Comparison Overview

Orchard Therapeutics - U.S.

VS

Regeneron

Orchard Therapeutics - U.S.

245 Hammersmith Road, London, United Kingdom, W6 8PW, GB
Last Update: 2025-03-05 (UTC)
Between 750 and 799

Orchard Therapeutics, a Kyowa Kirin company, is a global gene therapy leader focused on ending the devastation caused by genetic and other severe diseases by discovering, developing, and commercializing new treatments that tap into the curative potential of hematopoietic stem cell (HSC) gene therapy. In this approach, a patient’s own blood stem cells are genetically modified outside of the body and then reinserted, with the goal of correcting the underlying cause of disease with a single treatment. Founded in 2015, Orchard’s roots go back to some of the first research and clinical developments involving HSC gene therapy. Our team has played a central role in the evolution of this technology from a promising scientific idea to a potentially life-transforming reality. Today, Orchard is advancing a pipeline of HSC gene therapies designed to address serious diseases where the burden is immense for patients, families and society and current treatment options are limited or do not exist. For more information, please visit www.orchard-tx.com.

NAICS: None
NAICS Definition: Others
Employees: 224
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Regeneron

777 Old Saw Mill River Road, Tarrytown, New York, 10591, US
Last Update: 2025-03-04 (UTC)
Between 800 and 849

At Regeneron we believe that when the right idea finds the right team, powerful change is possible. As we work across our expanding global network to invent, develop and commercialize life-transforming medicines for people with serious diseases, we’re establishing new ways to think about science, manufacturing and commercialization. And new ways to think about health. Connect with us so we can learn more about you, and you can learn more about our biopharmaceutical medicines. And join us, as we build a future we believe in. Please visit www.regeneron.com/social-media-terms for information on how to engage with us on social media. An important note about privacy: Regeneron is committed to your privacy and will not ask for sensitive personal information such as social security number, date of birth or bank account details via email or social media.

NAICS: None
NAICS Definition: Others
Employees: 15,762
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/orchard-therapeutics.jpeg
Orchard Therapeutics - U.S.
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/regeneron-pharmaceuticals.jpeg
Regeneron
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Orchard Therapeutics - U.S.
100%
Compliance Rate
0/4 Standards Verified
Regeneron
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Biotechnology Industry Average (This Year)

No incidents recorded for Orchard Therapeutics - U.S. in 2025.

Incidents vs Biotechnology Industry Average (This Year)

No incidents recorded for Regeneron in 2025.

Incident History — Orchard Therapeutics - U.S. (X = Date, Y = Severity)

Orchard Therapeutics - U.S. cyber incidents detection timeline including parent company and subsidiaries

Incident History — Regeneron (X = Date, Y = Severity)

Regeneron cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/orchard-therapeutics.jpeg
Orchard Therapeutics - U.S.
Incidents

No Incident

https://images.rankiteo.com/companyimages/regeneron-pharmaceuticals.jpeg
Regeneron
Incidents

No Incident

FAQ

Regeneron company demonstrates a stronger AI Cybersecurity Score compared to Orchard Therapeutics - U.S. company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Regeneron company has disclosed a higher number of cyber incidents compared to Orchard Therapeutics - U.S. company.

In the current year, Regeneron company and Orchard Therapeutics - U.S. company have not reported any cyber incidents.

Neither Regeneron company nor Orchard Therapeutics - U.S. company has reported experiencing a ransomware attack publicly.

Neither Regeneron company nor Orchard Therapeutics - U.S. company has reported experiencing a data breach publicly.

Neither Regeneron company nor Orchard Therapeutics - U.S. company has reported experiencing targeted cyberattacks publicly.

Neither Orchard Therapeutics - U.S. company nor Regeneron company has reported experiencing or disclosing vulnerabilities publicly.

Neither Orchard Therapeutics - U.S. nor Regeneron holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Orchard Therapeutics - U.S. company nor Regeneron company has publicly disclosed detailed information about the number of their subsidiaries.

Regeneron company employs more people globally than Orchard Therapeutics - U.S. company, reflecting its scale as a Biotechnology.

Neither Orchard Therapeutics - U.S. nor Regeneron holds SOC 2 Type 1 certification.

Neither Orchard Therapeutics - U.S. nor Regeneron holds SOC 2 Type 2 certification.

Neither Orchard Therapeutics - U.S. nor Regeneron holds ISO 27001 certification.

Neither Orchard Therapeutics - U.S. nor Regeneron holds PCI DSS certification.

Neither Orchard Therapeutics - U.S. nor Regeneron holds HIPAA certification.

Neither Orchard Therapeutics - U.S. nor Regeneron holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘percentage’ parameter in all versions up to, and including, 5.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Risk Information
cvss3
Base: 6.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Description

The ComboServlet in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not limit the number or size of the files it will combine, which allows remote attackers to create very large responses that lead to a denial of service attack via the URL query string.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary directories on the target machine.

Risk Information
cvss3
Base: 4.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and create arbitrary directories on the target machine.

Risk Information
cvss3
Base: 4.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary files on the target machine.

Risk Information
cvss3
Base: 7.5
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H
cvss4
Base: 8.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X