Denmark security reports

O

Obton Forvaltning A/S

obton.com

59

Obton Forvaltning A/S operates as an investment management company specializing in renewable energy projects, particularly solar energy and battery storage. The company targets investors seeking stable, passive income streams independent of traditional financial markets. With over 4,000 investors and a documented track record, Obton positions itself as a credible player in the Danish renewable energy investment sector. The website content is primarily in Danish and provides detailed information about investment opportunities and the company's business model. Technically, the website employs a modern but somewhat dated technology stack including AngularJS 1.7.8, jQuery, Bootstrap 4, and Font Awesome. It uses Umbraco CMS and integrates multiple third-party analytics and marketing tools such as Google Analytics, Microsoft Clarity, and various advertising networks. The site is mobile-optimized and includes a comprehensive cookie consent mechanism compliant with GDPR requirements. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for bot protection. However, explicit security headers like Content-Security-Policy and X-Frame-Options were not confirmed in the provided data. The use of AngularJS, which is end-of-life, may pose future security risks. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional and trustworthy in appearance, but the absence of WHOIS registration data for the domain www.obton.com is a significant concern. This inconsistency reduces the domain's trustworthiness and suggests the need for further verification. The lack of visible contact information and terms of service pages also slightly detracts from business credibility. Strategic improvements in transparency and security header implementation are recommended.

J

JSK Vibrations

jsk-vibrations.com

58

JSK Vibrations is a specialized Danish consultancy firm focused on vibration measurement, analysis, and mitigation services primarily for the construction industry in Scandinavia. The company offers services such as design and delivery of vibration dampers, vibration measurements on various building components, and expert calculations to ensure structural vibration comfort. The website presents a professional image with clear contact details and client references, positioning JSK Vibrations as a trusted niche player in its market segment. Technically, the website is built on WordPress hosted by Automattic Inc. (WordPress.com), utilizing common plugins like Yoast SEO and Jetpack. The site includes multiple tracking and marketing scripts such as Facebook Pixel, LinkedIn Insight Tag, and Albacross, although Google Analytics is present but not fully configured. The site is mobile-optimized with good SEO metadata and structured data, but lacks some security best practices such as security headers and DNSSEC. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, the absence of security headers and privacy/cookie policies indicates room for improvement in compliance and security posture. No blocking or WAF challenges were detected, and the domain registration is consistent and legitimate, registered through Automattic Inc. Overall, JSK Vibrations presents a credible and professional online presence with a solid business focus. Strategic improvements in privacy compliance, security headers, and analytics configuration would enhance trust and security posture further.

A

adibus a/s

adibus.dk

59

Adibus a/s is a Danish company specializing in innovative IT and display solutions for public transportation providers and operators. Their offerings include real-time information systems, passenger information and infotainment systems, next stop announcements, station screens, automatic passenger counting, lane management, destination signage, Wi-Fi, driver applications, and various operational optimization tools. The company targets public transport operators primarily in Denmark and the Nordic region, positioning itself as a key technology provider in this niche market. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website employs modern frontend technologies such as Bootstrap 4, jQuery, FontAwesome, Google Fonts, and FancyBox, with a CMS likely based on Dynamicweb. The site is mobile optimized and integrates Cookiebot for cookie consent management, alongside Google Analytics for visitor tracking. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses Cookiebot for GDPR-compliant cookie consent. However, no advanced security headers were detected, and no explicit incident response or vulnerability disclosure information is provided. The absence of WHOIS data limits domain trust assessment, though the website content and professional presentation support legitimacy. Overall, the website demonstrates a solid digital presence with good privacy compliance and security posture but would benefit from enhanced security headers, clearer contact information, and published security policies to strengthen trust and compliance.

&

&Robin

androbin.dk

53

AndRobin ApS operates as a specialized healthcare strategic and creative agency based in Denmark, founded in 2019. The company offers a comprehensive suite of services including strategy, creativity, design, and scientific engagement, targeting healthcare organizations and pharmaceutical clients. Their market position is that of a niche agency with a strong focus on medical communications and scientific storytelling, supported by a professional and content-rich website. Technically, the website is built on WordPress using Elementor and Yoast SEO, with modern tracking and cookie consent mechanisms in place. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is basic, with no explicit privacy policy or terms of service detected, though cookie consent is present. Overall, the website demonstrates good business credibility and technical maturity, with room for enhancements in security and privacy documentation.

H

H.W.Larsen A/S

hwl.dk

68

H.W.Larsen A/S is a Danish company specializing in professional kitchen equipment, including knives, baking tools, kitchen utensils, chef clothing, and large kitchen inventory. Established in 1934, the company targets professional kitchens and catering businesses, positioning itself as a trusted supplier with a long history. The website supports multiple languages and international presence through hreflang tags, indicating a mature business model focused on e-commerce and B2B retail. Technically, the site uses modern frameworks like UIkit and integrates various marketing and analytics tools such as Google Tag Manager, Cookiebot, Klaviyo, and Ahrefs Analytics, with a consent management system in place to comply with privacy regulations. However, explicit privacy policies and terms of service pages were not detected in the provided content, which may affect compliance perception. Security posture is moderate, with no visible security headers or explicit security policies, but HTTPS usage is assumed. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for established businesses. Overall, the website is professional, well-structured, and targets a niche market effectively.

Hotel Pro Forma is a Danish performing arts company specializing in innovative stage performances, installations, and cultural events. The website showcases upcoming and past projects, event dates, and provides information about the organization. The company targets performing arts audiences and collaborators, positioning itself as an established cultural institution in Denmark with international reach. Technically, the website is built on WordPress using popular plugins such as Yoast SEO, Revolution Slider, and Events Manager, indicating a mature digital infrastructure. The site is mobile-optimized and includes SEO best practices, though accessibility features are basic. Security posture is adequate with HTTPS enforced and Google Analytics tracking with opt-out options, but lacks visible security headers and formal privacy or cookie policies. WHOIS data is unavailable, which slightly reduces trust but the presence of clear contact information and professional design supports legitimacy. Overall, the site is functional and professional but could improve privacy compliance and security transparency.

F

FirstAgenda

firstagenda.com

70

FirstAgenda is a Danish technology company specializing in tailored meeting management solutions designed for small boards, large enterprises, and public organizations. Their platform aims to simplify meeting preparation, facilitate material distribution, and create structured, productive meetings. The company positions itself as a provider of comprehensive and user-friendly meeting tools, leveraging a SaaS business model. The website reflects a professional and consistent brand image with clear messaging targeted at organizational users seeking efficient meeting solutions. Technically, the website is built on the Squarespace platform, utilizing modern web technologies including Google Fonts, Cookiebot for cookie consent, Microsoft Clarity for analytics, and Weglot for multilingual support. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. The use of HTTPS and HSTS indicates a strong baseline security posture, although some advanced security headers are missing. From a security perspective, the site implements cookie consent mechanisms and uses reputable analytics and tracking services with moderate user tracking. However, the absence of a publicly accessible privacy policy, terms of service, and contact information for security incidents represents compliance and trust gaps. The WHOIS data is notably missing or unavailable, which raises questions about domain registration legitimacy despite the active and professional website presence. Overall, FirstAgenda presents a credible and functional online presence with room for improvement in transparency, privacy compliance, and security best practices. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact channels for incident response to strengthen trust and compliance.

P

Penneo A/S

penneo.com

60

Penneo A/S operates a secure digital signing and KYC workflow platform targeting businesses seeking to simplify complex document workflows. Established in 2013, the company has positioned itself as a trusted provider with a strong customer base and significant usage metrics, particularly in Denmark. The website reflects a professional B2B SaaS model with integrations into common business software. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted on AWS infrastructure. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is partial, with consent mechanisms in place but lacking explicit privacy and cookie policies. Business credibility is high, supported by social proof and structured data. Overall, the site is well-designed and functional but could improve transparency and security hardening.

A

Amplexa Genetics A/S

amplexa.com

67

Amplexa Genetics A/S is a Denmark-based healthcare company specializing in advanced genetic testing services, including fertility solutions, clinical diagnostics, neurology-related genetic tests, and research & development support. The company targets healthcare professionals, fertility clinics, patients, and research institutions, positioning itself as a specialized provider with innovative offerings such as non-invasive preimplantation genetic testing (niPGT-A) and comprehensive carrier screening programs. The website reflects a mature business with a domain age of over 17 years, consistent with its market presence. Technically, the website is built on modern frameworks including Next.js and React, with content managed via Sanity CMS. It is hosted on One.com and employs best practices such as HTTPS, cookie consent mechanisms, and responsive design, ensuring a fast and accessible user experience. The site integrates Stripe for payment processing and uses Cookiebot for privacy compliance. From a security perspective, the site demonstrates good posture with HTTPS enforcement, security headers, and encrypted communication for sensitive data. However, DNSSEC is not enabled, and no dedicated security policy or incident response page is present, which are areas for improvement. No vulnerabilities or suspicious patterns were detected. Overall, Amplexa Genetics presents a professional, trustworthy, and compliant online presence suitable for its healthcare sector audience. Strategic recommendations include enabling DNSSEC, publishing a security policy, and establishing a vulnerability disclosure program to enhance trust and security maturity.

U

Uddannelseshuset

uddannelseshuset.dk

47

Uddannelseshuset.dk is an established Danish educational website offering courses primarily for leaders and employees. The business has been active since 1998, indicating a mature presence in the education sector. The website uses WordPress with the Divi theme and integrates Yoast SEO for search engine optimization. Google Tag Manager is employed for analytics and marketing purposes. While the site is well-structured and mobile-optimized, it lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security measures such as DNSSEC and security headers are absent, representing potential areas for improvement. Overall, the website presents a professional image but would benefit from enhanced privacy and security practices to strengthen trust and compliance.

T

Think PR

thinkpr.dk

53

Think PR is a creative communications, public relations, and social media agency operating since 2006, primarily serving businesses seeking PR and social media services. The website is built on WordPress with modern technologies such as Yoast SEO and WP Rocket, indicating a moderate level of digital maturity and performance optimization. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC, and no explicit security or privacy policies are published. Overall, the site presents a professional image but could improve transparency and compliance by publishing comprehensive privacy and security policies and enhancing security configurations.

A

Aumento Law firm

aumento.dk

64

Aumento Law firm is a modern legal services provider based in Copenhagen, Denmark, offering a broad range of legal expertise through a team of over 50 attorneys and 25 practice areas. The firm targets businesses and individuals seeking professional legal advice and representation. Their website reflects a professional and consistent brand image, with comprehensive contact information and a clear presentation of their services. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Cookiebot for cookie consent management and Hotjar for analytics, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs standard security headers, and provides a granular cookie consent mechanism, demonstrating good compliance with privacy regulations like GDPR. However, the absence of explicit terms of service and security policy pages suggests areas for improvement in transparency and compliance documentation. Overall, the domain WHOIS data is privacy-protected, which is typical for professional firms, and no suspicious indicators were found, supporting the legitimacy of the business.

K

Kilsmark A/S

kilsmark.dk

51

Kilsmark A/S operates as a parent company providing communication, financial, and human resources services to its sister companies Palcut A/S and Minkpapir A/S. The company is positioned as a small-sized business entity based in Denmark, founded in 2019. The website reflects a professional corporate presence with a focus on business-to-business services within its niche. Technically, the website is built on WordPress using the Divi theme, leveraging modern web fonts and cookie consent management via Cookiebot, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service. Overall, the website is functional and professional but could improve transparency and security documentation to enhance trust and compliance.

INKA Consult is a small consultancy firm based in Denmark, specializing in leadership, organizational development, and advisory services for both Danish organizations and development programs in various developing countries. Their business model focuses on providing strategic consulting, coaching, facilitation, and training courses. The website is built on TYPO3 CMS with a Bootstrap package, reflecting a moderate level of technical maturity and good mobile optimization. However, the site lacks advanced security headers and published privacy or security policies, which are areas for improvement. The domain is well-established since 2002, supporting the company's credibility. Overall, the website presents a professional image but could enhance its security posture and privacy compliance to better align with modern standards.

S

SEAMAR Scandinavia

seamar.dk

45

SEAMAR Scandinavia is a Denmark-based manpower leasing and recruitment company specializing in providing skilled and unskilled labor solutions worldwide for the maritime, offshore, industrial production, and construction sectors. With over 15 years of experience and multiple offices across Europe, the company offers comprehensive services including recruitment, employment, certification, transport and housing arrangements, payroll, and provision of workwear and health cards. The website reflects a professional and consistent brand presence targeting businesses in relevant industries. Technically, the site is built on WordPress using popular plugins and themes, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration and website content are consistent and trustworthy, supporting a medium-sized business profile.

Personalehuset.dk is a Danish content website focused on providing articles across a broad range of lifestyle and practical topics. The site targets Danish-speaking users interested in subjects such as work, leisure, home decoration, IT, and health. The business model is primarily content publishing via a WordPress platform, with no visible monetization or e-commerce features. Technically, the site uses WordPress 6.5.5 with standard plugins and Google Fonts, hosted under the registrar Simply.com A/S. Performance and mobile optimization are moderate to good, but accessibility and SEO are basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, which are recommended for improved protection. Privacy compliance is poor due to the absence of privacy and cookie policies, and no GDPR indicators are present. Contact information is minimal, with no explicit emails or phone numbers found, only a contact form. Overall, the site is functional but basic in professionalism and security maturity.

H

Hans Følsgaard A/S

hf.net

68

Hans Følsgaard A/S is a global technology company specializing in the development, production, and delivery of customized solutions and branded products across industrial, infrastructure, renewable energy, power engineering, telecommunications, and transportation sectors. The company targets B2B clients worldwide, positioning itself as a key player with a diversified product portfolio and strong industry presence. The website reflects a professional and consistent brand image with good content quality and clear navigation tailored for its industrial audience. Technically, the website is built on the Rapido CMS platform and leverages modern web technologies including Google Tag Manager, Cookiebot for cookie consent management, and YouTube iframe API for embedded media. The site is mobile-optimized with good SEO practices and uses HTTPS to secure communications. However, some security headers are not explicitly detected, suggesting room for improvement in security hardening. From a security and compliance perspective, the site implements a comprehensive cookie consent mechanism aligned with GDPR requirements, including granular user controls and detailed cookie declarations. No explicit contact information or security policies are visible, and the WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. Despite this, the website content and structure indicate a legitimate business operation. Overall, the site demonstrates a solid digital presence with good privacy compliance and user experience. The main risk lies in the lack of transparent domain registration data and absence of explicit contact and security policy information, which should be addressed to enhance trust and compliance.

The website arkitekthusetvodskov.dk is currently inaccessible due to a Web Application Firewall (WAF) or security challenge page implementing a JavaScript Proof-of-Work captcha. This prevents access to any meaningful business content, contact information, or policies. The domain is registered since 2011 and appears legitimate based on WHOIS data, but no further business details are available from the site content. The technical infrastructure includes use of JavaScript, Web Workers, and AWS Cloudfront CDN for resource delivery. However, the lack of accessible content and security headers, combined with no visible privacy or cookie policies, results in a very low security and compliance posture. The site requires cookies enabled but does not provide a consent mechanism or privacy disclosures. Overall, the site is currently not usable for end users or analysis due to blocking mechanisms.

K

Kommunikationsbureau i Aarhus | Montgomery

montgomery.dk

42

Montgomery is a strategic communications agency based in Aarhus, Denmark, specializing in branding, concept and campaign development, and visual communication including graphic design, copywriting, film, photo, and 3D services. Established in 2012, the company positions itself as a creative partner for businesses seeking to strengthen their brand presence through strategic and creative communication. The website reflects a professional agency with a portfolio of cases and active social media presence, targeting business clients in need of comprehensive communication solutions. Technically, the website is built on WordPress using modern plugins such as LayerSlider, Slider Revolution, WPBakery Page Builder, and HubSpot for analytics and cookie consent. The site is mobile optimized with good SEO practices and moderate performance. However, some accessibility features are basic, and there is room for improvement in security headers and DNSSEC implementation. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers that could enhance protection against common web threats. No explicit security policies or incident response contacts are published, which could be a gap in transparency and readiness. The cookie consent mechanism is implemented via HubSpot, indicating some level of privacy compliance, but no privacy policy or terms of service pages were found. Overall, Montgomery presents a credible and professional business with a solid digital presence but should enhance its privacy and security disclosures to improve trust and compliance with data protection regulations.

Africa Automotive is a Denmark-based company specializing in supplying project vehicles and transport solutions primarily to international commercial companies, government organizations, and NGOs operating in Sub Saharan Africa. The company holds a strong market position as the sole appointed supplier of MAN trucks and spare parts to UN organizations and the US government, highlighting its trusted status in the humanitarian and aid sectors. Their offerings include a large stock of new vehicles, special conversions, and comprehensive shipment services worldwide. Technically, the website is built on WordPress using the X Theme and several plugins, with moderate performance and good mobile optimization. However, privacy compliance is lacking, with no visible privacy or cookie policies and no consent mechanisms, which poses compliance risks. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Overall, the site presents a professional business front with moderate trustworthiness but requires improvements in privacy and security transparency to enhance compliance and user trust.

S

Scan Lux Flexible A/S

scanlux-flexible.dk

52

Scan Lux Flexible A/S is a Danish manufacturing company specializing in innovative plastic and paper packaging solutions with a strong focus on environmental sustainability and customer-tailored consultancy. The company has a solid market position supported by its parent company, Stok Group, and emphasizes reducing environmental impact through its services. The website reflects a professional and consistent brand image targeting business customers in Denmark. Technically, the site is built on Drupal 9 with modern web technologies and includes performance and mobile optimization features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and DNSSEC are missing. Privacy compliance is basic, lacking a dedicated privacy policy page. Overall, the website is trustworthy and functional, supporting the company's business credibility.