Comparison Overview

Veriff

VS

Alibaba.com

Veriff

110 Wall St, New York, US, 10005
Last Update: 2026-01-21
View Profile
Between 650 and 699
www.veriff.com

Veriff is the preferred identity verification partner for the world’s biggest and best digital companies, including pioneers in fintech, crypto, gaming and the mobility sectors. We provide advanced technology, deep insights and expertise from our foundation in digital-first Estonia and honed over decades in leading the digital identity revolution.The partner of choice for businesses who need to rapidly and effortlessly verify online users from anywhere in the world, Veriff delivers the widest possible identity document coverage. By supporting government issued IDs from more than 230 countries and territories and with our intelligent decision engine which analyzes thousands of technological and behavioral variables Veriff enables trust from the first hello. We’re a global company with hubs in Europe, the US, and LatAm. We have a robust backing and funding from investors including Accel, Alkeon, IVP, Tiger Capital and Y Combinator, we’re dedicated to helping businesses and individuals build a safer and more secure world. To learn more, visit veriff.com.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 507
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1
View Profile

Alibaba.com

699 Wang Shang Road, Hangzhou, 310052, CN
Last Update: 2026-01-17
Between 800 and 849
https://x.alibaba.com/E8P5?ck=other

The first business of Alibaba Group, Alibaba.com (www.alibaba.com) is the leading platform for global wholesale trade serving millions of buyers and suppliers around the world. Through Alibaba.com, small businesses can sell their products to companies in other countries. Sellers on Alibaba.com are typically manufacturers and distributors based in China and other manufacturing countries such as India, Pakistan, the United States and Thailand. Our Mission As part of the Alibaba Group, our mission is to make it easy to do business anywhere. We do this by giving suppliers the tools necessary to reach a global audience for their products, and by helping buyers find products and suppliers quickly and efficiently. One-Stop Sourcing Alibaba.com brings you hundreds of millions of products in over 40 different major categories, including consumer electronics, machinery and apparel. Buyers for these products are located in 190+ countries and regions, and exchange hundreds of thousands of messages with suppliers on the platform each day. Anytime, Anywhere As a platform, we continue to develop services to help businesses do more and discover new opportunities. Whether it’s sourcing from your mobile phone or contacting suppliers in their local language, turn to Alibaba.com for all your global business needs.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 28,735
Subsidiaries: 35
12-month incidents
0
Known data breaches
1
Attack type number
2

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/veriff.jpeg
Veriff
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/alibaba-com.jpeg
Alibaba.com
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Veriff
100%
Compliance Rate
0/4 Standards Verified
Alibaba.com
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Veriff in 2026.

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Alibaba.com in 2026.

Incident History — Veriff (X = Date, Y = Severity)

Veriff cyber incidents detection timeline including parent company and subsidiaries

Incident History — Alibaba.com (X = Date, Y = Severity)

Alibaba.com cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/veriff.jpeg
Veriff
Incidents

Date Detected: 12/2025
Type:Breach
Attack Vector: Third-Party Compromise
Blog: Blog
https://images.rankiteo.com/companyimages/alibaba-com.jpeg
Alibaba.com
Incidents

Date Detected: 10/2023
Type:Data Leak
Blog: Blog

Date Detected: 09/2020
Type:Data Leak
Attack Vector: Server-based data exfiltration
Motivation: Cyber espionage
Blog: Blog

Date Detected: 01/2020
Type:Data Leak
Attack Vector: Unauthenticated Elastic Search Engine Instances
Blog: Blog

FAQ

Alibaba.com company demonstrates a stronger AI Cybersecurity Score compared to Veriff company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Alibaba.com company has faced a higher number of disclosed cyber incidents historically compared to Veriff company.

In the current year, Alibaba.com company and Veriff company have not reported any cyber incidents.

Neither Alibaba.com company nor Veriff company has reported experiencing a ransomware attack publicly.

Both Alibaba.com company and Veriff company have disclosed experiencing at least one data breach.

Neither Alibaba.com company nor Veriff company has reported experiencing targeted cyberattacks publicly.

Neither Veriff company nor Alibaba.com company has reported experiencing or disclosing vulnerabilities publicly.

Neither Veriff nor Alibaba.com holds any compliance certifications.

Neither company holds any compliance certifications.

Alibaba.com company has more subsidiaries worldwide compared to Veriff company.

Alibaba.com company employs more people globally than Veriff company, reflecting its scale as a Software Development.

Neither Veriff nor Alibaba.com holds SOC 2 Type 1 certification.

Neither Veriff nor Alibaba.com holds SOC 2 Type 2 certification.

Neither Veriff nor Alibaba.com holds ISO 27001 certification.

Neither Veriff nor Alibaba.com holds PCI DSS certification.

Neither Veriff nor Alibaba.com holds HIPAA certification.

Neither Veriff nor Alibaba.com holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing an attacker with control of `--commit-hash` to execute arbitrary commands on the system running Wrangler. Root causeThe commitHash variable, derived from user input via the --commit-hash CLI argument, is interpolated directly into a shell command using template literals (e.g.,  execSync(`git show -s --format=%B ${commitHash}`)). Shell metacharacters are interpreted by the shell, enabling command execution. ImpactThis vulnerability is generally hard to exploit, as it requires --commit-hash to be attacker controlled. The vulnerability primarily affects CI/CD environments where `wrangler pages deploy` is used in automated pipelines and the --commit-hash parameter is populated from external, potentially untrusted sources. An attacker could exploit this to: * Run any shell command. * Exfiltrate environment variables. * Compromise the CI runner to install backdoors or modify build artifacts. Credits Disclosed responsibly by kny4hacker. Mitigation * Wrangler v4 users are requested to upgrade to Wrangler v4.59.1 or higher. * Wrangler v3 users are requested to upgrade to Wrangler v3.114.17 or higher. * Users on Wrangler v2 (EOL) should upgrade to a supported major version.

Published
Date
2026-01-20
Updated
Date
2026-01-20
Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Published
Date
2026-01-20
Updated
Date
2026-01-20
Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L).

Published
Date
2026-01-20
Updated
Date
2026-01-20
Risk Information
cvss3
Base: 8.1
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Published
Date
2026-01-20
Updated
Date
2026-01-20
Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References
Description

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Published
Date
2026-01-20
Updated
Date
2026-01-20
Risk Information
cvss3
Base: 8.2
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
References