Understanding and managing cyber risks is critical for business success in today's digital landscape. Cyber Risk Compare empowers you with actionable insights to protect your organisation by comparing the cyber risk of your suppliers or competitors.
Our platform makes cyber risk analysis effortless. Simply search for a domain name or organisation, and we will scan and profile it for potential cybersecurity vulnerabilities. Each vulnerability is assessed for its potential impact and likelihood using the Cyber Risk Quantification process developed by Cyber Tzar. This process delivers a clear and comprehensive Cyber Risk Score to allow you to compare up to six organisations (up to many thousands in the platform itself).
We gather this data using Open Source Intelligence (OSINT), publicly available information from external-facing web applications, websites, and infrastructure, and from other external data sources on breach checks, companies' house, and security accreditation sites.
Inspired by the visionary work of Brewster Kahle and Bruce Gilliat at Alexa Internet, Cyber Security Compare builds on their legacy by providing cutting-edge tools for today’s cybersecurity challenges.
Cyber Risk Compare from Cyber Tzar: the Enterprise Supply Chain Risk Management platform.
Please note: Learn more about OSINT and Alexa Internet on Wikipedia. Links open in new tabs.
No. ▲ | Collection |
---|---|
1 | UK Premier League Football Clubs |
2 | UK Major Government Suppliers |
No. ▲ | Collection |
---|---|
1 | UK Political Parties |
2 | UK Academic Institutions |
No. ▲ | Domain | Organisation |
---|---|---|
1 | fairbros.co.uk | Fairbros |
2 | dclass.co.uk | D:Class Automotive Ltd |
3 | milexia.com | |
4 | chelmsfordsafety.co.uk | Chelmsford Safety Supplies |
5 | crowdhelix.com | Crowdhelix |
No. ▲ | Domain | Organisation |
---|---|---|
1 | facebook.com | |
2 | youtube.com | Youtube |
3 | google.com | |
4 | twitch.tv | Twitch |
5 | reddit.com | Reddit, Inc. |
No. ▲ | Industry | Average Score |
---|---|---|
1 | Graphic Design | 863 |
2 | Fund Raising | 848 |
3 | Wine And Spirits | 841 |
4 | Government Relations | 838 |
5 | International Affairs | 817 |
6 | Venture Capital & Private Equity | 807 |
7 | Outsourcing/Offshoring | 802 |
8 | Museums And Institutions | 800 |
9 | Investment Banking | 799 |
10 | Facilities Services | 799 |
No. ▲ | Industry | Average Score |
---|---|---|
1 | Restaurants | 510 |
2 | Apparel & Fashion | 636 |
3 | Computer Games | 650 |
4 | Utilities | 658 |
5 | Railroad Manufacture | 670 |
6 | Arts And Crafts | 678 |
7 | Cosmetics | 682 |
8 | Textiles | 689 |
9 | Primary/Secondary Education | 691 |
10 | Maritime | 692 |
No. ▲ | Issue | Risk Family | Risk Group | Potential Impact Severity | Likelihood Probability | Count |
---|---|---|---|---|---|---|
1 | Strict-Transport-Security Header Not Set | Web Security | 14 | Low Cyber Attack (Technical) impact | Likely | 767,679 |
2 | Cross-Domain JavaScript Source File Inclusion | Cross-Site Scripting (XSS) | 13 | Medium Cyber Attack (Technical) impact | Possible | 754,131 |
3 | Timestamp Disclosure - Unix | Information Disclosure | 24 | Very Low Personal Data (Privacy) impact | Unlikely | 705,478 |
4 | Sec-Fetch-User Header is Missing | Web Security | 25 | Very Low Cyber Attack (Technical) impact | Rare/Remote | 697,240 |
5 | Base64 Disclosure | Information Disclosure | 24 | Very Low Personal Data (Privacy) impact | Unlikely | 673,569 |
6 | Retrieved from Cache | Information Disclosure | 24 | Very Low Personal Data (Privacy) impact | Unlikely | 656,109 |
7 | X-Content-Type-Options Header Missing | Web Security | 18 | Low Cyber Attack (Technical) impact | Possible | 622,238 |
8 | Storable and Cacheable Content | Web Security | 24 | Very Low Cyber Attack (Technical) impact | Unlikely | 599,435 |
9 | Sub Resource Integrity Attribute Missing | Web Security | 6 | Medium Cyber Attack (Technical) impact | Very Likely | 520,909 |
10 | Insufficient Site Isolation Against Spectre Vulnerability | Web Security | 8 | High Cyber Attack (Technical) impact | Possible | 492,428 |
No. ▲ | Issue | Risk Family | Risk Group | Potential Impact Severity | Likelihood Probability | Count |
---|---|---|---|---|---|---|
1 | Infrastructure Status: Critical | Cloud Configuration | 1 | Very High Cyber Attack (Technical) impact | Very Likely | 45 |
2 | Infrastructure Status: Emergency | Cloud Configuration | 1 | Very High Cyber Attack (Technical) impact | Very Likely | 26 |
3 | Script Served From Malicious Domain (polyfill) | Web Security | 2 | Very High Cyber Attack (Technical) impact | Likely | 350 |
4 | Script Served From Malicious Domain (polyfill) | Web Security | 2 | Very High Cyber Attack (Technical) impact | Likely | 24 |
5 | Weak Authentication Method | Authentication Security | 2 | Very High Cyber Attack (Technical) impact | Likely | 8 |
6 | PII Disclosure | Privacy | 3 | High Personal Data (Privacy) impact | Very Likely | 3,585 |
7 | Vulnerable JS Library | Vulnerable Components | 3 | High Cyber Attack (Technical) impact | Very Likely | 3,401 |
8 | PII Disclosure | Privacy | 3 | High Personal Data (Privacy) impact | Very Likely | 3,029 |
9 | Vulnerable JS Library | Vulnerable Components | 3 | High Cyber Attack (Technical) impact | Very Likely | 1,337 |
10 | Vulnerable JS Library | Vulnerable Components | 3 | High Cyber Attack (Technical) impact | Very Likely | 70 |