Comparison Overview

Sling Shot Intergalactic

VS

Project Twenty1

Sling Shot Intergalactic

85 Broad St, New York, NY, 10004, US
Last Update: 2025-12-15

Whether you’re looking for a way to deliver footage across the city or across the world, Sling Shot Intergalactic is your secure solution for moving an entire days’ worth of editorial dailies globally, at the speed of light. We’re not just a software app, we’re an experienced team well versed in post production workflows and cutting edge tech. Our crew ensures every step is done in the quickest way possible, shaving hours off the process, while providing your footage with top-tier security and safety measures. Between our high speed pipeline that connects our core production hubs and an extensive network of worldwide partners, we have an unparalleled ability to operate around the globe.

NAICS: None
NAICS Definition:
Employees: 16
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Project Twenty1

325 Chestnut St. , Philadelphia, PA, 19106, US
Last Update: 2025-12-18

Project Twenty1 is a non-profit arts organization dedicated to inspiring, connecting, exhibiting, and promoting artists of all disciplines through film and animation. We host film screenings, educational programs, workshops, arts and media events year-round. Our audience is primarily comprised of hip, technologically savvy trendsetters. We are a flourishing film community and a wonderful incubator for young, creative, and motivated individuals.

NAICS: None
NAICS Definition:
Employees: 5
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/sling-shot-nyc.jpeg
Sling Shot Intergalactic
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/project-twenty-1.jpeg
Project Twenty1
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Sling Shot Intergalactic
100%
Compliance Rate
0/4 Standards Verified
Project Twenty1
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Movies, Videos, and Sound Industry Average (This Year)

No incidents recorded for Sling Shot Intergalactic in 2025.

Incidents vs Movies, Videos, and Sound Industry Average (This Year)

No incidents recorded for Project Twenty1 in 2025.

Incident History — Sling Shot Intergalactic (X = Date, Y = Severity)

Sling Shot Intergalactic cyber incidents detection timeline including parent company and subsidiaries

Incident History — Project Twenty1 (X = Date, Y = Severity)

Project Twenty1 cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/sling-shot-nyc.jpeg
Sling Shot Intergalactic
Incidents

No Incident

https://images.rankiteo.com/companyimages/project-twenty-1.jpeg
Project Twenty1
Incidents

No Incident

FAQ

Project Twenty1 company demonstrates a stronger AI Cybersecurity Score compared to Sling Shot Intergalactic company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Project Twenty1 company has disclosed a higher number of cyber incidents compared to Sling Shot Intergalactic company.

In the current year, Project Twenty1 company and Sling Shot Intergalactic company have not reported any cyber incidents.

Neither Project Twenty1 company nor Sling Shot Intergalactic company has reported experiencing a ransomware attack publicly.

Neither Project Twenty1 company nor Sling Shot Intergalactic company has reported experiencing a data breach publicly.

Neither Project Twenty1 company nor Sling Shot Intergalactic company has reported experiencing targeted cyberattacks publicly.

Neither Sling Shot Intergalactic company nor Project Twenty1 company has reported experiencing or disclosing vulnerabilities publicly.

Neither Sling Shot Intergalactic nor Project Twenty1 holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Sling Shot Intergalactic company nor Project Twenty1 company has publicly disclosed detailed information about the number of their subsidiaries.

Sling Shot Intergalactic company employs more people globally than Project Twenty1 company, reflecting its scale as a Movies, Videos, and Sound.

Neither Sling Shot Intergalactic nor Project Twenty1 holds SOC 2 Type 1 certification.

Neither Sling Shot Intergalactic nor Project Twenty1 holds SOC 2 Type 2 certification.

Neither Sling Shot Intergalactic nor Project Twenty1 holds ISO 27001 certification.

Neither Sling Shot Intergalactic nor Project Twenty1 holds PCI DSS certification.

Neither Sling Shot Intergalactic nor Project Twenty1 holds HIPAA certification.

Neither Sling Shot Intergalactic nor Project Twenty1 holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service, which performs file system operations without impersonating the requesting user. Due to improper privilege handling and a time-of-check time-of-use race condition combined with symbolic link and mount point manipulation, a local authenticated attacker can coerce the service into deleting arbitrary directories with SYSTEM privileges. This can be exploited to delete protected system folders such as C:\\Config.msi and subsequently achieve execution as NT AUTHORITY\\SYSTEM via MSI rollback techniques.

Risk Information
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capability check on the 'cs_update_application_status_callback' function in all versions up to, and including, 7.7. This makes it possible for authenticated attackers, with Candidate-level access and above, to inject cross-site scripting into the 'status' parameter of applied jobs for any user.

Risk Information
cvss3
Base: 7.6
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Description

The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.7 via the 'cs_update_application_status_callback' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Candidate-level access and above, to send a site-generated email with injected HTML to any user.

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description

The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `thegem_te_search` shortcode in all versions up to, and including, 1.32.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability requires TheGem theme (premium) to be installed with Header Builder mode enabled, and the FiboSearch "Replace search bars" option enabled for TheGem integration.

Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Description

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajax_get_members function. This is due to the use of a predictable low-entropy token (5 hex characters derived from md5 of post ID) to identify member directories and insufficient authorization checks on the unauthenticated AJAX endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, display names, user roles (including administrator accounts), profile URLs, and user IDs by enumerating predictable directory_id values or brute-forcing the small 16^5 token space.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N