Comparison Overview

Oracle

VS

General Dynamics Information Technology

Oracle

2300 Oracle Way, Austin, Texas, US, 78741
Last Update: 2026-01-21
Between 0 and 549

We’re a cloud technology company that provides organizations around the world with computing infrastructure and software to help them innovate, unlock efficiencies and become more effective. We also created the world’s first – and only – autonomous database to help organize and secure our customers’ data. Oracle Cloud Infrastructure offers higher performance, security, and cost savings. It is designed so businesses can move workloads easily from on-premises systems to the cloud, and between cloud and on-premises and other clouds. Oracle Cloud applications provide business leaders with modern applications that help them innovate, attain sustainable growth, and become more resilient. The work we do is not only transforming the world of business--it's helping defend governments, and advance scientific and medical research. From nonprofits to companies of all sizes, millions of people use our tools to streamline supply chains, make HR more human, quickly pivot to a new financial plan, and connect data and people around the world. At work, we embrace diversity, encourage personal and professional growth, and celebrate a global team of passionate people developing innovative technologies that help people and companies tackle real-world problems head-on. If you’d like to join us, please visit our Careers page: https://www.oracle.com/corporate/careers/ For investor news, SEC filings, and financial information about Oracle (NYSE:ORCL), please visit https://investor.oracle.com/home/. Follow us on X: x.com/oracle Like our page on Facebook: facebook.com/Oracle/ Follow us on Instagram: instagram.com/oracle/

NAICS: 5415
NAICS Definition: Computer Systems Design and Related Services
Employees: 197,447
Subsidiaries: 31
12-month incidents
1
Known data breaches
8
Attack type number
4

General Dynamics Information Technology

Falls Church, Virginia, US, 22042
Last Update: 2026-01-18
Between 750 and 799

GDIT is a global technology and professional services company that delivers solutions, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. GDIT is part of General Dynamics, a global aerospace and defense company. We have shared our clients’ sense of purpose for over half a century and have a unique understanding of their missions, complex environments, and a rapidly changing world. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.

NAICS: 5415
NAICS Definition: Computer Systems Design and Related Services
Employees: 26,089
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/oracle.jpeg
Oracle
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/gdit.jpeg
General Dynamics Information Technology
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Oracle
100%
Compliance Rate
0/4 Standards Verified
General Dynamics Information Technology
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs IT Services and IT Consulting Industry Average (This Year)

Oracle has 55.95% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs IT Services and IT Consulting Industry Average (This Year)

No incidents recorded for General Dynamics Information Technology in 2026.

Incident History — Oracle (X = Date, Y = Severity)

Oracle cyber incidents detection timeline including parent company and subsidiaries

Incident History — General Dynamics Information Technology (X = Date, Y = Severity)

General Dynamics Information Technology cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/oracle.jpeg
Oracle
Incidents

Date Detected: 1/2026
Type:Vulnerability
Attack Vector: Remote
Blog: Blog

Date Detected: 11/2025
Type:Vulnerability
Attack Vector: Exploitation of software vulnerability
Blog: Blog

Date Detected: 11/2025
Type:Cyber Attack
Attack Vector: Exploitation of zero-day vulnerability (CVE-2025-61882)
Motivation: Extortion, Data Theft
Blog: Blog
https://images.rankiteo.com/companyimages/gdit.jpeg
General Dynamics Information Technology
Incidents

Date Detected: 12/2025
Type:Vulnerability
Blog: Blog

FAQ

General Dynamics Information Technology company demonstrates a stronger AI Cybersecurity Score compared to Oracle company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Oracle company has faced a higher number of disclosed cyber incidents historically compared to General Dynamics Information Technology company.

In the current year, Oracle company has reported more cyber incidents than General Dynamics Information Technology company.

Oracle company has confirmed experiencing a ransomware attack, while General Dynamics Information Technology company has not reported such incidents publicly.

Oracle company has disclosed at least one data breach, while the other General Dynamics Information Technology company has not reported such incidents publicly.

Oracle company has reported targeted cyberattacks, while General Dynamics Information Technology company has not reported such incidents publicly.

Both Oracle company and General Dynamics Information Technology company have disclosed vulnerabilities.

Neither Oracle nor General Dynamics Information Technology holds any compliance certifications.

Neither company holds any compliance certifications.

Oracle company has more subsidiaries worldwide compared to General Dynamics Information Technology company.

Oracle company employs more people globally than General Dynamics Information Technology company, reflecting its scale as a IT Services and IT Consulting.

Neither Oracle nor General Dynamics Information Technology holds SOC 2 Type 1 certification.

Neither Oracle nor General Dynamics Information Technology holds SOC 2 Type 2 certification.

Neither Oracle nor General Dynamics Information Technology holds ISO 27001 certification.

Neither Oracle nor General Dynamics Information Technology holds PCI DSS certification.

Neither Oracle nor General Dynamics Information Technology holds HIPAA certification.

Neither Oracle nor General Dynamics Information Technology holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Typemill is a flat-file, Markdown-based CMS designed for informational documentation websites. A reflected Cross-Site Scripting (XSS) exists in the login error view template `login.twig` of versions 2.19.1 and below. The `username` value can be echoed back without proper contextual encoding when authentication fails. An attacker can execute script in the login page context. This issue has been fixed in version 2.19.2.

Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Description

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the unsafe innerHTML property to render domain search results.

Description

A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save process. This allows an unauthenticated attacker to upload arbitrary PHP code by spoofing the MIME type as an image, leading to full system compromise.

Description

A UNIX symbolic link following issue in the jailer component in Firecracker version v1.13.1 and earlier and 1.14.0 on Linux may allow a local host user with write access to the pre-created jailer directories to overwrite arbitrary host files via a symlink attack during the initialization copy at jailer startup, if the jailer is executed with root privileges. To mitigate this issue, users should upgrade to version v1.13.2 or 1.14.1 or above.

Risk Information
cvss3
Base: 6.0
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
cvss4
Base: 6.0
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28. This unauthenticated endpoint returns a list of cashier accounts, including names, email addresses, usernames, and passwords hashed using MD5. As MD5 is a broken cryptographic function, the hashes can be easily reversed using public tools, exposing user credentials in plaintext. This allows remote attackers to perform unauthorized logins and potentially gain access to sensitive POS operations or backend functions.