Comparison Overview

Uni-President Cor. Ltd.

VS

Greene King

Uni-President Cor. Ltd.

No.131,Linhong Rd.,Shangha iHongqiao Linkong Economic Zone Changning District Shanghai, 200335, CN
Last Update: 2025-11-27

Uni-President China Holdings Limited is the second largest tea, largest milk tea ready-to-drink, and the second largest instant noodle manufacturer and supplier in China. It is the Mainland China subsidiary of Uni-President Enterprises Corporation, the largest processed food producer in Taiwan. The company represents strong market positions in tea, milk tea, juice, coffee, water, and instant noodle categories. Uni-President Enterprises Corporation is an international food conglomerate based in Tainan, Taiwan. It is the largest food production company in Taiwan, as well as Asia. Uni-President has a significant market share in dairy product, foods and snacks, and beverages markets. It is also responsible for running Starbucks, 7-Eleven, Mister Donut and Carrefour in Taiwan. In addition, Uni-President has operations in Mainland China, Thailand, Vietnam, United States, Canada, and so on.

NAICS: 722
NAICS Definition: Food Services and Drinking Places
Employees: 10,001
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Greene King

Greene King, Bury St Edmunds, undefined, IP33 1QT, GB
Last Update: 2025-11-21
Between 750 and 799

Greene King is the country’s leading pub company and brewer with c.2,600 pubs, restaurants and hotels across England, Wales and Scotland. At Greene King we are passionate about delivering our purpose to ‘pour happiness into lives’. That’s for our customers, our team, our pub partners, our suppliers and the communities in which we live, operate and serve. Founded in 1799 with offices in Bury St. Edmunds, Suffolk and Burton on Trent in Staffordshire we employ around 40,000 people across the group with three divisions: Greene King pubs, Destination Brands & Ventures, and Brewing & Brands. • Greene King pubs: Greene King pubs is our mainstream pub brand located where people and communities come together; pubs enjoyed in cities, towns and villages throughout the country with clear ambition to be “The Nation’s Most Loved Pub Brand”. Pub Partners runs our tenanted and leased pubs business and Hive Franchise pubs. • Destination Brands & Ventures: Destination Brands is a portfolio of distinct brands which includes Hungry Horse, Chef & Brewer, Farmhouse Inns and Flaming Grill that bring friends and family together, delivering great service, quality and value for money for a range of eating out and drinking occasions. Venture includes Hickory’s, Premium (Crafted Pubs & Metropolitan Pub Company) and Hotels which operate autonomously of Greene King’s managed pub brands. • Brewing & Brands covers the brewing sides of the business. Quality ales are brewed at the Westgate brewery in Bury St Edmunds and the Belhaven Brewery in Dunbar. Our industry-leading portfolio includes Greene King IPA, Old Speckled Hen, Abbot Ale, Ice Breaker and Belhaven Best and our premium beers, Level Head and Flint Eye, brewed for the modern-day drinker.

NAICS: 722
NAICS Definition: Food Services and Drinking Places
Employees: 11,417
Subsidiaries: 5
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/uni-president-cor.-ltd..jpeg
Uni-President Cor. Ltd.
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/greeneking.jpeg
Greene King
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Uni-President Cor. Ltd.
100%
Compliance Rate
0/4 Standards Verified
Greene King
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Food and Beverage Services Industry Average (This Year)

No incidents recorded for Uni-President Cor. Ltd. in 2025.

Incidents vs Food and Beverage Services Industry Average (This Year)

No incidents recorded for Greene King in 2025.

Incident History — Uni-President Cor. Ltd. (X = Date, Y = Severity)

Uni-President Cor. Ltd. cyber incidents detection timeline including parent company and subsidiaries

Incident History — Greene King (X = Date, Y = Severity)

Greene King cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/uni-president-cor.-ltd..jpeg
Uni-President Cor. Ltd.
Incidents

No Incident

https://images.rankiteo.com/companyimages/greeneking.jpeg
Greene King
Incidents

No Incident

FAQ

Uni-President Cor. Ltd. company demonstrates a stronger AI Cybersecurity Score compared to Greene King company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Greene King company has disclosed a higher number of cyber incidents compared to Uni-President Cor. Ltd. company.

In the current year, Greene King company and Uni-President Cor. Ltd. company have not reported any cyber incidents.

Neither Greene King company nor Uni-President Cor. Ltd. company has reported experiencing a ransomware attack publicly.

Neither Greene King company nor Uni-President Cor. Ltd. company has reported experiencing a data breach publicly.

Neither Greene King company nor Uni-President Cor. Ltd. company has reported experiencing targeted cyberattacks publicly.

Neither Uni-President Cor. Ltd. company nor Greene King company has reported experiencing or disclosing vulnerabilities publicly.

Neither Uni-President Cor. Ltd. nor Greene King holds any compliance certifications.

Neither company holds any compliance certifications.

Greene King company has more subsidiaries worldwide compared to Uni-President Cor. Ltd. company.

Greene King company employs more people globally than Uni-President Cor. Ltd. company, reflecting its scale as a Food and Beverage Services.

Neither Uni-President Cor. Ltd. nor Greene King holds SOC 2 Type 1 certification.

Neither Uni-President Cor. Ltd. nor Greene King holds SOC 2 Type 2 certification.

Neither Uni-President Cor. Ltd. nor Greene King holds ISO 27001 certification.

Neither Uni-President Cor. Ltd. nor Greene King holds PCI DSS certification.

Neither Uni-President Cor. Ltd. nor Greene King holds HIPAA certification.

Neither Uni-President Cor. Ltd. nor Greene King holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H