Comparison Overview

Topology

VS

UKG

Topology

3260 19th St, San Francisco, California, 94110, US
Last Update: 2025-03-05 (UTC)

Excellent

Eyeglasses are one of the most widely used products in the world—more than half of the people on the planet need them—and Topology is going to fundamentally change how eyeglasses and sunglasses are bought, sold, designed, and manufactured, worldwide. We work with optical retailers and e-tailers to deliver an amazing eyewear purchasing experience, both in store and online. With precise 3D scanning, augmented reality (virtual try-on) shopping, and advanced manufacturing, we’re going to launch a sluggish industry into the 21st century. We’re going to change how they’re bought. The current shopping experience is the same experience your grandparents faced, and the result is that most people don’t love their glasses, even though they’re forced to wear them every day. Sadly, the online experience isn’t much better, which is why less than 5% of industry sales are online. We’re going to change how they’re sold. The industry has been absolutely savaged by COVID-19, and the people taking it hardest are the local eye doctors and opticians. The system of providing eye health in this country does not work if your local eye doctor is totally “disrupted,” so our software platform will give them and their staff superpowers to better serve their patients and better keep their practices afloat. We’re going to change how glasses are designed and made. Most glasses don’t fit most people, because they’re designed for the average sized, average shaped, Italian man or woman (literally – the 5 largest frame companies in the world are all located in a tiny village in the Italian alps). We have the technology to finally change that, so that people can come to love the glasses they wear and feel good about themselves every day when they put them on. If you’re an innovator, if you never tire of looking at how things “have always been done” and asking why, and if you get excited about shaking up a $120 billion industry, Topology might be the right place for you.

NAICS: 511
NAICS Definition:
Employees: 56
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

UKG

None
Last Update: 2025-07-26 (UTC)

Strong

Between 800 and 900

At UKG, our purpose is people. As strong believers in the power of culture and belonging as the secret to success, we champion great workplaces and build lifelong partnerships with our customers to show what’s possible when businesses invest in their people. One of the world’s leading HCM cloud companies today, UKG and our Life-work Technology approach to HR, pay, time, and culture solutions for all people helps 80,000 organizations around the globe and across every industry anticipate and adapt to their employees’ needs beyond just work. To learn more, visit ukg.com. UKG Social Media Guidelines available at https://www.ukg.com/ukg-social-media-guidelines.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 15,440
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
2

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/topology-eyewear.jpeg
Topology
ISO 27001
Not verified
SOC 2
Not verified
GDPR
No public badge
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/ukg.jpeg
UKG
ISO 27001
Not verified
SOC 2
Not verified
GDPR
No public badge
PCI DSS
No public badge
Compliance Summary
Topology
100%
Compliance Rate
0/4 Standards Verified
UKG
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Topology in 2025.

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for UKG in 2025.

Incident History — Topology (X = Date, Y = Severity)

Topology cyber incidents detection timeline including parent company and subsidiaries

Incident History — UKG (X = Date, Y = Severity)

UKG cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/topology-eyewear.jpeg
Topology
Incidents

No Incident

https://images.rankiteo.com/companyimages/ukg.jpeg
UKG
Incidents

Date Detected: 6/2023
Type:Breach
Blog: Blog

Date Detected: 12/2021
Type:Ransomware
Blog: Blog

FAQ

Topology company company demonstrates a stronger AI risk posture compared to UKG company company, reflecting its advanced AI governance and monitoring frameworks.

UKG company has historically faced a number of disclosed cyber incidents, whereas Topology company has not reported any.

In the current year, UKG company and Topology company have not reported any cyber incidents.

UKG company has confirmed experiencing a ransomware attack, while Topology company has not reported such incidents publicly.

UKG company has disclosed at least one data breach, while Topology company has not reported such incidents publicly.

Neither UKG company nor Topology company has reported experiencing targeted cyberattacks publicly.

Neither Topology company nor UKG company has reported experiencing or disclosing vulnerabilities publicly.

Neither Topology company nor UKG company has publicly disclosed detailed information about the number of their subsidiaries.

UKG company employs more people globally than Topology company, reflecting its scale as a Software Development.

Latest Global CVEs (Not Company-Specific)

Description

An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.

Description

A weakness has been identified in JeecgBoot up to 3.8.2. The impacted element is an unknown function of the file /sys/role/exportXls. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A security flaw has been discovered in JeecgBoot up to 3.8.2. The affected element is an unknown function of the file /sys/user/exportXls of the component Filter Handler. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in JeecgBoot up to 3.8.2. Impacted is an unknown function of the file /sys/tenant/deleteBatch. The manipulation of the argument ids leads to improper authorization. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was determined in JeecgBoot up to 3.8.2. This issue affects some unknown processing of the file /api/getDepartUserList. Executing manipulation of the argument departId can lead to improper authorization. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X