Comparison Overview

XS Lighting & Sound

VS

Straz Center for the Performing Arts

XS Lighting & Sound

1632 Broadway Blvd, Kansas City, MO, 64108, US
Last Update: 2025-12-09
Between 750 and 799

XS Lighting & Sound is a multifaceted sales, design, installation, rental and production company located in downtown Kansas City, Missouri that specializes in the creation of high-impact, lighting, visualization and auralization. Since 1981, XS has been creating visual solutions and integration that employ a wide range of media—from effect and architectural lighting to themed events involving conception and execution of the entire project, as well as complete audio systems design and integration.

NAICS: 711
NAICS Definition:
Employees: 6
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Straz Center for the Performing Arts

1010 N W C MacInnes Pl, None, Tampa, FL, US, 33602
Last Update: 2025-12-12
Between 750 and 799

The Straz Center began as a dream by visionary citizens of Tampa who persevered to bring to reality one of the finest performing arts centers in the nation. It is many things to many people and it’s more than just a building, more than just a performing arts center. It is a presenter, a producer, an educator, a community partner and an economic engine for the Tampa Bay area. It is a cornerstone of the Tampa Bay community. The Straz Center creates a regional economic impact of more than $100 million each year. To our local economy it can mean more tourists staying in hotels, eating in restaurants, shopping in stores and visiting other venues when they are here. At both the local and national level, it provides access to more than 700,000 people of all ages, abilities and cultures each year. It also provides jobs for artists and other professionals who have a passion for the arts and for our mission.

NAICS: 7111
NAICS Definition: Performing Arts Companies
Employees: 321
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/xs-lighting.jpeg
XS Lighting & Sound
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/strazcenter.jpeg
Straz Center for the Performing Arts
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
XS Lighting & Sound
100%
Compliance Rate
0/4 Standards Verified
Straz Center for the Performing Arts
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Performing Arts Industry Average (This Year)

No incidents recorded for XS Lighting & Sound in 2025.

Incidents vs Performing Arts Industry Average (This Year)

No incidents recorded for Straz Center for the Performing Arts in 2025.

Incident History — XS Lighting & Sound (X = Date, Y = Severity)

XS Lighting & Sound cyber incidents detection timeline including parent company and subsidiaries

Incident History — Straz Center for the Performing Arts (X = Date, Y = Severity)

Straz Center for the Performing Arts cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/xs-lighting.jpeg
XS Lighting & Sound
Incidents

No Incident

https://images.rankiteo.com/companyimages/strazcenter.jpeg
Straz Center for the Performing Arts
Incidents

No Incident

FAQ

Straz Center for the Performing Arts company demonstrates a stronger AI Cybersecurity Score compared to XS Lighting & Sound company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Historically, Straz Center for the Performing Arts company has disclosed a higher number of cyber incidents compared to XS Lighting & Sound company.

In the current year, Straz Center for the Performing Arts company and XS Lighting & Sound company have not reported any cyber incidents.

Neither Straz Center for the Performing Arts company nor XS Lighting & Sound company has reported experiencing a ransomware attack publicly.

Neither Straz Center for the Performing Arts company nor XS Lighting & Sound company has reported experiencing a data breach publicly.

Neither Straz Center for the Performing Arts company nor XS Lighting & Sound company has reported experiencing targeted cyberattacks publicly.

Neither XS Lighting & Sound company nor Straz Center for the Performing Arts company has reported experiencing or disclosing vulnerabilities publicly.

Neither XS Lighting & Sound nor Straz Center for the Performing Arts holds any compliance certifications.

Neither company holds any compliance certifications.

Neither XS Lighting & Sound company nor Straz Center for the Performing Arts company has publicly disclosed detailed information about the number of their subsidiaries.

Straz Center for the Performing Arts company employs more people globally than XS Lighting & Sound company, reflecting its scale as a Performing Arts.

Neither XS Lighting & Sound nor Straz Center for the Performing Arts holds SOC 2 Type 1 certification.

Neither XS Lighting & Sound nor Straz Center for the Performing Arts holds SOC 2 Type 2 certification.

Neither XS Lighting & Sound nor Straz Center for the Performing Arts holds ISO 27001 certification.

Neither XS Lighting & Sound nor Straz Center for the Performing Arts holds PCI DSS certification.

Neither XS Lighting & Sound nor Straz Center for the Performing Arts holds HIPAA certification.

Neither XS Lighting & Sound nor Straz Center for the Performing Arts holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

Risk Information
cvss3
Base: 8.1
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Risk Information
cvss3
Base: 2.9
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Description

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is sufficient to fix this issue. You should upgrade the affected component. The vendor confirms that this is "[f]ixed in version 4.10.2". Furthermore, that "[b]ackports for older versions in process and will be out as soon as their respective CI pipelines complete."

Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Risk Information
cvss3
Base: 4.5
Severity: HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
Description

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

Risk Information
cvss3
Base: 5.8
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N