Comparison Overview

Zoom

VS

Gainwell Technologies

Zoom

55 Almaden Blvd., 6th Floor, San Jose, CA 95113, San Jose, CA, US, 95113
Last Update: 2026-01-24
Between 750 and 799

Bring teams together, reimagine workspaces, engage new audiences, and delight your customers –– all on the Zoom AI-first work platform you know and love. 💙 Zoomies help people stay connected so they can get more done together. We set out on a mission to make video communications frictionless and secure by building the world’s best video product for the enterprise, but we didn’t stop there. With products like AI Companion, Team Chat, Contact Center, Phone, Events, Rooms, Webinar, Contact Center and more, we bring innovation to a wide variety of customers, from the conference room to the classroom, from doctor’s offices to financial institutions to government agencies, from global brands to small businesses. We do what we do because of our core value of Care: care for our community, our customers, our company, our teammates, and ourselves. Our global employees help our customers meet happier, communicate better, and create meaningful connections the world over. Zoomies are problem-solvers and self-starters, working hard to get results and moving quickly to design solutions with our customers and users in mind. Here, you'll find room to grow with opportunities to stretch your skills and advance your career in a collaborative, growth-focused environment. Learn more about careers at Zoom by visiting our careers site: https://careers.zoom.us/home

NAICS: 5415
NAICS Definition: Computer Systems Design and Related Services
Employees: 12,708
Subsidiaries: 6
12-month incidents
0
Known data breaches
0
Attack type number
1

Gainwell Technologies

United States, US
Last Update: 2026-01-25

For 50 years, our nation’s federal Medicaid program has worked to improve the health, safety and well-being of America’s most vulnerable populations: low-income families, women and children, seniors, and those with disabilities. With positive health and cost outcomes that pierce inequities and impact economies, the success of these programs is inextricably tied to the prosperity of communities, individual states and the nation as a whole. We think that demands respect and, more importantly, is deserving of a lifetime commitment from innovators who can help those who operate within and around health and human services evolve — in any market at any stage. At Gainwell Technologies, that’s our sole focus. Built across more than five decades, Gainwell has intentionally seized opportunities to advance its digitally enabled services to meet agencies, health plans and MCOs where they are on their modernization journeys and propel them into the future of public health. Our commitment to innovation, deep experience and ability to leverage insights from customers across 50 states has allowed us to expand on next-generation, cloud-enabled technologies. Today, Gainwell offers one of the most comprehensive suites of scalable services and solutions on the market — all proven to deliver cost savings, better patient outcomes and an improved provider experience. Equally important to our expanding technologies and results: We bring ideas that bring policies to life.

NAICS: 5415
NAICS Definition: Computer Systems Design and Related Services
Employees: 10,397
Subsidiaries: 0
12-month incidents
0
Known data breaches
2
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/zoom.jpeg
Zoom
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/gainwell-technologies.jpeg
Gainwell Technologies
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Zoom
100%
Compliance Rate
0/4 Standards Verified
Gainwell Technologies
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs IT Services and IT Consulting Industry Average (This Year)

No incidents recorded for Zoom in 2026.

Incidents vs IT Services and IT Consulting Industry Average (This Year)

No incidents recorded for Gainwell Technologies in 2026.

Incident History — Zoom (X = Date, Y = Severity)

Zoom cyber incidents detection timeline including parent company and subsidiaries

Incident History — Gainwell Technologies (X = Date, Y = Severity)

Gainwell Technologies cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/zoom.jpeg
Zoom
Incidents

Date Detected: 6/2025
Type:Vulnerability
Attack Vector: Buffer Overflow
Motivation: Disruption of Service
Blog: Blog

Date Detected: 2/1716
Type:Vulnerability
Attack Vector: Network
Blog: Blog
https://images.rankiteo.com/companyimages/gainwell-technologies.jpeg
Gainwell Technologies
Incidents

Date Detected: 7/2024
Type:Breach
Attack Vector: Social Engineering (Unauthorized Caller Access to Reimbursement Account)
Motivation: Unknown (Potential Financial or Data Theft)
Blog: Blog

Date Detected: 01/2021
Type:Breach
Blog: Blog

FAQ

Zoom company demonstrates a stronger AI Cybersecurity Score compared to Gainwell Technologies company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Zoom and Gainwell Technologies have experienced a similar number of publicly disclosed cyber incidents.

In the current year, Gainwell Technologies company and Zoom company have not reported any cyber incidents.

Neither Gainwell Technologies company nor Zoom company has reported experiencing a ransomware attack publicly.

Gainwell Technologies company has disclosed at least one data breach, while Zoom company has not reported such incidents publicly.

Neither Gainwell Technologies company nor Zoom company has reported experiencing targeted cyberattacks publicly.

Zoom company has disclosed at least one vulnerability, while Gainwell Technologies company has not reported such incidents publicly.

Neither Zoom nor Gainwell Technologies holds any compliance certifications.

Neither company holds any compliance certifications.

Zoom company has more subsidiaries worldwide compared to Gainwell Technologies company.

Zoom company employs more people globally than Gainwell Technologies company, reflecting its scale as a IT Services and IT Consulting.

Neither Zoom nor Gainwell Technologies holds SOC 2 Type 1 certification.

Neither Zoom nor Gainwell Technologies holds SOC 2 Type 2 certification.

Neither Zoom nor Gainwell Technologies holds ISO 27001 certification.

Neither Zoom nor Gainwell Technologies holds PCI DSS certification.

Neither Zoom nor Gainwell Technologies holds HIPAA certification.

Neither Zoom nor Gainwell Technologies holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

Typemill is a flat-file, Markdown-based CMS designed for informational documentation websites. A reflected Cross-Site Scripting (XSS) exists in the login error view template `login.twig` of versions 2.19.1 and below. The `username` value can be echoed back without proper contextual encoding when authentication fails. An attacker can execute script in the login page context. This issue has been fixed in version 2.19.2.

Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Description

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the unsafe innerHTML property to render domain search results.

Description

A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save process. This allows an unauthenticated attacker to upload arbitrary PHP code by spoofing the MIME type as an image, leading to full system compromise.

Description

A UNIX symbolic link following issue in the jailer component in Firecracker version v1.13.1 and earlier and 1.14.0 on Linux may allow a local host user with write access to the pre-created jailer directories to overwrite arbitrary host files via a symlink attack during the initialization copy at jailer startup, if the jailer is executed with root privileges. To mitigate this issue, users should upgrade to version v1.13.2 or 1.14.1 or above.

Risk Information
cvss3
Base: 6.0
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
cvss4
Base: 6.0
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28. This unauthenticated endpoint returns a list of cashier accounts, including names, email addresses, usernames, and passwords hashed using MD5. As MD5 is a broken cryptographic function, the hashes can be easily reversed using public tools, exposing user credentials in plaintext. This allows remote attackers to perform unauthorized logins and potentially gain access to sensitive POS operations or backend functions.