Comparison Overview

CatchLight

VS

Photo Design

CatchLight

1150 25th St, San Francisco, California, 94107, US
Last Update: 2025-12-11
Between 750 and 799

CatchLight is a nonprofit media organization that leverages the power of visual storytelling to inform, connect, and transform communities. Our programs: • The CatchLight Global Fellowship supports industry-leading visual storytellers who want to generate audience engagement and community impact through inventive distribution methods. • CatchLight Local is a collaborative model for visual journalism that is advancing trust and representation in local media. The program includes the CatchLight Local Fellowship, which establishes full-time visual journalism positions with local news outlets, and the CatchLight Local Visual Desk, which provides local newsrooms with a suite of shared services, training and tools to engage readers with enhanced visual reporting. • The CatchLight Visual Storytelling Summit is an annual event in San Francisco that gathers leaders in art, media, journalism, technology, and philanthropy for an immersive day of conversation and community. www.catchlight.io/summit • The Night of Photojournalism is a traveling visual media showcase where participants discover new perspectives on vital issues through photography from across the globe. • The Focal Point conversation series features a leader in the visual field who has broken barriers, defied norms, blazed trails, and shown the power of photography to inform and connect audiences.

NAICS: 541
NAICS Definition:
Employees: 34
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Photo Design

1638, AR
Last Update: 2025-12-17
Between 800 and 849

Photo Design es un estudio de diseño gráfico y fotografía. Nuestro equipo de trabajo se dedica a desarrollar acciones proyectuales para cumplir con los objetivos comunicacionales y satisfacer las necesitades particulares de cada empresa. El potencial creativo y una moderna estructura tecnológica nos permiten conjugar originalidad y la mejor calidad en todos nuestros productos. DISEÑO DISEÑO EDITORIAL: libros fotográficos, libros de texto y calendarios. COMUNICACIÓN INSTITUCIONAL: brochures, catálogos de productos, programas de eventos, avisos y afiches. DISEÑO DE PACKAGING: envases, cenefas, POP y etiquetas. DISEÑO DE IMAGEN CORPORATIVA: logotipos, papelería institucional y aplicaciones varias. FOTOGRAFÍA PRODUCCIONES ESPECIALES: industriales, agropecuarias, institucionales para empresas y de productos. BANCO DE IMÁGENES: venta de los derechos fotográficos para distintas aplicaciones en gráfica y/o web.

NAICS: 54192
NAICS Definition: Photographic Services
Employees: 51
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/photophilanthropy.jpeg
CatchLight
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/photo-design.jpeg
Photo Design
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
CatchLight
100%
Compliance Rate
0/4 Standards Verified
Photo Design
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Photography Industry Average (This Year)

No incidents recorded for CatchLight in 2025.

Incidents vs Photography Industry Average (This Year)

No incidents recorded for Photo Design in 2025.

Incident History — CatchLight (X = Date, Y = Severity)

CatchLight cyber incidents detection timeline including parent company and subsidiaries

Incident History — Photo Design (X = Date, Y = Severity)

Photo Design cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/photophilanthropy.jpeg
CatchLight
Incidents

No Incident

https://images.rankiteo.com/companyimages/photo-design.jpeg
Photo Design
Incidents

No Incident

FAQ

Photo Design company demonstrates a stronger AI Cybersecurity Score compared to CatchLight company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Photo Design company has disclosed a higher number of cyber incidents compared to CatchLight company.

In the current year, Photo Design company and CatchLight company have not reported any cyber incidents.

Neither Photo Design company nor CatchLight company has reported experiencing a ransomware attack publicly.

Neither Photo Design company nor CatchLight company has reported experiencing a data breach publicly.

Neither Photo Design company nor CatchLight company has reported experiencing targeted cyberattacks publicly.

Neither CatchLight company nor Photo Design company has reported experiencing or disclosing vulnerabilities publicly.

Neither CatchLight nor Photo Design holds any compliance certifications.

Neither company holds any compliance certifications.

Neither CatchLight company nor Photo Design company has publicly disclosed detailed information about the number of their subsidiaries.

Photo Design company employs more people globally than CatchLight company, reflecting its scale as a Photography.

Neither CatchLight nor Photo Design holds SOC 2 Type 1 certification.

Neither CatchLight nor Photo Design holds SOC 2 Type 2 certification.

Neither CatchLight nor Photo Design holds ISO 27001 certification.

Neither CatchLight nor Photo Design holds PCI DSS certification.

Neither CatchLight nor Photo Design holds HIPAA certification.

Neither CatchLight nor Photo Design holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to the application account can modify this file to introduce malicious code, which is then executed with elevated privileges when the script is run. Successful exploitation results in arbitrary code execution as the root user.

Risk Information
cvss4
Base: 8.6
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Description

Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Description

SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's `NewResponseFromRequest` function that affects all normal SIP operations. The vulnerability allows remote attackers to crash any SIP application by sending a single malformed SIP request without a To header. The vulnerability occurs when SIP message parsing succeeds for a request missing the To header, but the response creation code assumes the To header exists without proper nil checks. This affects routine operations like call setup, authentication, and message handling - not just error cases. This vulnerability affects all SIP applications using the sipgo library, not just specific configurations or edge cases, as long as they make use of the `NewResponseFromRequest` function. Version 1.0.0-alpha-1 contains a patch for the issue.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N