Comparison Overview

Red Coats, Inc.

VS

Grupo GPS

Red Coats, Inc.

4401 East West Highway, Bethesda, Maryland, US, 20814
Last Update: 2025-12-19
Between 650 and 699

RED COATS, INC . was founded in 1960 by current Vice Chairman William F. Peel, and President Barbara K. Peel. Corporate headquarters are in our own mid-rise office building in Bethesda, Maryland, with regional branch offices in Baltimore, Florida, Southern Virginia and Durham/Raleigh under the leadership of the Executive Vice President, W. Mack Wells, Red Coats, Inc. consistently maintains the leadership of the custodial service industry throughout the markets we service. From our beginning in 1960, with several small accounts and a staff of only twelve employees, Red Coats, Inc. has grown to now provide professional custodial services to approximately 87 million square feet of residential, commercial, industrial, and institutional space on a daily basis. To accomplish the services required by our extensive and varied portfolio of customers, our staff has now grown in excess of 5,000 well-trained, personnel. The corporation also maintains affiliate companies providing security and other property management related services. Our professional services have assisted our customers in areas such as maintaining institutional accreditation and achieving numerous quality awards, including several Building Owners and Managers Association (BOMA) Building of the Year awards. Red Coats is committed to increasing levels of professional quality in our industry, and is active in many trade organizations toward this purpose.

NAICS: 5612
NAICS Definition: Facilities Support Services
Employees: 362
Subsidiaries: 0
12-month incidents
1
Known data breaches
1
Attack type number
1

Grupo GPS

Avenida Miguel Frias e Vasconcelos, 1205 - Jaguaré, São Paulo, São Paulo, 05345000, BR
Last Update: 2025-12-18
Between 750 and 799

Fundado em 1962, em Salvador, o Grupo GPS é um grupo empresarial composto por empresas atuantes no mercado brasileiro de serviços indoor: GPS – Gerenciamento de segurança patrimonial Predial – Soluções em infra serviços In-Haus – Logística flexível traduzida em resultados Ecopolo – Referência para empresas ecoeficientes Com atuação nacional, o Grupo GPS sabe como servir e atender com eficiência todos os seus clientes. São mais de 1.000 clientes atendidos, por cerca de 50.000 colaboradores treinados e motivados. E o resultado disso está na excelência em servir.

NAICS: 561
NAICS Definition:
Employees: 19,869
Subsidiaries: 3
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/red-coats-inc..jpeg
Red Coats, Inc.
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/grupo-gps.jpeg
Grupo GPS
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Red Coats, Inc.
100%
Compliance Rate
0/4 Standards Verified
Grupo GPS
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Facilities Services Industry Average (This Year)

Red Coats, Inc. has 25.0% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Facilities Services Industry Average (This Year)

No incidents recorded for Grupo GPS in 2025.

Incident History — Red Coats, Inc. (X = Date, Y = Severity)

Red Coats, Inc. cyber incidents detection timeline including parent company and subsidiaries

Incident History — Grupo GPS (X = Date, Y = Severity)

Grupo GPS cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/red-coats-inc..jpeg
Red Coats, Inc.
Incidents

Date Detected: 9/2025
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/grupo-gps.jpeg
Grupo GPS
Incidents

No Incident

FAQ

Grupo GPS company demonstrates a stronger AI Cybersecurity Score compared to Red Coats, Inc. company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Red Coats, Inc. company has historically faced a number of disclosed cyber incidents, whereas Grupo GPS company has not reported any.

In the current year, Red Coats, Inc. company has reported more cyber incidents than Grupo GPS company.

Neither Grupo GPS company nor Red Coats, Inc. company has reported experiencing a ransomware attack publicly.

Red Coats, Inc. company has disclosed at least one data breach, while the other Grupo GPS company has not reported such incidents publicly.

Neither Grupo GPS company nor Red Coats, Inc. company has reported experiencing targeted cyberattacks publicly.

Neither Red Coats, Inc. company nor Grupo GPS company has reported experiencing or disclosing vulnerabilities publicly.

Neither Red Coats, Inc. nor Grupo GPS holds any compliance certifications.

Neither company holds any compliance certifications.

Grupo GPS company has more subsidiaries worldwide compared to Red Coats, Inc. company.

Grupo GPS company employs more people globally than Red Coats, Inc. company, reflecting its scale as a Facilities Services.

Neither Red Coats, Inc. nor Grupo GPS holds SOC 2 Type 1 certification.

Neither Red Coats, Inc. nor Grupo GPS holds SOC 2 Type 2 certification.

Neither Red Coats, Inc. nor Grupo GPS holds ISO 27001 certification.

Neither Red Coats, Inc. nor Grupo GPS holds PCI DSS certification.

Neither Red Coats, Inc. nor Grupo GPS holds HIPAA certification.

Neither Red Coats, Inc. nor Grupo GPS holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This is dangerous for those who have exposed Zerobyte to be used outside of their internal network. A fix has been applied in both version 0.19.0 and 0.18.5. If immediate upgrade is not possible, restrict network access to the Zerobyte instance to trusted networks only using firewall rules or network segmentation. This is only a temporary mitigation; upgrading is strongly recommended.

Risk Information
cvss3
Base: 9.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description

Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Cross-Site Request Forgery (CSRF) vulnerability exists in the application's filter configuration. The CSRF protection mechanism was **explicitly disabled**, allowing the application to process state-changing requests (POST) without verifying a valid CSRF token. An unauthenticated remote attacker can exploit this by hosting a malicious web page. If a logged-in administrator visits this page, their browser is forced to send unauthorized requests to the application. A successful exploit allows the attacker to silently create a new Administrator account with full privileges, leading to a complete takeover of the system and loss of confidentiality, integrity, and availability. The vulnerability has been patched in version 3.4.2. The fix re-enables the CSRF filter in `app/Config/Filters.php` and resolves associated AJAX race conditions by adjusting token regeneration settings. As a workaround, administrators can manually re-enable the CSRF filter in `app/Config/Filters.php` by uncommenting the protection line. However, this is not recommended without applying the full patch, as it may cause functionality breakage in the Sales module due to token synchronization issues.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description

Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Model Context Protocol (MCP) configurations from the `settings.json` file located within a project’s `.zed` subdirectory. A malicious MCP configuration can contain arbitrary shell commands that run on the host system with the privileges of the user running the IDE. This can be triggered automatically without any user interaction besides opening the project in the IDE. Version 0.218.2-pre fixes the issue by implementing worktree trust mechanism. As a workaround, users should carefully review the contents of project settings files (`./zed/settings.json`) before opening new projects in Zed.

Risk Information
cvss3
Base: 7.7
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Description

Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Language Server Protocol (LSP) configurations from the `settings.json` file located within a project’s `.zed` subdirectory. A malicious LSP configuration can contain arbitrary shell commands that run on the host system with the privileges of the user running the IDE. This can be triggered when a user opens project file for which there is an LSP entry. A concerted effort by an attacker to seed a project settings file (`./zed/settings.json`) with malicious language server configurations could result in arbitrary code execution with the user's privileges if the user opens the project in Zed without reviewing the contents. Version 0.218.2-pre fixes the issue by implementing worktree trust mechanism. As a workaround, users should carefully review the contents of project settings files (`./zed/settings.json`) before opening new projects in Zed.

Risk Information
cvss3
Base: 7.7
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Description

Storybook is a frontend workshop for building user interface components and pages in isolation. A vulnerability present starting in versions 7.0.0 and prior to versions 7.6.21, 8.6.15, 9.1.17, and 10.1.10 relates to Storybook’s handling of environment variables defined in a `.env` file, which could, in specific circumstances, lead to those variables being unexpectedly bundled into the artifacts created by the `storybook build` command. When a built Storybook is published to the web, the bundle’s source is viewable, thus potentially exposing those variables to anyone with access. For a project to potentially be vulnerable to this issue, it must build the Storybook (i.e. run `storybook build` directly or indirectly) in a directory that contains a `.env` file (including variants like `.env.local`) and publish the built Storybook to the web. Storybooks built without a `.env` file at build time are not affected, including common CI-based builds where secrets are provided via platform environment variables rather than `.env` files. Storybook runtime environments (i.e. `storybook dev`) are not affected. Deployed applications that share a repo with your Storybook are not affected. Users should upgrade their Storybook—on both their local machines and CI environment—to version .6.21, 8.6.15, 9.1.17, or 10.1.10 as soon as possible. Maintainers additionally recommend that users audit for any sensitive secrets provided via `.env` files and rotate those keys. Some projects may have been relying on the undocumented behavior at the heart of this issue and will need to change how they reference environment variables after this update. If a project can no longer read necessary environmental variable values, either prefix the variables with `STORYBOOK_` or use the `env` property in Storybook’s configuration to manually specify values. In either case, do not include sensitive secrets as they will be included in the built bundle.

Risk Information
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L