Comparison Overview

The Christman Company

VS

Gilan Holding

The Christman Company

208 N. Capitol Avenue, Lansing, Michigan, 48933-1357, US
Last Update: 2025-05-06 (UTC)
Between 900 and 1000
http://www.christmanco.com/

Excellent

The Christman Company, in operation since 1894, is one of the nation’s foremost commercial construction management firms. Partnering with leading organizations, The Christman Company is known for “Uniting Great People in Great Achievement.” With 8 offices across the country, our major markets include public, government, healthcare, historic preservation, office, education, parking, science/technology, cultural/religious, hospitality, sports/recreation, transportation and industrial/power. We define excellence as the ability to add value to each project through delivery of expertise, leadership and—above all—partnership.

NAICS: 23
NAICS Definition: Construction
Employees: 532
Subsidiaries: 4
12-month incidents
0
Known data breaches
0
Attack type number
0

Gilan Holding

Capital Towers/Tower A Block 466, Nariman Narimanov Ave 206 Baku, AZ1065, AZ
Last Update: 2025-03-14 (UTC)

Excellent

Between 900 and 1000
http://www.gilanholding.com

Gilan Holding has been investing in large-scale projects in Azerbaijan since 1987. The company has long recognized the importance of optimizing the diversification of Azerbaijan's economy to ensure that it becomes a major player on the world stage. Headquartered in Baku, Gilan Holding places great emphasis on sourcing the latest technologies and streamlining the manufacturing process. Gilan Holding operates across several business sectors: CONSTRUCTION AND DEVELOPMENT, HOSPITALITY AND TOURISM, INDUSTRIAL, AGRICULTURE, RETAIL AND REAL ESTATE, FMCG, FINANCIAL SERVICES AND INVESTMENT. The company is also kick-starting the nation's sporting progression by investing heavily in sports clubs, stadia and facilities. Gilan Holding has also established an international affiliates program, which brings mutual benefit to both the company and its partners. OUR MISSION - To become leader among manufacturers due to our natural and ecologically pure production. OUR AIM - To supply our consumers with qualified goods and to glorify Azerbaijan on the world market by means of our products. MAIN TASKS - To extend means of company; - To take one of the highest levels on the world market arena; - To increase assortment and to create turnover on a broad scale; - To improve quality control; - Realization of innovations in production field; - To make analysis of opportunities of activity on foreign market. PRINCIPLES OF OUR SUCCESS - To introduce qualified products which meet high quality standards; - To be responsible for environment; - To make opportunities for people for increasing of our potential. OUR VALUES - Professionalism. We are professionals in introducing our work based on quality, responsibility and confidence; - Quality. Our production – indicator of health and quality; - Guarantee. Our name is the guarantee of our production.

NAICS: 23
NAICS Definition:
Employees: 10,001+
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/the-christman-company.jpeg
The Christman Company
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/gilan-holding.jpeg
Gilan Holding
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
The Christman Company
100%
Compliance Rate
0/4 Standards Verified
Gilan Holding
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Construction Industry Average (This Year)

No incidents recorded for The Christman Company in 2025.

Incidents vs Construction Industry Average (This Year)

No incidents recorded for Gilan Holding in 2025.

Incident History — The Christman Company (X = Date, Y = Severity)

The Christman Company cyber incidents detection timeline including parent company and subsidiaries

Incident History — Gilan Holding (X = Date, Y = Severity)

Gilan Holding cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/the-christman-company.jpeg
The Christman Company
Incidents

No Incident

https://images.rankiteo.com/companyimages/gilan-holding.jpeg
Gilan Holding
Incidents

No Incident

FAQ

Both The Christman Company company and Gilan Holding company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, Gilan Holding company has disclosed a higher number of cyber incidents compared to The Christman Company company.

In the current year, Gilan Holding company and The Christman Company company have not reported any cyber incidents.

Neither Gilan Holding company nor The Christman Company company has reported experiencing a ransomware attack publicly.

Neither Gilan Holding company nor The Christman Company company has reported experiencing a data breach publicly.

Neither Gilan Holding company nor The Christman Company company has reported experiencing targeted cyberattacks publicly.

Neither The Christman Company company nor Gilan Holding company has reported experiencing or disclosing vulnerabilities publicly.

The Christman Company company has more subsidiaries worldwide compared to Gilan Holding company.

The Christman Company company employs more people globally than Gilan Holding company, reflecting its scale as a Construction.

Latest Global CVEs (Not Company-Specific)

Description

Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs (jwt.decode) without verifying their signatures. Both the email verification token login path and the password reset server action use the same validator, which does not check the token’s signature, expiration, issuer, or audience. If an attacker learns the victim’s actual user.id, they can craft an arbitrary JWT with an alg: "none" header and use it to authenticate and reset the victim’s password. This issue has been patched in version 4.0.1.

Published
Date
2025-09-26
Updated
Date
2025-09-26
Risk Information
cvss3
Base: 9.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
References
Description

Apollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL. Prior to Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3, a cross-site request forgery (CSRF) vulnerability was identified. The vulnerability arises from missing origin validation in the client-side code that handles window.postMessage events. A malicious website can send forged messages to the embedding page, causing the victim’s browser to execute arbitrary GraphQL queries or mutations against their GraphQL server while authenticated with the victim’s cookies. This issue has been patched in Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3.

Published
Date
2025-09-26
Updated
Date
2025-09-26
Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N
References
Description

A security vulnerability has been detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /consulta-dispensas. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published
Date
2025-09-26
Updated
Date
2025-09-26
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /module/Api/aluno. This manipulation of the argument aluno_id causes improper authorization. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-09-26
Updated
Date
2025-09-26
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security flaw has been discovered in Tencent WeKnora 0.1.0. This impacts the function testEmbeddingModel of the file /api/v1/initialization/embedding/test. The manipulation of the argument baseUrl results in server-side request forgery. The attack can be launched remotely. The exploit has been released to the public and may be exploited. It is advisable to upgrade the affected component. The vendor responds: "We have confirmed that the issue mentioned in the report does not exist in the latest releases".

Published
Date
2025-09-26
Updated
Date
2025-09-26
Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References