Comparison Overview

OnTrac

VS

CTT - Correios de Portugal

OnTrac

14850 Thompson Rd, Chantilly, Virginia, US, 20151
Last Update: 2025-12-19
View Profile
Between 700 and 749
https://www.ontrac.com

OnTrac is the solution of choice for last-mile e-commerce deliveries that helps retailers and shippers build a competitive advantage through faster delivery times, lower costs, coast-to-coast coverage, and reliable on-time performance. OnTrac’s footprint stretches across the United States to reach approximately 70% of the population in 35 states and Washington, D.C. and enhance retailers’ ability to meet growing demand in the consumer e-commerce delivery market. OnTrac has evolved into a critical part of the e-commerce infrastructure and is trusted by leading retailers and shippers that desire reduced transit times and increased flexibility within their supply chains.

NAICS: 47
NAICS Definition: Transportation and Warehousing
Employees: 5,355
Subsidiaries: 1
12-month incidents
1
Known data breaches
1
Attack type number
1
View Profile

CTT - Correios de Portugal

Avenida dos Combatentes, nº 43 14.ºPiso Lisboa, Lisboa 1643-001, PT
Last Update: 2025-12-25
Between 750 and 799
http://www.ctt.pt

Os CTT assumem-se como uma empresa orientada para o cliente, com uma oferta segmentada para empresas e particulares, com soluções que começam no envio de correio e expresso (encomendas), que passam pelas melhores ofertas de poupanças e por um portefólio alargado de produtos e serviços empresariais, nomeadamente soluções de e-commerce, logística, publicidade, digitalização e outsourcing de processos. Estamos disponíveis para o ajudar nos canais de apoio http://spr.ly/Canais_ApoioCTT. Consulte as oportunidades que temos disponíveis em https://spr.ly/CTT_Recrutamento_Oportunidades e https://spr.ly/CTT_Recrutamento_Carteiro.

NAICS: 47
NAICS Definition: Transportation and Warehousing
Employees: 10,001
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/ontrac-shipping.jpeg
OnTrac
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/ctt-correios-de-portugal-s-a.jpeg
CTT - Correios de Portugal
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
OnTrac
100%
Compliance Rate
0/4 Standards Verified
CTT - Correios de Portugal
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Transportation, Logistics, Supply Chain and Storage Industry Average (This Year)

OnTrac has 16.67% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Transportation, Logistics, Supply Chain and Storage Industry Average (This Year)

No incidents recorded for CTT - Correios de Portugal in 2025.

Incident History — OnTrac (X = Date, Y = Severity)

OnTrac cyber incidents detection timeline including parent company and subsidiaries

Incident History — CTT - Correios de Portugal (X = Date, Y = Severity)

CTT - Correios de Portugal cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/ontrac-shipping.jpeg
OnTrac
Incidents

Date Detected: 4/2025
Type:Breach
Motivation: Financial Gain, Data Theft
Blog: Blog
https://images.rankiteo.com/companyimages/ctt-correios-de-portugal-s-a.jpeg
CTT - Correios de Portugal
Incidents

No Incident

FAQ

CTT - Correios de Portugal company demonstrates a stronger AI Cybersecurity Score compared to OnTrac company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

OnTrac company has historically faced a number of disclosed cyber incidents, whereas CTT - Correios de Portugal company has not reported any.

In the current year, OnTrac company has reported more cyber incidents than CTT - Correios de Portugal company.

Neither CTT - Correios de Portugal company nor OnTrac company has reported experiencing a ransomware attack publicly.

OnTrac company has disclosed at least one data breach, while the other CTT - Correios de Portugal company has not reported such incidents publicly.

Neither CTT - Correios de Portugal company nor OnTrac company has reported experiencing targeted cyberattacks publicly.

Neither OnTrac company nor CTT - Correios de Portugal company has reported experiencing or disclosing vulnerabilities publicly.

Neither OnTrac nor CTT - Correios de Portugal holds any compliance certifications.

Neither company holds any compliance certifications.

Both CTT - Correios de Portugal company and OnTrac company have a similar number of subsidiaries worldwide.

CTT - Correios de Portugal company employs more people globally than OnTrac company, reflecting its scale as a Transportation, Logistics, Supply Chain and Storage.

Neither OnTrac nor CTT - Correios de Portugal holds SOC 2 Type 1 certification.

Neither OnTrac nor CTT - Correios de Portugal holds SOC 2 Type 2 certification.

Neither OnTrac nor CTT - Correios de Portugal holds ISO 27001 certification.

Neither OnTrac nor CTT - Correios de Portugal holds PCI DSS certification.

Neither OnTrac nor CTT - Correios de Portugal holds HIPAA certification.

Neither OnTrac nor CTT - Correios de Portugal holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contact_us.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Published
Date
2025-12-24
Updated
Date
2025-12-24
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

C-Kermit (aka ckermit) through 10.0 Beta.12 (aka 416-beta12) before 244644d allows a remote Kermit system to overwrite files on the local system, or retrieve arbitrary files from the local system.

Published
Date
2025-12-24
Updated
Date
2025-12-24
Risk Information
cvss3
Base: 8.9
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
References
Description

Telenium Online Web Application is vulnerable due to a Perl script that is called to load the login page. Due to improper input validation, an attacker can inject arbitrary Perl code through a crafted HTTP request, leading to remote code execution on the server.

Published
Date
2025-12-24
Updated
Date
2025-12-24
Risk Information
cvss3
Base: 9.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 9.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Fujitsu / Fsas Technologies ETERNUS SF ACM/SC/Express (DX / AF Management Software) before 16.8-16.9.1 PA 2025-12, when collected maintenance data is accessible by a principal/authority other than ETERNUS SF Admin, allows an attacker to potentially affect system confidentiality, integrity, and availability.

Published
Date
2025-12-24
Updated
Date
2025-12-24
Risk Information
cvss3
Base: 5.6
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
References
Description

ONLYOFFICE Docs before 9.2.1 allows XSS in the textarea of the comment editing form. This is related to DocumentServer.

Published
Date
2025-12-24
Updated
Date
2025-12-24
Risk Information
cvss3
Base: 6.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
References