Comparison Overview

RSFi Office Furniture

VS

Grupo Bigfer

RSFi Office Furniture

401 E Wilson Bridge Rd, Worthington, 43085, US
Last Update: 2025-11-21
View Profile
Between 750 and 799
http://www.rsfi.com

At RSFi we have the expertise and the resources to be the solution to any office space requirement in a way that no other furniture dealer can. We have a unique blend of new, re-manufactured and custom products to supply unprecedented value. We strive to make your furniture projects a successful and enjoyable experience.

NAICS: 337
NAICS Definition: Furniture and Related Product Manufacturing
Employees: 24
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Grupo Bigfer

Rua Papa João XXIII, Farroupilha, RS, 95180000, BR
Last Update: 2025-11-26
Between 750 and 799
http://www.grupobigfer.com.br/

O Grupo Bigfer está localizado na cidade de Farroupilha, Rio Grande do Sul, Brasil. Há mais de 20 anos no mercado de acessórios para móveis, oferece não só produtos, mas também soluções. Para tanto, desenvolve constantemente novos produtos e avança em tecnologia de produção, para suprir um mercado cada vez mais exigente. Possui uma linha completa com mais de 6.000 itens fabricados e 8.000 itens revendidos, confecciona kits de acessórios para montagem do móvel, o que facilita o controle de estoque, a redução de processos e a garantia de qualidade para o moveleiro. Atua também no mercado de embalagens plásticas flexíveis, fornecendo para mais de 10.000 clientes em todo o Brasil. Com a aquisição da unidade Hettich do Brasil, em 2010, além de potencializar a liderança no mercado de acessórios para móveis o Grupo Bigfer torna-se também o maior transformador brasileiro de Zamak, com importante atuação na linha branca.

NAICS: 337
NAICS Definition:
Employees: 755
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/rsfi-office-furniture.jpeg
RSFi Office Furniture
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/grupo-bigfer---filial-farroupilha-rs.jpeg
Grupo Bigfer
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
RSFi Office Furniture
100%
Compliance Rate
0/4 Standards Verified
Grupo Bigfer
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Furniture and Home Furnishings Manufacturing Industry Average (This Year)

No incidents recorded for RSFi Office Furniture in 2025.

Incidents vs Furniture and Home Furnishings Manufacturing Industry Average (This Year)

No incidents recorded for Grupo Bigfer in 2025.

Incident History — RSFi Office Furniture (X = Date, Y = Severity)

RSFi Office Furniture cyber incidents detection timeline including parent company and subsidiaries

Incident History — Grupo Bigfer (X = Date, Y = Severity)

Grupo Bigfer cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/rsfi-office-furniture.jpeg
RSFi Office Furniture
Incidents

No Incident

https://images.rankiteo.com/companyimages/grupo-bigfer---filial-farroupilha-rs.jpeg
Grupo Bigfer
Incidents

No Incident

FAQ

Grupo Bigfer company demonstrates a stronger AI Cybersecurity Score compared to RSFi Office Furniture company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Grupo Bigfer company has disclosed a higher number of cyber incidents compared to RSFi Office Furniture company.

In the current year, Grupo Bigfer company and RSFi Office Furniture company have not reported any cyber incidents.

Neither Grupo Bigfer company nor RSFi Office Furniture company has reported experiencing a ransomware attack publicly.

Neither Grupo Bigfer company nor RSFi Office Furniture company has reported experiencing a data breach publicly.

Neither Grupo Bigfer company nor RSFi Office Furniture company has reported experiencing targeted cyberattacks publicly.

Neither RSFi Office Furniture company nor Grupo Bigfer company has reported experiencing or disclosing vulnerabilities publicly.

Neither RSFi Office Furniture nor Grupo Bigfer holds any compliance certifications.

Neither company holds any compliance certifications.

Neither RSFi Office Furniture company nor Grupo Bigfer company has publicly disclosed detailed information about the number of their subsidiaries.

Grupo Bigfer company employs more people globally than RSFi Office Furniture company, reflecting its scale as a Furniture and Home Furnishings Manufacturing.

Neither RSFi Office Furniture nor Grupo Bigfer holds SOC 2 Type 1 certification.

Neither RSFi Office Furniture nor Grupo Bigfer holds SOC 2 Type 2 certification.

Neither RSFi Office Furniture nor Grupo Bigfer holds ISO 27001 certification.

Neither RSFi Office Furniture nor Grupo Bigfer holds PCI DSS certification.

Neither RSFi Office Furniture nor Grupo Bigfer holds HIPAA certification.

Neither RSFi Office Furniture nor Grupo Bigfer holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Published
Date
2025-11-27
Updated
Date
2025-11-27
Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Published
Date
2025-11-27
Updated
Date
2025-11-27
Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Published
Date
2025-11-27
Updated
Date
2025-11-27
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Published
Date
2025-11-27
Updated
Date
2025-11-27
References
Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.

Published
Date
2025-11-27
Updated
Date
2025-11-27
References