Comparison Overview

Prosper Marketplace

VS

Sun Life

Prosper Marketplace

221 Main Street, Suite 300, San Francisco, CA, US, 94105
Last Update: 2025-12-17
Between 0 and 549

Founded in 2005, Prosper introduced U.S. consumers to an innovative new approach to personal finance called peer-to-peer lending. Almost 20 years later, Prosper has helped over 2 million customers achieve financial well-being through a comprehensive suite of products. Prosper’s flagship personal loan marketplace continues to offer a unique value for borrowers and investors alike. Home equity loans and lines of credit through Prosper provide homeowners a range of options and choices for tapping into the equity they’ve worked hard to build. The Prosper® Card supports people seeking access to credit and flexibility in managing their finances. Regardless of the product, Prosper is dedicated to meeting people where they are in their financial journey, in order to advance their financial well-being. Learn more at www.prosper.com. All personal loans made by WebBank. The Prosper® Card is an unsecured credit card issued by Coastal Community Bank, Member FDIC, pursuant to license by Mastercard® International. All home equity products are underwritten and issued by Prosper’s Lending Partners. Please see your agreement for details. Prosper Marketplace, Inc. NMLS# 111473 Licensing & Disclosures | NMLS Consumer Access Prosper Funding LLC 221 Main Street, Suite 300 | San Francisco, CA 94105 © 2005-2024 Prosper Funding LLC. All rights reserved. Prosper's borrower payment dependent notes (“Notes”) are offered pursuant to Prosper’s Prospectus (https://prosper.com/prospectus/)

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 483
Subsidiaries: 0
12-month incidents
5
Known data breaches
6
Attack type number
2

Sun Life

OO
Last Update: 2025-12-17
Between 750 and 799

Sun Life is a leading financial services organization dedicated to helping people achieve lifetime financial security and live healthier lives. We provide a wide range of insurance and investment products and services in key markets around the world including Canada, the United States, the United Kingdom, Hong Kong, the Philippines and Indonesia. At Sun Life, we have more than 34,000 employees and 112,900 advisors worldwide. Websites: Canada www.sunlife.ca/en/ US www.sunlife.com/us/en/ Vietnam www.sunlife.com.vn Hong Kong www.sunlife.com.hk Indonesia www.sunlife.co.id Malaysia www.sunlife.com.my Philippines www.sunlife.com.ph

NAICS: 52
NAICS Definition: Finance and Insurance
Employees: 37,714
Subsidiaries: 4
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/prosper-marketplace.jpeg
Prosper Marketplace
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/sun-life-financial.jpeg
Sun Life
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Prosper Marketplace
100%
Compliance Rate
0/4 Standards Verified
Sun Life
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Financial Services Industry Average (This Year)

Prosper Marketplace has 502.41% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Financial Services Industry Average (This Year)

No incidents recorded for Sun Life in 2025.

Incident History — Prosper Marketplace (X = Date, Y = Severity)

Prosper Marketplace cyber incidents detection timeline including parent company and subsidiaries

Incident History — Sun Life (X = Date, Y = Severity)

Sun Life cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/prosper-marketplace.jpeg
Prosper Marketplace
Incidents

Date Detected: 12/2025
Type:Breach
Blog: Blog

Date Detected: 10/2025
Type:Breach
Attack Vector: Unauthorized database queries
Blog: Blog

Date Detected: 9/2025
Type:Breach
Attack Vector: exploitation of backend system weaknesses, stealthy data exfiltration
Blog: Blog
https://images.rankiteo.com/companyimages/sun-life-financial.jpeg
Sun Life
Incidents

Date Detected: 5/2023
Type:Breach
Blog: Blog

FAQ

Sun Life company demonstrates a stronger AI Cybersecurity Score compared to Prosper Marketplace company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Prosper Marketplace company has faced a higher number of disclosed cyber incidents historically compared to Sun Life company.

In the current year, Prosper Marketplace company has reported more cyber incidents than Sun Life company.

Neither Sun Life company nor Prosper Marketplace company has reported experiencing a ransomware attack publicly.

Both Sun Life company and Prosper Marketplace company have disclosed experiencing at least one data breach.

Prosper Marketplace company has reported targeted cyberattacks, while Sun Life company has not reported such incidents publicly.

Neither Prosper Marketplace company nor Sun Life company has reported experiencing or disclosing vulnerabilities publicly.

Neither Prosper Marketplace nor Sun Life holds any compliance certifications.

Neither company holds any compliance certifications.

Sun Life company has more subsidiaries worldwide compared to Prosper Marketplace company.

Sun Life company employs more people globally than Prosper Marketplace company, reflecting its scale as a Financial Services.

Neither Prosper Marketplace nor Sun Life holds SOC 2 Type 1 certification.

Neither Prosper Marketplace nor Sun Life holds SOC 2 Type 2 certification.

Neither Prosper Marketplace nor Sun Life holds ISO 27001 certification.

Neither Prosper Marketplace nor Sun Life holds PCI DSS certification.

Neither Prosper Marketplace nor Sun Life holds HIPAA certification.

Neither Prosper Marketplace nor Sun Life holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to bypass intended permission restrictions via a crafted HTTP request. This allows an attacker who lacks the live queries - read permission to successfully retrieve the list of live queries.

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to overwrite Git configuration remotely and override some of its behavior. Version 5.15.1 fixes the issue.

Risk Information
cvss3
Base: 9.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Description

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

Risk Information
cvss3
Base: 4.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Description

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) of computing resources and a denial of service (DoS) of the Kibana process via a crafted HTTP request.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an unauthenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a vulnerability a function handler in the Vega AST evaluator.

Risk Information
cvss3
Base: 6.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N