Comparison Overview

Dassault Systèmes

VS

Alibaba Group

Dassault Systèmes

10, rue Marcel Dassault, Vélizy-Villacoublay, 78140, FR
Last Update: 2026-04-02
View Profile
Between 750 and 799
http://www.3ds.com/

Dassault Systèmes is a catalyst for human progress. Since 1981, the company has pioneered virtual worlds to improve real life for consumers, patients and citizens. With Dassault Systèmes’ 3DEXPERIENCE platform, 370,000 customers of all sizes, in all industries, can collaborate, imagine and create sustainable innovations that drive meaningful impact. For more information, visit: https://www.3ds.com

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 27,127
Subsidiaries: 29
12-month incidents
0
Known data breaches
0
Attack type number
1
View Profile

Alibaba Group

969 West Wen Yi Road, Hangzhou, 311121, CN
Last Update: 2026-04-01
Between 750 and 799
http://www.alibabagroup.com

🌍Alibaba Group is on a mission to make it easy to do business anywhere! Guided by our passion and imagination, we’re leading the way in AI, cloud computing and e-commerce. We aim to build the future infrastructure of commerce, and we aspire to be a good company that lasts for 102 years.

NAICS: 5112
NAICS Definition: Software Publishers
Employees: 84,600
Subsidiaries: 23
12-month incidents
2
Known data breaches
1
Attack type number
3

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/dassaultsystemes.jpeg
Dassault Systèmes
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/alibaba-group.jpeg
Alibaba Group
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Dassault Systèmes
100%
Compliance Rate
0/4 Standards Verified
Alibaba Group
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Software Development Industry Average (This Year)

No incidents recorded for Dassault Systèmes in 2026.

Incidents vs Software Development Industry Average (This Year)

Alibaba Group has 66.67% more incidents than the average of same-industry companies with at least one recorded incident.

Incident History — Dassault Systèmes (X = Date, Y = Severity)

Dassault Systèmes cyber incidents detection timeline including parent company and subsidiaries

Incident History — Alibaba Group (X = Date, Y = Severity)

Alibaba Group cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/dassaultsystemes.jpeg
Dassault Systèmes
Incidents

Date Detected: 6/2020
Type:Vulnerability
Attack Vector: Network, Malicious SOAP Requests, Base64-encoded GZIP-compressed .NET Executable
Blog: Blog
https://images.rankiteo.com/companyimages/alibaba-group.jpeg
Alibaba Group
Incidents

Date Detected: 3/2026
Type:Cyber Attack
Attack Vector: AI System Autonomy
Blog: Blog

Date Detected: 3/2026
Type:Cyber Attack
Attack Vector: Brute-force attacks, Exploiting unpatched vulnerabilities, Weak configurations
Motivation: Financial gain, Disruption
Blog: Blog

Date Detected: 09/2020
Type:Data Leak
Attack Vector: Server-based data exfiltration
Motivation: Cyber espionage
Blog: Blog

FAQ

Dassault Systèmes company demonstrates a stronger AI Cybersecurity Score compared to Alibaba Group company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Alibaba Group company has faced a higher number of disclosed cyber incidents historically compared to Dassault Systèmes company.

In the current year, Alibaba Group company has reported more cyber incidents than Dassault Systèmes company.

Neither Alibaba Group company nor Dassault Systèmes company has reported experiencing a ransomware attack publicly.

Alibaba Group company has disclosed at least one data breach, while Dassault Systèmes company has not reported such incidents publicly.

Alibaba Group company has reported targeted cyberattacks, while Dassault Systèmes company has not reported such incidents publicly.

Dassault Systèmes company has disclosed at least one vulnerability, while Alibaba Group company has not reported such incidents publicly.

Neither Dassault Systèmes nor Alibaba Group holds any compliance certifications.

Neither company holds any compliance certifications.

Dassault Systèmes company has more subsidiaries worldwide compared to Alibaba Group company.

Alibaba Group company employs more people globally than Dassault Systèmes company, reflecting its scale as a Software Development.

Neither Dassault Systèmes nor Alibaba Group holds SOC 2 Type 1 certification.

Neither Dassault Systèmes nor Alibaba Group holds SOC 2 Type 2 certification.

Neither Dassault Systèmes nor Alibaba Group holds ISO 27001 certification.

Neither Dassault Systèmes nor Alibaba Group holds PCI DSS certification.

Neither Dassault Systèmes nor Alibaba Group holds HIPAA certification.

Neither Dassault Systèmes nor Alibaba Group holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_internal in the library stb_truetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem. Opening a crafted V7 file may lead to arbitrary code execution on the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load_link_inf. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References