in the power of art and architecture. Through our individual work and collective initiatives, we support our communities, peers, and the next generation of creative thinkers. Each year, new National Academicians are inducted into our membership by current members. This honor cannot be applied for or solicited.

NAICS: 712
NAICS Definition: Museums, Historical Sites, and Similar Institutions
Employees: 49
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Northwest African American Museum

Seattle, 98144, US
Last Update: 2025-11-27
Between 750 and 799
http://www.naamnw.org

At the heart of the African American experience in the Northwest is the story of our journey to this region, the establishment of our vibrant community, and the ways in which we have survived. To tell this ever-unfolding story, the Museum’s exhibits and programs feature the visual arts, music, crafts, literature and history of African Americans in the Northwest. Cognizant of the black community’s continuous evolution, NAAM focuses on African Americans whose route to the new world was through slavery as well as recent immigrants arriving from places such as Somalia, Sudan and Ethiopia.

NAICS: 712
NAICS Definition: Museums, Historical Sites, and Similar Institutions
Employees: 17
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/natlacademy.jpeg
National Academy of Design
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/northwest-african-american-museum.jpeg
Northwest African American Museum
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
National Academy of Design
100%
Compliance Rate
0/4 Standards Verified
Northwest African American Museum
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for National Academy of Design in 2025.

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Northwest African American Museum in 2025.

Incident History — National Academy of Design (X = Date, Y = Severity)

National Academy of Design cyber incidents detection timeline including parent company and subsidiaries

Incident History — Northwest African American Museum (X = Date, Y = Severity)

Northwest African American Museum cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/natlacademy.jpeg
National Academy of Design
Incidents

No Incident

https://images.rankiteo.com/companyimages/northwest-african-american-museum.jpeg
Northwest African American Museum
Incidents

No Incident

FAQ

National Academy of Design company demonstrates a stronger AI Cybersecurity Score compared to Northwest African American Museum company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Northwest African American Museum company has disclosed a higher number of cyber incidents compared to National Academy of Design company.

In the current year, Northwest African American Museum company and National Academy of Design company have not reported any cyber incidents.

Neither Northwest African American Museum company nor National Academy of Design company has reported experiencing a ransomware attack publicly.

Neither Northwest African American Museum company nor National Academy of Design company has reported experiencing a data breach publicly.

Neither Northwest African American Museum company nor National Academy of Design company has reported experiencing targeted cyberattacks publicly.

Neither National Academy of Design company nor Northwest African American Museum company has reported experiencing or disclosing vulnerabilities publicly.

Neither National Academy of Design nor Northwest African American Museum holds any compliance certifications.

Neither company holds any compliance certifications.

Neither National Academy of Design company nor Northwest African American Museum company has publicly disclosed detailed information about the number of their subsidiaries.

National Academy of Design company employs more people globally than Northwest African American Museum company, reflecting its scale as a Museums, Historical Sites, and Zoos.

Neither National Academy of Design nor Northwest African American Museum holds SOC 2 Type 1 certification.

Neither National Academy of Design nor Northwest African American Museum holds SOC 2 Type 2 certification.

Neither National Academy of Design nor Northwest African American Museum holds ISO 27001 certification.

Neither National Academy of Design nor Northwest African American Museum holds PCI DSS certification.

Neither National Academy of Design nor Northwest African American Museum holds HIPAA certification.

Neither National Academy of Design nor Northwest African American Museum holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.11.1, vllm has a critical remote code execution vector in a config class named Nemotron_Nano_VL_Config. When vllm loads a model config that contains an auto_map entry, the config class resolves that mapping with get_class_from_dynamic_module(...) and immediately instantiates the returned class. This fetches and executes Python from the remote repository referenced in the auto_map string. Crucially, this happens even when the caller explicitly sets trust_remote_code=False in vllm.transformers_utils.config.get_config. In practice, an attacker can publish a benign-looking frontend repo whose config.json points via auto_map to a separate malicious backend repo; loading the frontend will silently run the backend’s code on the victim host. This vulnerability is fixed in 0.11.1.

Published
Date
2025-12-01
Updated
Date
2025-12-01
Risk Information
cvss3
Base: 7.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
References
Description

fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0, by crafting a malicious URL, an attacker could access routes that are not allowed, even though the reply.from is defined for specific routes in @fastify/reply-from. This vulnerability is fixed in 12.5.0.

Published
Date
2025-12-01
Updated
Date
2025-12-01
Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.

Published
Date
2025-12-01
Updated
Date
2025-12-01
Risk Information
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder.

Published
Date
2025-12-01
Updated
Date
2025-12-01
Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails. Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header. The proxy route then appends the client-specified path to perform an external fetch. This can be maliciously used by users for SSRF attacks. This vulnerability is fixed in 1.14.0.

Published
Date
2025-12-01
Updated
Date
2025-12-01
Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References