Comparison Overview

Rubin Museum of Himalayan Art

VS

Madison Museum of Contemporary Art

Rubin Museum of Himalayan Art

150 West 17th street, New York, New York, 10011, US
Last Update: 2025-12-02
Between 750 and 799

The Rubin is a global museum dedicated to presenting Himalayan art and its insights. Founded in 2004, the Rubin serves people internationally through exhibitions, participatory experiences, a dynamic digital platform, and partnerships. Inspired and informed by Himalayan art, the Rubin invites people to contemplate the human experience and deepen connections with the world around them in order to expand awareness, enhance well-being, and cultivate compassion. The Rubin advances scholarship through a series of educational initiatives, grants, collection sharing, and the stewardship of a collection of nearly 4,000 Himalayan art objects spanning 1,500 years of history—providing unprecedented access and resources to scholars, artists, and students across the globe.

NAICS: 712
NAICS Definition: Museums, Historical Sites, and Similar Institutions
Employees: 122
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Madison Museum of Contemporary Art

227 State Street, Madison, WI, 53703, US
Last Update: 2025-12-02
Between 750 and 799

MISSION The Madison Museum of Contemporary Art is an independent organization that exhibits, collects, and preserves modern and contemporary art to provide transformative experiences that educate, reflect, and inspire us as individuals and a community. HISTORY After a distinguished 105-year history in borrowed and refurbished spaces, the Madison Museum of Contemporary Art opened to the public on April 23, 2006, in a new facility within Overture Center for the Arts. Designed by world-renowned architect Cesar Pelli, the museum's exhilarating facility offers 51,500 square feet of space for the study, presentation, and conservation of modern and contemporary art, as well as a 7,100-square-foot rooftop sculpture garden. Public amenities include spacious galleries, a 230-seat lecture hall, a children's classroom, a new-media gallery, and a study center for drawings, prints, and photographs. COLLECTION The museum's collection traces its origins to a major gift from Rudolph and Louise Langer in 1968. Through donations and museum purchases, the collection has grown to become an important community resource. Works span the twentieth and twenty-first centuries and include paintings, sculpture, photography, prints, and drawings. EXHIBITIONS Exhibitions are the cornerstone of MMoCA's public programs and have featured many of the most respected artists of the last century, including Robert Rauschenberg, Chuck Close, Sol LeWitt, George Segal, Ursula von Rydingsvard, and John Wilde. The main galleries, located on the second floor, host the museum's major exhibitions. The Henry Street Gallery presents exhibitions from the museum's permanent collection while the State Street Gallery offers a changing roster of exhibitions and installations. MMoCA's rooftop sculpture garden presents major works on a rotating basis in an illuminated garden setting.

NAICS: 712
NAICS Definition:
Employees: 45
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/rubin-museum-of-art.jpeg
Rubin Museum of Himalayan Art
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/madison-museum-of-contemporary-art.jpeg
Madison Museum of Contemporary Art
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Rubin Museum of Himalayan Art
100%
Compliance Rate
0/4 Standards Verified
Madison Museum of Contemporary Art
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Rubin Museum of Himalayan Art in 2025.

Incidents vs Museums, Historical Sites, and Zoos Industry Average (This Year)

No incidents recorded for Madison Museum of Contemporary Art in 2025.

Incident History — Rubin Museum of Himalayan Art (X = Date, Y = Severity)

Rubin Museum of Himalayan Art cyber incidents detection timeline including parent company and subsidiaries

Incident History — Madison Museum of Contemporary Art (X = Date, Y = Severity)

Madison Museum of Contemporary Art cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/rubin-museum-of-art.jpeg
Rubin Museum of Himalayan Art
Incidents

No Incident

https://images.rankiteo.com/companyimages/madison-museum-of-contemporary-art.jpeg
Madison Museum of Contemporary Art
Incidents

No Incident

FAQ

Rubin Museum of Himalayan Art company demonstrates a stronger AI Cybersecurity Score compared to Madison Museum of Contemporary Art company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Madison Museum of Contemporary Art company has disclosed a higher number of cyber incidents compared to Rubin Museum of Himalayan Art company.

In the current year, Madison Museum of Contemporary Art company and Rubin Museum of Himalayan Art company have not reported any cyber incidents.

Neither Madison Museum of Contemporary Art company nor Rubin Museum of Himalayan Art company has reported experiencing a ransomware attack publicly.

Neither Madison Museum of Contemporary Art company nor Rubin Museum of Himalayan Art company has reported experiencing a data breach publicly.

Neither Madison Museum of Contemporary Art company nor Rubin Museum of Himalayan Art company has reported experiencing targeted cyberattacks publicly.

Neither Rubin Museum of Himalayan Art company nor Madison Museum of Contemporary Art company has reported experiencing or disclosing vulnerabilities publicly.

Neither Rubin Museum of Himalayan Art nor Madison Museum of Contemporary Art holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Rubin Museum of Himalayan Art company nor Madison Museum of Contemporary Art company has publicly disclosed detailed information about the number of their subsidiaries.

Rubin Museum of Himalayan Art company employs more people globally than Madison Museum of Contemporary Art company, reflecting its scale as a Museums, Historical Sites, and Zoos.

Neither Rubin Museum of Himalayan Art nor Madison Museum of Contemporary Art holds SOC 2 Type 1 certification.

Neither Rubin Museum of Himalayan Art nor Madison Museum of Contemporary Art holds SOC 2 Type 2 certification.

Neither Rubin Museum of Himalayan Art nor Madison Museum of Contemporary Art holds ISO 27001 certification.

Neither Rubin Museum of Himalayan Art nor Madison Museum of Contemporary Art holds PCI DSS certification.

Neither Rubin Museum of Himalayan Art nor Madison Museum of Contemporary Art holds HIPAA certification.

Neither Rubin Museum of Himalayan Art nor Madison Museum of Contemporary Art holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.11.1, vllm has a critical remote code execution vector in a config class named Nemotron_Nano_VL_Config. When vllm loads a model config that contains an auto_map entry, the config class resolves that mapping with get_class_from_dynamic_module(...) and immediately instantiates the returned class. This fetches and executes Python from the remote repository referenced in the auto_map string. Crucially, this happens even when the caller explicitly sets trust_remote_code=False in vllm.transformers_utils.config.get_config. In practice, an attacker can publish a benign-looking frontend repo whose config.json points via auto_map to a separate malicious backend repo; loading the frontend will silently run the backend’s code on the victim host. This vulnerability is fixed in 0.11.1.

Risk Information
cvss3
Base: 7.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Description

fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0, by crafting a malicious URL, an attacker could access routes that are not allowed, even though the reply.from is defined for specific routes in @fastify/reply-from. This vulnerability is fixed in 12.5.0.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 21.0.2, 20.3.15, and 19.2.17, A Stored Cross-Site Scripting (XSS) vulnerability has been identified in the Angular Template Compiler. It occurs because the compiler's internal security schema is incomplete, allowing attackers to bypass Angular's built-in security sanitization. Specifically, the schema fails to classify certain URL-holding attributes (e.g., those that could contain javascript: URLs) as requiring strict URL security, enabling the injection of malicious scripts. This vulnerability is fixed in 21.0.2, 20.3.15, and 19.2.17.

Risk Information
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails. Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header. The proxy route then appends the client-specified path to perform an external fetch. This can be maliciously used by users for SSRF attacks. This vulnerability is fixed in 1.14.0.

Risk Information
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X