Comparison Overview

Liberty Mountain

VS

Velocity Outdoor

Liberty Mountain

9816 S. Jordan Gateway (500 West), Sandy, 84070, US
Last Update: 2026-04-04

Who We Are Liberty Mountain is one of the largest wholesale distributors of technical outdoor products and climbing gear in the U.S. In other words, Liberty Mountain is the one-stop-shop for “Everything For The Outdoors.” What We Do As a wholesale distributor, Liberty Mountain carries thousands of different products from over 600 different brands their catalogs. Liberty Mountain is the exclusive U.S. distributor of the following brands: Beal, Cypher, Edelweiss, Equinox, Grivel, Kong, Olicamp, Outdoor Designs, Peregrine, Singing Rock, Stram, Stubai, Trangia, Valandre, and Vaude. Since 1952, Liberty Mountain has been making outdoor gear stores profitable by reducing holding costs, keeping shelves stocked, and providing the most intuitive products on the market. Where We Are Nestled in the heart of the Rocky Mountains and reaching into the roots of the Appalachians, Liberty Mountain operates out of two major warehouses in Sandy, UT and Montoursville, PA. With these two locations, Liberty Mountain is able to offer 1-2 day ground shipping to most of the United States. How We Do It Liberty Mountain is committed to great customer service, unrivaled in-stock percentages, on-time error-free shipments, and easy-to-receive packages.

NAICS: None
NAICS Definition: Others
Employees: 80
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Velocity Outdoor

7629 Routes 5 & 20, Bloomfield, 14469, US
Last Update: 2026-03-28

Velocity Outdoor began in 1923 as Crosman Rifle Company in Rochester, New York. Bertram Fenner, the Operations Manager for Crosman Brothers Seed Company, reached an agreement with William McLean to produce pellets and an airgun based on McLean’s own patented design. Two years later, Frank Hahn purchased Crosman Rifle Company and renamed it Crosman Arms. His son, P.Y. Hahn, becomes the driving force of the company for the next fifty years. The Coleman Company, Inc. acquired Crosman in 1971 and moved Crosman’s principal manufacturing facilities to the current location in East Bloomfield, New York. In August 1990, Worldwide Sports and Recreation acquired Crosman. Shortly thereafter, Crosman acquired the Visible Impact Target Company in 1991 and the Benjamin Sheridan Corporation 1992. Benjamin has continued as a dominant U.S. manufacturer of high-end pneumatic and CO2 powered airguns. Sheridan was one of the world's foremost manufacturers of high quality paintball markers. In January, 1997, Crosman was acquired by Forrest Binkley Brown, a private investment group. During this ownership period, Crosman formed the Sheridan Paintball Division created the Game Face brand, and introduced a line of airsoft products, designed for low-impact, recreational target shooting. Crosman was acquired by The Compass Group in 2004. During this time period Crosman introduced spring piston break barrels to the U.S. market and started the CenterPoint Optics line of riflescopes. After being acquired by Pamlico in 2007, Crosman introduced a line of PCP guns under the Benjamin brand, including the evergreen consumer favorite, the Benjamin Marauder. From 2007 – 2011 was a notable period of innovation for the company, with the Challenger PCP competition rifle and a youth archery line launched in 2008, the revolutionary Nitro Piston break barrel powerplant brought out in 2010, and the first ever Big Bore airgun (the .357 caliber Benjamin Rogue) launched in 2011. Crosman was acquired by Wellspring Capital in 2011 and signed a license with the U.S. Marines for Airsoft products, proceeds of which go to MWR (Morale, Welfare, and Recreation) programs for veterans. This was another era of innovation and diversification as Crosman acquired the Remington license for airguns, including storied brands such as Remington, DPMS, Bushmaster, and Marlin. In 2016, Crosman introduced the CenterPoint line of crossbows as well as the revolutionary hybrid hunting weapon, the Benjamin Pioneer Airbow™. After the success of the above initiatives, the company was acquired for a second time by The Compass Diversified Group in 2017. Shortly thereafter, Crosman acquired the commercial business of Lasermax Inc, the premier manufacturer of laser aiming devices for firearms. In 2018, Crosman formed Velocity Outdoor and formally changed its name to do business under the new corporation. Velocity Outdoor identity better reflects the diverse portfolio of brands, highlights the company’s strengths in hunting, shooting and outdoor markets, and positions the company for future growth. Today, Velocity Outdoor is an international designer, manufacturer and marketer of Crosman and Benjamin pellet and BB rifles and pistols and ammunition, Game Face airsoft products, CenterPoint precision optics, CenterPoint crossbows, and Lasermax products. The company employs more than 300 people between the Bloomfield manufacturing facility and the Farmington, NY warehouse. Velocity Outdoor distributes and markets its products around the world.

NAICS: None
NAICS Definition: Others
Employees: 19
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/liberty-mountain.jpeg
Liberty Mountain
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/velocity-outdoor.jpeg
Velocity Outdoor
ISO 27001
ISO 27001 certification not verified
Not verified
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
GDPR
GDPR certification not verified
Not verified
PCI DSS
PCI DSS certification not verified
Not verified
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Liberty Mountain
100%
Compliance Rate
0/4 Standards Verified
Velocity Outdoor
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Sporting Goods Industry Average (This Year)

No incidents recorded for Liberty Mountain in 2026.

Incidents vs Sporting Goods Industry Average (This Year)

No incidents recorded for Velocity Outdoor in 2026.

Incident History — Liberty Mountain (X = Date, Y = Severity)

Liberty Mountain cyber incidents detection timeline including parent company and subsidiaries

Incident History — Velocity Outdoor (X = Date, Y = Severity)

Velocity Outdoor cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/liberty-mountain.jpeg
Liberty Mountain
Incidents

No Incident

https://images.rankiteo.com/companyimages/velocity-outdoor.jpeg
Velocity Outdoor
Incidents

Date Detected: 9/2022
Type:Breach
Attack Vector: Unauthorized Access
Blog: Blog

FAQ

Liberty Mountain company demonstrates a stronger AI Cybersecurity Score compared to Velocity Outdoor company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Velocity Outdoor company has historically faced a number of disclosed cyber incidents, whereas Liberty Mountain company has not reported any.

In the current year, Velocity Outdoor company and Liberty Mountain company have not reported any cyber incidents.

Neither Velocity Outdoor company nor Liberty Mountain company has reported experiencing a ransomware attack publicly.

Velocity Outdoor company has disclosed at least one data breach, while Liberty Mountain company has not reported such incidents publicly.

Neither Velocity Outdoor company nor Liberty Mountain company has reported experiencing targeted cyberattacks publicly.

Neither Liberty Mountain company nor Velocity Outdoor company has reported experiencing or disclosing vulnerabilities publicly.

Neither Liberty Mountain nor Velocity Outdoor holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Liberty Mountain company nor Velocity Outdoor company has publicly disclosed detailed information about the number of their subsidiaries.

Liberty Mountain company employs more people globally than Velocity Outdoor company, reflecting its scale as a Sporting Goods.

Neither Liberty Mountain nor Velocity Outdoor holds SOC 2 Type 1 certification.

Neither Liberty Mountain nor Velocity Outdoor holds SOC 2 Type 2 certification.

Neither Liberty Mountain nor Velocity Outdoor holds ISO 27001 certification.

Neither Liberty Mountain nor Velocity Outdoor holds PCI DSS certification.

Neither Liberty Mountain nor Velocity Outdoor holds HIPAA certification.

Neither Liberty Mountain nor Velocity Outdoor holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.3.0, two peer-facing consensus request handlers assume that the history index is always available and call blockchain.history_store.history_index().unwrap() directly. That assumption is false by construction. HistoryStoreProxy::history_index() explicitly returns None for the valid HistoryStoreProxy::WithoutIndex state. when a full node is syncing or otherwise running without the history index, a remote peer can send RequestTransactionsProof or RequestTransactionReceiptsByAddress and trigger an Option::unwrap() panic on the request path. This issue has been patched in version 1.3.0.

Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Description

PraisonAI is a multi-agent teams system. Prior to version 1.5.95, FileTools.download_file() in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream() with follow_redirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata services and internal network services. This issue has been patched in version 1.5.95.

Risk Information
cvss3
Base: 8.6
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Description

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, OAuthManager.validate_token() returns True for any token not found in its internal store, which is empty by default. Any HTTP request to the MCP server with an arbitrary Bearer token is treated as authenticated, granting full access to all registered tools and agent capabilities. This issue has been patched in version 4.5.97.

Risk Information
cvss3
Base: 9.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description

PraisonAI is a multi-agent teams system. Prior to version 4.5.97, the PraisonAI Gateway server accepts WebSocket connections at /ws and serves agent topology at /info with no authentication. Any network client can connect, enumerate registered agents, and send arbitrary messages to agents and their tool sets. This issue has been patched in version 4.5.97.

Risk Information
cvss3
Base: 9.1
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description

PraisonAI is a multi-agent teams system. Prior to version 4.5.90, MCPToolIndex.search_tools() compiles a caller-supplied string directly as a Python regular expression with no validation, sanitization, or timeout. A crafted regex causes catastrophic backtracking in the re engine, blocking the Python thread for hundreds of seconds and causing a complete service outage. This issue has been patched in version 4.5.90.

Risk Information
cvss3
Base: 6.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H