Comparison Overview

Red Coats, Inc.

VS

ISS Deutschland

Red Coats, Inc.

4401 East West Highway, Bethesda, Maryland, US, 20814
Last Update: 2025-12-19
Between 650 and 699

RED COATS, INC . was founded in 1960 by current Vice Chairman William F. Peel, and President Barbara K. Peel. Corporate headquarters are in our own mid-rise office building in Bethesda, Maryland, with regional branch offices in Baltimore, Florida, Southern Virginia and Durham/Raleigh under the leadership of the Executive Vice President, W. Mack Wells, Red Coats, Inc. consistently maintains the leadership of the custodial service industry throughout the markets we service. From our beginning in 1960, with several small accounts and a staff of only twelve employees, Red Coats, Inc. has grown to now provide professional custodial services to approximately 87 million square feet of residential, commercial, industrial, and institutional space on a daily basis. To accomplish the services required by our extensive and varied portfolio of customers, our staff has now grown in excess of 5,000 well-trained, personnel. The corporation also maintains affiliate companies providing security and other property management related services. Our professional services have assisted our customers in areas such as maintaining institutional accreditation and achieving numerous quality awards, including several Building Owners and Managers Association (BOMA) Building of the Year awards. Red Coats is committed to increasing levels of professional quality in our industry, and is active in many trade organizations toward this purpose.

NAICS: 5612
NAICS Definition: Facilities Support Services
Employees: 362
Subsidiaries: 0
12-month incidents
1
Known data breaches
1
Attack type number
1

ISS Deutschland

Theodorstraße 178 Düsseldorf, Nordrhein-Westfalen 40472, DE
Last Update: 2025-12-17
Between 750 and 799

Die ISS Facility Services Holding GmbH mit Sitz in Düsseldorf ist ein Tochterunternehmen der dänischen ISS A/S. Diese ist mit mehr als 470.000 Mitarbeitern der größte Facility Services-Anbieter weltweit. ISS hilft Nutzerinnen und Nutzern von Gebäuden und Liegenschaften auf der ganzen Welt, effizienter zu arbeiten. In Partnerschaft mit den Kunden fördert ISS das Engagement und das Wohlbefinden von Nutzern, minimiert die Auswirkungen auf die Umwelt und schützt Eigentum. Das erreicht ISS durch die intelligente Verknüpfung von Daten, Insights und Service Excellence. ISS bietet eine breite Servicepalette: Gebäudetechnik, Bauen im Bestand, Reinigung, Catering, Sicherheit, Bürodienstleistungen sowie Integrated Property- und Facility Management. Im Zuge der stetigen Weiterentwicklung gestaltet ISS den Einstieg seiner Dienstleistungen ins Facility Management 4.0. Im Digital Facility Management erfasst ISS durch Sensorik große Datenmengen, wertet diese mit künstlicher Intelligenz aus und nutzt diese Erkenntnisse in Abstimmung mit dem Kunden zur Optimierung der Serviceleistungen. Moderne Robotik unterstützt die ISS-Mitarbeiter bei der zuverlässigen Leistungserbringung. Unter dem Leitthema Workplace of Future begleitet ISS mit Rat und Tat seine Kunden bei der Schaffung von optimalen Rahmenbedingungen im modernen Arbeitsleben. In diesem Umfeld können ihre Nutzer höchste Leistungen erbringen. Um näher auf die Kundenbedürfnisse einzugehen, hat ISS in Deutschland unter dem Dach der ISS Facility Services Holding GmbH mehrere branchenorientierte Unternehmen gegründet: - ISS Automotive Services GmbH - ISS Communication Services GmbH - ISS Energy Services GmbH - ISS IT & Business Services GmbH - ISS Pharma Services GmbH - ISS Integrated Facility Services GmbH - ISS Soft Services GmbH - ISS Pluralis GmbH - ISS Engineering Services GmbH #checkISS

NAICS: 561
NAICS Definition:
Employees: 10,001
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/red-coats-inc..jpeg
Red Coats, Inc.
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/iss-facility-services-holding-gmbh.jpeg
ISS Deutschland
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Red Coats, Inc.
100%
Compliance Rate
0/4 Standards Verified
ISS Deutschland
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Facilities Services Industry Average (This Year)

Red Coats, Inc. has 25.0% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Facilities Services Industry Average (This Year)

No incidents recorded for ISS Deutschland in 2025.

Incident History — Red Coats, Inc. (X = Date, Y = Severity)

Red Coats, Inc. cyber incidents detection timeline including parent company and subsidiaries

Incident History — ISS Deutschland (X = Date, Y = Severity)

ISS Deutschland cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/red-coats-inc..jpeg
Red Coats, Inc.
Incidents

Date Detected: 9/2025
Type:Breach
Blog: Blog
https://images.rankiteo.com/companyimages/iss-facility-services-holding-gmbh.jpeg
ISS Deutschland
Incidents

No Incident

FAQ

ISS Deutschland company demonstrates a stronger AI Cybersecurity Score compared to Red Coats, Inc. company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Red Coats, Inc. company has historically faced a number of disclosed cyber incidents, whereas ISS Deutschland company has not reported any.

In the current year, Red Coats, Inc. company has reported more cyber incidents than ISS Deutschland company.

Neither ISS Deutschland company nor Red Coats, Inc. company has reported experiencing a ransomware attack publicly.

Red Coats, Inc. company has disclosed at least one data breach, while the other ISS Deutschland company has not reported such incidents publicly.

Neither ISS Deutschland company nor Red Coats, Inc. company has reported experiencing targeted cyberattacks publicly.

Neither Red Coats, Inc. company nor ISS Deutschland company has reported experiencing or disclosing vulnerabilities publicly.

Neither Red Coats, Inc. nor ISS Deutschland holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Red Coats, Inc. company nor ISS Deutschland company has publicly disclosed detailed information about the number of their subsidiaries.

ISS Deutschland company employs more people globally than Red Coats, Inc. company, reflecting its scale as a Facilities Services.

Neither Red Coats, Inc. nor ISS Deutschland holds SOC 2 Type 1 certification.

Neither Red Coats, Inc. nor ISS Deutschland holds SOC 2 Type 2 certification.

Neither Red Coats, Inc. nor ISS Deutschland holds ISO 27001 certification.

Neither Red Coats, Inc. nor ISS Deutschland holds PCI DSS certification.

Neither Red Coats, Inc. nor ISS Deutschland holds HIPAA certification.

Neither Red Coats, Inc. nor ISS Deutschland holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This is dangerous for those who have exposed Zerobyte to be used outside of their internal network. A fix has been applied in both version 0.19.0 and 0.18.5. If immediate upgrade is not possible, restrict network access to the Zerobyte instance to trusted networks only using firewall rules or network segmentation. This is only a temporary mitigation; upgrading is strongly recommended.

Risk Information
cvss3
Base: 9.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description

Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Cross-Site Request Forgery (CSRF) vulnerability exists in the application's filter configuration. The CSRF protection mechanism was **explicitly disabled**, allowing the application to process state-changing requests (POST) without verifying a valid CSRF token. An unauthenticated remote attacker can exploit this by hosting a malicious web page. If a logged-in administrator visits this page, their browser is forced to send unauthorized requests to the application. A successful exploit allows the attacker to silently create a new Administrator account with full privileges, leading to a complete takeover of the system and loss of confidentiality, integrity, and availability. The vulnerability has been patched in version 3.4.2. The fix re-enables the CSRF filter in `app/Config/Filters.php` and resolves associated AJAX race conditions by adjusting token regeneration settings. As a workaround, administrators can manually re-enable the CSRF filter in `app/Config/Filters.php` by uncommenting the protection line. However, this is not recommended without applying the full patch, as it may cause functionality breakage in the Sales module due to token synchronization issues.

Risk Information
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description

Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Model Context Protocol (MCP) configurations from the `settings.json` file located within a project’s `.zed` subdirectory. A malicious MCP configuration can contain arbitrary shell commands that run on the host system with the privileges of the user running the IDE. This can be triggered automatically without any user interaction besides opening the project in the IDE. Version 0.218.2-pre fixes the issue by implementing worktree trust mechanism. As a workaround, users should carefully review the contents of project settings files (`./zed/settings.json`) before opening new projects in Zed.

Risk Information
cvss3
Base: 7.7
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Description

Zed, a code editor, has an aribtrary code execution vulnerability in versions prior to 0.218.2-pre. The Zed IDE loads Language Server Protocol (LSP) configurations from the `settings.json` file located within a project’s `.zed` subdirectory. A malicious LSP configuration can contain arbitrary shell commands that run on the host system with the privileges of the user running the IDE. This can be triggered when a user opens project file for which there is an LSP entry. A concerted effort by an attacker to seed a project settings file (`./zed/settings.json`) with malicious language server configurations could result in arbitrary code execution with the user's privileges if the user opens the project in Zed without reviewing the contents. Version 0.218.2-pre fixes the issue by implementing worktree trust mechanism. As a workaround, users should carefully review the contents of project settings files (`./zed/settings.json`) before opening new projects in Zed.

Risk Information
cvss3
Base: 7.7
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Description

Storybook is a frontend workshop for building user interface components and pages in isolation. A vulnerability present starting in versions 7.0.0 and prior to versions 7.6.21, 8.6.15, 9.1.17, and 10.1.10 relates to Storybook’s handling of environment variables defined in a `.env` file, which could, in specific circumstances, lead to those variables being unexpectedly bundled into the artifacts created by the `storybook build` command. When a built Storybook is published to the web, the bundle’s source is viewable, thus potentially exposing those variables to anyone with access. For a project to potentially be vulnerable to this issue, it must build the Storybook (i.e. run `storybook build` directly or indirectly) in a directory that contains a `.env` file (including variants like `.env.local`) and publish the built Storybook to the web. Storybooks built without a `.env` file at build time are not affected, including common CI-based builds where secrets are provided via platform environment variables rather than `.env` files. Storybook runtime environments (i.e. `storybook dev`) are not affected. Deployed applications that share a repo with your Storybook are not affected. Users should upgrade their Storybook—on both their local machines and CI environment—to version .6.21, 8.6.15, 9.1.17, or 10.1.10 as soon as possible. Maintainers additionally recommend that users audit for any sensitive secrets provided via `.env` files and rotate those keys. Some projects may have been relying on the undocumented behavior at the heart of this issue and will need to change how they reference environment variables after this update. If a project can no longer read necessary environmental variable values, either prefix the variables with `STORYBOOK_` or use the `env` property in Storybook’s configuration to manually specify values. In either case, do not include sensitive secrets as they will be included in the built bundle.

Risk Information
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L