Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download

Comparison Overview

Washington National Insurance CompanyWashington National Insurance Company
VS
Progressive InsuranceProgressive Insurance
Washington National Insurance Company

Washington National Insurance Company

11825 N Pennsylvania St, Carmel, 46032, US

Last Update: 29/03/2026

View Profile
661/1000Weak

About Washington National Insurance Company At Washington National, we're dedicated to serving the needs of Americans who've worked hard and want to protect the health and well-being of themselves and their loved ones. Our supplemental health and life insurance product...

NAICS:524
NAICS Definition:Insurance Carriers and Related Activities
Employees:444
Subsidiaries:10
12-month incidents
0
Known data breaches
2
Attack type number
1
Progressive Insurance

Progressive Insurance

300 North Commons Blvd, Mayfield Village, 44143, US

Last Update: 04/04/2026

View Profile
653/1000Weak

Every journey has a beginning, and wherever you are on your career path, we want to help you along the way. At Progressive, we exist to help people move forward and live fully. We strive to create a welcoming and flexible work environment for everyone, where employees ...

NAICS:524
NAICS Definition:Insurance Carriers and Related Activities
Employees:44,203
Subsidiaries:3
12-month incidents
0
Known data breaches
2
Attack type number
1

Compliance Ranges Comparison

Based On Specific Ai Models Category
Washington National Insurance Company

Washington National Insurance Company

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA
Progressive Insurance

Progressive Insurance

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA

Benchmark & Cyber Underwriting Signals

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for Washington National Insurance Company in 2026.

Incidents

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for Progressive Insurance in 2026.

Incidents

Incident History - Washington National Insurance Company (X = Date, Y = Severity)

Washington National Insurance Company cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Incident History - Progressive Insurance (X = Date, Y = Severity)

Progressive Insurance cyber incidents detection timeline including parent company and subsidiaries.

R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...
Washington National Insurance Company

Washington National Insurance Company

Incidents
🔒 Incident : Breach
WAS433072625
🔒 Incident : Breach
WAS348072825
Progressive Insurance

Progressive Insurance

Incidents
🔒 Incident : Breach
PRO3292632101525
🔒 Incident : Breach
PRO1014090725

FAQ

Between Washington National Insurance Company company and Progressive Insurance company, which one has the best AI Cybersecurity Score ?
Between Washington National Insurance Company company and Progressive Insurance company, which one has experienced more cyber incidents in the past ?
Between Washington National Insurance Company company and Progressive Insurance company, which one has experienced more cyber incidents this year ?
Between Washington National Insurance Company company and Progressive Insurance company, which one has experienced at least one ransomware attack ?
Between Washington National Insurance Company company and Progressive Insurance company, which one has experienced at least one data breach ?
Between Washington National Insurance Company company and Progressive Insurance company, which one has experienced at least one targeted cyberattack ?
Between Washington National Insurance Company company and Progressive Insurance company, which one has experienced at least one vulnerability ?
Between Washington National Insurance Company company and Progressive Insurance company, which one holds the most compliance certifications ?
Between Washington National Insurance Company company and Progressive Insurance company, which one holds the fewest compliance certifications ?
Between Washington National Insurance Company company and Progressive Insurance company, which one has the most subsidiaries ?
Between Washington National Insurance Company company and Progressive Insurance company, which one has the largest number of employees ?
Between Washington National Insurance Company and Progressive Insurance, which company holds both SOC 2 Type 1 certifications ?
Between Washington National Insurance Company and Progressive Insurance, which company holds both SOC 2 Type 2 certifications ?
Which company is ISO 27001 certified - Washington National Insurance Company or Progressive Insurance ?
Which company is PCI DSS compliant - Washington National Insurance Company or Progressive Insurance ?
Between Washington National Insurance Company and Progressive Insurance, which company complies with HIPAA regulations for healthcare data ?
Between Washington National Insurance Company and Progressive Insurance, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-66064
SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection and block-list checks. This issue is fixed in version 2.1.5.

PUBLISHED
Date2026-07-28
UPDATED
Date2026-07-28
RISK INFORMATION (Score: 5.3)
CVSS3
Base Score: 5.3
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
IMPACT SCORE
1.4
EXPLOITABILITY
3.9
CVE-2026-66063
SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5.

PUBLISHED
Date2026-07-28
UPDATED
Date2026-07-28
RISK INFORMATION (Score: 6.5)
CVSS3
Base Score: 6.5
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
IMPACT SCORE
2.5
EXPLOITABILITY
3.9
CVE-2026-64863
SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4.

PUBLISHED
Date2026-07-28
UPDATED
Date2026-07-28
RISK INFORMATION (Score: 9.1)
CVSS3
Base Score: 9.1
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
IMPACT SCORE
5.2
EXPLOITABILITY
3.9
CVE-2026-62325
SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allowed unauthenticated file access. This issue is fixed in version 2.1.4.

PUBLISHED
Date2026-07-28
UPDATED
Date2026-07-28
RISK INFORMATION (Score: 9.1)
CVSS3
Base Score: 9.1
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
IMPACT SCORE
5.2
EXPLOITABILITY
3.9
CVE-2026-59921
SUMMARY

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without validating or sanitizing CRLF characters (\r\n). Since MIME headers are delimited by CRLF, an attacker who controls the filename can inject arbitrary MIME headers into the multipart body part. The root cause is that neither the encoder nor the FileUpload implementations' setFilename() methods, which only check for null, neutralize CRLF characters before the filename is embedded into the header. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.

PUBLISHED
Date2026-07-28
UPDATED
Date2026-07-28
RISK INFORMATION (Score: 5.7)
CVSS3
Base Score: 5.7
Complexity: LOW
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
IMPACT SCORE
3.6
EXPLOITABILITY
2.1