Comparison Overview

RaceBets International Gaming Ltd.

VS

Onyx Gaming

RaceBets International Gaming Ltd.

Approved Business Centre, St. Julians, undefined, STJ 3141, MT
Last Update: 2025-11-27
Between 750 and 799

RaceBets is a world-leading horse racing bookmaker. Our aim is to give customers the best and most-comprehensive horse betting experience that can be found online. We offer markets for horse racing in 40 different countries, which is three times as many as our nearest rival. Our customers can bet on over 250,000 different races, each year! We also have a vast ante-post section and stream hundreds of races per day through our exclusive video-player. RaceBets was founded in 2005. By 2007, we had established ourselves as the largest bookmaker in Germany. In 2010, we invited German Racing to become shareholders and a significant percentage of our profits are now reinvested in horse racing. This means that the money stays in and supports the racing industry! In the same year, we relocated from Germany to Malta which is Europe's main online gaming hub. 2012 was a landmark year for RaceBets, as it was then that we first offered full-coverage of UK and Irish horse racing markets. Since then, the company has gone from strength to strength. We now rank as one of the most-recognised and respected brands in global race-betting. We have come a long way in a short time and we want to continue to build on our success. Our company is regulated by the Malta Gaming Authority (MGA). We also hold a UK license, which is issued by the UK Gambling Commission.

NAICS: 7132
NAICS Definition: Gambling Industries
Employees: 13
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Onyx Gaming

Suite 1 574 Plummer Street, Port Melbourne, Victoria, AU, 3207
Last Update: 2025-11-27
Between 750 and 799

Onyx Gaming Pty Ltd is a licenced, Full Service Gaming Company which partners with venues to assist with all aspects of gaming management including: - EGM Purchase, Supply, Service & Maintenance - Venue Support - Gaming Room Design & Management - Marketing & Design Services - RSG & AML Support Currently operating the following jurisdictions: Victoria - VGCCC (Victorian Gambling and Casino Control Commission) – Roll of Manufacturers, Suppliers and Testers Queensland - OLGR (Office of Liquor and Gaming Regulation) Suppliers Licence – Monitoring Operator New South Wales (Independent Liquor & Gaming Authority) - Licenced Gaming Machine Dealer

NAICS: 7132
NAICS Definition: Gambling Industries
Employees: 44
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/racebets-int'l-gaming-ltd-.jpeg
RaceBets International Gaming Ltd.
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/onyx-gaming-pty-ltd.jpeg
Onyx Gaming
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
RaceBets International Gaming Ltd.
100%
Compliance Rate
0/4 Standards Verified
Onyx Gaming
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Gambling Facilities and Casinos Industry Average (This Year)

No incidents recorded for RaceBets International Gaming Ltd. in 2025.

Incidents vs Gambling Facilities and Casinos Industry Average (This Year)

No incidents recorded for Onyx Gaming in 2025.

Incident History — RaceBets International Gaming Ltd. (X = Date, Y = Severity)

RaceBets International Gaming Ltd. cyber incidents detection timeline including parent company and subsidiaries

Incident History — Onyx Gaming (X = Date, Y = Severity)

Onyx Gaming cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/racebets-int'l-gaming-ltd-.jpeg
RaceBets International Gaming Ltd.
Incidents

No Incident

https://images.rankiteo.com/companyimages/onyx-gaming-pty-ltd.jpeg
Onyx Gaming
Incidents

No Incident

FAQ

Onyx Gaming company demonstrates a stronger AI Cybersecurity Score compared to RaceBets International Gaming Ltd. company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Onyx Gaming company has disclosed a higher number of cyber incidents compared to RaceBets International Gaming Ltd. company.

In the current year, Onyx Gaming company and RaceBets International Gaming Ltd. company have not reported any cyber incidents.

Neither Onyx Gaming company nor RaceBets International Gaming Ltd. company has reported experiencing a ransomware attack publicly.

Neither Onyx Gaming company nor RaceBets International Gaming Ltd. company has reported experiencing a data breach publicly.

Neither Onyx Gaming company nor RaceBets International Gaming Ltd. company has reported experiencing targeted cyberattacks publicly.

Neither RaceBets International Gaming Ltd. company nor Onyx Gaming company has reported experiencing or disclosing vulnerabilities publicly.

Neither RaceBets International Gaming Ltd. nor Onyx Gaming holds any compliance certifications.

Neither company holds any compliance certifications.

Neither RaceBets International Gaming Ltd. company nor Onyx Gaming company has publicly disclosed detailed information about the number of their subsidiaries.

Onyx Gaming company employs more people globally than RaceBets International Gaming Ltd. company, reflecting its scale as a Gambling Facilities and Casinos.

Neither RaceBets International Gaming Ltd. nor Onyx Gaming holds SOC 2 Type 1 certification.

Neither RaceBets International Gaming Ltd. nor Onyx Gaming holds SOC 2 Type 2 certification.

Neither RaceBets International Gaming Ltd. nor Onyx Gaming holds ISO 27001 certification.

Neither RaceBets International Gaming Ltd. nor Onyx Gaming holds PCI DSS certification.

Neither RaceBets International Gaming Ltd. nor Onyx Gaming holds HIPAA certification.

Neither RaceBets International Gaming Ltd. nor Onyx Gaming holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.