Comparison Overview

Stonegate Group

VS

Taj Hotels

Stonegate Group

3 Monkspath Hall Road Shirley, England B90 4SJ, GB
Last Update: 2025-12-09

We’re the UK's biggest pub company, but that’s not all we are. We’re an incredible team bringing people together through our 4,500+ sites nationwide. Formed in 2010 with 333 pubs, Stonegate Group has grown bigger and better than ever, and today we’re home to well-loved sites such as Slug & Lettuce, Be At One, Walkabout, Popworld and so many more. But we didn’t get where we are just with great drinks and unforgettable experiences. We got here with the wonderful ideas and dedication of our team, from our front-line bar superstars to our head-office heroes and everyone in between. Without our team, we couldn’t have achieved all the brilliant things we have, and that’s why we’re here to make sure our colleagues are set up for just as much success as we are. With award-winning development programmes, proven Bar to Boardroom career pathways, apprenticeship opportunities to gain nationally-recognised qualifications, and training to learn fantastic new skills, we can prove that we value our colleagues just as much as our customers. We set up every part of our business for success, and we strive to be the best we can be for our guests and colleagues alike. Here at Stonegate, we live by our values. We invest wisely, we’re raring to go and we’re straightforward in all that we do. But above all, we’re one team, and we’re ready to take on the future together and have fun while we’re at it!

NAICS: 7211
NAICS Definition: Traveler Accommodation
Employees: 10,001
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Taj Hotels

9th Floor, Express Towers,, Mumbai, Maharashtra, 400 021, IN
Last Update: 2025-12-09
Between 800 and 849

Established in 1903, Taj is The Indian Hotels Company Limited’s (IHCL) iconic brand for the world’s most discerning travellers seeking luxury and authentic experiences. Taj has been rated as India’s Strongest Brand across all sectors for an unprecedented fourth time and also as the World’s Strongest Hotel Brand for the third consecutive year in 2024 by Brand Finance. From landmark city addresses to enchanting jungle safaris, and from idyllic resorts to authentic living Grand Palaces, each Taj hotel offers an unrivalled fusion of warm Indian hospitality, world-class service and modern luxury. Taj's unique portfolio comprises hotels across India, North America, United Kingdom, Africa, Middle East, Sri Lanka, Maldives and Nepal.

NAICS: 7211
NAICS Definition: Traveler Accommodation
Employees: 22,355
Subsidiaries: 73
12-month incidents
0
Known data breaches
2
Attack type number
3

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/stonegate-pub-company-limited.jpeg
Stonegate Group
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/taj-hotels.jpeg
Taj Hotels
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Stonegate Group
100%
Compliance Rate
0/4 Standards Verified
Taj Hotels
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Hospitality Industry Average (This Year)

No incidents recorded for Stonegate Group in 2025.

Incidents vs Hospitality Industry Average (This Year)

No incidents recorded for Taj Hotels in 2025.

Incident History — Stonegate Group (X = Date, Y = Severity)

Stonegate Group cyber incidents detection timeline including parent company and subsidiaries

Incident History — Taj Hotels (X = Date, Y = Severity)

Taj Hotels cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/stonegate-pub-company-limited.jpeg
Stonegate Group
Incidents

No Incident

https://images.rankiteo.com/companyimages/taj-hotels.jpeg
Taj Hotels
Incidents

Date Detected: 11/2025
Type:Cyber Attack
Blog: Blog

Date Detected: 11/2025
Type:Cyber Attack
Motivation: Financial Gain, Disruption
Blog: Blog

Date Detected: 10/2025
Type:Cyber Attack
Attack Vector: Phishing Emails, Spoofed Supplier Communications, WhatsApp Scams, Human Error (Misplaced Trust)
Motivation: Financial Gain, Data Theft, Reputational Damage, Exploitation of Human Behavior
Blog: Blog

FAQ

Taj Hotels company demonstrates a stronger AI Cybersecurity Score compared to Stonegate Group company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Taj Hotels company has historically faced a number of disclosed cyber incidents, whereas Stonegate Group company has not reported any.

In the current year, Taj Hotels company has reported more cyber incidents than Stonegate Group company.

Taj Hotels company has confirmed experiencing a ransomware attack, while Stonegate Group company has not reported such incidents publicly.

Taj Hotels company has disclosed at least one data breach, while Stonegate Group company has not reported such incidents publicly.

Taj Hotels company has reported targeted cyberattacks, while Stonegate Group company has not reported such incidents publicly.

Neither Stonegate Group company nor Taj Hotels company has reported experiencing or disclosing vulnerabilities publicly.

Neither Stonegate Group nor Taj Hotels holds any compliance certifications.

Neither company holds any compliance certifications.

Taj Hotels company has more subsidiaries worldwide compared to Stonegate Group company.

Taj Hotels company employs more people globally than Stonegate Group company, reflecting its scale as a Hospitality.

Neither Stonegate Group nor Taj Hotels holds SOC 2 Type 1 certification.

Neither Stonegate Group nor Taj Hotels holds SOC 2 Type 2 certification.

Neither Stonegate Group nor Taj Hotels holds ISO 27001 certification.

Neither Stonegate Group nor Taj Hotels holds PCI DSS certification.

Neither Stonegate Group nor Taj Hotels holds HIPAA certification.

Neither Stonegate Group nor Taj Hotels holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain a Stored Cross-Site Scripting (XSS) vulnerability in the /WeGIA/html/geral/configurar_senhas.php endpoint. The application does not sanitize user-controlled data before rendering it inside the employee selection dropdown. The application retrieves employee names from the database and injects them directly into HTML <option> elements without proper escaping. This issue is fixed in version 3.5.5.

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

ZITADEL is an open-source identity infrastructure tool. Versions 4.0.0-rc.1 through 4.7.0 are vulnerable to DOM-Based XSS through the Zitadel V2 logout endpoint. The /logout endpoint insecurely routes to a value that is supplied in the post_logout_redirect GET parameter. As a result, unauthenticated remote attacker can execute malicious JS code on Zitadel users’ browsers. To carry out an attack, multiple user sessions need to be active in the same browser, however, account takeover is mitigated when using Multi-Factor Authentication (MFA) or Passwordless authentication. This issue is fixed in version 4.7.1.

Risk Information
cvss3
Base: 8.0
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Description

ZITADEL is an open-source identity infrastructure tool. Versions 4.7.0 and below are vulnerable to an unauthenticated, full-read SSRF vulnerability. The ZITADEL Login UI (V2) treats the x-zitadel-forward-host header as a trusted fallback for all deployments, including self-hosted instances. This allows an unauthenticated attacker to force the server to make HTTP requests to arbitrary domains, such as internal addresses, and read the responses, enabling data exfiltration and bypassing network-segmentation controls. This issue is fixed in version 4.7.1.

Risk Information
cvss3
Base: 9.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Description

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to directory traversal through the App.add_media_files() function, which allows a remote attacker to read arbitrary files on the server filesystem. This issue is fixed in version 3.4.0.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authentication bypass when the authentication type is set to "webserver." When providing an Authorization header with an arbitrary value, a session is associated with the target user regardless of valid credentials. This issue is fixed in versions 16.0.44 and 17.0.23.

Risk Information
cvss4
Base: 9.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X