Comparison Overview

NEON

VS

LUCHO FILMS

NEON

None, None, New York, NY, US, 10014
Last Update: 2025-12-20
Between 750 and 799

In only eight years, NEON has garnered 39 Academy Award® nominations (7 this year), 11 total wins (5 this year), including two Best Picture wins, and has grossed over $400M at the box office. The company continues to push boundaries and take creative risks on bold cinema such as Sean Baker’s Anora, which recently took home five Academy Awards® including Best Picture, and was released in theaters to the highest per-screen average of 2024; as well as Bong Joon Ho’s Parasite, which made history winning four Academy Awards®, becoming the first non-English-language film to claim Best Picture, and grossed over $54M at the domestic box office. NEON has built an impressive streak winning the coveted Palme d’Or at the Cannes Film Festival, with six consecutive wins, including this most recent year’s winner It Was Just an Accident from Iranian filmmaker Jafar Panahi, as well as Anora, Parasite, Anatomy of a Fall, Titane, and Triangle of Sadness. In 2024, NEON was named The Hollywood Reporter’s Independent Studio of the Year and received the Clio Award for Studio of the Year. Recent NEON releases include Mike Flanagan’s The Life of Chuck and Osgood Perkins’ horror film The Monkey, both of which are based on the short stories by Stephen King. The Monkey marked NEON’s second biggest opening weekend at the box office following Perkins’ Longlegs, which is the highest grossing independent film of the year at $75 million domestically. As a burgeoning leader in the production space, NEON’s recent and upcoming in-house productions include: David Robert Mitchell’s They Follow starring Maika Monroe; Michael Covino’s Splitsville starring Dakota Johnson and Adria Arjona; the highly anticipated Boots Riley feature I Love Boosters starring Keke Palmer, Naomi Ackie, LaKeith Stanfield, Demi Moore, and Eiza González; The Wrong Girls starring Kristen Stewart and Alia Shawkat; Tilman Singer’s Cuckoo starring Hunter Schafer; and Brandon Cronenberg’s Infinity Pool.

NAICS: None
NAICS Definition: Others
Employees: 172
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

LUCHO FILMS

Villa Olímpica, Santiago, CL
Last Update: 2025-12-17
Between 750 and 799

Lucho Films es una empresa productora chilena que tiene por vocación producir proyectos cinematográficos en co producción internacional. Desarrollamos tanto los proyectos de realizadores chilenos como la co producción o la dirección de producción de proyectos internacionales que necesiten un socio en Chile. Somos un equipo de trabajo conformado por profesionales con más de 10 años de experiencia en el desarrollo y producción de proyectos culturales y cinematográficos. Nuestra razón de ser es nuestra voluntad por valorizar nuestro patrimonio cultural y fortalecer nuestra identidad latinoamericana a través de la promoción de proyectos cinematográficos con un fuerte potencial internacional. De este modo, trabajamos sobre la base de colaboraciones internacionales para difundir mejor en el mundo nuestra identidad latinoamericana; al mismo tiempo que nos mantenemos ligados al know how local para favorecer la inserción y la participación de talentos Latinoamericanos. Y, dado que incorporamos nuevas tecnologías en nuestras producciones, lo hacemos siempre de manera acorde a los requerimientos tanto técnicos como artísticos de cada proyecto, para obtener los mejores resultados, en terminos de innovación y emoción. Creemos que el trabajo en equipo, la responsabilidad social y la diversidad cultural son valores fundamentales y que catalizan la creatividad.

NAICS: None
NAICS Definition: Others
Employees: 12
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/neonrated.jpeg
NEON
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/lucho-films.jpeg
LUCHO FILMS
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
NEON
100%
Compliance Rate
0/4 Standards Verified
LUCHO FILMS
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Movies, Videos, and Sound Industry Average (This Year)

No incidents recorded for NEON in 2025.

Incidents vs Movies, Videos, and Sound Industry Average (This Year)

No incidents recorded for LUCHO FILMS in 2025.

Incident History — NEON (X = Date, Y = Severity)

NEON cyber incidents detection timeline including parent company and subsidiaries

Incident History — LUCHO FILMS (X = Date, Y = Severity)

LUCHO FILMS cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/neonrated.jpeg
NEON
Incidents

No Incident

https://images.rankiteo.com/companyimages/lucho-films.jpeg
LUCHO FILMS
Incidents

No Incident

FAQ

NEON company demonstrates a stronger AI Cybersecurity Score compared to LUCHO FILMS company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, LUCHO FILMS company has disclosed a higher number of cyber incidents compared to NEON company.

In the current year, LUCHO FILMS company and NEON company have not reported any cyber incidents.

Neither LUCHO FILMS company nor NEON company has reported experiencing a ransomware attack publicly.

Neither LUCHO FILMS company nor NEON company has reported experiencing a data breach publicly.

Neither LUCHO FILMS company nor NEON company has reported experiencing targeted cyberattacks publicly.

Neither NEON company nor LUCHO FILMS company has reported experiencing or disclosing vulnerabilities publicly.

Neither NEON nor LUCHO FILMS holds any compliance certifications.

Neither company holds any compliance certifications.

Neither NEON company nor LUCHO FILMS company has publicly disclosed detailed information about the number of their subsidiaries.

NEON company employs more people globally than LUCHO FILMS company, reflecting its scale as a Movies, Videos, and Sound.

Neither NEON nor LUCHO FILMS holds SOC 2 Type 1 certification.

Neither NEON nor LUCHO FILMS holds SOC 2 Type 2 certification.

Neither NEON nor LUCHO FILMS holds ISO 27001 certification.

Neither NEON nor LUCHO FILMS holds PCI DSS certification.

Neither NEON nor LUCHO FILMS holds HIPAA certification.

Neither NEON nor LUCHO FILMS holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service, which performs file system operations without impersonating the requesting user. Due to improper privilege handling and a time-of-check time-of-use race condition combined with symbolic link and mount point manipulation, a local authenticated attacker can coerce the service into deleting arbitrary directories with SYSTEM privileges. This can be exploited to delete protected system folders such as C:\\Config.msi and subsequently achieve execution as NT AUTHORITY\\SYSTEM via MSI rollback techniques.

Risk Information
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capability check on the 'cs_update_application_status_callback' function in all versions up to, and including, 7.7. This makes it possible for authenticated attackers, with Candidate-level access and above, to inject cross-site scripting into the 'status' parameter of applied jobs for any user.

Risk Information
cvss3
Base: 7.6
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Description

The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.7 via the 'cs_update_application_status_callback' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Candidate-level access and above, to send a site-generated email with injected HTML to any user.

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description

The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `thegem_te_search` shortcode in all versions up to, and including, 1.32.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability requires TheGem theme (premium) to be installed with Header Builder mode enabled, and the FiboSearch "Replace search bars" option enabled for TheGem integration.

Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Description

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajax_get_members function. This is due to the use of a predictable low-entropy token (5 hex characters derived from md5 of post ID) to identify member directories and insufficient authorization checks on the unauthenticated AJAX endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, display names, user roles (including administrator accounts), profile URLs, and user IDs by enumerating predictable directory_id values or brute-forcing the small 16^5 token space.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N