ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

Since 1986, University Loft Company has been a leader in contract furniture serving more than 1200 higher education customers, both on-campus and off with partnerships with developers across the country. Throughout the world, our armed forces rely on our GSA division to meet their furnishing needs. ULoft also provides premium cabinets through its building materials division. Our passion is elevating people through quality products, whether our custom-made upholstery, industry-leading solid wood lines, to innovative products that offer maximum value featuring laminate, metal, or other materials that bring style, durability, and affordability together. Visit our warehouse and world headquarters in Greenfield, Indiana, or see how our upholstery — sofas, loveseats, and lounge chairs are made-to-order in our manufacturing plant in Tennessee.

University Loft Co. A.I CyberSecurity Scoring

ULC

Company Details

Linkedin ID:

university-loft-co-

Employees number:

95

Number of followers:

2,051

NAICS:

337

Industry Type:

Furniture and Home Furnishings Manufacturing

Homepage:

uloft.com

IP Addresses:

0

Company ID:

UNI_1278835

Scan Status:

In-progress

AI scoreULC Risk Score (AI oriented)

Between 750 and 799

https://images.rankiteo.com/companyimages/university-loft-co-.jpeg
ULC Furniture and Home Furnishings Manufacturing
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreULC Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/university-loft-co-.jpeg
ULC Furniture and Home Furnishings Manufacturing
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

ULC Company CyberSecurity News & History

Past Incidents
0
Attack Types
0
No data available
Ailogo

ULC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for ULC

Incidents vs Furniture and Home Furnishings Manufacturing Industry Average (This Year)

No incidents recorded for University Loft Co. in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for University Loft Co. in 2025.

Incident Types ULC vs Furniture and Home Furnishings Manufacturing Industry Avg (This Year)

No incidents recorded for University Loft Co. in 2025.

Incident History — ULC (X = Date, Y = Severity)

ULC cyber incidents detection timeline including parent company and subsidiaries

ULC Company Subsidiaries

SubsidiaryImage

Since 1986, University Loft Company has been a leader in contract furniture serving more than 1200 higher education customers, both on-campus and off with partnerships with developers across the country. Throughout the world, our armed forces rely on our GSA division to meet their furnishing needs. ULoft also provides premium cabinets through its building materials division. Our passion is elevating people through quality products, whether our custom-made upholstery, industry-leading solid wood lines, to innovative products that offer maximum value featuring laminate, metal, or other materials that bring style, durability, and affordability together. Visit our warehouse and world headquarters in Greenfield, Indiana, or see how our upholstery — sofas, loveseats, and lounge chairs are made-to-order in our manufacturing plant in Tennessee.

Loading...
similarCompanies

ULC Similar Companies

Hypnos Beds

Hypnos is proud to be the first Carbon Neutral bedmaker in the world, and to have been carbon neutral since 2011. We have received the prestigious Queen’s Award for Enterprise for International Trade and also for Sustainable Development. Hypnos handcrafts sustainably-designed beds and mattresses, us

SEABOARD BEDDING AND FURNITURE LLC

Seaboard Mattress and Furniture Myrtle Beach, SC has a wide selection of furniture and mattresses at prices far below retail! Buy Furniture and Mattress sets factory direct and save up to 80% off retail prices. With Seaboard Furniture and Mattress, you have exclusive access to brand-name manufacture

Moret

Moret. A mix of culture, experience, interaction among various professionals, high technology and modern entrepreneurship. With locations in Vicenza and Milan, Moret is founded on the deep knowledge of aesthetic quality and materials gained by the Pashamoglu family over more than thirty-five years

Sleep Train

Sleep Train was founded in 1985 and is ranked the #1 mattress retailer on the West Coast. Sleep Train has nearly locations that span the West Coast and more than 1,500 employees. Sleep Train offers its employees one of the most robust training programs in the industry, comprehensive benefits, p

Monarch Specialties Inc

Over 50 years in business based in Quebec, Canada. MONARCH SPECIALTIES is a leader in the Furniture and Home Décor market. We are focused on developing innovative and exciting products. We have invested in the latest technology and systems which allows us to grow as a company and develop the most

Furniture Mart USA

Furniture Mart USA is a proud, family-owned furniture retail operation. Founded in 1976 by William A. Hinks, we have grown from a single location in Sioux Falls, SD to number 50 on the list of America’s Top 100 Furniture retailers, with 50+ retail store locations within the upper Midwest, spanning a

newsone

ULC CyberSecurity News

November 28, 2025 11:03 AM
Gartner: How CIOs Can Craft Business-Driven Cybersecurity Narratives

By Apoorva Chhabra. CIOs often struggle to convey the true value of cybersecurity to their organizations and secure buy-in from C-suite...

November 28, 2025 11:00 AM
Microsoft blocks Entra, AI scam legislation, ASUS patches AiCloud

Microsoft to block unauthorized scripts in Entra ID logins, new legislation targets scammers that use AI, ASUS patches AiCloud...

November 28, 2025 10:55 AM
GSMA grapples with the thorny issue of cybersecurity rules

Mobile operators are so overwhelmed by fragmented cybersecurity rules that they are actually at greater risk of being hacked.

November 28, 2025 10:52 AM
White Pearl Technology Group AB Announces Integrated Growth in Cybersecurity, Smart Infrastructure and Agri-Tech with New Projects Secured Across Africa

White Pearl Technology Group AB announced the successful integration of recent acquisitions in smart infrastructure, the establishment of a...

November 28, 2025 10:47 AM
Nasscom Foundation, IBM To Train 87,000 Youth In AI, Cybersecurity And Digital Skills

The programme will be delivered across India through a hybrid model, combining direct engagement with universities and collaboration with...

November 28, 2025 10:43 AM
5Tattva Recognized Among ‘Top 100 Channel Accelerators – Cybersecurity’ at the ‘Channel Accelerator Awards’ 2025

~Reaffirms Its Leadership as a CERT-In Empanelled Cybersecurity Partner for India's Digital Future~. New Delhi, India – November 28,...

November 28, 2025 10:37 AM
AI-First Cybersecurity: A Biotech CISO's Measured Approach

AI is transforming cybersecurity workflows, from threat modeling to vulnerability prioritization, said Bill Chen, CISO at Natera, underlining the need for...

November 28, 2025 10:35 AM
Cyviz Partners with IBM to Enhance Cybersecurity Training

An update from Cyviz AS ( ($DE:8P9) ) is now available. Cyviz AS has entered into a new partner contract with IBM to modernize and upgrade...

November 28, 2025 10:29 AM
RNTrust announces GCC Cybersecurity Virtual Summit

Dubai, UAE : RNTrust Group announces a high-level GCC Cybersecurity Summit taking place in Dubai on Wednesday, December 10, 2025.

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

ULC CyberSecurity History Information

Official Website of University Loft Co.

The official website of University Loft Co. is http://www.uloft.com.

University Loft Co.’s AI-Generated Cybersecurity Score

According to Rankiteo, University Loft Co.’s AI-generated cybersecurity score is 755, reflecting their Fair security posture.

How many security badges does University Loft Co.’ have ?

According to Rankiteo, University Loft Co. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does University Loft Co. have SOC 2 Type 1 certification ?

According to Rankiteo, University Loft Co. is not certified under SOC 2 Type 1.

Does University Loft Co. have SOC 2 Type 2 certification ?

According to Rankiteo, University Loft Co. does not hold a SOC 2 Type 2 certification.

Does University Loft Co. comply with GDPR ?

According to Rankiteo, University Loft Co. is not listed as GDPR compliant.

Does University Loft Co. have PCI DSS certification ?

According to Rankiteo, University Loft Co. does not currently maintain PCI DSS compliance.

Does University Loft Co. comply with HIPAA ?

According to Rankiteo, University Loft Co. is not compliant with HIPAA regulations.

Does University Loft Co. have ISO 27001 certification ?

According to Rankiteo,University Loft Co. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of University Loft Co.

University Loft Co. operates primarily in the Furniture and Home Furnishings Manufacturing industry.

Number of Employees at University Loft Co.

University Loft Co. employs approximately 95 people worldwide.

Subsidiaries Owned by University Loft Co.

University Loft Co. presently has no subsidiaries across any sectors.

University Loft Co.’s LinkedIn Followers

University Loft Co.’s official LinkedIn profile has approximately 2,051 followers.

NAICS Classification of University Loft Co.

University Loft Co. is classified under the NAICS code 337, which corresponds to Furniture and Related Product Manufacturing.

University Loft Co.’s Presence on Crunchbase

No, University Loft Co. does not have a profile on Crunchbase.

University Loft Co.’s Presence on LinkedIn

Yes, University Loft Co. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/university-loft-co-.

Cybersecurity Incidents Involving University Loft Co.

As of November 28, 2025, Rankiteo reports that University Loft Co. has not experienced any cybersecurity incidents.

Number of Peer and Competitor Companies

University Loft Co. has an estimated 2,617 peer or competitor companies worldwide.

University Loft Co. CyberSecurity History Information

How many cyber incidents has University Loft Co. faced ?

Total Incidents: According to Rankiteo, University Loft Co. has faced 0 incidents in the past.

What types of cybersecurity incidents have occurred at University Loft Co. ?

Incident Types: The types of cybersecurity incidents that have occurred include .

Incident Details

What are the most common types of attacks the company has faced ?

Additional Questions

cve

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=university-loft-co-' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge