Comparison Overview

Westports Malaysia

VS

Marlow Navigation

Westports Malaysia

P.O Box 266 Pulau Indah Port Klang, Selangor 42009, MY
Last Update: 2025-11-22

Westports Malaysia is a leading port in the world supported by superior productivity and water depth of 18.5 meter. This makes us the preferred hub port for major shipping lines in this region.Our container volume has grown exponentially over the years and we are the leading terminal operator in Port Klang, controlling 76% of the market share in container volume throughput as at end of 2016. We have handled 9.95 million twenty-foot equivalent units(“TEUs”) container throughput and 11.8 million metric tonne of bulk cargo in 2016. This is a phenomenal performance considering the fact that we only started operations in September 1994. The productivity in terms of container moves per hour (“mph”) in Westports is among the highest in the world, averaging 30 – 35 mph per crane compared to the industry standard of 27 mph, therefore translating into faster turnaround for vessels that makes our port their home. We are not resting on our laurel but to continue to challenge ourselves to raise our performance bar, delivering our utmost best is the commitment that we have pledged to all our valued partners. The Container Terminal 8 (“CT8”) Phase 1 expansion was completed in mid-2016. The latest CT8 Phase 2 expansion is on schedule, and the additional 300-metre wharf facility is expected to be completed by mid-2017. By then, Westports would have taken delivery of additional Ship-To-Shore Cranes and also Rubber Tyred Gantry Cranes. Together with the added wharf facility, these additional Terminal Operating Equipment would enhance Westports’ total container handling capacity to 12.5 million TEUs per annum. Westports is truly a Malaysian Port with 4,600* workforce in the company all being Malaysian, and many are from the island where Westports Malaysia is situated, Pulau Indah.

NAICS: 483
NAICS Definition: Water Transportation
Employees: 1,001-5,000
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Marlow Navigation

Marlow Building 13 Alexandrias St Limassol, 3013, CY
Last Update: 2025-11-26

Since 1982, Marlow Navigation has grown to become a globally renowned and trusted name in commercial ship management. Today, a network of 30 fully controlled offices spanning across 14 countries, with over 1,150 shore-based staff, 15,800 crew on board vessels and 25,000 active seafarers in the employment pool, underpin the company’s success story, business sustainability, and client-focused ethos. This steadfast progress, especially amid fast-changing and challenging market conditions is surely testament to our company's service values, industry maturity, and adaptability. A complete understanding of shipowner requirements and expectations, and then making them our core responsibility is what truly allows us to provide dedicated, tailor-made and effective solutions. An important part of this is remaining totally committed to modernisation in shipping, responsive to the revolution in new technologies, environmental best practices, and via continued training and development of our people, both at sea and ashore. Over the past four decades, our scope of services has broadened to now include fully-fledged maritime management activities: • full technical ship management • crew management • crew recruitment • maritime training and safety • offshore specific project management, and • finance and administration These services are provided out of management offices located in Limassol, Hamburg, Rhoon/Rotterdam, Mumbai, Muscat and Hong Kong. Together with state-of-the-art maritime training centres and a global network of seafarer recruiting agencies.

NAICS: 483
NAICS Definition:
Employees: 10,001
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/westports-malaysia.jpeg
Westports Malaysia
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Westports Malaysia
100%
Compliance Rate
0/4 Standards Verified
Marlow Navigation
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Maritime Transportation Industry Average (This Year)

No incidents recorded for Westports Malaysia in 2025.

Incidents vs Maritime Transportation Industry Average (This Year)

No incidents recorded for Marlow Navigation in 2025.

Incident History — Westports Malaysia (X = Date, Y = Severity)

Westports Malaysia cyber incidents detection timeline including parent company and subsidiaries

Incident History — Marlow Navigation (X = Date, Y = Severity)

Marlow Navigation cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/westports-malaysia.jpeg
Westports Malaysia
Incidents

No Incident

https://images.rankiteo.com/companyimages/marlow-navigation.jpeg
Marlow Navigation
Incidents

No Incident

FAQ

Marlow Navigation company demonstrates a stronger AI Cybersecurity Score compared to Westports Malaysia company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Marlow Navigation company has disclosed a higher number of cyber incidents compared to Westports Malaysia company.

In the current year, Marlow Navigation company and Westports Malaysia company have not reported any cyber incidents.

Neither Marlow Navigation company nor Westports Malaysia company has reported experiencing a ransomware attack publicly.

Neither Marlow Navigation company nor Westports Malaysia company has reported experiencing a data breach publicly.

Neither Marlow Navigation company nor Westports Malaysia company has reported experiencing targeted cyberattacks publicly.

Neither Westports Malaysia company nor Marlow Navigation company has reported experiencing or disclosing vulnerabilities publicly.

Neither Westports Malaysia nor Marlow Navigation holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Westports Malaysia company nor Marlow Navigation company has publicly disclosed detailed information about the number of their subsidiaries.

Neither Westports Malaysia nor Marlow Navigation holds SOC 2 Type 1 certification.

Neither Westports Malaysia nor Marlow Navigation holds SOC 2 Type 2 certification.

Neither Westports Malaysia nor Marlow Navigation holds ISO 27001 certification.

Neither Westports Malaysia nor Marlow Navigation holds PCI DSS certification.

Neither Westports Malaysia nor Marlow Navigation holds HIPAA certification.

Neither Westports Malaysia nor Marlow Navigation holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.

Risk Information
cvss4
Base: 7.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.

Risk Information
cvss4
Base: 6.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H