Comparison Overview

One Percent Realty Ltd., brokerage

VS

Pass the Keys®

One Percent Realty Ltd., brokerage

300 John St, Thornhill, Ontario, L3T 5W4, CA
Last Update: 2025-11-26

Consumers love 1% Realty because of the huge commission savings with professional service. This gives you a big advantage over the competition. As a new agent in the business, or a seasoned agent looking to do more business, with the 1% deal & national brand, you can compete against top agents for a listing and actually get it. Moreover, the more you do in that area, the more business will come. Having listings gets you more listings and clientele. The concept behind One Percent Realty is that we provide you full service but at a discount commission. The 1% system is designed so you don't have to go looking for business, once people know how much commission you are charging they jump at the chance to list their homes for sale and listings bring buyers. Not only is your office overhead really low with our no desk fees for working agents, but you also don't have to spend a fortune in marketing yourself to get the phone to ring. Both of these add to your bottom line and place more money in your pocket. Learn more at www.onepercentrealty.com

NAICS: 533
NAICS Definition:
Employees: 98
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Pass the Keys®

Pass The Keys, 20 Ropemaker Street, London, EC2Y 9AR, GB
Last Update: 2025-11-24

Pass the Keys® is the UK’s leading full-service short-let and holiday-let management company, simplifying hosting for homeowners since 2015. With 70+ franchise partners across the UK, Spain, and Northern Ireland, we combine bespoke technology, exceptional service, and deep local expertise to provide fully managed services—from guest screening and pricing optimisation to 24/7 support and hotel-quality cleaning and linen. Trusted by over 7,000 guests and hosts on Trustpilot, we’re setting the gold standard in property management. Whether you’re looking to earn more as a property owner, enjoy a seamless stay as a guest, or join a thriving franchise network, Pass the Keys® ensures you’re in expert hands. Host with us | Stay with us | Join our Franchise

NAICS: 53
NAICS Definition: Real Estate and Rental and Leasing
Employees: 102
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/one-percent-realty-brokerage.jpeg
One Percent Realty Ltd., brokerage
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/pass-the-keys.jpeg
Pass the Keys®
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
One Percent Realty Ltd., brokerage
100%
Compliance Rate
0/4 Standards Verified
Pass the Keys®
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Real Estate and Equipment Rental Services Industry Average (This Year)

No incidents recorded for One Percent Realty Ltd., brokerage in 2025.

Incidents vs Real Estate and Equipment Rental Services Industry Average (This Year)

No incidents recorded for Pass the Keys® in 2025.

Incident History — One Percent Realty Ltd., brokerage (X = Date, Y = Severity)

One Percent Realty Ltd., brokerage cyber incidents detection timeline including parent company and subsidiaries

Incident History — Pass the Keys® (X = Date, Y = Severity)

Pass the Keys® cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/one-percent-realty-brokerage.jpeg
One Percent Realty Ltd., brokerage
Incidents

No Incident

https://images.rankiteo.com/companyimages/pass-the-keys.jpeg
Pass the Keys®
Incidents

No Incident

FAQ

One Percent Realty Ltd., brokerage company demonstrates a stronger AI Cybersecurity Score compared to Pass the Keys® company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Pass the Keys® company has disclosed a higher number of cyber incidents compared to One Percent Realty Ltd., brokerage company.

In the current year, Pass the Keys® company and One Percent Realty Ltd., brokerage company have not reported any cyber incidents.

Neither Pass the Keys® company nor One Percent Realty Ltd., brokerage company has reported experiencing a ransomware attack publicly.

Neither Pass the Keys® company nor One Percent Realty Ltd., brokerage company has reported experiencing a data breach publicly.

Neither Pass the Keys® company nor One Percent Realty Ltd., brokerage company has reported experiencing targeted cyberattacks publicly.

Neither One Percent Realty Ltd., brokerage company nor Pass the Keys® company has reported experiencing or disclosing vulnerabilities publicly.

Neither One Percent Realty Ltd., brokerage nor Pass the Keys® holds any compliance certifications.

Neither company holds any compliance certifications.

Neither One Percent Realty Ltd., brokerage company nor Pass the Keys® company has publicly disclosed detailed information about the number of their subsidiaries.

Pass the Keys® company employs more people globally than One Percent Realty Ltd., brokerage company, reflecting its scale as a Real Estate and Equipment Rental Services.

Neither One Percent Realty Ltd., brokerage nor Pass the Keys® holds SOC 2 Type 1 certification.

Neither One Percent Realty Ltd., brokerage nor Pass the Keys® holds SOC 2 Type 2 certification.

Neither One Percent Realty Ltd., brokerage nor Pass the Keys® holds ISO 27001 certification.

Neither One Percent Realty Ltd., brokerage nor Pass the Keys® holds PCI DSS certification.

Neither One Percent Realty Ltd., brokerage nor Pass the Keys® holds HIPAA certification.

Neither One Percent Realty Ltd., brokerage nor Pass the Keys® holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H