Denmark security reports

R

ROOM2PLAY®

room2play.dk

70

ROOM2PLAY® is a Danish-based retailer and distributor specializing in toys, including sustainable and classic wooden toys. Established in 2006, the company operates a comprehensive e-commerce platform targeting both private consumers and business clients. Their market position is supported by a broad product catalog and partnerships with multiple toy brands. Technically, the website leverages modern web technologies such as AngularJS and Google reCAPTCHA, hosted on a platform using HostedShop CMS with CDN support, providing a moderate to good performance and mobile optimization. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and use of reCAPTCHA to protect forms, although some security headers could be improved. Privacy compliance is robust with clear GDPR-aligned policies and cookie management. Overall, the website presents a professional and trustworthy digital presence with clear contact information and active social media engagement.

Salonsupport A/S operates a professional B2B e-commerce platform serving Denmark's hairdressing industry, offering a wide range of hair care products, accessories, and stylist education. Established in 2004, it holds a strong market position as one of the largest suppliers in its sector. The website is built on modern web technologies including Nuxt.js and Tailwind CSS, providing a responsive and user-friendly experience. Marketing and tracking are managed via Klaviyo, indicating a focus on customer engagement. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

I

Iterator IT Iterator-IT

iterator-it.dk

52

Iterator IT is a Danish technology company specializing in custom IoT solutions and business-driven software development. Founded in 2016, the company focuses on digitalizing production processes, optimizing business operations, and creating data-driven value for its clients. Their services include IoT consulting, sensor integration, cloud data collection, and application development, targeting businesses seeking tailored technology solutions. The website reflects a professional and consistent brand image with a clear focus on technology and innovation in the IoT space. Technically, the website is built on WordPress using a modern and feature-rich theme (Brooklyn) and incorporates numerous JavaScript libraries for enhanced user experience. It employs Google Analytics and Tag Manager for visitor tracking and includes a cookie consent mechanism compliant with GDPR requirements. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Hosting and domain registration are consistent with the company's Danish origin. From a security perspective, the website enforces HTTPS with a valid SSL certificate and uses cookie consent banners to manage user privacy. However, it lacks DNSSEC for DNS security and does not implement advanced security headers, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. The absence of a privacy policy and terms of service pages is a compliance gap that should be addressed. Overall, Iterator IT presents a credible and professional online presence with a solid technical foundation and moderate security posture. Strategic improvements in privacy documentation and security headers would enhance compliance and trustworthiness.

D

Den Sociale Retshjælps Fond

socialeretshjaelp.dk

64

Den Sociale Retshjælps Fond is a Danish non-profit organization dedicated to providing free legal aid and debt counseling services across Denmark. The website clearly targets Danish citizens seeking assistance with legal and financial issues, positioning itself as a trusted social aid foundation. The business model revolves around offering free advisory services, supported by a consistent brand presence and active social media engagement. The website's content is relevant and professionally presented, supporting its mission effectively. Technically, the website is built on WordPress using a modern stack including Elementor for design, Yoast SEO for optimization, and Cookiebot for cookie consent management. Hosting appears to be provided by One.com, and the site demonstrates moderate performance with good mobile optimization. Accessibility features are basic but present, and SEO practices are well implemented. From a security perspective, the site employs HTTPS and includes a cookie consent mechanism, enhancing privacy compliance. The presence of security plugins like Stop User Enumeration indicates awareness of security best practices. However, the absence of explicit security headers and a privacy policy page suggests room for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a solid risk profile with a good security posture and trustworthy business legitimacy. Strategic recommendations include adding comprehensive privacy and terms of service pages, enhancing security headers, and publishing a vulnerability disclosure policy to further strengthen compliance and trust.

The website at udstillingsdesign.dk is currently inaccessible, presenting only a generic 'Site Currently Unavailable' error page with no substantive content or business information. This indicates either a hosting issue or the site is offline. The lack of any contact details, privacy policies, or terms of service severely limits the ability to assess the business or its compliance posture. Technically, the site uses basic HTML and CSS with Google Fonts but lacks modern security features such as HTTPS and security headers. No analytics or tracking technologies are detected, suggesting minimal digital maturity. The WHOIS data is consistent and indicates a Danish registration, but the absence of website content reduces trust and credibility. Overall, the site is not operational and scores very low on content quality, security, and privacy compliance.

M

MERQUR

merqur.dk

56

MERQUR is a Danish service provider specializing in accounting, administration, bookkeeping, and consulting services. The company positions itself as a quality-focused provider delivering careful craftsmanship at competitive pricing. The website is built on WordPress using the Enfold theme and includes modern analytics tools such as Google Analytics and Matomo, indicating a moderate level of digital maturity. The site is mobile optimized and provides a cookie consent mechanism with detailed user controls, reflecting awareness of privacy compliance requirements. However, explicit privacy policies, terms of service, and contact information are not present in the analyzed content, which may impact user trust and compliance completeness. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and incident response information.

E

Engskov Maskinfabrik A/S

engskov.dk

46

Engskov Maskinfabrik A/S is a Danish manufacturing company specializing in metal fabrication and machining services, with over 50 years of industry experience. The company targets industrial clients requiring high-quality smede- and maskinfabrik services. The website reflects a professional B2B business model with a clear focus on quality and timely delivery. Technically, the site is built on WordPress using the Astra theme, incorporating modern web technologies and standard SEO practices. It is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is strong with HTTPS enforced and appropriate security headers, though the absence of a public security policy and incident response details suggests room for improvement. The lack of WHOIS data limits domain trust assessment, but the website's professional presentation supports its legitimacy. Overall, the site is well-structured and trustworthy, serving its target audience effectively.

F

Fibertex Nonwovens A/S

fibertex.com

55

Fibertex Nonwovens A/S is a well-established manufacturer specializing in nonwoven and performance materials serving diverse industrial sectors such as automotive, construction, filtration, and healthcare. With over 50 years of industry experience and a global footprint including multiple subsidiaries, Fibertex positions itself as a leader in delivering high-performance, sustainable solutions. The company targets industrial clients requiring specialized materials and emphasizes innovation and partnership in its business approach. Technically, the website is built on Drupal 10, leveraging modern web technologies and includes a cookie consent mechanism, indicating a mature digital presence. Security-wise, the site enforces HTTPS and uses consent management but lacks explicit published security policies or incident response information, which could be improved. The absence of WHOIS registration data is a notable gap but does not detract significantly from the overall legitimacy given the comprehensive business content and certifications. Strategic recommendations include enhancing security transparency, publishing incident response contacts, and improving WHOIS registration visibility to bolster trust.

C

CIFF

ciff.dk

67

CIFF is a well-established international fashion trade show organizer based in Denmark, operating since 1998. The company hosts bi-annual events that serve as major platforms for the fashion industry, targeting exhibitors and buyers globally. Their website reflects a professional and modern digital presence built on Next.js and React, with strong mobile optimization and user experience. Privacy compliance is robust, featuring a comprehensive privacy policy linked to their parent company Bella Group and a fully integrated Cookiebot consent mechanism. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, CIFF demonstrates a mature business and digital infrastructure with high trustworthiness and compliance.

S

Spejder Sport A/S

spejdersport.dk

65

Spejder Sport A/S is Denmark's first and largest outdoor retail store, established in 1945, specializing in outdoor clothing and equipment with a strong e-commerce presence. The website targets outdoor enthusiasts, families, and youth, offering a broad range of products and customer guidance. The company holds a solid market position within the Danish retail sector for outdoor goods. Technically, the website is built on a modern stack including Shopware CMS, Google Tag Manager, Google reCAPTCHA v3, and Cloudflare for hosting and security. It employs a comprehensive cookie consent mechanism compliant with GDPR, integrates multiple analytics and marketing tools, and demonstrates good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS, uses bot protection, and provides detailed cookie disclosures. However, explicit security headers like X-Frame-Options and Content Security Policy are not confirmed and could be improved. No incident response or vulnerability disclosure information is publicly available, which could enhance trust. Overall, the website presents a professional and trustworthy digital presence with moderate to good security posture and privacy compliance. The absence of direct contact information and terms of service pages are minor gaps. Strategic improvements in security headers and transparency around incident response would strengthen the security and compliance profile.

I

Interstudio

interstudio.dk

46

Interstudio is a Danish interior design and retail company specializing in high-quality design furniture and interior consultancy services for both private homes and businesses. Established in 1996, the company maintains a niche market position with a focus on premium international design brands. Their digital presence includes a WordPress-based website with WooCommerce for online shopping, supported by Elementor for content management and Google Tag Manager for analytics. The website is well-structured, mobile-optimized, and provides clear navigation and contact information, including social media channels and a newsletter subscription with GDPR-compliant consent. From a technical perspective, the website employs modern web technologies and plugins, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though there is room for improvement by enabling DNSSEC and implementing additional security headers. Privacy compliance is addressed through a cookie policy and consent mechanism, but lacks explicit security policies or incident response information. Overall, Interstudio demonstrates a solid business and technical foundation with a professional online presence. The security posture is reasonable but could be enhanced to meet higher standards. Strategic recommendations include strengthening domain security, publishing security policies, and continuous monitoring of third-party scripts to mitigate risks.

S

Saltfoss

seaborg.co

53

Saltfoss is a newly founded company (2025) focused on innovating nuclear energy technology by developing a fundamentally different nuclear power plant concept. Their flagship product is the Compact Molten Salt Reactor (CMSR) deployed on modular floating power barges designed for sustainability, safety, and cost-effectiveness. The company targets energy market stakeholders and aims to revolutionize energy markets by providing abundant, affordable, and low-emission energy solutions. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy or terms policies. Contact information is not explicitly provided, which may impact user trust. Overall, the website and domain registration indicate a legitimate and transparent business entity with room for improvement in security and compliance documentation.

C

Capital Investment

capitalinvestment.dk

50

Capital Investment is a Danish real estate investment and asset management company specializing in the Greater Copenhagen property market. Established in 2013, it serves international investors seeking exposure to Danish real estate through comprehensive property management, asset management, and letting solutions. The company positions itself as a trusted local partner with deep market knowledge and a commitment to sustainable value creation. Technically, the website is built on WordPress using the Avada theme and integrates modern SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Hotjar. The site is mobile optimized and provides a professional user experience with clear navigation and branding consistency. Security-wise, the website uses HTTPS with good SSL configuration but lacks advanced security headers and explicit security policies or incident response contacts. Privacy compliance is addressed with a privacy and cookie policy including a consent mechanism, though GDPR compliance details are basic. Overall, the website reflects a credible and professional business presence with room for improvement in security and compliance transparency.

W

WellPerform

wellperform.com

55

WellPerform is a specialized consultancy and engineering firm operating primarily in the energy sector, offering services in well management, drilling and completion engineering, exploration, and development operations. Their portfolio includes projects in Oil & Gas, Geothermal, Carbon Capture Storage, and Salt Cavern wells, serving over 100 international clients with more than 600 completed projects. The company also provides recruitment services tailored to the energy industry. Technically, the website is built on Webflow and integrates modern web technologies such as Lottie animations, Cookiebot for cookie consent, and live chat tools, reflecting a moderate to good digital maturity. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms but lacks published privacy and terms of service policies, which are critical for compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy, although the professional content and contact details suggest a legitimate business presence. Overall, the website is well-designed and functional but would benefit from enhanced transparency and compliance documentation.

A

Absalon & Co

absalon-co.dk

56

Absalon & Co is a Danish real estate advisory company specializing in bridging the gap between the property and retail sectors by offering services focused on optimizing retail leases and enhancing property values. The company emphasizes a holistic and independent advisory approach, targeting property owners, buyers, sellers, and developers. The website is professionally designed using the One.com Web Editor platform and hosted on One.com infrastructure, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enabled but lacking security headers and privacy policies, which impacts compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content is accessible and professional. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and security.

L

Lexsos

lexsos.dk

59

Lexsos operates a website hosted on the Squarespace platform, targeting a Danish audience with multilingual support via Weglot. The site presents a professional design with clear navigation but lacks detailed business descriptions and contact information. The technical infrastructure is modern, leveraging standard web technologies including jQuery and Cookiebot for cookie consent management. Security posture is solid with HTTPS and HSTS enabled, though additional security headers could enhance protection. Privacy compliance is addressed through a comprehensive cookie consent mechanism, but a dedicated privacy policy page is not explicitly found. The absence of WHOIS data limits domain legitimacy verification, posing a moderate risk. Overall, the website is functional and moderately secure but would benefit from enhanced transparency and business information.

M

MESSAGE

message.dk

71

MESSAGE.dk is an established Danish e-commerce retailer specializing in trendy clothing, shoes, and accessories. Operating since 1997, it serves primarily Danish consumers through its official online shop. The website leverages an enterprise-grade Sitecore Commerce platform and integrates multiple advanced marketing and analytics tools such as Google Analytics, Microsoft Clarity, Visual Website Optimizer, and Klaviyo, indicating a mature digital infrastructure. The site enforces HTTPS and provides a comprehensive cookie consent mechanism aligned with GDPR requirements, enhancing user privacy and compliance. However, the absence of explicit terms of service, visible contact information, and security headers suggests areas for improvement in legal completeness and security hardening.

G

Grumsen Development ApS

grumsendev.dk

61

Grumsen Development ApS is a Danish technology company specializing in custom software development, including app development, web development, and system integrations. Established in 2018 and headquartered in Esbjerg, Denmark, the company serves a nationwide business clientele with tailored digital solutions. Their market position is that of a trusted local provider with a diverse portfolio of projects and satisfied clients. The website reflects a professional and modern digital presence, showcasing their expertise and project experience effectively. Technically, the website is built using modern frameworks such as React and Next.js, with TypeScript and mobile app technologies like Swift and Flutter for iOS and Android platforms. The site is fast, mobile-optimized, and SEO-friendly, indicating a mature digital infrastructure. The presence of cookie consent mechanisms and privacy policy indicates attention to privacy compliance. From a security perspective, the site enforces HTTPS and uses secure forms, but lacks some advanced security headers and explicit security policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, the website and business demonstrate a strong digital maturity and security posture suitable for their market segment. Strategic improvements in security policy transparency and DNS security could further enhance trust and compliance.

N

Norm Invest

nord.investments

68

Norm Invest is a Danish financial services company offering automated, low-cost investment solutions targeted at Danish investors seeking simple and worry-free investment options. The company positions itself as a trustworthy and accessible platform with a strong customer satisfaction rating on Trustpilot. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and various marketing and analytics tools such as Mixpanel and AdRoll. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The absence of WHOIS registration data is a notable concern and warrants further verification. Overall, the website demonstrates a mature digital presence but could enhance privacy transparency by publishing explicit privacy and terms of service policies.

A

Audo Copenhagen

bylassen.com

71

Audo Copenhagen is a small, premium e-commerce business specializing in Danish design audio products, reflecting a blend of traditional craftsmanship and modern global outlook. The company operates primarily through a Shopify-based online storefront with regional subdomains for the US and Japan, indicating a global market approach. The website content is professionally designed with good branding consistency and clear navigation, targeting consumers interested in high-quality, design-focused audio equipment. Technically, the site leverages modern e-commerce technologies including Shopify's Dawn theme, Cloudflare DNS, and multiple marketing and analytics tools such as Klaviyo, Google Tag Manager, and Microsoft Clarity. Security measures include HTTPS enforcement, clientTransferProhibited domain status, and hCaptcha for form protection, although DNSSEC is not enabled and some security headers are not explicitly detected. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found in the analyzed content. Overall, the website demonstrates a moderate to good security posture and technical maturity but would benefit from enhanced privacy and security documentation.

S

ScandiSales

scandi.dk

44

ScandiSales is a well-established Danish company specializing in supplying specialty films, foils, and printing inks primarily to the Scandinavian graphic and packaging industries. As a subsidiary of Ubro A/S and with acquisitions such as the Swedish company Systemprint, ScandiSales holds a leading market position in Scandinavia. Their website reflects a professional B2B supplier model with a broad product portfolio and strong industry expertise. The company targets wholesalers and businesses requiring high-quality packaging materials and printing solutions. Technically, the website is built on WordPress with the Avada theme and related plugins, offering a modern and responsive user experience with good SEO and accessibility basics. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Privacy compliance is good with clear privacy and cookie policies, though cookie consent mechanisms could be enhanced. Overall, the domain and business information are consistent and trustworthy, supporting a medium-sized manufacturing entity with a solid digital presence.