Comparison Overview

Rosette

VS

Atlassian

Rosette

None
Last Update: 2025-03-07 (UTC)
Between 900 and 1000

Excellent

Rosette is the most widely-used multilingual information retrieval solution in the market. The Rosetteยฎ Text Analytics toolkit is built for processing language, documents, and names.

NAICS: 511
NAICS Definition:
Employees: 0
Subsidiaries: 1
12-month incidents
0
Known data breaches
0
Attack type number
0

Atlassian

Level 6/341 George St, Sydney, NSW, 2000, AU
Last Update: 2025-05-06 (UTC)

Excellent

Between 900 and 1000

Atlassian powers the collaboration that helps teams accomplish what would otherwise be impossible alone. From space missions and motor racing to bugs in code and IT requests, no task is too large or too small with the right team, the right tools, and the right practices. Over 300,000 global companies and 80% of the Fortune 500 rely on Atlassianโ€™s software, like Jira, Confluence, Loom, and Trello, to help their teams work better together and deliver quality results on time. With our 300,000+ customers and team of 10,000+ Atlassians, we are building the next generation of team collaboration and productivity software. We believe the power of teams has the potential to change the worldโ€”one that is more open, authentic, and inclusive.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 17,274
Subsidiaries: 3
12-month incidents
0
Known data breaches
0
Attack type number
2

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/rosette.jpeg
Rosette
โ€”
ISO 27001
Not verified
โ€”
SOC 2
Not verified
โ€”
GDPR
No public badge
โ€”
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/atlassian.jpeg
Atlassian
โ€”
ISO 27001
Not verified
โ€”
SOC 2
Not verified
โ€”
GDPR
No public badge
โ€”
PCI DSS
No public badge
Compliance Summary
Rosette
100%
Compliance Rate
0/4 Standards Verified
Atlassian
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Rosette in 2025.

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Atlassian in 2025.

Incident History โ€” Rosette (X = Date, Y = Severity)

Rosette cyber incidents detection timeline including parent company and subsidiaries

Incident History โ€” Atlassian (X = Date, Y = Severity)

Atlassian cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/rosette.jpeg
Rosette
Incidents

No Incident

https://images.rankiteo.com/companyimages/atlassian.jpeg
Atlassian
Incidents

Date Detected: 8/2024
Type:Vulnerability
Attack Vector: Template Injection Vulnerability
Motivation: Financial Gain
Blog: Blog

Date Detected: 02/2023
Type:Data Leak
Attack Vector: Stolen Login Credentials
Motivation: Data Theft
Blog: Blog

Date Detected: 06/2022
Type:Vulnerability
Attack Vector: Remote Code Execution
Blog: Blog

FAQ

Both Rosette company and Atlassian company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Atlassian company has historically faced a number of disclosed cyber incidents, whereas Rosette company has not reported any.

In the current year, Atlassian company and Rosette company have not reported any cyber incidents.

Neither Atlassian company nor Rosette company has reported experiencing a ransomware attack publicly.

Neither Atlassian company nor Rosette company has reported experiencing a data breach publicly.

Neither Atlassian company nor Rosette company has reported experiencing targeted cyberattacks publicly.

Atlassian company has disclosed at least one vulnerability, while Rosette company has not reported such incidents publicly.

Atlassian company has more subsidiaries worldwide compared to Rosette company.

Atlassian company employs more people globally than Rosette company, reflecting its scale as a Software Development.

Latest Global CVEs (Not Company-Specific)

Description

Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a specific URL. This issue is fixed in versions 16.34.1, 17.22.2, 18.27.2 and 19.0.0-alpha.6.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Traccar is an open source GPS tracking system. Default installs of Traccar on Windows between versions 6.1- 6.8.1 and non default installs between versions 5.8 - 6.0 are vulnerable to unauthenticated local file inclusion attacks which can lead to leakage of passwords or any file on the file system including the Traccar configuration file. Versions 5.8 - 6.0 are only vulnerable if <entry key='web.override'>./override</entry> is set in the configuration file. Versions 6.1 - 6.8.1 are vulnerable by default as the web override is enabled by default. The vulnerable code is removed in version 6.9.0.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Stalwart is a mail and collaboration server. Versions 0.13.3 and below contain an unbounded memory allocation vulnerability in the IMAP protocol parser which allows remote attackers to exhaust server memory, potentially triggering the system's out-of-memory (OOM) killer and causing a denial of service. The CommandParser implementation enforces size limits on its dynamic buffer in most parsing states, but several state handlers omit these validation checks. This issue is fixed in version 0.13.4. A workaround for this issue is to implement rate limiting and connection monitoring at the network level, however this does not provide complete protection.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Broken Access Control vulnerability, identified in the get_relatorios_socios.php endpoint. This vulnerability allows unauthenticated attackers to directly access sensitive personal and financial information of members without requiring authentication or authorization. This issue is fixed in version 3.5.0.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an Open Redirect vulnerability, identified in the control.php endpoint, specifically in the nextPage parameter (metodo=listarUmnomeClasse=FuncionarioControle). This vulnerability allows attackers to redirect users to arbitrary external domains, enabling phishing campaigns, malicious payload distribution, or user credential theft. This issue is fixed in version 3.5.0.

Risk Information
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X