Comparison Overview

Shimao Group

VS

Compass

Shimao Group

None
Last Update: 2026-04-02
View Profile
Between 750 and 799
https://www.shimaogroup.com

Shimao Group has entered the real estate industry since 1989, After more than 30 years of development, the Group has made its layout in more than 100 core development cities across China, involving real estate, commercial, property management, hotel, theme entertainment and culture. Following the national strategy, Shimao continuously provides customers with high-level quality experience in living, life, consumption, business and tourism, leading the lifestyle and serving a better life.

NAICS: None
NAICS Definition: Others
Employees: 15
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
View Profile

Compass

110 Fifth Avenue, New York, 10011, US
Last Update: 2026-04-01
Between 750 and 799
http://www.compass.com/careers

Compass is a real estate technology company with a powerful end-to-end platform that supports the entire buying and selling workflow. We deliver an incomparable experience to both agents and their clients all in service of the Compass mission: to help everyone find their place in the world. Founded in 2012 by Ori Allon and Robert Reffkin, Compass operates in 22+ regions across the United States including New York, Los Angeles and Orange County, Chicago, San Francisco, Boston, Washington D.C., South Florida, The Hamptons, Santa Barbara & Montecito, San Diego, Seattle & Eastside, Philadelphia, Connecticut, Westchester, Aspen, Boulder, Denver, Atlanta, Austin & Central Texas, Dallas-Fort Worth, Houston, Nashville, and Lake Tahoe. Learn more and find your place at www.compass.com and www.compass.com/careers. Compass only reaches out to applicants from a @compass.com domain and does not prompt applicants to download software or files as part of its application process.

NAICS: None
NAICS Definition: Others
Employees: 34,114
Subsidiaries: 0
12-month incidents
0
Known data breaches
1
Attack type number
1

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/世茂房地产.jpeg
Shimao Group
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
https://images.rankiteo.com/companyimages/compassinc.jpeg
Compass
—
ISO 27001
ISO 27001 certification not verified
Not verified
—
SOC2 Type 1
SOC2 Type 1 certification not verified
Not verified
—
SOC2 Type 2
SOC2 Type 2 certification not verified
Not verified
—
GDPR
GDPR certification not verified
Not verified
—
PCI DSS
PCI DSS certification not verified
Not verified
—
HIPAA
HIPAA certification not verified
Not verified
Compliance Summary
Shimao Group
100%
Compliance Rate
0/4 Standards Verified
Compass
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Real Estate Industry Average (This Year)

No incidents recorded for Shimao Group in 2026.

Incidents vs Real Estate Industry Average (This Year)

No incidents recorded for Compass in 2026.

Incident History — Shimao Group (X = Date, Y = Severity)

Shimao Group cyber incidents detection timeline including parent company and subsidiaries

Incident History — Compass (X = Date, Y = Severity)

Compass cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/世茂房地产.jpeg
Shimao Group
Incidents

No Incident

https://images.rankiteo.com/companyimages/compassinc.jpeg
Compass
Incidents

Date Detected: 5/2019
Type:Breach
Attack Vector: Phishing
Blog: Blog

FAQ

Compass company demonstrates a stronger AI Cybersecurity Score compared to Shimao Group company, reflecting its advanced cybersecurity posture governance and monitoring frameworks.

Compass company has historically faced a number of disclosed cyber incidents, whereas Shimao Group company has not reported any.

In the current year, Compass company and Shimao Group company have not reported any cyber incidents.

Neither Compass company nor Shimao Group company has reported experiencing a ransomware attack publicly.

Compass company has disclosed at least one data breach, while Shimao Group company has not reported such incidents publicly.

Neither Compass company nor Shimao Group company has reported experiencing targeted cyberattacks publicly.

Neither Shimao Group company nor Compass company has reported experiencing or disclosing vulnerabilities publicly.

Neither Shimao Group nor Compass holds any compliance certifications.

Neither company holds any compliance certifications.

Neither Shimao Group company nor Compass company has publicly disclosed detailed information about the number of their subsidiaries.

Compass company employs more people globally than Shimao Group company, reflecting its scale as a Real Estate.

Neither Shimao Group nor Compass holds SOC 2 Type 1 certification.

Neither Shimao Group nor Compass holds SOC 2 Type 2 certification.

Neither Shimao Group nor Compass holds ISO 27001 certification.

Neither Shimao Group nor Compass holds PCI DSS certification.

Neither Shimao Group nor Compass holds HIPAA certification.

Neither Shimao Group nor Compass holds GDPR certification.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbtt_InitFont_internal in the library stb_truetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss2
Base: 5.0
Severity: LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem. Opening a crafted V7 file may lead to arbitrary code execution on the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load_link_inf. Opening a crafted V7 file may lead to information disclosure from the affected product.

Published
Date
2026-04-01
Updated
Date
2026-04-01
Risk Information
cvss3
Base: 7.8
Severity: LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss4
Base: 8.4
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References