Comparison Overview

TGW Company

VS

Mattel, Inc.

TGW Company

10750 Hi Tech Dr, Whitmore Lake, Michigan, 48189, US
Last Update: 2025-03-09 (UTC)
Between 900 and 1000
http://tgwcompany.com/

Excellent

TGW Company is a top Amazon seller & eCommerce consultancy. Established in 2016, TGW was birthed to provide our own brands with accurate representation, and maximize online revenue. Two years later we are honored to be recognized on the 2018 Inc 5000 list of fastest growing companies in America! (https://www.inc.com/profile/tgw-company) Before we began selling on Amazon ourselves, we had a large network of dealers listing our products while we focused on the brick & mortar side of the business. Invariably, we experienced issues surrounding price protection and consistency required for quality product listings on Amazon. Over time we worked to establish our own Fulfillment by Amazon (FBA) professional seller account. Since opening our Amazon business our products have grown to over 10 million through our FBA.

NAICS: 339
NAICS Definition:
Employees: 8
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Mattel, Inc.

333 Continental Blvd, El Segundo, California, 90245, US
Last Update: 2025-03-04 (UTC)

Strong

Between 800 and 900
https://about.mattel.com/

We empower generations to explore the wonder of childhood and reach their full potential. We treat play as if the future depends on it — because it does. Play is our language, and we speak to our consumers authentically by representing the world as they see and imagine it. Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers through our portfolio of iconic brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Monster High and MEGA, as well as other popular intellectual properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Mattel is recognized as a Great Place to Work™ and as one of Fast Company’s Best Workplaces for Innovators.

NAICS: 30
NAICS Definition: Manufacturing
Employees: 11,782
Subsidiaries: 9
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/tgw-company.jpeg
TGW Company
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/mattel.jpeg
Mattel, Inc.
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
TGW Company
100%
Compliance Rate
0/4 Standards Verified
Mattel, Inc.
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Manufacturing Industry Average (This Year)

No incidents recorded for TGW Company in 2025.

Incidents vs Manufacturing Industry Average (This Year)

No incidents recorded for Mattel, Inc. in 2025.

Incident History — TGW Company (X = Date, Y = Severity)

TGW Company cyber incidents detection timeline including parent company and subsidiaries

Incident History — Mattel, Inc. (X = Date, Y = Severity)

Mattel, Inc. cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/tgw-company.jpeg
TGW Company
Incidents

No Incident

https://images.rankiteo.com/companyimages/mattel.jpeg
Mattel, Inc.
Incidents

No Incident

FAQ

TGW Company company company demonstrates a stronger AI risk posture compared to Mattel, Inc. company company, reflecting its advanced AI governance and monitoring frameworks.

Historically, Mattel, Inc. company has disclosed a higher number of cyber incidents compared to TGW Company company.

In the current year, Mattel, Inc. company and TGW Company company have not reported any cyber incidents.

Neither Mattel, Inc. company nor TGW Company company has reported experiencing a ransomware attack publicly.

Neither Mattel, Inc. company nor TGW Company company has reported experiencing a data breach publicly.

Neither Mattel, Inc. company nor TGW Company company has reported experiencing targeted cyberattacks publicly.

Neither TGW Company company nor Mattel, Inc. company has reported experiencing or disclosing vulnerabilities publicly.

Mattel, Inc. company has more subsidiaries worldwide compared to TGW Company company.

Mattel, Inc. company employs more people globally than TGW Company company, reflecting its scale as a Manufacturing.

Latest Global CVEs (Not Company-Specific)

Description

Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.3.15 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 15 through update 92 allow remote attackers to inject arbitrary web script or HTML via crafted payload injected into a Terms and Condition's Name text field to (1) Payment Terms, or (2) the Delivery Term on the view order page.

Published
Date
2025-10-07
Updated
Date
2025-10-07
Risk Information
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/invoices.php. Performing manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.

Published
Date
2025-10-07
Updated
Date
2025-10-07
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/customer-list.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

Published
Date
2025-10-07
Updated
Date
2025-10-07
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.

Published
Date
2025-10-07
Updated
Date
2025-10-07
Risk Information
cvss2
Base: 1.7
Severity: LOW
AV:L/AC:L/Au:S/C:N/I:N/A:P
cvss3
Base: 3.3
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Cross-site scripting (XSS) vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4 before patch 6, 2023.Q3 before patch 9, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a Commerce Product's Name text field.

Published
Date
2025-10-07
Updated
Date
2025-10-07
Risk Information
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References