Australia security reports

T

True Grit Texture Supply

truegrittexturesupply.com

70

True Grit Texture Supply is a specialized e-commerce business offering high-quality digital brushes, textures, and effects for popular creative applications such as Procreate, Photoshop, Illustrator, Clip Studio Paint, and Affinity. The company targets digital artists and designers seeking professional-grade tools to enhance their digital artwork. The website is hosted on the Shopify platform, leveraging a mature e-commerce infrastructure with integrations for marketing, analytics, and customer reviews. The business model focuses on digital product sales with value bundles and tutorials to support customers. The company appears to be a small-sized Australian entity with a consistent brand presence and positive customer feedback.

S

Sweat

sweat.com

73

Sweat is a leading fitness app focused on empowering women through a wide range of workout programs and wellness content. The company operates a subscription-based business model and has established a strong market position with millions of users globally. Their digital infrastructure leverages modern web technologies including Svelte, Stripe for payments, and Cloudflare for hosting and security. The website demonstrates excellent design quality, mobile optimization, and SEO practices, providing a seamless user experience. Security posture is strong with HTTPS enforcement, security headers, and client transfer protection on the domain, although there is room for improvement in publishing explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent management tools. Overall, Sweat presents a professional, trustworthy, and secure online presence suitable for its target audience.

P

Plinko

plinkoaustralia.com

60

Plinko Australia is a niche affiliate website dedicated to providing comprehensive information about the Plinko gambling game targeted at Australian players. The site offers detailed game mechanics, betting strategies, demo modes, and curated lists of recommended online casinos with bonuses. It serves as an informational and promotional platform, leveraging affiliate marketing to monetize traffic. The website is relatively new, launched in 2024, and focuses on the Australian gambling market with multi-language support for other regions. Technically, the site is built with standard web technologies (HTML5, CSS, JavaScript) and uses Cloudflare for DNS and CDN services. The site is mobile-optimized and SEO-friendly with proper meta tags and structured data. However, it lacks advanced security headers and DNSSEC, which could improve its security posture. No forms are present that collect personal data directly, reducing immediate privacy risks. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks published security policies or incident response contacts. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific indicators. The site links to multiple social media platforms and trusted gambling support organizations, enhancing trustworthiness. Overall, the website presents a moderate risk profile with good business credibility but could improve privacy compliance and security best practices. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing security and incident response policies.

C

Culture Amp

culturefirst.com

74

Culture Amp is a leading technology company specializing in employee experience platforms that empower HR professionals, people leaders, and change agents to build better workplaces. Their platform offers comprehensive tools for employee engagement, performance management, development, and people analytics. The company maintains a strong market position with a large, global user base and a vibrant community including local chapters and a digital Slack community. The website reflects a professional and consistent brand image with rich content and multimedia engagement. Technically, the website leverages modern web technologies including React, Wistia for video, Google Tag Manager, Optimizely for experimentation, HubSpot for forms, and Sentry for error tracking. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses cookie consent with granular controls, and integrates error monitoring. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is noted but likely due to privacy protection, not indicative of malicious intent. Overall, Culture Amp's website demonstrates a high level of professionalism, security, and compliance, supporting its reputation as a trusted leader in the HR technology space.

C

Culture Amp Pty Ltd

cultureamp.com

75

Culture Amp Pty Ltd operates a market-leading employee experience platform designed to empower teams through performance, development, and engagement tools. The company targets HR professionals, executives, managers, and employees with a SaaS model that integrates People Science and AI to deliver actionable insights. The platform is well-positioned in the HR technology sector with a strong brand presence, industry awards, and a comprehensive suite of services including AI Coach, people analytics, and employee engagement surveys. Technically, the website leverages modern frameworks and integrations such as React, HubSpot, and Wistia, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS, security headers, and compliance with ISO 27001, SOC II, and GDPR. However, WHOIS data is unavailable, which slightly impacts domain trust assessment but is mitigated by the professional and consistent web presence. Overall, the platform demonstrates high digital maturity and business credibility.

T

Turnitin

turnitin.com.au

63

Turnitin Australia (turnitin.com.au) is a regional website of Turnitin, a leading global provider of academic integrity and plagiarism detection solutions. The site targets educational institutions and students in the Asia Pacific region, offering tools to empower original work and uphold academic standards. The business model is primarily B2B SaaS, serving schools, universities, and educators with plagiarism checking, grading, and feedback services. The website reflects a mature enterprise with consistent branding and professional content tailored to its audience. Technically, the website employs a modern technology stack including Bootstrap 4, jQuery, Google Tag Manager, and OneTrust for cookie consent, indicating a well-maintained digital infrastructure. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility enhancements could be made. Performance is moderate, suitable for enterprise-grade educational platforms. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. It uses Google reCAPTCHA to protect forms and implements a comprehensive cookie consent mechanism aligned with GDPR. However, explicit security policies and vulnerability disclosure mechanisms are not found, which could be improved to enhance transparency and incident response readiness. Overall, the domain and website appear legitimate and trustworthy, with no signs of blocking or WAF interference. The lack of WHOIS registrant details is typical for enterprise domains using privacy protection. The site scores highly on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable resource in the education technology sector.

S

Spreadshirt

spreadshirt.com.au

65

Spreadshirt.com.au is a well-established e-commerce platform specializing in custom t-shirt printing and personalized apparel. The website offers users the ability to create custom designs or shop from a marketplace of designs, targeting a broad general audience interested in personalized clothing. The business operates in the Australian market with multiple international domain variants, indicating a large-scale operation. Technically, the site employs modern JavaScript libraries, lazy loading, and cookie consent mechanisms, reflecting a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured data. Security-wise, the site enforces HTTPS and uses cookie consent tools but lacks explicit security policies or vulnerability disclosure information. The WHOIS data is privacy-protected, which is typical for commercial entities, and no suspicious patterns were detected. Overall, the website demonstrates a strong security posture and business credibility with room for improvement in publishing security policies and headers.

S

SOPREMA

soprema.com.au

59

SOPREMA is an international manufacturer specializing in innovative waterproofing, insulation, soundproofing, and vegetative solutions for the roofing, building envelope, and civil engineering sectors. The company targets construction professionals and operates primarily in the manufacturing and construction industries with a large-scale business presence in Australia and internationally. The website reflects a professional B2B business model with a focus on product documentation, warranties, and project showcases, supporting its market position as a trusted supplier. Technically, the website is built on WordPress with Elementor and uses modern JavaScript frameworks such as Vue.js and Axios for enhanced user experience. It integrates multiple analytics and marketing tools including Google Analytics, Facebook Pixel, Crazy Egg, and HubSpot, indicating a mature digital marketing infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and does not provide visible security or incident response policies. No privacy or cookie policies were found, which is a compliance gap. The WHOIS data shows a legitimate domain registration without privacy protection, consistent with a professional business. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security headers, and incident response disclosures to improve its security posture and regulatory adherence.

O

Ozwin Casino

worldofozwin.com

60

Ozwin Casino is an online gambling platform primarily targeting Australian players, offering a variety of slot games, progressive jackpots, live casino action, and promotional bonuses. The website is professionally designed with consistent branding and good content quality, focusing on engaging adult users interested in online casino gaming. Technically, the site uses Joomla CMS with Bootstrap 5 and includes modern web technologies such as WebP images and JavaScript modules. Performance and mobile optimization are good, though accessibility is basic. Security posture is moderate with HTTPS enforced and CSRF tokens present, but lacks visible security headers and explicit privacy or cookie policies. No direct contact information or incident response channels are visible, which may impact user trust and compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The site is suitable for adult audiences due to its gambling content and lacks any adult explicit material beyond gambling.

O

Ozwin Casino

ozwinnews.com

53

Ozwin Casino is an online gambling platform primarily targeting Australian users, offering a variety of slot games, jackpots, and live casino experiences. The site emphasizes generous welcome bonuses and progressive jackpots to attract and retain players. Technically, the website is built on Joomla CMS with Bootstrap framework, utilizing modern web technologies and responsive design to ensure good user experience across devices. Security-wise, the site enforces HTTPS and includes CSRF tokens but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and user trust. The WHOIS data is privacy protected, which is common in the gambling industry but reduces transparency. Overall, the site is functional and professional but would benefit from enhanced privacy disclosures and security practices.

Fair Go Casino is an Australian-focused online gambling affiliate platform operated by Deckmedia, offering a variety of casino games, promotions, and bonuses targeting Australian players. The website is designed with mobile optimization and provides multiple payment options including Bitcoin, Neosurf, and POLi. Technically, the site uses modern HTML5 and JavaScript technologies with Microsoft Clarity for analytics, hosted behind Cloudflare DNS. Security posture is moderate with HTTPS enabled but lacks DNSSEC and explicit security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Business credibility is supported by Curacao licensing and CDS certification, though direct company contact emails are not published. Overall, the site is functional and trustworthy as an affiliate platform but could improve security and privacy practices.

B

Boardroom Pty Limited

clientonline.com.au

70

Boardroom Pty Limited operates ClientOnline, a secure web portal designed for authorized users to access securities registry and employee equity plan information. The company is positioned as a trusted service provider in the Australian finance sector, offering registry maintenance and administration services. The website reflects a professional and consistent brand image with comprehensive legal and privacy documentation, targeting clients and participants in securities and equity plans. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and charting libraries such as D3.js and C3.js. The site is mobile optimized and provides a good user experience, though some accessibility and SEO improvements are possible. Security measures include HTTPS, CSRF tokens, and secure form practices, but lack of visible security headers and cookie consent mechanisms suggest room for enhancement. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is strong due to detailed policies, though cookie consent is missing. WHOIS data is limited due to privacy protection but aligns with the business's Australian identity. Overall, the site is trustworthy and professionally maintained. Strategic recommendations include implementing security headers, adding cookie consent for privacy compliance, enhancing accessibility, and maintaining up-to-date third-party libraries to strengthen security and user trust.

Boardroom Pty Limited operates EmployeeServe, a secure online portal designed for participants in employee equity plans to access and manage their holdings and personal information. The portal supports registered user login, individual investment access, and incorporates multi-factor authentication to enhance security. The company positions itself as a trusted service provider in the finance sector, primarily serving Australian and Singaporean markets. The website content is professional, well-structured, and provides comprehensive legal and privacy documentation, reflecting a mature digital presence. Technically, the website utilizes a modern tech stack including jQuery, Bootstrap, and Google Analytics, with indications of ASP.NET MVC backend technology. The site is mobile-optimized and offers a good user experience, though some accessibility and SEO enhancements could be made. Security measures such as multi-factor authentication and anti-forgery tokens are implemented, but additional HTTP security headers and explicit cookie consent mechanisms are recommended. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is strong, supported by detailed privacy policies and contact information. WHOIS data is limited due to privacy restrictions but does not raise concerns. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for its financial services context. Strategic recommendations include enhancing security headers, implementing cookie consent banners, publishing vulnerability disclosure policies, and improving accessibility compliance to further strengthen the security and compliance posture.

M

MagShop

magshop.com.au

66

MagShop is a well-established Australian e-commerce retailer specializing in magazine subscriptions, offering a wide catalog of over 300 titles including exclusive deals from Are Media, Australia's largest publisher. The website is professionally designed with good content quality and clear navigation, targeting Australian consumers interested in magazine subscriptions and related products such as books and gift vouchers. Technically, the site uses a mature technology stack including ASP.NET, jQuery, and multiple analytics and marketing tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although privacy compliance could be improved by adding a cookie consent mechanism. Overall, the business credibility is high with clear contact information, social media presence, and trust indicators such as awards and verified reviews. WHOIS data is unavailable due to AU domain privacy policies but the site’s association with Are Media and professional presentation support legitimacy.

P

Pinnacle

pinnacleinvestment.com

64

Pinnacle is a well-established global multi-affiliate investment management firm founded in 2002, focused on providing access to leading fund managers and investment products. The company positions itself as a provider of investment excellence with a significant funds under management portfolio and recognized affiliates such as Hyperion Asset Management. The website is built on WordPress with modern SEO and marketing tools, providing a professional and content-rich user experience targeted at investors, financial advisers, and institutions. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and explicit privacy and cookie policies. Overall, the site demonstrates good business credibility and technical maturity but could improve privacy compliance and security best practices.

A

Automic Group

automic.com.au

61

Automic Group is a leading Australian provider of integrated investor administration services, including share registry, company secretarial, financial advisory, and ESG consulting. The company holds a strong market position with a significant share of ASX listed clients and IPOs in 2024. Their platform is technology-driven, leveraging HubSpot CMS and modern web technologies to deliver a seamless user experience. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. WHOIS data is privacy protected but consistent with a legitimate business domain. Overall, the site demonstrates high business credibility and technical maturity.

D

Dexus

dexusplace.com

72

Dexus is a leading Australian real estate company specializing in premium commercial leasing and flexible workspace solutions under the Dexus Place brand. Their website showcases a comprehensive offering of meeting rooms, dynamic desks, virtual offices, and private suites across major Australian CBDs, targeting businesses seeking flexible and professional work environments. The company emphasizes state-of-the-art technology and exceptional service to support business growth. Technically, the website is built on Adobe Experience Manager with integrations including Microsoft Application Insights for telemetry, Google reCAPTCHA for form security, and various modern web technologies ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, form protections, and no visible vulnerabilities, though some security headers could be explicitly confirmed. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given the professional presentation and consistent branding. Overall, the website reflects a mature digital presence aligned with a large enterprise real estate business.

YourIR, operated by Iguana2 Pty. Ltd., is a specialized technology service provider offering investor relations components such as share price data, interactive charts, company announcements, and email alert services tailored for listed companies primarily in Australia and New Zealand. The company leverages over 20 years of market data experience and positions itself as a niche provider with a subscription-based business model. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting investor relations teams. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, and Highlight.js, hosted on AWS infrastructure. While the site is mobile-optimized and performs moderately well, there is room for improvement in accessibility and SEO. The use of Google Analytics indicates moderate user tracking, but no cookie consent mechanism is present, which may impact privacy compliance. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and explicit security or incident response policies. The domain registration is privacy protected but consistent with legitimate business practices, and the domain age aligns with the company's operational history. Overall, the security posture is moderate with recommendations to enhance headers, privacy compliance, and transparency. The overall risk is low to moderate, with strategic recommendations focusing on improving privacy compliance, security headers, and public security policies to enhance trust and regulatory adherence.

B

Boardroom Pty Limited

boardroomlimited.com.au

70

Boardroom Pty Limited is a leading Australian corporate services provider specializing in registry, employee plans, corporate secretarial, and payroll services. The company positions itself as a market leader serving listed and unlisted companies, investors, and employees with a comprehensive suite of corporate solutions. Their website reflects a professional and consistent brand image, targeting corporate clients primarily within Australia. The business model focuses on providing essential corporate governance and administrative services, supported by partnerships with related service platforms such as InvestorServe and EmployeeServe. Technically, the website is built on WordPress using the Divi theme framework, integrating multiple marketing and analytics tools including Google Analytics, Hotjar, Pardot, and Google Tag Manager. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Hosting and DNS are managed through Melbourne IT and NS1 respectively, indicating a stable infrastructure. From a security perspective, the site uses HTTPS and implements client-side validation on forms, but lacks explicit security headers and published security policies. There is no visible privacy or cookie policy, which presents compliance risks especially under GDPR. The WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration without privacy protection, appropriate for the business type. Overall, the website is professional and credible with moderate technical and security maturity. Strategic improvements in privacy compliance, security header implementation, and incident response transparency would enhance trust and reduce risk.

D

Dexus

dexus.com

72

Dexus is a leading Australasian real estate and infrastructure investment company with a substantial portfolio valued at $53.4 billion. The company offers diversified investment opportunities, asset and property management, leasing, and development services, targeting investors, tenants, and partners. The website reflects a mature, enterprise-level business with a strong market position and a focus on sustainability and long-term value creation. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies, analytics, and security features such as Google reCAPTCHA and Microsoft Application Insights. The security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information could be improved. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for user experience and mobile devices.

V

Vanguard

vanguard.com.au

67

Vanguard Australia operates as a financial services provider targeting corporate clients in the Asia-Pacific region, focusing on investment management and related corporate financial services. The website is built on a modern technology stack including Angular 17 and Adobe Experience Manager, indicating a mature digital infrastructure. However, the content on the provided page is minimal and lacks visible contact or policy information, which limits user engagement and transparency. Security posture appears basic with no explicit security headers or privacy compliance indicators detected, though HTTPS is presumed given the URL scheme. The domain WHOIS data is unavailable due to privacy restrictions, which is common and justified for financial institutions to protect sensitive registrant information. Overall, the website presents a professional but minimal corporate presence with room for improvement in transparency and security best practices.

M

Magellan Financial Group

magellangroup.com.au

68

Magellan Financial Group is a prominent ASX-listed investment management company specializing in global equity and infrastructure strategies. The company targets institutional investors, financial professionals, and individual investors worldwide, offering actively managed funds with a strong emphasis on long-term wealth growth. Their market position is solidified by a diversified portfolio of funds including subsidiaries such as Vinva and Airlie Funds Management. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to their audience. Technically, the site leverages modern frameworks and analytics tools, including Mura CMS, Bootstrap, Font Awesome, and Google Tag Manager, ensuring a responsive and accessible user experience. Security posture is robust with HTTPS enforced and no evident vulnerabilities, though improvements in HTTP security headers are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the domain registration is privacy protected, which is typical for financial firms, and the website demonstrates high business credibility and trustworthiness.

O

Ophir Asset Management

ophiram.com

59

Ophir Asset Management is a professional Australian investment management firm offering multiple funds including the Ophir Opportunities Fund and the ASX-listed Ophir High Conviction Fund. The company targets wholesale and sophisticated investors, family offices, institutional investors, financial advisers, and private investors. Their website is well-structured, providing comprehensive information about their funds, team, investment philosophy, and news insights. The presence of a Financial Services Guide and privacy policy indicates regulatory compliance and transparency. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Splide.js, and uses WPForms for data collection. The site is mobile-optimized and SEO-friendly, with good performance and accessibility features. Security posture is solid with HTTPS enforced and CSRF protections on forms, though security headers are missing and no cookie consent mechanism is present, which could be improved. The security evaluation shows no critical vulnerabilities or exposed sensitive data. However, the lack of a published security policy, incident response contacts, and vulnerability disclosure reduces the overall security maturity. WHOIS data is not publicly available due to auDA privacy policies, but the website's professional presentation and regulatory disclosures support legitimacy. Overall, Ophir Asset Management's website demonstrates a mature digital presence suitable for its financial services business, with room for improvement in privacy compliance and security best practices to enhance trust and regulatory adherence.

C

Clime Investment Management

clime.com.au

65

Clime Investment Management is a well-established Australian financial services company specializing in wealth management and investment solutions, managing over $1 billion in funds. The company targets advisers, individual investors, and trustees, offering managed funds, individually managed accounts, and financial planning services. Their market position is that of a trusted mid-sized investment manager with over 25 years of experience. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tools, demonstrating a moderate to good level of digital maturity. Security posture is solid with HTTPS and secure client portals, though improvements are recommended in security headers and vulnerability disclosure. Overall, the website is professional, trustworthy, and provides clear contact channels, but lacks some privacy compliance features such as cookie consent. Strategic recommendations include enhancing security headers, enabling DNSSEC, adding a vulnerability disclosure policy, and implementing cookie consent to improve compliance and trust.

G

GSFM

gsfm.com.au

67

GSFM is an Australian funds management company that partners with high calibre investment managers to provide diversified investment strategies including global equities, fixed income, emerging markets, private credit, and alternatives. The company targets Australian investors, financial advisers, and institutional clients, positioning itself as a quality investment partner with a medium-sized market presence. Technically, the website is built on WordPress with modern JavaScript libraries and is moderately optimized for performance and mobile use. Security posture is good with HTTPS and no visible vulnerabilities, but lacks some security headers and formal privacy/cookie policies. Overall, the domain and website appear legitimate and professionally maintained, though privacy policies and contact information should be improved to enhance trust and compliance.

C

Cromwell Funds Management

cromwell.com.au

62

Cromwell Funds Management is a well-established Australian property investment management company offering a diversified suite of funds including unlisted property trusts, ASX-listed REITs, and international securities. The company targets investors and financial advisers seeking income-producing commercial property investments. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site is built on WordPress with modern analytics and marketing integrations, optimized for mobile and accessibility. Security posture is strong with HTTPS, CAPTCHA-protected forms, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is evident with clear policies and consent mechanisms. Overall, Cromwell demonstrates high business credibility and digital maturity.

The website ww16.yarra.com.au is a domain parking page hosted via Sedo, indicating the domain 'yarra.com.au' is currently not in active business use but is offered for sale. The site contains minimal content, primarily advertising and related search links, with no direct business information or contact details. The technical infrastructure relies on standard HTML and JavaScript with Google Ads integration, but lacks modern security headers and visible HTTPS confirmation. Privacy and cookie policies are present but basic, hosted externally by Sedo. Overall, the site demonstrates low digital maturity and minimal security posture, typical for parked domains. The WHOIS data is unavailable due to query failure or privacy protection, which is common for domains held for resale. This limits trust and business credibility. Strategic improvements would require establishing a legitimate business presence, securing the domain with HTTPS, and providing clear contact and compliance information.

W

WealthHub Securities Limited

nabtrade.com.au

71

nabtrade is a well-established online share trading platform operated by WealthHub Securities Limited, a wholly owned subsidiary of National Australia Bank Limited (NAB). The platform offers retail investors and NAB customers access to a wide range of investment products including Australian and international shares, ETFs, bonds, and margin lending. The website demonstrates strong branding consistency with NAB and provides comprehensive content tailored to its target audience. The platform supports mobile trading through dedicated iOS and Android apps and integrates with NAB Internet Banking for seamless account management. Technically, the website is built on Adobe Experience Manager and employs modern JavaScript libraries and analytics tools, ensuring a responsive and performant user experience. Security posture is robust with HTTPS enforcement, secure login forms, and links to NAB's fraud protection services. However, the absence of an explicit cookie consent mechanism may present a compliance gap. WHOIS data is limited due to .au domain privacy policies but shows no suspicious indicators. Overall, nabtrade presents a trustworthy and professional online trading service with a strong market position in the Australian financial sector.

C

Charter Hall

charterhall.com.au

72

Charter Hall is a leading Australian property investment and funds management group with over 32 years of experience. The company operates diversified property portfolios across office, industrial, retail, and social infrastructure sectors. Their website reflects a mature corporate presence with extensive investor resources, property leasing options, and detailed corporate governance information. The business targets investors, tenants, and financial advisers, positioning itself as a trusted market leader in real estate investment in Australia. Technically, the website is built on the Sitefinity CMS platform and integrates a variety of modern analytics and marketing technologies including Google Tag Manager, Microsoft Clarity, Hotjar, and several advertising networks. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, along with cookie consent mechanisms. However, explicit security headers and published security policies or incident response contacts are not evident, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. The lack of WHOIS data is due to AU domain privacy policies and does not detract from the legitimacy of the site. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and adding a vulnerability disclosure program to further strengthen trust and security posture.

P

Platinum Asset Management

platinum.com.au

68

Platinum Asset Management is a well-established Australian-based international equity manager focused on delivering long-term capital growth through undervalued investments in global shares. The company targets investors including retail, advisers, and institutional clients, offering a broad range of investment products such as active ETFs, managed funds, and listed investment companies. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site employs modern frameworks like Bootstrap and jQuery, integrates advanced analytics including Google Analytics and Microsoft Application Insights, and uses a reputable CMS (Kentico) hosted likely on Microsoft Azure. Security posture is strong with HTTPS enforcement, multiple security headers, and cookie consent mechanisms, although no explicit public security or incident response policies are found. WHOIS data is unavailable due to privacy policies, which is typical and justified for financial services firms. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

P

Pinnacle

pinnacleinvestment.com.au

64

Pinnacle is a well-established global multi-affiliate investment management firm founded in 2002, headquartered in Australia. The company focuses on providing investors, financial advisers, and institutions access to leading fund managers and a broad range of investment products. Their market position is strong, supported by significant funds under management and industry recognition such as the Morningstar Fund Manager of the Year award for an affiliate. The website reflects a professional and consistent brand with good content quality and clear business messaging. Technically, the website is built on WordPress using common industry tools such as Yoast SEO, Google Analytics, Pardot marketing automation, and WPBakery Page Builder. The site is mobile optimized and has moderate performance. However, some technical improvements are possible, including enabling DNSSEC and adding security headers. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No security headers were detected, and DNSSEC is not enabled, which are areas for improvement. Privacy compliance is limited as no privacy or cookie policies were found, which could expose the company to regulatory risks. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic recommendations include publishing comprehensive privacy and cookie policies, enabling DNSSEC, implementing security headers, and establishing a vulnerability disclosure process.

H

Heffron Consulting Pty. Ltd. trading as Heffron

heffron.com.au

67

Heffron Consulting Pty. Ltd., trading as Heffron, is a leading Australian provider specializing in Self Managed Super Fund (SMSF) administration, education, actuarial certificates, and technical support. With over 25 years of experience, Heffron holds a strong market position supported by multiple industry awards and an Australian Financial Services Licence (AFSL 241739). Their services target advisers, accountants, trustees, and fund members, offering comprehensive and personalized SMSF solutions. The website reflects a professional and trustworthy brand with clear navigation, rich content, and multiple calls to action.

F

Financial Standard

industrymoves.com

64

Financial Standard is a reputable Australian financial media company providing trade news, education, and industry insights primarily for superannuation trustees, financial planners, investment managers, and other finance professionals. The website offers a rich array of content including executive appointment news, podcasts, videos, and professional development resources. It operates under the parent company ISS - Institutional Shareholder Services, indicating a strong market position and credibility within the financial sector. The business model relies on subscription services and advertising revenue, supported by a professional and consistent brand presence.

F

FS Sustainability

fssustainability.com.au

62

FS Sustainability is a specialized Australian media and education platform focused on Environmental, Social, and Governance (ESG) topics, targeting superannuation funds, investment managers, and ASX-listed companies. The website offers news, whitepapers, podcasts, and event listings, operating under a subscription model. It is part of the ISS Market Intelligence group, a reputable entity in the finance sector. The platform demonstrates a strong market position within the ESG niche, supported by consistent branding and high-quality content.

F

FS Managed Accounts

fsmanagedaccounts.com.au

63

FS Managed Accounts is a specialized Australian financial media publication focused on managed account professionals. It provides industry news, expert articles, case studies, videos, and event information, positioning itself as a leading source of information in the managed accounts sector. The website is part of the Rainmaker Information group, which enhances its market credibility and reach. The business model centers on subscription-based access to premium content and professional development resources for financial advisers and industry stakeholders. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Google Analytics, Microsoft Clarity, and ad management tools such as Google Ad Manager and Adloox. The site is mobile-optimized with good SEO practices and integrates with Rainmaker's platform services. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses bot protection via hCaptcha. However, explicit security headers are not clearly present, and there is no visible cookie consent mechanism, which may impact privacy compliance. WHOIS data is minimal due to .au domain policies, but the domain appears legitimate and professionally maintained. No critical vulnerabilities or suspicious content were detected. Overall, FS Managed Accounts demonstrates a strong business presence with professional content and a solid technical foundation. Enhancements in privacy compliance and security headers would further strengthen its security posture and user trust.

F

FS Private Wealth

fsprivatewealth.com.au

63

FS Private Wealth is a specialized Australian finance journal focusing on family office investment and wealth management, targeting family offices and high-net-worth individuals primarily in Australia and the broader Asian region. The website offers a rich content portfolio including articles, case studies, expert blogs, videos, and industry event listings, positioning itself as a niche media provider within the finance sector. The business model is subscription-based, providing premium content and insights to a professional audience. The site is professionally branded and consistently presented, with clear author attribution and partnerships with Financial Standard and FSiTV enhancing its market credibility. Technically, the website employs a modern tech stack including Bootstrap 4.6, Google Analytics, Microsoft Clarity, Google Tag Manager, and ad networks such as Google AdSense and Adloox. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers are not explicitly detected. Privacy and cookie policies are absent, representing a compliance gap. No incident response or security policy information is published. Overall, the website demonstrates a mature digital presence with strong business credibility and professional content quality. The lack of visible privacy and cookie policies and absence of security policy documentation are areas for improvement. The WHOIS data is privacy protected, which is typical for media entities, and no suspicious patterns are detected. The site is safe for general audiences with no adult or explicit content. The risk profile is low, but compliance enhancements are recommended.

F

FS Super

fssuper.com.au

63

FS Super is a specialized journal and news platform focused on the Australian superannuation industry, providing authoritative articles, case studies, videos, and event listings. It operates under the Rainmaker Information group, which manages multiple related financial publications and services. The website targets industry professionals and offers subscription-based access to premium content. Technically, the site uses modern web technologies including Bootstrap, Google Analytics, and Google Tag Manager, ensuring a responsive and professional user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy, well-branded, and professionally maintained, suitable for its niche audience.

F

FS Advice

fsadvice.com.au

63

FS Advice is a well-established Australian financial planning journal and media platform providing authoritative articles, case studies, and professional development content targeted at financial planning professionals. The website is part of the Rainmaker Information group, which operates multiple related financial media properties. The platform demonstrates a mature digital infrastructure leveraging modern web technologies, including Bootstrap, Google Analytics, Microsoft Clarity, and advanced ad serving technologies. The site is well-optimized for desktop and mobile users, with clear navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is adequate with a comprehensive privacy policy and terms of service, but lacks a visible cookie consent mechanism, which is a potential compliance gap. Overall, the domain registration data is limited due to Australian registrar policies but consistent with the business's legitimacy. The website is safe for general audiences and maintains a high level of trustworthiness.

M

Money magazine

superguard360.com.au

63

Money magazine is a well-established Australian personal finance media publisher offering a wide range of content including news, advice, reviews, podcasts, and videos. It holds a leading market position as Australia's longest-running personal finance magazine, targeting consumers interested in financial planning, investing, superannuation, and related topics. The business model relies on subscriptions and advertising revenue, with a strong digital presence and social media engagement. Technically, the website uses modern frameworks such as Bootstrap and integrates multiple analytics and advertising technologies including Google Tag Manager, Facebook Pixel, and Microsoft Clarity. The site is mobile-optimized and SEO-friendly with structured data enhancing search visibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and published security policies are lacking. Privacy compliance is limited by absence of visible privacy and cookie policies or consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness but could improve transparency and compliance documentation.

D

DMI Systems

dmisystems.com.au

62

DMI Systems is an Australian technology company specializing in data cleansing, enrichment, and inter-connectivity solutions primarily for businesses and organizations that manage large volumes of data. The company leverages the Professional Standards Number (PSN) to enable effective linking and reporting across disparate data sources, positioning itself as a leader in the Australian data management sector. The website content and structured data confirm a business-focused approach with a clear value proposition around improving data quality and connectivity. From a technical perspective, the website employs a range of JavaScript libraries including jQuery, Google Tag Manager, and Google Analytics, indicating a moderate level of digital maturity. The site is served over HTTPS with good SSL configuration, though it lacks some modern security headers and cookie consent mechanisms. The site is moderately optimized for mobile and accessibility but could benefit from improvements in these areas. Security posture is generally sound with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and lack of published security policies or incident response contacts represent areas for improvement. The WHOIS data is unavailable due to privacy protection or malformed queries, but the website's professional presentation and consistent business information suggest legitimacy. Overall, the website presents a trustworthy and professional front for a niche technology business, though enhancements in privacy compliance and security best practices would strengthen its posture and user trust.

R

Rainmaker Live

rainmakerlive.com.au

58

Rainmaker Live operates a professional web-based SaaS platform called Rainmaker MarketPro, which integrates financial market data, research, and editorial content to serve financial professionals and market analysts primarily in Australia. The platform is positioned as a niche market intelligence hub under the parent company Institutional Shareholder Services, reflecting a medium-sized business with a focus on media and financial data services. The website demonstrates consistent branding and a good level of content quality, targeting a specialized audience with subscription-based services. Technically, the site employs a modern JavaScript stack including jQuery, Bootstrap, and various data visualization and export libraries, indicating a mature digital infrastructure. However, mobile optimization and accessibility features are basic and could be improved to enhance user experience across devices. Security-wise, the site enforces HTTPS and uses hCaptcha for bot protection on login forms, but lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected, but the absence of incident response or vulnerability disclosure information suggests room for improvement in security transparency. Overall, the website is safe, professional, and trustworthy, with a moderate security posture and some gaps in privacy compliance. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, improving mobile and accessibility features, and providing clear incident response contacts to strengthen trust and compliance.

I

ISS - Institutional Shareholder Services

aspirecpd.com.au

54

FS Aspire CPD is a professional continuing professional development platform tailored for financial advisers and related professionals in Australia. Powered by Financial Standard and operated under the Institutional Shareholder Services brand, it offers a rich library of CPD content, compliance tracking, and user-friendly administration tools. The platform targets financial advisers, investment managers, superannuation professionals, and industry professionals, positioning itself as a market leader in CPD content delivery within the Australian financial services sector. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Fonts, Microsoft Clarity for analytics, HubSpot for marketing automation, and Google Tag Manager for tag management. The site is mobile-optimized with good SEO practices and moderate performance. However, it lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. From a security perspective, the site enforces HTTPS and does not expose sensitive data in the HTML. It uses common tracking pixels and marketing tools but lacks visible security policies or incident response contacts. The WHOIS data is limited due to privacy restrictions but aligns with the Australian domain and business focus, indicating legitimacy. Overall, the security posture is good but could be enhanced by adding security headers and formal privacy and cookie policies. The overall risk assessment is moderate with a good trust level based on content quality and business credibility. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, publishing incident response contacts, and establishing a vulnerability disclosure program to strengthen compliance and trust.

M

Money magazine

moneymag.com.au

63

Money magazine is a well-established Australian personal finance media company offering a wide range of financial news, advice, reviews, and multimedia content including podcasts and videos. It targets Australian consumers interested in personal finance, investing, property, superannuation, and insurance. The website demonstrates a strong market position as Australia's longest-running and most-read personal finance magazine with a consistent brand and professional content. Technically, the site uses modern web technologies such as Bootstrap, Google Tag Manager, Microsoft Clarity, and Facebook Pixel, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, though accessibility features could be improved. Security posture is strong with HTTPS enforced and secure forms, but explicit security headers and privacy policies are not clearly visible in the provided content. The WHOIS data is privacy protected, which is typical for media companies, but limits domain registration transparency. Overall, the site is trustworthy and professional with extensive content and strong social media presence.

R

Rainmaker Information

rainmaker.com.au

64

Rainmaker Information is a well-established Australian company specializing in providing comprehensive data, research, and market insights for the wealth management sector, including superannuation funds, investment managers, and financial advisers. The company operates under the umbrella of ISS - Institutional Shareholder Services, leveraging over 30 years of industry experience to deliver market-leading intelligence solutions. Their offerings include subscription-based data terminals, research reports, CRM integration, ratings and awards, and professional development services, positioning them as a key player in the Australian financial services market. Technically, the website is built on modern platforms such as Webflow and HubSpot, integrating multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security best practices are observed with HTTPS enforcement, security headers, and form protections like reCAPTCHA, although explicit security policies and incident response information are not publicly disclosed. From a security perspective, the site demonstrates a strong posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR standards. However, the absence of direct contact emails or phone numbers and lack of published incident response or vulnerability disclosure policies suggest areas for improvement in transparency and user trust. Overall, Rainmaker Information presents a professional, trustworthy, and technically sound online presence consistent with its market position. The domain WHOIS data is privacy protected in accordance with auDA policies, which is justified given the nature of the business. Strategic recommendations include enhancing security transparency, publishing incident response and vulnerability disclosure information, and providing clearer direct contact channels to further strengthen trust and compliance.

R

Rainmaker Information Pty Ltd

selectadviser.com.au

60

SelectAdviser is a well-established Australian online referral network and information portal specializing in financial planners and practices. It offers a comprehensive search engine, educational resources, news, and adviser reviews targeted at individuals and businesses seeking financial planning services in Australia. The website is owned by Rainmaker Information Pty Ltd, a company with a long history dating back to 1992, indicating a mature market presence. The platform positions itself as a trusted intermediary connecting consumers with financial advisers and practices, supported by relevant news and educational content.

M

Money magazine

selectingsuper.com.au

63

Money magazine is a well-established Australian personal finance media outlet providing news, advice, and resources focused on superannuation and retirement planning. The website serves a broad Australian audience interested in financial literacy and investment strategies. It operates a subscription-based business model supplemented by advertising revenue and partnerships. The site demonstrates a mature digital presence with structured data, social media integration, and a responsive design. Technically, the website uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and multiple analytics and advertising platforms. The infrastructure appears stable and moderately performant, with good mobile optimization and SEO practices. The CMS is likely Rainmaker, indicated by API endpoints and script references. From a security perspective, the site enforces HTTPS and uses bot protection via hCaptcha. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no public security or incident response policies are published. Privacy compliance is partially addressed with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. WHOIS data is privacy protected but consistent with a legitimate business. Overall, the website presents a professional and trustworthy front with minor areas for security and privacy improvement. It is suitable for its target audience and business goals.

F

FSiTV

fsitv.com

64

FSiTV operates as a specialized online video platform dedicated to the financial services industry in Australia, under the Financial Standard brand. It offers high-quality video content including shows, event highlights, educational series, and professional profiles, targeting financial services professionals. The platform is well-positioned as a niche media outlet within the Australian finance sector, leveraging its parent brand's reputation. Technically, the website employs a modern JavaScript stack with popular libraries and integrates Google Analytics and advertising services, indicating a mature digital infrastructure. However, mobile optimization and accessibility are basic and could be improved. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies, which is a notable gap for a site collecting user data via forms and tracking scripts. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not negate the professional presentation and content quality. Overall, the site is credible and functional but would benefit from enhanced privacy and security disclosures.

MUFG Pension & Market Services is a large-scale financial services provider specializing in superannuation fund administration and corporate market services, operating primarily in Australia. As a member of the global MUFG financial group, it leverages extensive expertise and digital platforms to serve major corporations, pension funds, and financial institutions. The website reflects a mature digital presence with structured data, professional branding, and a focus on user experience. Technically, the site employs modern frameworks such as Bootstrap and integrates advanced search and consent management tools, indicating a commitment to digital maturity and compliance. Security posture is strong with HTTPS enforcement, Content-Security-Policy headers, and anti-clickjacking measures, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is trustworthy and well-aligned with corporate standards, with no signs of blocking or WAF interference.

B

Boardroom Limited

investorserve.com.au

74

InvestorServe is a secure online portal operated by Boardroom Limited, targeting investors who need to manage their investment portfolios and access statements. The platform emphasizes security through multi-factor authentication and secure login mechanisms. The website is professionally designed with a focus on usability and investor services, reflecting a medium-sized finance sector business based in Australia. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Google Analytics, with moderate performance and good mobile optimization. Security posture is strong with HTTPS and MFA, though security headers and privacy policies are lacking. Overall, the site is trustworthy and legitimate, though improvements in privacy compliance are recommended.