Colombia security reports

T

TECNI-MOTOSIERRAS

tecnimotosierras.com

59

TECNI-MOTOSIERRAS is a small retail and distribution business specializing as an authorized dealer of STIHL machinery and accessories in Chía, Colombia. The company offers a range of products including chainsaws, brush cutters, hedge trimmers, blowers, and original spare parts, targeting consumers and businesses requiring quality STIHL equipment. The website reflects a professional presence with clear branding and contact information, supporting customer engagement through multiple channels including social media and WhatsApp. Technically, the website is built on the Multiscreensite platform, utilizing modern web technologies such as jQuery, service workers for PWA capabilities, and analytics tools like Snowplow and Google Tag Manager. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some accessibility features could be enhanced. From a security perspective, the site uses HTTPS and registers a service worker, indicating a baseline of security best practices. Nonetheless, the absence of security headers and lack of explicit privacy and cookie policies highlight areas for improvement in compliance and security posture. The missing WHOIS data for the domain raises concerns about domain legitimacy and transparency, warranting further verification. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and domain registration transparency to improve trustworthiness and regulatory adherence.

A

Alcaldía de Santa Rosa de Osos

santarosadeosos-antioquia.gov.co

58

The website of Alcaldía de Santa Rosa de Osos serves as the official digital portal for the municipal government of Santa Rosa de Osos in Antioquia, Colombia. It provides citizens with access to transparency information, public services, online payments, news, and municipal projects. The site targets local residents and government stakeholders, positioning itself as a key resource for municipal governance and citizen engagement. Technically, the site is built on Microsoft SharePoint with modern frontend technologies such as Tailwind CSS and FontAwesome, ensuring a responsive and accessible user experience. The integration of Google Tag Manager and Analytics indicates a moderate level of digital maturity in tracking and analytics. Security-wise, the site enforces HTTPS and uses some security headers but lacks explicit security policies and incident response information. No critical vulnerabilities were detected in the visible content. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

C

CSL Behring Colombia

cslbehring.co

67

CSL Behring Colombia is a subsidiary of the global biotherapeutics leader CSL Limited, specializing in innovative therapies for rare and serious diseases. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content focused on healthcare products and patient support. The technical infrastructure leverages modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site demonstrates high business credibility and trustworthiness, supporting CSL Behring's market position in Colombia.

A

adidas Colombia

adidas.co

69

The website represents the official Adidas Colombia online store, offering a wide range of sports shoes, apparel, and accessories. It is part of the global Adidas brand, a market leader in sportswear retail. The site targets general consumers in Colombia and provides a localized shopping experience with internationalization support. Technically, the site is built on modern web technologies including React and Next.js, leveraging a microfrontend architecture for modularity and scalability. Performance is moderate with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and comprehensive security headers, though explicit privacy and terms of service pages were not detected in the provided content. Overall, the site demonstrates a mature digital infrastructure aligned with enterprise standards.

C

Culligan Colombia

culligan.co

59

Culligan Colombia is a well-established provider of premium water purification and hydration solutions tailored for commercial and institutional clients such as offices, schools, hospitals, and restaurants. The company emphasizes sustainability and advanced technology, including proprietary purification systems like Firewall® UVC and BioCote® protection. Their market position is strong within Colombia, supported by a professional and user-friendly website that clearly communicates their offerings and value proposition. The site targets business customers seeking reliable and eco-friendly hydration solutions, offering both product sales and flexible rental services with ongoing maintenance and support.

F

Factorial

factorialhr.co

67

Factorial is a well-established SaaS company founded in 2016, specializing in comprehensive human resources software solutions that integrate time management, talent management, payroll, and financial operations. The company serves a broad market of businesses seeking to automate and digitize their HR and operational workflows, positioning itself as a trusted provider with over 13,000 clients and strong user ratings. The website reflects a mature digital presence with modern technologies such as Next.js and DatoCMS, optimized for performance and mobile responsiveness. Security practices are robust, including HTTPS enforcement and multiple security headers, although explicit privacy and terms of service documentation are not clearly linked, which could be improved for compliance and transparency. Overall, Factorial demonstrates a strong market position with a professional and user-friendly website, supported by credible business information and consistent domain registration data.

L

Licitacionescolombia.co

licitacionescolombia.co

65

Licitacionescolombia.co is a specialized platform providing centralized access to public tender information across Colombia and Latin America, targeting businesses seeking government procurement opportunities. The platform offers alert services, customized reports, and advanced search tools to help clients identify and win tenders. It operates under the Tender Service Group umbrella, indicating a broader organizational structure. Technically, the website is built on a modern Angular framework with PrimeNG components, ensuring a responsive and user-friendly experience. The site incorporates standard tracking and marketing tools such as Google Tag Manager and Userpilot, with a cookie consent mechanism in place. Security-wise, the site enforces HTTPS and includes common security headers, but lacks a dedicated security policy or incident response information. Overall, the site is professional, trustworthy, and well-positioned in its niche, though it could improve privacy compliance and security transparency.

P

Palmera Junior SAS

palmerajunior.com

56

Palmera Junior SAS is a Colombian pest control company with over 26 years of experience, uniquely certified with ISO 22000 in Colombia. The company offers a wide range of pest control and fumigation services targeting residential, commercial, industrial, agroindustrial, and institutional sectors. Their market position is strong within Colombia, supported by a professional website built on WordPress with modern SEO and marketing tools. Technically, the website uses popular plugins such as Elementor, Yoast SEO, and Slider Revolution, hosted with Cloudflare DNS services. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not provide explicit incident response or security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Overall, the website is professional, trustworthy, and well-structured, but could improve in privacy and security best practices.

S

Schindler Colombia

schindler.co

73

Schindler Colombia operates as a leading manufacturer and service provider of elevators, escalators, and moving walks, targeting commercial, residential, and public transport sectors within Colombia. The company leverages advanced digital services such as the Schindler Ahead platform to enhance user experience and operational efficiency. The website reflects a mature digital presence with comprehensive product and service information, supported by Adobe Experience Manager CMS and integrated marketing and analytics tools. Security posture is strong with HTTPS and strict Content Security Policy headers, though privacy and cookie policies are absent, representing a compliance gap. Contact channels include phone and WhatsApp, but no direct emails are exposed. Overall, the site is professional, trustworthy, and well-optimized for SEO and accessibility.

J

Jaguar Columbia

jaguar.co

63

Jaguar Colombia operates as a premium automotive brand website focused on showcasing and selling Jaguar vehicles including SUVs, electric cars, sedans, and sports cars tailored for the Colombian market. The website demonstrates a strong brand presence with consistent branding and localized content, targeting consumers interested in luxury vehicles. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, leveraging CDN assets and Google Fonts for performance and aesthetics. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Business credibility is high given the brand and consistent WHOIS data, but contact information is not explicitly found in the provided content. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and clearer contact/security information.

Un Dato is a small technology company specializing in data-driven customer experience enhancement solutions. Their offerings include pixel tracking, AI-powered audience segmentation, gamification, subscription management, and data enrichment services. The company targets businesses, particularly SMEs, seeking to leverage precise and reliable data for strategic decision-making. The website is professionally designed, mobile-optimized, and hosted on Cloudflare, employing modern web technologies such as Google Tag Manager and Google Fonts. Security posture is solid with HTTPS enforced, though some security headers and policies are missing. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. Contact is facilitated via a web form collecting email and message text, but no direct emails or phone numbers are published. Overall, the site presents a credible business with clear product offerings and transparent pricing, though improvements in privacy and security transparency are recommended.

S

SINDYK

sindyk.com

59

Sindyk is a Colombian technology startup specializing in digital media solutions, focusing on audience growth, content monetization, and mobile site optimization for media companies across Latin America. With over 15 years of domain registration and 8+ years of active business presence, Sindyk offers a suite of products including Smart, Conecta, Speed, Turbo, and Codea to help clients manage subscriptions, optimize content delivery, and enhance user engagement. The company maintains a professional web presence with clear branding, client testimonials, and a dedicated team showcased with LinkedIn profiles. Technically, the website uses modern frameworks like Bootstrap and integrates Google Analytics and Adsense for marketing and tracking purposes. Security posture is adequate with HTTPS and Cloudflare DNS but lacks advanced security headers and published privacy policies, which are areas for improvement. Overall, the website is well-designed, mobile-optimized, and trustworthy, though privacy compliance needs enhancement.

B

Bubok Publishing, s.l.

bubok.co

67

Bubok Publishing, s.l. operates the website bubok.co, a leading self-publishing and book distribution platform targeting independent and novice authors primarily in Colombia and Spanish-speaking markets. The company offers a comprehensive suite of services including book publishing, editorial assistance, and international distribution, supported by a network of subsidiaries and partner companies. The website is professionally designed, content-rich, and optimized for user experience, reflecting a mature digital presence. Technically, the site employs a modern tech stack with popular libraries and tracking tools, though some legacy components like older jQuery versions are present. Security measures include HTTPS enforcement and reCAPTCHA integration, but could benefit from enhanced security headers and explicit incident response contacts. Privacy compliance is robust with clear cookie and privacy policies and user consent mechanisms. Overall, the site demonstrates a strong market position and trustworthy business operations.

E

Enciso Systems SAS

esawebb.org

59

ESA/Webb.org is an official informational website dedicated to the James Webb Space Telescope, operated by Enciso Systems SAS based in Colombia. The site serves as a comprehensive resource for news, images, videos, and educational content related to the telescope and its scientific mission. It targets a broad audience including the general public, scientists, and astronomy enthusiasts, positioning itself as a trusted source affiliated with the European Space Agency (ESA). The business model focuses on public outreach and education rather than commercial activities. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, and integrates performance and user interaction monitoring tools like New Relic and Google Analytics. It is hosted with Cloudflare DNS and CDN services, ensuring good performance and availability. Security posture is solid with HTTPS enforced and domain registration protections, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is currently lacking, with no visible privacy or cookie policies, which is a notable gap. Overall, the website is professional, trustworthy, and safe for general audiences, but should enhance privacy and security transparency to align with best practices.

T

Transmisiones S.A.S.

transmisiones.de

38

Transmisiones S.A.S. is a Colombian company specializing in the distribution and servicing of industrial automation, energy, and power transmission products. Their website showcases a broad portfolio including variadores, servomotores, cables, motorreductores, and related accessories, targeting industrial and manufacturing sectors. The company positions itself as an authorized distributor of LAPP products in Colombia, offering additional services such as equipment repair, training, and consultancy. The website is built on WordPress with WooCommerce, indicating a mature e-commerce platform for B2B sales and product catalog management. Technically, the site uses modern web technologies and is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. Analytics is implemented via Google Tag Manager, reflecting moderate user tracking. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

E

Einhell Colombia S.A.S

einhell.co

59

Einhell Colombia S.A.S operates a professional and well-structured website targeting Spanish-speaking DIY and gardening enthusiasts in Colombia. The company offers a range of power tools, garden equipment, and battery systems, positioning itself as a reputable brand in manufacturing and retail sectors. The website is built on TYPO3 CMS and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, professional, and compliant with GDPR standards, with no signs of suspicious activity or content blocking.

S

SAP Concur

concur.co

55

SAP Concur Colombia offers comprehensive software solutions for business travel, expense, and invoice management, helping companies automate and control financial processes efficiently. The website is professionally designed, localized for the Colombian market, and integrates with the global SAP Concur ecosystem. It targets finance professionals and businesses seeking streamlined expense management. Technically, the site uses Drupal CMS, modern JavaScript, and includes performance and monitoring tools like New Relic and TrustArc for privacy compliance. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers and public security policies could be improved. WHOIS data is privacy protected but consistent with a legitimate enterprise domain. Overall, the site reflects a mature, trustworthy digital presence aligned with SAP's brand standards.

D

Doctoralia

doctoralia.co

69

Doctoralia Colombia is a well-established online platform that connects patients with medical specialists, enabling appointment booking and access to expert health advice. It serves a large user base in Colombia with over 60,000 healthcare professionals listed. The platform is part of the Docplanner group, a recognized player in healthcare technology. The website demonstrates a mature technical infrastructure using modern JavaScript frameworks, integrated analytics, and secure HTTPS connections. Privacy policies and terms of service are clearly linked, supporting compliance with data protection regulations such as GDPR. However, the absence of a visible cookie consent mechanism and dedicated security policy pages indicates room for improvement in privacy compliance and transparency. Security posture is strong with proper HTTPS and security headers, but incident response readiness and vulnerability disclosure are not publicly documented. Overall, the website is professional, trustworthy, and safe for general audiences seeking healthcare services online.

BIIB Colombia is a regional subsidiary of Biogen Inc., a global leader in biotechnology founded in 1978. The company focuses on developing innovative therapies for complex and devastating diseases, including neurological, neuropsychiatric, specialized immunology, and rare diseases. The website presents a professional and consistent corporate image, targeting Spanish-speaking audiences in Colombia with comprehensive information about the company, its therapeutic areas, and career opportunities. The digital infrastructure leverages Adobe Experience Manager CMS, modern JavaScript libraries, and integrates Google Analytics and Cookiebot for privacy compliance. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. WHOIS data is redacted, a common practice for corporate domains, and does not raise immediate concerns. Overall, the site demonstrates good technical maturity, privacy compliance, and business credibility.

redBus is a leading global online bus ticket booking platform with a strong presence in Colombia and five other countries. Founded in 2006, it has served over 36 million customers and offers extensive routes and partnerships with over 60 bus companies. The website provides a secure and user-friendly platform for purchasing bus tickets with multiple payment options and customer support channels. Technically, the site employs modern SPA frameworks, integrates advanced monitoring tools like New Relic, and uses secure HTTPS with strong security headers. Privacy and cookie policies are present with consent mechanisms, indicating good compliance practices. However, no explicit security policy or incident response page was found, which could be improved. Overall, the website demonstrates a mature digital presence with a solid security posture and trustworthy business information.

A

Escorts Colombia - Las mejores modelos | Angels Erotic VIP

angelseroticvip.com

42

Angels Erotic VIP is a small escort service agency operating in Colombia, primarily targeting the cities of Bogotá and Medellín. The website offers adult companionship services with a focus on VIP models and discreet experiences. The business appears to be newly established in 2023, with domain registration consistent with its market presence. Technically, the website is built on WordPress using popular plugins such as Elementor and NitroPack, providing moderate performance and good mobile optimization. However, the site lacks comprehensive privacy and cookie policies, and no explicit contact information or security policies are visible, which impacts its trustworthiness and compliance posture. Security-wise, HTTPS is enabled, but the absence of security headers and DNSSEC reduces the overall security posture. The site does not show evidence of incident response or vulnerability disclosure mechanisms.

D

DYNINNO

dyninno.co

66

DYNINNO is a technology-focused international group with a significant presence in Colombia, specializing primarily in travel business operations. The Colombia office employs approximately 450 staff and is part of a larger corporate structure under Dynamic Innovations Limited. The website is professionally designed, well-structured, and optimized for multiple languages and devices, reflecting a mature digital presence. The company leverages modern web technologies including WordPress, Yoast SEO, and tracking tools such as Google Analytics and Microsoft Clarity to monitor user engagement and improve experience. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is strong, with clear cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. Overall, the website and domain registration data indicate a trustworthy and credible business entity with good operational maturity.

P

Pronto Rental

prontorental.com

46

Pronto Rental is a Colombian-based company specializing in the rental of heavy machinery and equipment, serving multiple sectors such as construction, industrial assembly, logistics, urban services, and events. Established in 2015, it positions itself as the largest machinery rental company in Colombia, offering a wide range of equipment and services tailored to client needs. The website reflects a professional and consistent brand image with clear contact information and trust certifications like Great Place To Work and Socotec. Technically, the website is built on WordPress using Elementor and integrates modern tools such as Google Tag Manager and Google Analytics. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, HTTPS is enforced, but the absence of DNSSEC and security headers indicates potential areas for enhancement. Privacy compliance is basic, with privacy and terms policies present but lacking cookie consent mechanisms. Overall, the security posture is adequate but could benefit from implementing additional security headers and formal incident response policies. The domain registration is consistent with the business claims, enhancing trustworthiness. Strategic improvements in privacy compliance and security practices would further strengthen the company's digital maturity and customer trust.

SODECA is a manufacturer specializing in industrial ventilation solutions including fans, smoke evacuation systems, and pressurization controls. The company operates internationally with multiple country-specific websites, indicating a strong global presence. Their business model focuses on manufacturing and direct sales complemented by consulting services for ventilation projects. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. Technically, the site uses modern frontend technologies such as Bootstrap 5, Font Awesome, and Google Analytics for tracking. It employs HTTPS with a good SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, some security headers are missing, and no explicit security or incident response policies are published, which could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through cookie consent and a comprehensive privacy policy. The WHOIS data is redacted, typical for privacy protection, but the website's professionalism and consistency across multiple domains support its legitimacy. Overall, the site presents a low risk profile with recommendations to enhance security headers and publish incident response information to further strengthen trust and compliance.

F

Fundación Telefónica Movistar | Colombia

fundaciontelefonica.co

59

Fundación Telefónica Movistar Colombia is a non-profit organization dedicated to promoting digital education, employability, entrepreneurship, social action, volunteering, and digital culture to foster a more inclusive and just society. Affiliated with Telefónica Movistar, it offers a wide range of free and certified courses targeting teachers, students, parents, youth, and professionals. The foundation has a strong market position in Colombia as a leading digital education and social impact entity. The website is built on WordPress CMS with modern technologies such as jQuery, DataTables, and ReadSpeaker for accessibility. It demonstrates good technical maturity with responsive design, SEO optimization, and moderate performance. The site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms, reflecting a commitment to privacy compliance. Security posture is solid with no exposed sensitive data or vulnerabilities detected in the HTML content. However, some security headers could be improved or explicitly implemented. The WHOIS data is privacy protected, which is common for organizations of this type, and does not raise immediate concerns given the strong trust indicators on the site. Overall, the foundation's digital presence is professional, trustworthy, and aligned with its mission. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and continuing to strengthen privacy and security practices.

M

Massy Motors Rentals SAS

alamo.co

59

Alamo Rent A Car Colombia operates as a vehicle rental service provider targeting customers within Colombia. The company offers a range of vehicles for rent, with services accessible via an online platform and physical locations in major Colombian cities and airports. The website is professionally designed, bilingual (Spanish and English), and provides clear contact channels including phone, email, and a HubSpot-powered contact form. The business positions itself with a focus on customer satisfaction, cleanliness, and convenience, including a quick check-in process. Technically, the website leverages modern web technologies such as Webflow CMS, Google Tag Manager, HubSpot forms, and Microsoft Clarity for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is well addressed with accessible privacy and cookie policies and consent mechanisms. The domain WHOIS data is privacy protected but consistent with the business's Colombian presence. Overall, the website and business present a trustworthy and professional image with room for enhanced security transparency.

LITHoil is a Colombian company specializing in advanced reservoir characterization, exploration evaluation, and petrophysical modeling for the oil and gas sector, with over 15 years of regional market presence. The company provides technical consulting services primarily targeting exploration and production companies in Colombia and Latin America. Their market position is supported by participation in national hydrocarbon studies and partnerships with recognized industry players. Technically, the website employs a modern but basic technology stack including Bootstrap, jQuery, and Google Maps integrations, hosted on Colombia Hosting. The site is functional with good content quality and navigation but lacks advanced mobile optimization and accessibility features. Security posture is moderate; while HTTPS is assumed, DNSSEC is not enabled and security headers are missing. No privacy or cookie policies are present, indicating compliance gaps. Contact information is clearly provided with company emails and phone numbers. Overall, the website reflects a small but credible business with room for improvement in security and privacy compliance.

E

ePayco: Pagos en Línea, Presenciales y Comercio Electrónico en Colombia

epayco.com

57

ePayco is a Colombian payment gateway platform offering a variety of payment solutions including online payments, point-of-sale transactions, subscription management, fraud mitigation, and e-commerce shops. The company targets businesses and merchants in Colombia, providing secure and agile technology to facilitate payments and collections. The website is built on WordPress with Elementor and integrates multiple analytics and tracking tools such as Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a mature digital marketing strategy. Security posture is solid with HTTPS enforced and domain registration locked with multiple EPP status flags, although DNSSEC is not enabled and no explicit security or privacy policies are published. The domain is well-established since 2009, consistent with the company's market presence. Overall, the website is professional, well-branded, and technically sound but lacks some compliance documentation and explicit security disclosures.

C

Congreso de Hackers

dragonjarcon.org

69

DragonJARCON is a prominent cybersecurity conference held in Medellín, Colombia, organized by the DragonJAR community. It serves as a key event for cybersecurity professionals and enthusiasts in Latin America, offering high-level technical talks, networking opportunities, and practical learning experiences. The event targets Spanish-speaking audiences interested in hacking and information security. Technically, the website is built on WordPress using Elementor and LearnPress, integrating modern tracking and marketing tools such as Google Tag Manager and Facebook Pixel. The site demonstrates good SEO, mobile optimization, and accessibility standards. Security-wise, the site enforces HTTPS and includes essential security headers, but lacks explicit privacy and cookie policies, which is a compliance gap. The WHOIS data is unavailable, which slightly impacts trust but the professional presentation and social proof mitigate concerns. Overall, the site is well-positioned as a leading cybersecurity event platform in Colombia with room for improvement in privacy compliance and domain transparency.

IT FORENSIC COMPANY is a cybersecurity firm established in 2008, positioned as a leader in Latin America offering consulting, products, and training services. The company emphasizes protecting information assets and has an international presence across multiple Latin American countries. Their partnership with The Hacking Day enhances their training offerings, reinforcing their market position. Technically, the website uses modern frameworks such as Materialize CSS and integrates Google Analytics for user tracking. The site is mobile optimized and presents a professional design with clear navigation. Security posture is moderate; while HTTPS is implied, no security headers or incident response information are published, and privacy compliance is lacking. The WHOIS data confirms domain legitimacy and consistency with business claims. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices.

D

DragonJAR SAS

dragonjar.org

63

DragonJAR SAS is a leading cybersecurity company specializing in offensive security services in Latin America. Their offerings include advanced pentesting, Red Team simulations, and specialized training programs. The company targets organizations seeking to proactively identify and mitigate cybersecurity risks. The website presents a professional and comprehensive digital presence, showcasing client trust through logos and testimonials. Technically, the site is built on WordPress with Elementor, optimized for performance and mobile responsiveness, and integrates Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and cookie consent mechanisms are recommended to enhance compliance and protection. WHOIS data is unavailable due to privacy protection, common in cybersecurity firms, but the overall business credibility remains high based on website content and trust signals.

C

CO Internet S.A.S

gagroup.co

42

The website gagroup.co serves as a portal for searching and registering .CO domain names, operated by CO Internet S.A.S, a Colombian entity specializing in domain registration services. The site positions itself as a niche domain registrar focused on the .CO top-level domain, targeting individuals and businesses interested in securing .CO web addresses. The business model revolves around domain search and registration, leveraging partnerships with related internet service providers. The website content is basic but functional, with clear calls to action for domain search and links to official .CO resources. Technically, the site is built using modern web technologies including React and Next.js, indicating a contemporary digital infrastructure. The performance is moderate with good mobile optimization, though accessibility and SEO features are basic. The site lacks advanced analytics or advertising scripts, suggesting a focus on core service delivery without aggressive marketing tracking. From a security perspective, the site does not explicitly confirm HTTPS usage or security headers in the provided data, which is a critical gap. No security policies or incident response contacts are published, and no cookie consent mechanism is present despite having a privacy policy. These factors reduce the overall security posture and privacy compliance rating. However, no vulnerabilities or suspicious activities were detected in the content, and the domain registration details align well with the business, supporting legitimacy. Overall, the website is a legitimate domain registration service with a basic but consistent digital presence. Strategic improvements in security practices, privacy compliance, and contact transparency would enhance trust and operational resilience.

T

The English School

englishschool.edu.co

52

The English School is an international educational institution based in Colombia, offering a British tradition curriculum with a focus on intercultural learning, inclusion, and differentiation. The school provides comprehensive educational services including International Baccalaureate programs, early years, primary, secondary education, sports, and community services. The website positions the school as a reputable and established institution with a strong emphasis on student well-being and academic excellence. Technically, the website is built on WordPress using the Divi theme, leveraging modern web technologies such as jQuery, Google Analytics, Facebook Pixel, and various marketing and analytics tools. The site is mobile-optimized, uses structured data for SEO, and implements GDPR-compliant cookie consent mechanisms, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS with excellent SSL configuration and employs privacy and cookie management plugins. However, it lacks explicit security headers and published security or incident response policies. No critical vulnerabilities or exposed sensitive data were detected, reflecting a solid security posture with room for improvement in transparency and advanced security controls. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its educational audience effectively. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen the site's security and compliance stance.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 7 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 24 security findings identified across all modules.

S

Spot AI: Video AI for the physical world

spotai.co

38

Website security analysis completed with a risk score of 38/100.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

E

EDITORIAL. LOGÍSTICA .LA

logistica.la

36

EDITORIAL. LOGÍSTICA .LA is a specialized editorial platform focused on logistics and supply chain management in Latin America, providing professional content, industry insights, and resources primarily in Spanish. The website is hosted on WordPress.com, leveraging WordPress CMS and related technologies such as Jetpack and Gutenberg. The site targets professionals, academics, and students interested in logistics and SCM, with a small but engaged subscriber base. Technically, the site uses modern web technologies but suffers from a critical lack of valid SSL/TLS configuration, exposing users to potential security risks. Privacy compliance is basic, with cookie consent implemented but no explicit privacy policy or terms of service found. The domain is mature and well-protected, registered with GoDaddy, supporting the site's legitimacy. Overall, the site offers valuable content but requires urgent security improvements to protect visitors and enhance trust.

A

Andrés Corson

supresenciaproducciones.com

40

The website supresenciaproducciones.com serves as a promotional platform for Pastor Andrés Corson's religious books and ministry activities, targeting Spanish-speaking Christian audiences primarily in Colombia. It offers book purchase options through affiliate links and free chapter downloads, supported by social media integration and a newsletter signup. Technically, the site is built on GravCMS, hosted on AWS infrastructure, and uses modern frontend libraries like Bootstrap and jQuery. However, the site lacks HTTPS, exposing visitors to security risks, and does not provide privacy or cookie policies, indicating poor compliance with data protection regulations. Security headers are minimal, and no incident response or vulnerability disclosure information is present. Overall, the site is functional and professionally designed but requires urgent security and compliance improvements.

C

Coffee & Jesus

coffeenjesus.com

61

Coffee & Jesus is a niche e-commerce business operating on the Shopify platform, specializing in Christian religious products including books, music, gifts, and church-related merchandise. The website targets Spanish-speaking Christian communities and offers a variety of spiritual growth materials. The business leverages modern e-commerce technologies and integrates multiple third-party tools for marketing, analytics, and customer engagement. However, the site currently suffers from a critical security issue due to an invalid or missing SSL certificate, which undermines user trust and data security. While security headers are well configured, the lack of proper HTTPS implementation is a significant risk. Privacy compliance is basic, with a privacy policy present but no visible cookie consent mechanism. Contact information is available and includes a company email and phone number, enhancing business credibility. Overall, the site is professionally designed and provides a good user experience but must address its SSL issues to improve security posture and trust.

S

Su Presencia Radio

supresenciaradio.com

40

Su Presencia Radio is a Spanish-language media company operating a niche radio station focused on musical and informative content. The website offers multiple programs targeting youth, families, entrepreneurs, and health-conscious audiences. The company maintains an active digital presence with streaming, podcasts, and social media channels. Technically, the site is built on WordPress using the Avada theme and several popular plugins, hosted likely on Amazon infrastructure. However, the site lacks a valid SSL certificate, which severely impacts security and user trust. Privacy compliance is minimal, with no cookie consent mechanisms detected, and only a basic privacy policy available. Contact information is clearly provided, supporting business credibility. Overall, the site is functional and content-rich but requires urgent security and privacy improvements to meet modern standards.

I

Iglesia Cristiana El Lugar de Su Presencia

supresencia.com

39

Iglesia Cristiana El Lugar de Su Presencia is a medium-sized non-profit religious organization based in Bogotá, Colombia. The website serves as the official digital presence for the church, providing information about services, community groups, children's ministry, radio broadcasting, and donation options. The target audience is primarily Spanish-speaking Christians in Colombia. The organization maintains a multimedia presence including live streaming and social media engagement, supported by several subsidiary domains related to radio, media production, and community outreach. Technically, the website is built on Drupal 7 with common web technologies such as jQuery and Bootstrap, hosted on AWS infrastructure. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security shortfall. Privacy policies exist but lack comprehensive GDPR compliance and cookie consent mechanisms. Security headers are partially implemented but TLS protocols and modern security features are missing, exposing the site to potential risks. Overall, the website is functional and professionally presented but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

I

Iceberg Cultures of Inclusion

icebergci.com

23

Iceberg Cultures of Inclusion is a consulting firm specializing in strategic management of diversity, equity, and inclusion (DEI) across Latin America. The company positions itself as a leader in this niche market, offering services such as DEI strategy development, inclusive ecosystem design, training, and cultural intelligence development. Their client base includes major multinational corporations, indicating a strong market presence and trust. Technically, the website uses modern frontend technologies including Bootstrap, Alpine.js, and jQuery, hosted on Apache with October CMS as the content management system. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts security posture. No privacy or cookie policies are found, and no incident response or security policies are published, indicating gaps in compliance and security transparency. Overall, the website is professionally designed with good content quality and user experience but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

The website ejercito.mil.co represents the official online presence of the Colombian National Army, a government entity responsible for national defense and military operations. The domain is mature and registered consistently with the organization's identity, reflecting a legitimate and authoritative institution. However, the website content is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that blocks access unless JavaScript and cookies are enabled. This limits the ability to analyze the actual website content and user experience. From a technical perspective, the site is hosted behind Cloudflare, which provides security and performance services. Despite the presence of multiple security headers enforcing strict cross-origin policies, the absence of a valid SSL/TLS certificate and HTTPS support is a critical security gap. The lack of HTTPS undermines secure communication and user trust. Performance metrics are unavailable due to the blocked content, but the presence of Cloudflare suggests potential for good performance once accessible. Security posture is weakened by the missing SSL certificate and disabled TLS protocols, although other security headers are well configured. No privacy, cookie, or terms of service policies are detected on the landing page, and no contact information or forms are visible, which limits transparency and user engagement. The domain WHOIS data confirms the domain's legitimacy and low expiry risk, supporting trust in the entity behind the site. Overall, the website currently presents a high risk due to inaccessibility and lack of HTTPS, which are critical for secure and trustworthy online presence. Strategic recommendations include immediate installation of a valid SSL certificate, enabling HTTPS, improving accessibility beyond the WAF challenge, and publishing essential policies and contact information to enhance compliance and user trust.

S

Silvatrim Colombia SAS

silvatrim.com.co

43

The website silvatrim.com.co exhibits a dangerously weak security posture, with critical vulnerabilities including lack of HTTPS encryption and absence of fundamental security headers. This exposes the business to data breaches, regulatory non-compliance, and significant reputational and operational risks. Immediate remediation is essential to protect customer data, comply with GDPR and NIS2 regulations, and maintain trust.