Comparison Overview
PayU

PayU
Gustav Mahlerplein 5, Amsterdam, North Holland, 1082, NL
Last Update: 03/04/2026
Global reach, local expertise: we combine the best of both worlds to reshape the future of payments and fintech to build a world of unlimited possibilities. We successfully bridge the global and local gap by supplying ultimate global payment coverage with extensive loca...

XP Inc.
Avenida Chedid Jafet 75, Torre sul 30º andar, São Paulo, São Paulo, BR, 04551-065
Last Update: 19/07/2026
A XP Inc. é uma das maiores instituições financeiras independente do Brasil, dona das marcas XP, Rico, Clear, XP Educação, InfoMoney, entre outras. Com mais de 4,8 milhões de clientes ativos e um valor superior a R$ 2,1 trilhão de ativos sob custódia, há 25 anos vem tra...
Compliance Ranges Comparison

PayU







XP Inc.






Benchmark & Cyber Underwriting Signals
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for PayU in 2026.
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for XP Inc. in 2026.
Incident History - PayU (X = Date, Y = Severity)
PayU cyber incidents detection timeline including parent company and subsidiaries.
Incident History - XP Inc. (X = Date, Y = Severity)
XP Inc. cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

PayU

XP Inc.
FAQ
Latest Global CVEs
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an attacker to steal admin credentials via weak hash or a pass-the-hash attack.
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users.
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation.
Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API.
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem.