Comparison Overview

SM Prime Holdings, Inc.

VS

Lopes Consultoria de Imóveis

SM Prime Holdings, Inc.

7th Floor MOA Square Building, Seashell Lane corner Coral Way, MOA Complex, Pasay City Pasay, National Capital Region 1300, PH
Last Update: 2025-12-01
View Profile
Between 750 and 799
https://smprime.com

SM Prime Holdings, Inc. (SMPH) is one of the largest integrated property developers in Southeast Asia that offers innovative and sustainable lifestyle cities with the development of malls, residences, offices, hotels and convention centers. It is also the largest, in terms of asset, in the Philippines. SM Prime Holdings, Inc. was incorporated in the Philippines in 1994. They started as a mall developer and operator and grew to be the biggest retail shopping center developer and operator in the Philippines. Currently, it has 72 malls in and outside Metro Manila and 7 shopping malls in China, totaling 9.5 million square meters of Gross Floor Area (GFA). In the Philippines, they have a total of 18,153 tenants and 1,940 tenants in China. SM Prime goes beyond mall development and management through its units and subsidiaries. SM Development Corporation (SMDC) is the residential business component that sells affordable condominium units. SM Prime’s commercial business units, the Commercial Property Group (CPG) is engaged in the development and leasing of office buildings in Metro Manila, as well as the operations and management of buildings and other land holdings such as Mall of Asia Arena (MOA Arena). Its Hotels and Convention Centers business unit develops and manages various hotel and convention centers across the country.

NAICS: None
NAICS Definition: Others
Employees: 10,001
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Lopes Consultoria de Imóveis

Rua Estados Unidos, 1971, São Paulo, São Paulo, BR, 01427-002
Last Update: 2025-12-01
Between 750 and 799
http://www.lopes.com.br

A GARANTIA DE SER LOPES A Lopes é a maior empresa de soluções integradas de intermediação, consultoria e promoção de financiamentos de imóveis do Brasil. Está presente em 10 estados - São Paulo, Rio de Janeiro, Minas Gerais, Espírito Santo, Rio Grande do Sul, Paraná, Santa Catarina, Bahia, Pernambuco e Ceará - além do Distrito Federal. Líder em intermediação de venda e compra de lançamentos imobiliários, a Lopes atua também nos segmentos de imóveis usados, com a bandeira Pronto! e financiamento imobiliário, com a CrediPronto! Além disso, possui uma empresa especializada em comercialização de imóveis de até 200 mil reais: a HabitCasa. Sua missão é atender com excelência e segurança todos os clientes, pessoas ou empresas, atingindo e superando as expectativas de cada um deles. Dessa forma, a Lopes garante a qualidade do seu serviço e a satisfação de compradores, incorporadores e acionistas, além de atratividade aos corretores de imóveis parceiros ou associados. Símbolo de inovação e vanguardismo no mercado imobiliário, a Lopes trabalha com a filosofia de que nenhuma empresa pode se considerar grande, bem-sucedida ou experiente o bastante quando o assunto é a busca de aprendizado e aprimoramento. Por isso, usa os seus mais de 70 anos de experiência como lastro para a constante superação de novos desafios.

NAICS: None
NAICS Definition: Others
Employees: 10,489
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/smphi.jpeg
SM Prime Holdings, Inc.
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/lopes-consultoria-de-imoveis.jpeg
Lopes Consultoria de Imóveis
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
SM Prime Holdings, Inc.
100%
Compliance Rate
0/4 Standards Verified
Lopes Consultoria de Imóveis
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Real Estate Industry Average (This Year)

No incidents recorded for SM Prime Holdings, Inc. in 2025.

Incidents vs Real Estate Industry Average (This Year)

No incidents recorded for Lopes Consultoria de Imóveis in 2025.

Incident History — SM Prime Holdings, Inc. (X = Date, Y = Severity)

SM Prime Holdings, Inc. cyber incidents detection timeline including parent company and subsidiaries

Incident History — Lopes Consultoria de Imóveis (X = Date, Y = Severity)

Lopes Consultoria de Imóveis cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/smphi.jpeg
SM Prime Holdings, Inc.
Incidents

No Incident

https://images.rankiteo.com/companyimages/lopes-consultoria-de-imoveis.jpeg
Lopes Consultoria de Imóveis
Incidents

No Incident

FAQ

SM Prime Holdings, Inc. company demonstrates a stronger AI Cybersecurity Score compared to Lopes Consultoria de Imóveis company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Lopes Consultoria de Imóveis company has disclosed a higher number of cyber incidents compared to SM Prime Holdings, Inc. company.

In the current year, Lopes Consultoria de Imóveis company and SM Prime Holdings, Inc. company have not reported any cyber incidents.

Neither Lopes Consultoria de Imóveis company nor SM Prime Holdings, Inc. company has reported experiencing a ransomware attack publicly.

Neither Lopes Consultoria de Imóveis company nor SM Prime Holdings, Inc. company has reported experiencing a data breach publicly.

Neither Lopes Consultoria de Imóveis company nor SM Prime Holdings, Inc. company has reported experiencing targeted cyberattacks publicly.

Neither SM Prime Holdings, Inc. company nor Lopes Consultoria de Imóveis company has reported experiencing or disclosing vulnerabilities publicly.

Neither SM Prime Holdings, Inc. nor Lopes Consultoria de Imóveis holds any compliance certifications.

Neither company holds any compliance certifications.

Neither SM Prime Holdings, Inc. company nor Lopes Consultoria de Imóveis company has publicly disclosed detailed information about the number of their subsidiaries.

Lopes Consultoria de Imóveis company employs more people globally than SM Prime Holdings, Inc. company, reflecting its scale as a Real Estate.

Neither SM Prime Holdings, Inc. nor Lopes Consultoria de Imóveis holds SOC 2 Type 1 certification.

Neither SM Prime Holdings, Inc. nor Lopes Consultoria de Imóveis holds SOC 2 Type 2 certification.

Neither SM Prime Holdings, Inc. nor Lopes Consultoria de Imóveis holds ISO 27001 certification.

Neither SM Prime Holdings, Inc. nor Lopes Consultoria de Imóveis holds PCI DSS certification.

Neither SM Prime Holdings, Inc. nor Lopes Consultoria de Imóveis holds HIPAA certification.

Neither SM Prime Holdings, Inc. nor Lopes Consultoria de Imóveis holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.0.3, Function api.ParseJSONRequest currently splits (via a call to strings.Split) an optionally-provided OID (which is untrusted data) on periods. Similarly, function api.getContentType splits the Content-Type header (which is also untrusted data) on an application string. As a result, in the face of a malicious request with either an excessively long OID in the payload containing many period characters or a malformed Content-Type header, a call to api.ParseJSONRequest or api.getContentType incurs allocations of O(n) bytes (where n stands for the length of the function's argument). This vulnerability is fixed in 2.0.3.

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
Description

Monkeytype is a minimalistic and customizable typing test. In 25.49.0 and earlier, there is improper handling of user input which allows an attacker to execute malicious javascript on anyone viewing a malicious quote submission. quote.text and quote.source are user input, and they're inserted straight into the DOM. If they contain HTML tags, they will be rendered (after some escaping using quotes and textarea tags).

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss4
Base: 7.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

SysReptor is a fully customizable pentest reporting platform. Prior to 2025.102, there is a Stored Cross-Site Scripting (XSS) vulnerability allows authenticated users to execute malicious JavaScript in the context of other logged-in users by uploading malicious JavaScript files in the web UI. This vulnerability is fixed in 2025.102.

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
References
Description

Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising its fundamental properties. In 2.3.1 and earlier, TaikoInbox._verifyBatches (packages/protocol/contracts/layer1/based/TaikoInbox.sol:627-678) advanced the local tid to whatever transition matched the current blockHash before knowing whether that batch would actually be verified. When the loop later broke (e.g., cooldown window not yet passed or transition invalidated), the function still wrote that newer tid into batches[lastVerifiedBatchId].verifiedTransitionId after decrementing batchId. Result: the last verified batch could end up pointing at a transition index from the next batch (often zeroed), corrupting the verified chain pointer.

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss4
Base: 8.0
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2025-12-04
Updated
Date
2025-12-04
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References