Comparison Overview

Phunware

VS

SONDA

Phunware

1002 West Avenue, Austin, Texas, 78704, US
Last Update: 2026-03-09
Between 750 and 799

Phunware, Inc. (NASDAQ: PHUN) is an enterprise software company specializing in mobile app solutions. We provide businesses with the tools to create, implement and manage custom mobile applications and analytics, digital advertising and location-based services. Phunware is transforming mobile engagement by delivering scalable and personalized mobile app experiences. Phunware’s mission is to achieve unparalleled connectivity and monetization through widespread adoption of Phunware mobile technologies, by leveraging brands, consumers, partners and digital asset holders and market participants. Phunware is poised to expand its software products and services audience and industry verticals through its new platform, utilize and monetize its patents and other intellectual property rights and interests, and update and reintroduce its digital asset ecosystem for existing holders and new market participants.

NAICS: None
NAICS Definition:
Employees: 78
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

SONDA

Teatinos 500, Santiago, CL
Last Update: 2026-04-02
Between 750 and 799

We are at the forefront of digital transformation in the Americas, positively impacting the lives of over 500 million people. As a key player in emerging industries, we drive innovation and change through ambitious modernization projects and cutting-edge solutions. By understanding the region's challenges and demands, we provide a comprehensive portfolio of business solutions tailored to the primary industries, driving innovation and success in the market. We operate in 13 countries with a dedicated team of over 15,000 regional employees, earning the trust of more than 5,000 corporate clients to lead their digital transformation journeys. Our extensive presence spans Argentina, Brazil, Chile, Colombia, Costa Rica, Guatemala, Ecuador, the United States, Canada, Mexico, Panama, Peru, and Uruguay.

NAICS: None
NAICS Definition: Others
Employees: 14,805
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/phunware.jpeg
Phunware
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/sonda.jpeg
SONDA
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Phunware
100%
Compliance Rate
0/4 Standards Verified
SONDA
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Information Technology & Services Industry Average (This Year)

No incidents recorded for Phunware in 2026.

Incidents vs Information Technology & Services Industry Average (This Year)

No incidents recorded for SONDA in 2026.

Incident History — Phunware (X = Date, Y = Severity)

Phunware cyber incidents detection timeline including parent company and subsidiaries

Incident History — SONDA (X = Date, Y = Severity)

SONDA cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/phunware.jpeg
Phunware
Incidents

No Incident

https://images.rankiteo.com/companyimages/sonda.jpeg
SONDA
Incidents

No Incident

FAQ

SONDA company demonstrates a stronger AI Cybersecurity Score compared to Phunware company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, SONDA company has disclosed a higher number of cyber incidents compared to Phunware company.

In the current year, SONDA company and Phunware company have not reported any cyber incidents.

Neither SONDA company nor Phunware company has reported experiencing a ransomware attack publicly.

Neither SONDA company nor Phunware company has reported experiencing a data breach publicly.

Neither SONDA company nor Phunware company has reported experiencing targeted cyberattacks publicly.

Neither Phunware company nor SONDA company has reported experiencing or disclosing vulnerabilities publicly.

Neither Phunware nor SONDA holds any compliance certifications.

Neither company holds any compliance certifications.

SONDA company has more subsidiaries worldwide compared to Phunware company.

SONDA company employs more people globally than Phunware company, reflecting its scale as a Information Technology & Services.

Neither Phunware nor SONDA holds SOC 2 Type 1 certification.

Neither Phunware nor SONDA holds SOC 2 Type 2 certification.

Neither Phunware nor SONDA holds ISO 27001 certification.

Neither Phunware nor SONDA holds PCI DSS certification.

Neither Phunware nor SONDA holds HIPAA certification.

Neither Phunware nor SONDA holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.

Description

XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services

Description

Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda and red_url parameters.

Description

A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda parameter.