Romania security reports

The website rametablouri.ro currently serves only as a redirect to another domain (https://creativeart.ro) and contains no substantive content or business information. The domain is relatively new, registered in 2023, and lacks SSL/TLS configuration, resulting in no HTTPS support. The technical infrastructure is minimal, with only basic security headers present and no advanced security features enabled. Due to the lack of content, privacy policies, or contact information, the site has a low trust and professionalism rating. Security posture is weak due to missing HTTPS and related best practices. Overall, the site appears to be a placeholder or transitional domain rather than an active business website.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 12 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Q

Qidenus Technologies

qidenus.com

31

Qidenus Technologies is a specialized manufacturer of high-performance V-shaped book scanners and related capture software, serving a global clientele including libraries, archives, museums, and cultural heritage organizations. The company positions itself as a market leader with a strong product portfolio and a network of trusted partners and distributors worldwide. The website reflects a professional and well-branded digital presence with comprehensive product information and customer engagement features. Technically, the site is built on WordPress with modern plugins for SEO and analytics, hosted on LiteSpeed servers with PHP 8.1. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is partially addressed with cookie policies and consent mechanisms, but GDPR compliance indicators are limited. Overall, the business credibility is strong, but the security posture requires urgent improvement to protect data and enhance trust.

W

Wings Telecom is under construction

wingstelecom.ro

21

The Wings Telecom website is currently under construction and provides no substantive content about the business, its services, or contact information. The site uses WordPress with an under construction plugin and Bootstrap for styling, hosted on a LiteSpeed server with DNS managed by romarg.com. The lack of a valid SSL certificate and HTTPS support significantly undermines the site's security posture. Basic security headers are present but insufficient to protect against modern threats. No privacy, cookie, or terms of service policies are available, indicating poor compliance with data protection regulations such as GDPR. Overall, the website is not yet ready for public use and lacks essential trust and security features. From a technical perspective, the site shows minimal digital maturity with no performance data available and basic mobile optimization. The absence of analytics or tracking scripts suggests no active user engagement or marketing efforts. The DNS and mail configurations appear standard and legitimate, but the lack of content and security measures limits business credibility. Security evaluation highlights critical issues including no HTTPS, no HSTS, and no certificate transparency compliance. These gaps expose users to potential data interception and reduce trustworthiness. The absence of incident response or vulnerability disclosure information further indicates immature security practices. In summary, Wings Telecom's website is in an early development stage with significant improvements needed in content, security, and compliance before it can be considered a reliable and professional online presence.

Semmelrock, a brand under Wienerberger AG, specializes in manufacturing and distributing high-quality concrete paving and landscaping products across Central and Eastern Europe, with a strong presence in Romania. The website reflects a mature business with consistent branding and a focus on sustainability and innovation. Technically, the site is built on Adobe Experience Manager and integrates marketing tools like Google Tag Manager and Cookiebot for consent management. However, the absence of a valid SSL certificate and HTTPS significantly weakens the security posture, exposing users to potential risks. Privacy compliance is basic, with privacy and cookie policies present but lacking explicit GDPR compliance details. Contact information is limited to a contact form without visible emails or phone numbers, which may affect user trust. Overall, the site is professional and content-rich but requires urgent security improvements to align with modern standards.

O

OMV Petrom

petrom.com

40

OMV Petrom is a large, mature energy company primarily operating in Romania, with a focus on oil and gas exploration, production, refining, and retail services. The website serves as a corporate portal providing news, financial results, and information about strategic initiatives such as sustainability and electric mobility. The company is part of the OMV Group, a well-established parent organization. Technically, the website uses modern web technologies including jQuery and a CDN service (ZENEDGE), with Azure DNS hosting. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security deficiency. Security headers are present but cannot compensate for the missing SSL/TLS encryption. Privacy compliance is minimal, with no explicit privacy or terms of service pages found, though a cookie consent mechanism is implemented. Contact information is limited to a contact page and search form, with no direct emails or phone numbers publicly listed. Overall, the website is professionally designed and provides relevant business content but requires urgent improvements in security and privacy compliance to meet modern standards.

L

Log Consulting Services

log-cs.com

40

Log Consulting Services is a specialized business consulting firm focusing on AI-powered process optimization, advanced logistics (5PL), and fiscal strategies for market expansion, particularly in Europe. The company leverages over a decade of Lean and Six Sigma expertise combined with AI analytics to deliver tailored solutions that enhance operational efficiency and support sustainable growth. The website is built on the Wix platform, utilizing various Wix apps and technologies to provide a professional and content-rich user experience. However, the site currently suffers from an invalid SSL certificate, which poses a significant security risk and undermines user trust. Additionally, while a cookie policy is present, there is no explicit consent mechanism, which may affect privacy compliance. Overall, the business presents itself as credible and professional, with clear contact information and structured data enhancing its online presence.

H

HRmaster

hrmaster.ro

40

HRmaster.ro is a Romanian-based HR software provider offering a modular and scalable solution for companies of all sizes to automate and manage human resources processes. The company positions itself as a recognized player in the European HR Tech market with a focus on recruitment, employee management, training, and performance evaluation. The website is built on Joomla CMS with modern UIkit frontend framework and integrates Google services for analytics and bot protection. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks. Privacy compliance is partially addressed with a privacy policy and GDPR consent on forms, but lacks cookie consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the site demonstrates good content quality and business legitimacy but requires urgent security improvements.

D

DUNA MÉDIASZOLGÁLTATÓ NONPROFIT ZRT.

duna-haz.com

58

Duna-Ház is a non-profit cultural and educational organization based in Torockó, Romania, offering a variety of programs such as children's activities, workshops, films, trainings, lectures, and online events. The website serves as a portal for event information and community engagement, targeting local families and youth interested in cultural enrichment. The organization appears to have a stable market position as a local non-profit with a mature domain and consistent branding. Technically, the website is built on WordPress using Elementor and Slider Revolution, but suffers from slow load times and lacks HTTPS security, which is a critical vulnerability. The absence of a valid SSL certificate and security headers exposes the site to risks and undermines user trust. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or advanced GDPR features. Contact information is clearly provided, including email and physical address, and social media presence is active on Facebook and YouTube. Overall, the site is functional but requires urgent security improvements to protect user data and enhance credibility.

R

RomanianCompanies

romanian-companies.eu

59

RomanianCompanies.eu is a data service platform providing comprehensive information on Romanian companies including contact details, financial data, legal status, and monitoring services. The platform targets businesses and individuals seeking detailed company data and offers both free and subscription-based access models. It holds a moderate market position with notable clients such as Altex, Emag, and Mercedes, indicating trust and relevance in the Romanian business data sector. Technically, the website employs modern frontend technologies including jQuery, Bootstrap, Font Awesome, and Google Fonts, hosted on infrastructure using Google Cloud DNS. However, the SSL certificate is invalid and does not match the domain, which undermines user trust and security. The site lacks TLS protocol support and HSTS, exposing it to potential security risks. Security headers like X-Frame-Options and X-Content-Type-Options are implemented, but cookie consent mechanisms and GDPR compliance are minimal or absent. Overall, the platform demonstrates good content quality and user experience but requires significant improvements in security and privacy compliance to enhance trust and regulatory adherence.

L

ListaFirme

listafirme.ro

88

ListaFirme.ro is a Romanian business directory platform providing comprehensive data on active Romanian companies, including contact details, financial information, legal proceedings, debts, and group affiliations. The platform targets businesses and individuals seeking detailed company information and offers services such as subscription-based data access, SMS access, monitoring of insolvency procedures, legal cases, and official documents. The site is positioned as a trusted data provider with notable clients and a consistent brand presence. Technically, the website uses established frontend technologies like jQuery, Bootstrap, Font Awesome, and Google services for analytics and authentication. However, the site lacks a valid SSL certificate and modern TLS support, which significantly impacts its security posture. Security headers are partially implemented, but critical features like HSTS and cookie consent mechanisms are missing. The platform integrates Google Analytics for user tracking but does not provide explicit cookie or privacy consent mechanisms, which may raise compliance concerns. Overall, the site offers valuable business data services but requires urgent improvements in security and privacy compliance to protect users and enhance trust.

B

BULL Software

bull-software.ro

52

BULL Software is a Romanian IT company specializing in comprehensive digital solutions including website creation, online stores, CRM/CMS applications, SEO optimization, and mobile app development. With over 10 years of experience and ISO 9001 and ISO 27001 certifications, the company positions itself as a trusted partner for businesses seeking to enhance their digital presence. Their website demonstrates a professional approach with clear service offerings, client testimonials, and a strong focus on quality and customer satisfaction. Technically, the site is built on WordPress with Elementor and optimized with LiteSpeed Cache, delivering fast performance and good mobile responsiveness. Security posture is solid with valid SSL and no known vulnerabilities, though improvements in TLS protocol support and security headers are recommended. The company maintains GDPR compliance with a cookie consent mechanism and privacy policies.

This website has 4 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

The website gemius.ro exhibits significant security and compliance deficiencies, particularly in privacy governance and foundational security controls, resulting in a very high risk posture. Critical gaps in GDPR adherence and missing essential security headers leave the business vulnerable to data breaches, regulatory penalties, and reputational damage. Immediate remediation is required to establish trust with users, comply with EU regulations, and mitigate cyber risks.