Comparison Overview

Zafesoft Inc.

VS

Dassault Systèmes

Zafesoft Inc.

51 E Campbell Ave, Campbell, California, 95008, US
Last Update: 2025-03-10 (UTC)
Between 900 and 1000

Excellent

Is your information secure outside your company? Can you secure, control and track your sensitive information, online and offline? Zafesoft provides the next generation of information security. It provides character level security that travels with the character, and all digital derivatives made from it. So the original and all its derivatives are secure, anywhere in the world. 'Zafed'​ information can be shared in a "view only"​ mode OR with "edit"​ policies. Screen scrape and print screen are blocked (including Snagit etc.). The solution is transparent to the end user, and easy to deploy. The secured content is never moved to any CLOUD, so it is secure, under control and tracked. It is secure in a a cloud if you place it there (Dropbox, Salesforce etc.) Unauthorized users can never access zafed content (secure from intentional or accidental loss). Information access can be revoked from ex-employees. Hospitals get full HIPAA compliance for their protected healthcare information. Manufacturing companies can secure their designs (PDF etc.) from piracy, and prevent copies from saturating the market to maximize revenue. Secure financial information can be shared and then expired as necessary. Sensitive information can be expired, when a collaboration terminates.

NAICS: 511
NAICS Definition:
Employees: 2
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Dassault Systèmes

10, rue Marcel Dassault, None, Vélizy-Villacoublay, None, FR, 78140
Last Update: 2025-09-12 (UTC)

Strong

Between 800 and 900

Dassault Systèmes is a catalyst for human progress. Since 1981, the company has pioneered virtual worlds to improve real life for consumers, patients and citizens. With Dassault Systèmes’ 3DEXPERIENCE platform, 370,000 customers of all sizes, in all industries, can collaborate, imagine and create sustainable innovations that drive meaningful impact. For more information, visit: https://www.3ds.com

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 27,261
Subsidiaries: 29
12-month incidents
1
Known data breaches
0
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/zafesoft-inc..jpeg
Zafesoft Inc.
ISO 27001
Not verified
SOC 2
Not verified
GDPR
No public badge
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/dassaultsystemes.jpeg
Dassault Systèmes
ISO 27001
Not verified
SOC 2
Not verified
GDPR
No public badge
PCI DSS
No public badge
Compliance Summary
Zafesoft Inc.
100%
Compliance Rate
0/4 Standards Verified
Dassault Systèmes
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Zafesoft Inc. in 2025.

Incidents vs Software Development Industry Average (This Year)

Dassault Systèmes has 112.77% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — Zafesoft Inc. (X = Date, Y = Severity)

Zafesoft Inc. cyber incidents detection timeline including parent company and subsidiaries

Incident History — Dassault Systèmes (X = Date, Y = Severity)

Dassault Systèmes cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/zafesoft-inc..jpeg
Zafesoft Inc.
Incidents

No Incident

https://images.rankiteo.com/companyimages/dassaultsystemes.jpeg
Dassault Systèmes
Incidents

Date Detected: 9/2025
Type:Vulnerability
Attack Vector: Network, Malicious SOAP Requests, Base64-encoded GZIP-compressed .NET Executable
Blog: Blog

FAQ

Zafesoft Inc. company company demonstrates a stronger AI risk posture compared to Dassault Systèmes company company, reflecting its advanced AI governance and monitoring frameworks.

Dassault Systèmes company has historically faced a number of disclosed cyber incidents, whereas Zafesoft Inc. company has not reported any.

In the current year, Dassault Systèmes company has reported more cyber incidents than Zafesoft Inc. company.

Neither Dassault Systèmes company nor Zafesoft Inc. company has reported experiencing a ransomware attack publicly.

Neither Dassault Systèmes company nor Zafesoft Inc. company has reported experiencing a data breach publicly.

Neither Dassault Systèmes company nor Zafesoft Inc. company has reported experiencing targeted cyberattacks publicly.

Dassault Systèmes company has disclosed at least one vulnerability, while Zafesoft Inc. company has not reported such incidents publicly.

Dassault Systèmes company has more subsidiaries worldwide compared to Zafesoft Inc. company.

Dassault Systèmes company employs more people globally than Zafesoft Inc. company, reflecting its scale as a Software Development.

Latest Global CVEs (Not Company-Specific)

Description

Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a specific URL. This issue is fixed in versions 16.34.1, 17.22.2, 18.27.2 and 19.0.0-alpha.6.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Traccar is an open source GPS tracking system. Default installs of Traccar on Windows between versions 6.1- 6.8.1 and non default installs between versions 5.8 - 6.0 are vulnerable to unauthenticated local file inclusion attacks which can lead to leakage of passwords or any file on the file system including the Traccar configuration file. Versions 5.8 - 6.0 are only vulnerable if <entry key='web.override'>./override</entry> is set in the configuration file. Versions 6.1 - 6.8.1 are vulnerable by default as the web override is enabled by default. The vulnerable code is removed in version 6.9.0.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Stalwart is a mail and collaboration server. Versions 0.13.3 and below contain an unbounded memory allocation vulnerability in the IMAP protocol parser which allows remote attackers to exhaust server memory, potentially triggering the system's out-of-memory (OOM) killer and causing a denial of service. The CommandParser implementation enforces size limits on its dynamic buffer in most parsing states, but several state handlers omit these validation checks. This issue is fixed in version 0.13.4. A workaround for this issue is to implement rate limiting and connection monitoring at the network level, however this does not provide complete protection.

Risk Information
cvss3
Base: 7.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Broken Access Control vulnerability, identified in the get_relatorios_socios.php endpoint. This vulnerability allows unauthenticated attackers to directly access sensitive personal and financial information of members without requiring authentication or authorization. This issue is fixed in version 3.5.0.

Risk Information
cvss4
Base: 8.7
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an Open Redirect vulnerability, identified in the control.php endpoint, specifically in the nextPage parameter (metodo=listarUmnomeClasse=FuncionarioControle). This vulnerability allows attackers to redirect users to arbitrary external domains, enabling phishing campaigns, malicious payload distribution, or user credential theft. This issue is fixed in version 3.5.0.

Risk Information
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X