Comparison Overview

Alibaba Group

VS

OpenText

Alibaba Group

969 West Wen Yi Road, Hangzhou, 311121, CN
Last Update: 2026-04-01
Between 750 and 799

🌍Alibaba Group is on a mission to make it easy to do business anywhere! Guided by our passion and imagination, we’re leading the way in AI, cloud computing and e-commerce. We aim to build the future infrastructure of commerce, and we aspire to be a good company that lasts for 102 years.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 84,600
Subsidiaries: 23
12-month incidents
2
Known data breaches
1
Attack type number
3

OpenText

275 Frank Tompa Drive, Waterloo, ON, CA, N2L 0A1
Last Update: 2026-04-01
Between 650 and 699

OpenText is a leading Cloud and AI company that provides organizations around the world with a comprehensive suite of Business AI, Business Clouds, and Business Technology. We help organizations grow, innovate, become more efficient and effective, and do so in a trusted and secure way—through Information Management. OpenText (NASDAQ/TSX: OTEX), founded in 1991 in Waterloo, has a rich history of helping customers manage their most important asset—information. Originating from a collaboration to digitize the Oxford English Dictionary, OpenText has grown into a global leader in information management. With over 120,000 enterprise customers across 180 countries, OpenText supports 98 of the top 100 global companies. A wide breadth of offerings uniquely positions OpenText to help customers unlock the value of that information using Al, cloud, and security innovations. At OpenText, our culture is at the heart of everything we do—and today, that includes being proudly AI-first. We’re creating a workplace where everyone can thrive, with artificial intelligence integrated into how we work, solve problems, and innovate together. By fostering a collaborative and inclusive environment, we empower digital knowledge workers and drive forward-thinking solutions that shape the future of information management. We believe our success comes from the strength of our team—talent that AI can’t replace—and we’re committed to attracting and supporting those who bring unique insight, adaptability, and creativity. Because at OpenText, people aren’t just our greatest asset—they’re the reason we shine in an AI-powered world. Join us at OpenText and become part of a team where your talents and ideas are truly valued.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 23,269
Subsidiaries: 17
12-month incidents
0
Known data breaches
1
Attack type number
2

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/alibaba-group.jpeg
Alibaba Group
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/opentext.jpeg
OpenText
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Alibaba Group
100%
Compliance Rate
0/4 Standards Verified
OpenText
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Average (This Year)

Alibaba Group has 66.67% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for OpenText in 2026.

Incident History — Alibaba Group (X = Date, Y = Severity)

Alibaba Group cyber incidents detection timeline including parent company and subsidiaries

Incident History — OpenText (X = Date, Y = Severity)

OpenText cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/alibaba-group.jpeg
Alibaba Group
Incidents

Date Detected: 3/2026
Type:Cyber Attack
Attack Vector: AI System Autonomy
Blog: Blog

Date Detected: 3/2026
Type:Cyber Attack
Attack Vector: Brute-force attacks, Exploiting unpatched vulnerabilities, Weak configurations
Motivation: Financial gain, Disruption
Blog: Blog

Date Detected: 09/2020
Type:Data Leak
Attack Vector: Server-based data exfiltration
Motivation: Cyber espionage
Blog: Blog
https://images.rankiteo.com/companyimages/opentext.jpeg
OpenText
Incidents

Date Detected: 11/2025
Type:Ransomware
Attack Vector: AI-driven phishing, deepfake (voice/video spoofing), third-party service providers, software supply chain
Motivation: financial gain (ransom payments), data theft, disruption of operations
Blog: Blog

Date Detected: 06/2016
Type:Breach
Attack Vector: Compromised Credentials
Motivation: Data Theft
Blog: Blog

FAQ

Alibaba Group company demonstrates a stronger AI Cybersecurity Score compared to OpenText company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Alibaba Group company has faced a higher number of disclosed cyber incidents historically compared to OpenText company.

In the current year, Alibaba Group company has reported more cyber incidents than OpenText company.

OpenText company has confirmed experiencing a ransomware attack, while Alibaba Group company has not reported such incidents publicly.

Both OpenText company and Alibaba Group company have disclosed experiencing at least one data breach.

Alibaba Group company has reported targeted cyberattacks, while OpenText company has not reported such incidents publicly.

Neither Alibaba Group company nor OpenText company has reported experiencing or disclosing vulnerabilities publicly.

Neither Alibaba Group nor OpenText holds any compliance certifications.

Neither company holds any compliance certifications.

Alibaba Group company has more subsidiaries worldwide compared to OpenText company.

Alibaba Group company employs more people globally than OpenText company, reflecting its scale as a Software Development.

Neither Alibaba Group nor OpenText holds SOC 2 Type 1 certification.

Neither Alibaba Group nor OpenText holds SOC 2 Type 2 certification.

Neither Alibaba Group nor OpenText holds ISO 27001 certification.

Neither Alibaba Group nor OpenText holds PCI DSS certification.

Neither Alibaba Group nor OpenText holds HIPAA certification.

Neither Alibaba Group nor OpenText holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A security flaw has been discovered in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /manage_user.php of the component Parameter Handler. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

Risk Information
cvss2
Base: 7.5
Severity: LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
cvss3
Base: 7.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 6.9
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_BitReader::SkipBits of the file Ap4Dac4Atom.cpp of the component DSI v1 Parser. Such manipulation of the argument n_presentations leads to heap-based buffer overflow. The attack needs to be performed locally. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Risk Information
cvss2
Base: 4.3
Severity: LOW
AV:L/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

A vulnerability was determined in Axiomatic Bento4 up to 1.6.0-641. This impacts the function AP4_BitReader::ReadCache of the file Ap4Dac4Atom.cpp of the component MP4 File Parser. This manipulation causes heap-based buffer overflow. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Risk Information
cvss2
Base: 4.3
Severity: LOW
AV:L/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a heap-buffer-overflow (HBO) in icAnsiToUtf8() in the XML conversion path. The issue is triggered by a crafted ICC profile which causes icAnsiToUtf8(std::string&, char const*) to treat an input buffer as a C-string and call operations that rely on strlen()/null-termination. AddressSanitizer reports an out-of-bounds READ of size 115 past a 114-byte heap allocation, with the failure observed while running the iccToXml tool. This issue has been patched in version 2.3.1.6.

Risk Information
cvss3
Base: 6.2
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is a stack-buffer-overflow (SBO) in CIccTagFixedNum<>::GetValues() and a related bug chain. The primary crash is an AddressSanitizer-reported WRITE of size 4 that overflows a 4-byte stack variable (rv) via the call chain CIccTagFixedNum::GetValues() -> CIccTagStruct::GetElemNumberValue(). This issue has been patched in version 2.3.1.6.

Risk Information
cvss3
Base: 6.2
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H