Comparison Overview

Wyman Gordon

VS

NASA - National Aeronautics and Space Administration

Wyman Gordon

10825 Telge Rd, Houston, Texas, 77095, US
Last Update: 2025-05-06 (UTC)
View Profile
Between 750 and 799
http://www.pccforgedproducts.com/brands/wyman_gordon/

Wyman-Gordon is the premier forging company for the global aerospace and energy markets. Providing a specialized service, Wyman-Gordon manufactures forged components from high grade titanium and nickel based alloys. Such components are used for jet engines, including fan disks, compressor disks, turbine disks, and shafts. We also produce titanium and steel forgings for airframes, including wing beams, wing boxes, door and window frames, as well as nacelle and landing gear components. Wyman-Gordon also extrudes steel products for use in power plants and oil and gas industry applications. Our reputation, market position, and operational efficiency are reliant upon our demonstrated ability to continually improve. Major Markets: Aerospace, Power Generation, Oil & Gas Exploration, Medical, Automotive, Locomotive, Food Processing, Nuclear

NAICS: 3364
NAICS Definition: Aerospace Product and Parts Manufacturing
Employees: 1,019
Subsidiaries: 5
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

NASA - National Aeronautics and Space Administration

300 E Street SW, None, Washington, DC, US, 20546
Last Update: 2025-06-17 (UTC)
Between 800 and 849
http://www.nasa.gov

For more than 60 years, NASA has been breaking barriers to achieve the seemingly impossible—from walking on the Moon to pushing the boundaries of human spaceflight farther than ever before. We work in space and around the world in laboratories and wind tunnels, on airfields and in control rooms to explore some of life’s fundamental mysteries: What’s out there in space? How do we get there? And what can we learn that will make life better here on Earth? We are passionate professionals united by a common purpose: to pioneer the future in space exploration, scientific discovery and aeronautics research. Today, we continue NASA’s legacy of excellence and innovation through an unprecedented array of missions. We are developing the most advanced rockets and spacecraft ever designed, studying the Earth for answers to critical challenges facing our planet, improving the air transportation experience, and so much more. Join us as we reach for new heights and reveal the unknown for the benefit of humanity.

NAICS: 3364
NAICS Definition: Aerospace Product and Parts Manufacturing
Employees: 47,729
Subsidiaries: 8
12-month incidents
2
Known data breaches
1
Attack type number
3

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/wyman-gordon.jpeg
Wyman Gordon
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/nasa.jpeg
NASA - National Aeronautics and Space Administration
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Wyman Gordon
100%
Compliance Rate
0/4 Standards Verified
NASA - National Aeronautics and Space Administration
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Aviation and Aerospace Component Manufacturing Industry Average (This Year)

No incidents recorded for Wyman Gordon in 2025.

Incidents vs Aviation and Aerospace Component Manufacturing Industry Average (This Year)

NASA - National Aeronautics and Space Administration has 300.0% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — Wyman Gordon (X = Date, Y = Severity)

Wyman Gordon cyber incidents detection timeline including parent company and subsidiaries

Incident History — NASA - National Aeronautics and Space Administration (X = Date, Y = Severity)

NASA - National Aeronautics and Space Administration cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/wyman-gordon.jpeg
Wyman Gordon
Incidents

No Incident

https://images.rankiteo.com/companyimages/nasa.jpeg
NASA - National Aeronautics and Space Administration
Incidents

Date Detected: 6/2025
Type:Breach
Blog: Blog

Date Detected: 5/2025
Type:Vulnerability
Attack Vector: Exploitation of vulnerabilities in software
Motivation: To compromise computer systems at NASA and other institutions using the vulnerable software
Blog: Blog

Date Detected: 01/1999
Type:Cyber Attack
Attack Vector: Unauthorized Access
Blog: Blog

FAQ

NASA - National Aeronautics and Space Administration company demonstrates a stronger AI Cybersecurity Score compared to Wyman Gordon company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

NASA - National Aeronautics and Space Administration company has historically faced a number of disclosed cyber incidents, whereas Wyman Gordon company has not reported any.

In the current year, NASA - National Aeronautics and Space Administration company has reported more cyber incidents than Wyman Gordon company.

Neither NASA - National Aeronautics and Space Administration company nor Wyman Gordon company has reported experiencing a ransomware attack publicly.

NASA - National Aeronautics and Space Administration company has disclosed at least one data breach, while Wyman Gordon company has not reported such incidents publicly.

NASA - National Aeronautics and Space Administration company has reported targeted cyberattacks, while Wyman Gordon company has not reported such incidents publicly.

NASA - National Aeronautics and Space Administration company has disclosed at least one vulnerability, while Wyman Gordon company has not reported such incidents publicly.

Neither Wyman Gordon nor NASA - National Aeronautics and Space Administration holds any compliance certifications.

Neither company holds any compliance certifications.

NASA - National Aeronautics and Space Administration company has more subsidiaries worldwide compared to Wyman Gordon company.

NASA - National Aeronautics and Space Administration company employs more people globally than Wyman Gordon company, reflecting its scale as a Aviation and Aerospace Component Manufacturing.

Neither Wyman Gordon nor NASA - National Aeronautics and Space Administration holds SOC 2 Type 1 certification.

Neither Wyman Gordon nor NASA - National Aeronautics and Space Administration holds SOC 2 Type 2 certification.

Neither Wyman Gordon nor NASA - National Aeronautics and Space Administration holds ISO 27001 certification.

Neither Wyman Gordon nor NASA - National Aeronautics and Space Administration holds PCI DSS certification.

Neither Wyman Gordon nor NASA - National Aeronautics and Space Administration holds HIPAA certification.

Neither Wyman Gordon nor NASA - National Aeronautics and Space Administration holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Sakai is a Collaboration and Learning Environment. Prior to versions 23.5 and 25.0, EncryptionUtilityServiceImpl initialized an AES256TextEncryptor password (serverSecretKey) using RandomStringUtils with the default java.util.Random. java.util.Random is a non‑cryptographic PRNG and can be predicted from limited state/seed information (e.g., start time window), substantially reducing the effective search space of the generated key. An attacker who can obtain ciphertexts (e.g., exported or at‑rest strings protected by this service) and approximate the PRNG seed can feasibly reconstruct the serverSecretKey and decrypt affected data. SAK-49866 is patched in Sakai 23.5, 25.0, and trunk.

Published
Date
2025-10-22
Updated
Date
2025-10-22
Risk Information
cvss3
Base: 2.6
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
References
Description

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the content stream of a page using the LZWDecode filter. This has been fixed in pypdf version 6.1.3.

Published
Date
2025-10-22
Updated
Date
2025-10-22
Risk Information
cvss4
Base: 6.6
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in pypdf version 6.1.3.

Published
Date
2025-10-22
Updated
Date
2025-10-22
Risk Information
cvss4
Base: 6.6
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JWE zip=DEF path performs unbounded DEFLATE decompression. A very small ciphertext can expand into tens or hundreds of megabytes on decrypt, allowing an attacker who can supply decryptable tokens to exhaust memory and CPU and cause denial of service. This issue has been patched in version 1.6.5. Workarounds for this issue involve rejecting or stripping zip=DEF for inbound JWEs at the application boundary, forking and add a bounded decompression guard via decompressobj().decompress(data, MAX_SIZE)) and returning an error when output exceeds a safe limit, or enforcing strict maximum token sizes and fail fast on oversized inputs; combine with rate limiting.

Published
Date
2025-10-22
Updated
Date
2025-10-22
Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
Description

OpenBao is an open source identity-based secrets management system. Prior to version 2.4.2, OpenBao's audit log did not appropriately redact fields when relevant subsystems sent []byte response parameters rather than strings. This includes, but is not limited to sys/raw with use of encoding=base64, all data would be emitted unredacted to the audit log, and Transit, when performing a signing operation with a derived Ed25519 key, would emit public keys to the audit log. This issue has been patched in OpenBao 2.4.2.

Published
Date
2025-10-22
Updated
Date
2025-10-22
Risk Information
cvss4
Base: 5.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References