Understanding and managing cyber risks is critical for business success in today's digital landscape. Cyber Risk Compare empowers you with actionable insights to protect your organisation by comparing the cyber risk of your suppliers or competitors.
Our platform makes cyber risk analysis effortless. Simply search for a domain name or organisation, and we will scan and profile it for potential cybersecurity vulnerabilities. Each vulnerability is assessed for its potential impact and likelihood using the Cyber Risk Quantification process developed by Cyber Tzar. This process delivers a clear and comprehensive Cyber Risk Score to allow you to compare up to six organisations (up to many thousands in the platform itself).
We gather this data using Open Source Intelligence (OSINT), publicly available information from external-facing web applications, websites, and infrastructure, and from other external data sources on breach checks, companies' house, and security accreditation sites.
Inspired by the visionary work of Brewster Kahle and Bruce Gilliat at Alexa Internet, Cyber Security Compare builds on their legacy by providing cutting-edge tools for today’s cybersecurity challenges.
Cyber Risk Compare from Cyber Tzar: the Enterprise Supply Chain Risk Management platform.
Please note: Learn more about OSINT and Alexa Internet on Wikipedia. Links open in new tabs.
No. ▲ | Collection |
---|---|
1 | UK Premier League Football Clubs |
2 | UK Major Government Suppliers |
No. ▲ | Collection |
---|---|
1 | UK Political Parties |
2 | UK Academic Institutions |
No. ▲ | Domain | Organisation |
---|---|---|
1 | novastone.co | |
2 | pipharmaintelligence.com | Pi Pharma Intelligence |
3 | smith-wesson.com | Smith & Wesson |
4 | baylibre.com | Baylibre |
5 | idocsny.com | Integrated Document Solutions "I.D.S." |
No. ▲ | Domain | Organisation |
---|---|---|
1 | facebook.com | |
2 | youtube.com | Youtube |
3 | google.com | |
4 | twitch.tv | Twitch |
5 | reddit.com | Reddit, Inc. |
No. ▲ | Industry | Average Score |
---|---|---|
1 | Fund Raising | 999.00 |
2 | Paper & Forest Products | 880.00 |
3 | Outsourcing/Offshoring | 876.00 |
4 | Textiles | 859.50 |
5 | Publishing | 834.00 |
6 | Mechanical Or Industrial Engineering | 831.67 |
7 | Maritime | 820.00 |
8 | Government Relations | 813.00 |
9 | Newspapers | 811.33 |
10 | International Affairs | 808.00 |
No. ▲ | Industry | Average Score |
---|---|---|
1 | Dairy | 520.67 |
2 | Biotechnology | 575.20 |
3 | Packaging And Containers | 585.67 |
4 | Warehousing | 623.50 |
5 | Online Media | 629.00 |
6 | Individual & Family Services | 648.00 |
7 | Aviation & Aerospace | 677.00 |
8 | Higher Education | 684.40 |
9 | Sporting Goods | 684.50 |
10 | Utilities | 688.50 |
No. ▲ | Issue | Risk Family | Risk Group | Potential Impact Severity | Likelihood Probability | Count |
---|---|---|---|---|---|---|
1 | Timestamp Disclosure - Unix | Information Disclosure | 24 | Very Low Personal Data (Privacy) impact | Unlikely | 1,596,207 |
2 | Cross-Domain JavaScript Source File Inclusion | Cross-Site Scripting (XSS) | 13 | Medium Cyber Attack (Technical) impact | Possible | 437,148 |
3 | Absence of Anti-CSRF Tokens | Web Security | 18 | Low Cyber Attack (Technical) impact | Possible | 280,896 |
4 | Strict-Transport-Security Header Not Set | Web Security | 14 | Low Cyber Attack (Technical) impact | Likely | 184,194 |
5 | Information Disclosure - Suspicious Comments | Information Disclosure | 24 | Very Low Personal Data (Privacy) impact | Unlikely | 174,381 |
6 | X-Content-Type-Options Header Missing | Web Security | 18 | Low Cyber Attack (Technical) impact | Possible | 171,690 |
7 | Retrieved from Cache | Information Disclosure | 24 | Very Low Personal Data (Privacy) impact | Unlikely | 146,117 |
8 | Base64 Disclosure | Information Disclosure | 24 | Very Low Personal Data (Privacy) impact | Unlikely | 137,974 |
9 | Modern Web Application | Application Security | 24 | Very Low Cyber Attack (Technical) impact | Unlikely | 125,631 |
10 | Cookie No HttpOnly Flag | Cookie Security | 22 | Very Low Cyber Attack (Technical) impact | Possible | 117,850 |
No. ▲ | Issue | Risk Family | Risk Group | Potential Impact Severity | Likelihood Probability | Count |
---|---|---|---|---|---|---|
1 | Cross-Domain JavaScript Source File Inclusion | Cross-Site Scripting (XSS) | 13 | Medium Cyber Attack (Technical) impact | Possible | 437,148 |
2 | Strict-Transport-Security Header Not Set | Web Security | 14 | Low Cyber Attack (Technical) impact | Likely | 184,194 |
3 | Sub Resource Integrity Attribute Missing | Web Security | 6 | Medium Cyber Attack (Technical) impact | Very Likely | 116,249 |
4 | Content Security Policy (CSP) Header Not Set | Content Security Policy (CSP) | 14 | Low Cyber Attack (Technical) impact | Likely | 79,077 |
5 | Sub Resource Integrity Attribute Missing | Web Security | 6 | Medium Cyber Attack (Technical) impact | Very Likely | 77,402 |
6 | Insufficient Site Isolation Against Spectre Vulnerability | Web Security | 8 | High Cyber Attack (Technical) impact | Possible | 65,384 |
7 | Cross-Domain Misconfiguration | Cross-Origin Resource Sharing (CORS) | 8 | High Cyber Attack (Technical) impact | Possible | 62,189 |
8 | Server Leaks Version Information via "Server" HTTP Response Header Field | Information Disclosure | 14 | Low Personal Data (Privacy) impact | Likely | 52,104 |
9 | CSP: style-src unsafe-inline | Content Security Policy (CSP) | 13 | Medium Cyber Attack (Technical) impact | Possible | 31,244 |
10 | CSP: script-src unsafe-inline | Content Security Policy (CSP) | 13 | Medium Cyber Attack (Technical) impact | Possible | 31,061 |