Comparison Overview

Shadowscene

VS

Masterfile

Shadowscene

PO Box 292213 Los Angeles, CA 90029, US
Last Update: 2025-12-13
View Profile
Between 750 and 799
http://shadowscene.com

Shadowscene, the artist moniker for Ellei Johndro, doubles as a lifestyle and culture website with a heavy focus on nightlife and music. It encompasses photography, writing and video work from founder Ellei Johndro while providing full event production services, travel and tour documentation with artists, behind the scenes coverage and a platform for emerging as well as established artists all with a unique edge to journalism and brand awareness. Originally founded in 2002, it has grown to include documentation of travels and adventures worldwide while hosting decades of archival material. Shadowscene has worked closely with a variety of clients ranging from VANS, Sailor Jerry, MTV, Dr. Martens and Urban Outfitters along with numerous record labels, magazines, music venues and publicists to broaden both brand and artist awareness through events and photography. Shadowscene (n): specifically relating to the creative visions that are undermined or overlooked, thoughts that come from dreams and other various shadowy and/or quirky places...

NAICS: 541
NAICS Definition:
Employees: 1
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Masterfile

undefined, Edmonton, Alberta, undefined, CA
Last Update: 2025-12-13
Between 750 and 799
http://www.masterfile.com

Masterfile Corporation is a privately owned global visual content licensor, with a stellar collection of rights-managed and royalty-free stock images. The millions of images — covering a wide range of subjects — are showcased, licensed and delivered instantly to commercial clients worldwide via the Internet. The company’s reputation is built on fast personal service and premium quality and has been augmented with a collection of 1.9 million “microstock” images priced from $10 to $40 and available by subscription starting at $50/month. Masterfile’s revolutionary “Endless Media™” search interface has set a new industry standard, helping clients find the images they need faster than ever. The Masterfile website is augmented by an iPad/iPhone application. Masterfile has its global headquarters in Toronto, European headquarters in Dusseldorf, sales offices in Paris, and independent licensees in 100 countries across six continents. iPad, iPhone and iTunes are trademarks of Apple Inc., registered in the U.S. and other countries. Masterfile, SimSearch and Endless Media are trademarks of Masterfile Corporation.

NAICS: 54192
NAICS Definition: Photographic Services
Employees: 32
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/shadowscene.jpeg
Shadowscene
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/masterfile.jpeg
Masterfile
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Shadowscene
100%
Compliance Rate
0/4 Standards Verified
Masterfile
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Photography Industry Average (This Year)

No incidents recorded for Shadowscene in 2025.

Incidents vs Photography Industry Average (This Year)

No incidents recorded for Masterfile in 2025.

Incident History — Shadowscene (X = Date, Y = Severity)

Shadowscene cyber incidents detection timeline including parent company and subsidiaries

Incident History — Masterfile (X = Date, Y = Severity)

Masterfile cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/shadowscene.jpeg
Shadowscene
Incidents

No Incident

https://images.rankiteo.com/companyimages/masterfile.jpeg
Masterfile
Incidents

No Incident

FAQ

Shadowscene company demonstrates a stronger AI Cybersecurity Score compared to Masterfile company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Masterfile company has disclosed a higher number of cyber incidents compared to Shadowscene company.

In the current year, Masterfile company and Shadowscene company have not reported any cyber incidents.

Neither Masterfile company nor Shadowscene company has reported experiencing a ransomware attack publicly.

Neither Masterfile company nor Shadowscene company has reported experiencing a data breach publicly.

Neither Masterfile company nor Shadowscene company has reported experiencing targeted cyberattacks publicly.

Neither Shadowscene company nor Masterfile company has reported experiencing or disclosing vulnerabilities publicly.

Neither Shadowscene nor Masterfile holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Shadowscene company nor Masterfile company has publicly disclosed detailed information about the number of their subsidiaries.

Masterfile company employs more people globally than Shadowscene company, reflecting its scale as a Photography.

Neither Shadowscene nor Masterfile holds SOC 2 Type 1 certification.

Neither Shadowscene nor Masterfile holds SOC 2 Type 2 certification.

Neither Shadowscene nor Masterfile holds ISO 27001 certification.

Neither Shadowscene nor Masterfile holds PCI DSS certification.

Neither Shadowscene nor Masterfile holds HIPAA certification.

Neither Shadowscene nor Masterfile holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Nagios XI versions prior to 2026R1.1 are vulnerable to local privilege escalation due to an unsafe interaction between sudo permissions and application file permissions. A user‑accessible maintenance script may be executed as root via sudo and includes an application file that is writable by a lower‑privileged user. A local attacker with access to the application account can modify this file to introduce malicious code, which is then executed with elevated privileges when the script is run. Successful exploitation results in arbitrary code execution as the root user.

Published
Date
2025-12-16
Updated
Date
2025-12-16
Risk Information
cvss4
Base: 8.6
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Out of bounds read and write in V8 in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Published
Date
2025-12-16
Updated
Date
2025-12-16
References
Description

Use after free in WebGPU in Google Chrome prior to 143.0.7499.147 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Published
Date
2025-12-16
Updated
Date
2025-12-16
References
Description

SIPGO is a library for writing SIP services in the GO language. Starting in version 0.3.0 and prior to version 1.0.0-alpha-1, a nil pointer dereference vulnerability is in the SIPGO library's `NewResponseFromRequest` function that affects all normal SIP operations. The vulnerability allows remote attackers to crash any SIP application by sending a single malformed SIP request without a To header. The vulnerability occurs when SIP message parsing succeeds for a request missing the To header, but the response creation code assumes the To header exists without proper nil checks. This affects routine operations like call setup, authentication, and message handling - not just error cases. This vulnerability affects all SIP applications using the sipgo library, not just specific configurations or edge cases, as long as they make use of the `NewResponseFromRequest` function. Version 1.0.0-alpha-1 contains a patch for the issue.

Published
Date
2025-12-16
Updated
Date
2025-12-16
Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.21, an unauthorized user with an API access can read all knowledge base entries. Users should upgrade to 10.0.21 to receive a patch.

Published
Date
2025-12-16
Updated
Date
2025-12-16
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References