Comparison Overview

Q: Between Vedanta Group company and Grendene S/A company, which one has the best AI Cybersecurity Score ?

Vedanta Group company demonstrates a stronger AI Cybersecurity Score compared to Grendene S/A company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Q: Between Vedanta Group company and Grendene S/A company, which one has experienced more cyber incidents in the past ?

Historically, Grendene S/A company has disclosed a higher number of cyber incidents compared to Vedanta Group company.

Q: Between Vedanta Group company and Grendene S/A company, which one has experienced more cyber incidents this year ?

In the current year, Grendene S/A company and Vedanta Group company have not reported any cyber incidents.

Q: Between Vedanta Group company and Grendene S/A company, which one has experienced at least one ransomware attack ?

Neither Grendene S/A company nor Vedanta Group company has reported experiencing a ransomware attack publicly.

Q: Between Vedanta Group company and Grendene S/A company, which one has experienced at least one data breach ?

Neither Grendene S/A company nor Vedanta Group company has reported experiencing a data breach publicly.

Q: Between Vedanta Group company and Grendene S/A company, which one has experienced at least one targeted cyberattack ?

Neither Grendene S/A company nor Vedanta Group company has reported experiencing targeted cyberattacks publicly.

Q: Between Vedanta Group company and Grendene S/A company, which one has experienced at least one vulnerability ?

Neither Vedanta Group company nor Grendene S/A company has reported experiencing or disclosing vulnerabilities publicly.

Q: Between Vedanta Group company and Grendene S/A company, which one holds the most compliance certifications ?

Neither Vedanta Group nor Grendene S/A holds any compliance certifications.

Q: Between Vedanta Group company and Grendene S/A company, which one has the most subsidiaries ?

Vedanta Group company has more subsidiaries worldwide compared to Grendene S/A company.

Vedanta Group

Vedanta Resources, London, GB

Last Update: 2025-12-07

View Profile

Between 750 and 799

http://www.vedantalimited.com

We operate on the belief that our people are our core assets and we consistently endeavour towards developing their potential to be our future leaders and key employees. We currently operate in India, South Africa, Liberia and Namibia, through our various subsidiaries. We seek to attract talent especially in mining, metallurgy, geology, smelting and sustainability for our worldwide operations. Empowerment of the community requires a synergic satisfaction of human needs and our view is that a shared destiny approach will benefit the community and boost economic prosperity. With a business model of growth, constant value creation and improved operations, the company's vision is focused towards sustainably satisfying the needs of all our stakeholders by engaging the community we operate in. We have adopted a positive attitude to make our Sustainable Development initiatives successful for all.

NAICS: 30

NAICS Definition: Manufacturing

Employees: 18,470

Subsidiaries: 3

12-month incidents

0

Known data breaches

0

Attack type number

0

View Profile

Grendene S/A

Av. Pedro Grendene, 131. Bairro Volta Grande, Farroupilha, Rio Grande do Sul, 95180-000, BR

Last Update: 2025-12-09

Between 750 and 799

https://www.grendene.com.br/

Se você deseja construir uma carreira em uma das maiores empresas do Brasil, a Grendene é o seu lugar. Se você quer estar em uma empresa diferente, com criatividade brasileira, tecnologia global e inovação constante, faça parte da nossa equipe. Se você busca desenvolvimento profissional, onde o ambiente diferenciado - ágil e transparente - proporciona desafios constantes, venha para cá! Se você é como a gente, que transforma oportunidades em resultados, trilhe os seus próximos passos profissionais com as nossas marcas! ..................................................................................................................................................................................................... Quem somos Somos umas das maiores fabricantes de calçados do mundo. A nossa primeira unidade fabril foi fundada no município de Farroupilha (RS), em 1971. Atualmente, contamos também com três unidades no Ceará (Fortaleza, Sobral e Crato) e uma unidade na Bahia (Teixeira de Freitas); além das Galerias Melissa (São Paulo, Nova Iorque e Londres) e da Casa Ipanema (Rio de Janeiro). Com mais de 20 mil funcionários, o nosso portfólio contempla marcas como Melissa, Rider, Grendha, Ipanema, Zaxy, Cartago e Grendene Kids, além de vários licenciamentos. Nossas marcas estão presentes em mais de 90 países, em todos os continentes, o que nos possibilita ser a maior exportadora de calçados do Brasil - posição que ocupamos há mais de dez anos.

NAICS: 30

NAICS Definition: Manufacturing

Employees: 10,515

Subsidiaries: 0

12-month incidents

0

Known data breaches

0

Attack type number

0

Vedanta Group

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

Grendene S/A

—

ISO 27001

Not verified

—

SOC2 Type 1

Not verified

—

SOC2 Type 2

Not verified

—

GDPR

Not verified

—

PCI DSS

Not verified

—

HIPAA

Not verified

Incidents vs Manufacturing Industry Average (This Year)

No incidents recorded for Vedanta Group in 2025.

Incidents vs Manufacturing Industry Average (This Year)

No incidents recorded for Grendene S/A in 2025.

Incident History — Vedanta Group (X = Date, Y = Severity)

Vedanta Group cyber incidents detection timeline including parent company and subsidiaries

Incident History — Grendene S/A (X = Date, Y = Severity)

Grendene S/A cyber incidents detection timeline including parent company and subsidiaries

Vedanta Group

Incidents

No Incident

Grendene S/A

Incidents

No Incident

Vedanta Group company demonstrates a stronger AI Cybersecurity Score compared to Grendene S/A company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Grendene S/A company has disclosed a higher number of cyber incidents compared to Vedanta Group company.

In the current year, Grendene S/A company and Vedanta Group company have not reported any cyber incidents.

Neither Grendene S/A company nor Vedanta Group company has reported experiencing a ransomware attack publicly.

Neither Grendene S/A company nor Vedanta Group company has reported experiencing a data breach publicly.

Neither Grendene S/A company nor Vedanta Group company has reported experiencing targeted cyberattacks publicly.

Neither Vedanta Group company nor Grendene S/A company has reported experiencing or disclosing vulnerabilities publicly.

Neither Vedanta Group nor Grendene S/A holds any compliance certifications.

Neither company holds any compliance certifications.

Vedanta Group company has more subsidiaries worldwide compared to Grendene S/A company.

Vedanta Group company employs more people globally than Grendene S/A company, reflecting its scale as a Manufacturing.

Neither Vedanta Group nor Grendene S/A holds SOC 2 Type 1 certification.

Neither Vedanta Group nor Grendene S/A holds SOC 2 Type 2 certification.

Neither Vedanta Group nor Grendene S/A holds ISO 27001 certification.

Neither Vedanta Group nor Grendene S/A holds PCI DSS certification.

Neither Vedanta Group nor Grendene S/A holds HIPAA certification.

Neither Vedanta Group nor Grendene S/A holds GDPR certification.

Description

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON parsing errors; SyntaxError from express.json() includes user input in the error message, which gets reflected in responses. User input (including HTML/JavaScript) can be exposed in error responses, creating an XSS risk if Content-Type isn't strictly enforced. This issue does not have a fix at the time of publication.

Published

Date

2025-12-11

Updated

Date

2025-12-11

Risk Information

cvss4

Base: 5.3

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

https://github.com/danny-avila/LibreChat/security/advisories/GHSA-q6c5-gvj5-c264

Description

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when creating prompts, JSON requests are sent to define and modify the prompts via PATCH endpoint for prompt groups (/api/prompts/groups/:groupId). However, the request bodies are not sufficiently validated for proper input, enabling users to modify prompts in a way that was not intended as part of the front end system. The patchPromptGroup function passes req.body directly to updatePromptGroup() without filtering sensitive fields. This issue is fixed in version 0.8.1.

Published

Date

2025-12-11

Updated

Date

2025-12-11

Risk Information

cvss4

Base: 5.3

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when a user posts a question, the iconURL parameter of the POST request can be modified by an attacker. The malicious code is then stored in the chat which can then be shared to other users. When sharing chats with a potentially malicious “tracker”, resources loaded can lead to loss of privacy for users who view the chat link that is sent to them. This issue is fixed in version 0.8.1.

Published

Date

2025-12-11

Updated

Date

2025-12-11

Risk Information

cvss4

Base: 8.6

Severity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

Description

MaxKB is an open-source AI assistant for enterprise. Versions 2.3.1 and below have improper file permissions which allow attackers to overwrite the built-in dynamic linker and other critical files, potentially resulting in privilege escalation. This issue is fixed in version 2.4.0.

Published

Date

2025-12-11

Updated

Date

2025-12-11

Risk Information

cvss3

Base: 8.8

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Description

MaxKB is an open-source AI assistant for enterprise. In versions 2.3.1 and below, the tool module allows an attacker to escape the sandbox environment and escalate privileges under certain concurrent conditions. This issue is fixed in version 2.4.0.

Published

Date

2025-12-11

Updated

Date

2025-12-11

Risk Information

cvss3

Base: 8.8

Severity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Vedanta Group

VS

Grendene S/A

Vedanta Group

Grendene S/A

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs Manufacturing Industry Average (This Year)

Incidents vs Manufacturing Industry Average (This Year)

Incident History — Vedanta Group (X = Date, Y = Severity)

Incident History — Grendene S/A (X = Date, Y = Severity)

Notable Incidents

No Incident

No Incident

FAQ

Latest Global CVEs (Not Company-Specific)

CVE-2025-66452

Risk Information

CVE-2025-66451

Risk Information

CVE-2025-66450

Risk Information

CVE-2025-66446

Risk Information

CVE-2025-66419

Risk Information

Badge your company to reduce your risk score and your cyber insurance costs!

Comparison Overview

Vedanta Group

VS

Grendene S/A

Vedanta Group

Grendene S/A

Compliance Badges Comparison

Benchmark & Cyber Underwriting Signals

Incidents vs Manufacturing Industry Average (This Year)

Incidents vs Manufacturing Industry Average (This Year)

Incident History — Vedanta Group (X = Date, Y = Severity)

Incident History — Grendene S/A (X = Date, Y = Severity)

Notable Incidents

No Incident

No Incident

FAQ

Between Vedanta Group company and Grendene S/A company, which one has the best AI Cybersecurity Score ?

Between Vedanta Group company and Grendene S/A company, which one has experienced more cyber incidents in the past ?

Between Vedanta Group company and Grendene S/A company, which one has experienced more cyber incidents this year ?

Between Vedanta Group company and Grendene S/A company, which one has experienced at least one ransomware attack ?

Between Vedanta Group company and Grendene S/A company, which one has experienced at least one data breach ?

Between Vedanta Group company and Grendene S/A company, which one has experienced at least one targeted cyberattack ?

Between Vedanta Group company and Grendene S/A company, which one has experienced at least one vulnerability ?

Between Vedanta Group company and Grendene S/A company, which one holds the most compliance certifications ?

Between Vedanta Group company and Grendene S/A company, which one holds the fewest compliance certifications ?

Between Vedanta Group company and Grendene S/A company, which one has the most subsidiaries ?

Between Vedanta Group company and Grendene S/A company, which one has the largest number of employees ?

Between Vedanta Group and Grendene S/A, which company holds both SOC 2 Type 1 certifications ?

Between Vedanta Group and Grendene S/A, which company holds both SOC 2 Type 2 certifications ?

Which company is ISO 27001 certified — Vedanta Group or Grendene S/A ?

Which company is PCI DSS compliant — Vedanta Group or Grendene S/A ?

Between Vedanta Group and Grendene S/A, which company complies with HIPAA regulations for healthcare data ?

Between Vedanta Group and Grendene S/A, which company complies with GDPR requirements ?

Latest Global CVEs (Not Company-Specific)

CVE-2025-66452

Risk Information

CVE-2025-66451

Risk Information

CVE-2025-66450

Risk Information

CVE-2025-66446

Risk Information

CVE-2025-66419

Risk Information