South Africa security reports

N

Nerospec Group

nerospec.com

44

Nerospec Group is a South African technology company founded in 2014, specializing in innovative technology solutions that address challenges faced by major economic sectors. The company operates through multiple subsidiaries focusing on connected mines, connected machines, Internet of Things (IoT), electronic manufacturing, and purpose-built communication technologies. Their market position is that of an innovative technology group with a diversified portfolio targeting industrial and technological verticals. Technically, the website is built on WordPress using the Elementor page builder, incorporating modern web technologies such as jQuery, Font Awesome, and Google reCAPTCHA for form security. The site is mobile optimized and includes structured data for SEO enhancement. Performance is moderate with good SEO practices but could benefit from improved accessibility features. From a security perspective, the site uses HTTPS and domain registration protections like clientTransferProhibited status. However, it lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is weak, with no visible privacy or cookie policies, which is a significant gap given GDPR and other regulations. Overall, the website presents a professional and credible business front but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

R

Roamwork

roam.work

57

Roamwork is a Cape Town-based coworking space provider offering a variety of flexible workspace solutions including day passes, hot desks, dedicated desks, private offices, event spaces, meeting rooms, and studios. The company targets freelancers, startups, and small to medium businesses seeking professional and creative work environments. Their market position is strong locally with a diverse service portfolio and a focus on community and productivity. Technically, the website is built on WordPress with Elementor and integrates common analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile optimized and SEO friendly but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS and some security best practices but could be improved by enabling DNSSEC and adding security headers. The domain is privacy protected but legitimate and consistent with the business profile. Overall, the website is professional and credible but should enhance privacy compliance and security transparency.

WISPGate is a specialized enterprise software platform designed for Internet Service Providers (ISPs), Telcos, and network managers, offering integrated ISP management, billing, and CRM solutions. The platform provides a comprehensive suite of modules including billing management, network management, CRM, sales and marketing, and operations management, with a strong emphasis on customization and integration capabilities. The company targets ISPs and related telecommunications businesses primarily in South Africa, positioning itself as a robust solution for managing subscriber services and network infrastructure efficiently. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and utilizes popular plugins like Gravity Forms and Slider Revolution. It leverages Cloudflare for DNS and hosting infrastructure, ensuring good SSL configuration and moderate performance. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Analytics and advertising tools from Google are integrated, enabling moderate user tracking and marketing capabilities. From a security perspective, the site employs HTTPS and Google reCAPTCHA on forms, which are positive indicators. However, the absence of DNSSEC, security headers, and explicit security or privacy policies indicates room for improvement in security posture and compliance. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business location and domain registration is transparent, though the domain is relatively new compared to the business founding date. Overall, WISPGate presents a professional and functional online presence with solid business credibility but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

S

SynBurst (Pty) Ltd

synburst.com

64

SynBurst (Pty) Ltd is a South African technology company specializing in high performance network solutions, private cloud services, and voice communication products. With over 25 years of experience in ICT and telecommunications, SynBurst offers a range of services including private cloud hosting powered by VMware, Mikrotik consulting, NetBox DCIM hosting, network management, and voice solutions. The company targets businesses and organizations seeking reliable and scalable technology infrastructure solutions. Their market position is supported by a consistent brand presence, active partnerships, and a professional website showcasing their expertise and service offerings. Technically, the website is built on WordPress using Oxygen Builder, leveraging modern web technologies such as Google Fonts, jQuery, and integrates analytics tools like HubSpot and Google Analytics. The site is hosted behind Cloudflare DNS and uses HTTPS with a good SSL configuration. SEO is well implemented with Yoast SEO plugin and structured data in JSON-LD format. Mobile optimization and user experience are good, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain transfer protections enabled. However, DNSSEC is not enabled, and no explicit security headers were detected in the HTML content. There is no visible security policy or incident response information published on the site, and no cookie consent mechanism is implemented despite the presence of tracking scripts. These gaps suggest room for improvement in security posture and privacy compliance. Overall, SynBurst presents a credible and professional online presence with solid business credibility and technical implementation. The main risks relate to privacy compliance and security best practices, which if addressed, would enhance trust and reduce potential vulnerabilities.

P

PricewaterhouseCoopers

pwc.co.za

67

PwC South Africa is a leading professional services firm specializing in advisory, consulting, forensic, finance, strategy, risk, and technology services. The website reflects a mature enterprise-level business with a strong brand presence and a comprehensive service offering tailored to businesses in South Africa. The technical infrastructure is built on Adobe Experience Manager, leveraging modern JavaScript libraries and analytics tools such as Google Analytics and Adobe DTM, indicating a digitally mature platform. Security posture is moderate with HTTPS implied and some security best practices observed, but lacks explicit security headers and published security policies. The absence of WHOIS data due to privacy protection is typical for large firms but reduces transparency. Overall, the site is professional and trustworthy but could improve privacy and security disclosures.

MikroTikSA is a specialized network operator based in South Africa, providing high-performance wireless and wired networking solutions primarily to private and government sectors. Established in 2007, the company leverages deep technical expertise to deliver customized connectivity projects, including fibre installations, PtP and PtMP wireless links, cabling, hotspot solutions, and remote support. They also offer specialized MikroTik training in partnership with recognized training providers. The website reflects a mature business with a clear market position and trusted brand associations. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and integrates a third-party helpdesk system for support. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site is mobile optimized and SEO friendly, though accessibility features are basic. No CMS is detected, indicating a custom or static site approach. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks DNSSEC and explicit security headers, which are recommended for enhanced protection. Privacy compliance is partial; a privacy policy and terms of service are present but no cookie policy or consent mechanism is implemented. No incident response or security policy documents are published. The absence of tracking scripts suggests minimal user data collection. Overall, the website is professional and trustworthy with good business credibility and technical implementation. Security posture is adequate but could be improved by implementing recommended headers, DNSSEC, and privacy enhancements. The business is legitimate with consistent WHOIS data and domain age. Strategic recommendations include enhancing privacy compliance, security hardening, and publishing incident response information.

R

Rigana Manufacturing

rigana.co.za

40

Rigana Manufacturing is a South African company established in 2002 specializing in manufacturing and supplying products related to tank inspection, security seals, and aviation testing equipment. The company positions itself as a quality supplier within the manufacturing sector, targeting industrial and aviation markets. The website reflects a small-sized business with a focused product offering and a consistent brand presence. Technically, the website is built on WordPress using the Astra theme and WooCommerce for e-commerce capabilities. It integrates Google Analytics and Tag Manager for user tracking and SEO optimization via Yoast SEO. The site is hosted by Afrihost and uses HTTPS, ensuring secure communications. However, DNSSEC is not enabled, and no advanced security headers are detected, indicating room for security enhancements. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms, which could expose the company to regulatory risks. Contact information is not explicitly provided in the analyzed content, which may affect user trust and business credibility. Overall, the website is functional and professionally designed but would benefit from improved privacy, security, and contact transparency to enhance trust and compliance.

FSE Listings is a specialized consulting firm focused on facilitating listings on the Frankfurt Stock Exchange, with a strong emphasis on dual listings for companies from Australia, Canada, and fintech sectors. The company offers multi-jurisdictional registration, capital raising, and investor roadshow services, positioning itself as a leading provider with over 1000 listings since 2000. Technically, the website is built on WordPress with standard plugins and scripts, providing moderate performance and basic mobile optimization. Security posture is adequate with HTTPS but lacks advanced security headers and explicit privacy compliance mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content and contact information suggest a legitimate business. Overall, the site is functional and informative but would benefit from enhanced security and privacy compliance measures.

D

DLV Engineers

dlvafrica.co.za

38

DLV Engineers is a South African engineering firm established in 2000, offering a broad range of engineering services including civil, structural, electrical, mechanical, fire protection, and integrated utility systems. The company targets clients requiring comprehensive engineering solutions across infrastructure and building projects. Their website reflects a professional business with clear service offerings and a focus on customer satisfaction. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, and Font Awesome icons, hosted likely via Afrihost, a South African provider. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. Security posture is weak due to absence of HTTPS enforcement, missing security headers, and lack of privacy or cookie policies, which poses compliance and trust risks. No analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website is functional and professional but requires significant improvements in security and privacy compliance to meet modern standards.

O

OPTRON (Pty) Ltd

optron.com

52

OPTRON (Pty) Ltd is a South African-based company specializing in advanced geospatial solutions, serving businesses across Africa. As a member of the OPTRON Group, it offers a range of geospatial products and services aimed at improving productivity and operational efficiency in sectors such as construction, surveying, and agriculture. The company positions itself as a trusted distributor of leading geospatial brands, providing innovative technology and workflow optimization to its clients. Technically, the website is built on WordPress using modern plugins like Elementor and Yoast SEO, with integrations for Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Pardot for marketing and analytics. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security-wise, HTTPS is enforced, but there is a lack of security headers and no explicit security or incident response policies published, which could be improved. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. However, the website content and branding are professional and consistent with a legitimate business. The company maintains a strong privacy and cookie policy presence, indicating compliance with GDPR and related regulations. Overall, the site is trustworthy but would benefit from enhanced security practices and verification of domain registration. Strategic recommendations include implementing security headers, publishing incident response and security policies, auditing third-party scripts, enhancing accessibility, and adding a security.txt file to facilitate vulnerability disclosures.

EcoPack's website is minimalistic and primarily serves as a placeholder with very limited content. The domain is registered in South Africa since 2009, indicating an established presence, but the website lacks substantive business information, contact details, or policies. The technical infrastructure is basic, utilizing Google Fonts and hosted by xneelo (Pty) Ltd, but lacks modern CMS or frameworks. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present, which raises compliance concerns. Overall, the website's minimal content and lack of trust signals limit its effectiveness and credibility.

X

Xcelsior Loans

xcelsiorloans.co.za

46

Xcelsior Loans operates as a South African financial services provider specializing in short-term secured loans using vehicles as collateral. The website presents a professional and consistent brand image, targeting individuals seeking quick cash flow solutions without credit checks. The business model focuses on vehicle pawn loans with an online application process, positioning itself as a niche player in the local finance sector. Technically, the website is built on WordPress using the Divi theme, enhanced with SEO and analytics tools such as Yoast SEO and Google Tag Manager. Security measures include HTTPS enforcement, security headers, and Google reCAPTCHA to mitigate bot activity. However, the absence of WHOIS registrant data and lack of explicit privacy and terms policies represent gaps in transparency and compliance. Overall, the site is functional and moderately secure but would benefit from enhanced privacy disclosures and registrant transparency.

The website africanarray.co.za is currently a placeholder page reserved for the domain with minimal content and no active business information. The domain is registered to Antonia Hoddinott in South Africa since 2009, indicating a long-standing registration but no visible operational website presence. The site uses a simple JavaScript library (Trianglify.js) to generate a dynamic background pattern but lacks any metadata, business descriptions, or user engagement features. Technically, the site is hosted by xneelo (Pty) Ltd with HTTPS enabled, but no security headers or DNSSEC are configured, which limits its security posture. There are no privacy, cookie, or terms of service policies, nor any contact information or forms, which negatively impacts compliance and user trust. Overall, the site is low in content quality and business credibility, with a moderate technical implementation but poor privacy and security practices.

S

Stackpile

stackpile.io

63

Stackpile is a technology company founded in 2016, offering a SaaS platform that simplifies the installation of third-party integrations and unified analytics tracking for websites. Positioned as a niche provider, Stackpile targets website owners and developers seeking to streamline their analytics and integration management through a single API. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, the site employs modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, Mixpanel, and New Relic, hosted via Cloudflare ensuring good performance and security. Security posture is solid with HTTPS enforced and domain registration protected by privacy services, though improvements are recommended in security headers and explicit security policies. Privacy compliance is basic with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the site is trustworthy with no blocking or suspicious indicators detected.

The website www.capitecbank.co.za represents Capitec Bank, a major South African retail bank offering personal and small business banking services. However, direct content access is blocked by a Cloudflare security challenge page, preventing detailed content and metadata analysis. The technical infrastructure includes Cloudflare protection with Turnstile captcha, indicating a strong focus on security but limiting external visibility. The security posture cannot be fully assessed due to lack of accessible content and absence of visible security headers or policies. The domain WHOIS data is unavailable, likely due to privacy protection, which is common for financial institutions to prevent abuse. Overall, the site appears legitimate but the analysis is incomplete due to access restrictions.

Y

Yaga

yaga.co.za

62

Yaga is a South African online marketplace specializing in preloved and new fashion items, providing a platform for users to buy and sell clothing safely. The website targets consumers interested in sustainable fashion and sellers looking to monetize their preloved items. The platform integrates secure payment methods and multiple delivery partners, enhancing user trust and convenience. Technically, Yaga employs modern web technologies including React, Next.js, and Material-UI, with integrations for analytics and marketing tools such as Google Tag Manager, TikTok Pixel, and Hotjar. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and uses secure payment gateways, but lacks explicit security headers and published privacy or terms policies, which are recommended for compliance and trust. Overall, the website is professional and trustworthy, though improvements in privacy transparency and security policies would strengthen its posture.

B

Bridge Capital

bridgecapital.co.za

38

Bridge Capital is a South African independent advisory firm specializing in M&A advisory, corporate finance, renewable energy finance, property advisory, and BEE advisory services. Established in 1999, the company has a solid market presence supported by partnerships with networks such as Mergers Alliance and Foundation Family Wealth. The website reflects a professional business with clear service offerings targeted at corporate clients seeking financial and strategic advisory services in South Africa. Technically, the website is built on the SitePad CMS platform and uses common web technologies including jQuery, Bootstrap Grid, Font Awesome, and cookie consent scripts. The site is accessible, uses HTTPS, and includes basic mobile optimization and accessibility features. However, there is room for improvement in SEO and performance optimization. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security or incident response policies. No privacy policy or terms of service pages were found, which impacts privacy compliance. The WHOIS data is consistent with the business claims, showing a long-established domain registered to Bridge Capital in South Africa, enhancing trustworthiness. Overall, the website presents a moderate risk profile with no critical security issues detected but with gaps in privacy compliance and security best practices. Strategic improvements in security headers, privacy documentation, and contact transparency would enhance trust and compliance.

M

Mr Price Group

mrpricegroup.com

51

Mr Price Group is a large South African retail conglomerate operating across multiple sectors including apparel, homeware, sportswear, financial services, and telecommunications. The company operates over 2900 stores across 9 divisions, positioning itself as a leading omni-channel fashion-value retailer in South Africa. The website reflects a mature digital presence built on WordPress with modern technologies such as Slider Revolution and Fusion Builder, providing a professional and user-friendly experience. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though formal security and incident response policies are not published. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, supporting the company's market position and business credibility.

J

Jembi Health Systems

jembi.org

48

Jembi Health Systems is a South African-based organization specializing in the design, development, and implementation of human-centered health information systems primarily for low-resource settings in Africa. The company partners with international aid organizations and governments to enhance public health through innovative technology solutions. Their market position is strong within the niche of digital health systems, supported by their involvement in significant projects such as the Country Health Information Systems and Data Use (CHISU) project and the OpenHIM interoperability platform. The website reflects a professional and consistent brand image, targeting aid organizations, governments, health workers, and patients in Africa. Technically, the website is built on the Wix platform utilizing modern technologies including React 18 and various Wix-specific SDKs and widgets. The site demonstrates good performance and basic mobile optimization, with standard SEO practices and accessibility features in place. Integration with analytics services like Google Analytics and marketing tools such as Mailchimp is evident, indicating a moderate level of digital maturity. From a security perspective, the site enforces HTTPS and employs script-based security enhancements, including hardened fetch and XHR requests and cookie management restrictions. Error monitoring is implemented via Sentry. However, explicit security headers are not detected, and there is a lack of visible privacy and cookie policies, which are critical for compliance and user trust. No critical vulnerabilities or WAF blocking mechanisms were identified. Overall, the website presents a trustworthy and professional front for Jembi Health Systems, though improvements in privacy compliance and security header implementation are recommended to enhance user trust and regulatory adherence.

A

Audio Visual Centre

avc.co.za

43

Audio Visual Centre (AVC) is a South African-based company specializing in comprehensive audio visual integration services. Their offerings include AV design, installation, and support tailored for corporate, educational, and event environments. The company positions itself as a turnkey solution provider, handling everything from design to ongoing support, with a strong focus on video conferencing and Microsoft Teams solutions. AVC maintains a solid market presence with a medium-sized operation and a professional online presence supported by testimonials and recognized brand partnerships. Technically, the website is built on WordPress with the Divi theme and integrates modern SEO and analytics tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Privacy compliance is basic, lacking explicit cookie consent mechanisms. Overall, AVC presents a trustworthy and professional business with room for enhanced privacy and security practices.

A

Aspen Pharmacare

aspenpharma.com

50

Aspen Pharmacare is a well-established global specialty and branded pharmaceutical company with a strong presence in both emerging and developed markets. The company operates multiple manufacturing facilities and offers a broad portfolio of pharmaceutical products including prescription, over-the-counter, and injectables. Their website reflects a mature business with comprehensive investor relations, corporate governance, and sustainability commitments. Technically, the site is built on WordPress with modern frameworks and plugins, optimized for SEO and mobile devices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though improvements can be made in cookie consent and incident response transparency. Overall, Aspen Pharmacare presents a credible, professional, and trustworthy online presence aligned with its business stature.

A

Africom Group

africomgroup.co.za

34

Africom Group is a South African technology company specializing in Oracle Fusion Middleware and systems integration solutions. They position themselves as a leading authority in middleware design, implementation, and training across Africa, targeting businesses seeking advanced integration and process optimization services. Their website reflects a professional presence with relevant content, social media engagement, and a focus on Oracle technologies. Technically, the website uses a traditional tech stack including Bootstrap and jQuery, but with an outdated jQuery version that may pose security risks. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is moderate with no HTTPS status confirmed and absence of security headers, and no privacy or cookie policies are published, indicating compliance gaps. Contact information is limited to a phone number and contact form, with no direct company emails disclosed. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and technical modernization to enhance trust and resilience.

The website storexsa.co.za currently serves only a placeholder page indicating that the domain is temporarily unavailable. There is no business information, contact details, or service descriptions present, which suggests the site is inactive or under maintenance. The technical infrastructure is minimal, relying on a single external JavaScript library (Trianglify) for background pattern generation. No CMS or hosting details are discernible from the content. Security posture is weak due to the absence of HTTPS and security headers, and no privacy or cookie policies are implemented. Overall, the site lacks essential elements for trust and compliance, resulting in a low risk profile primarily due to inactivity rather than active threats. Strategic recommendations include enabling HTTPS, adding business and contact information, and implementing privacy and security policies to improve trust and compliance.

R

Ringier One Africa Media

roam.africa

45

ROAM Africa, operated by Ringier One Africa Media, is a leading online marketplaces company focused on Sub-Saharan Africa. The company operates multiple digital marketplaces across East and West Africa, targeting African consumers and businesses seeking transparent and thriving market platforms. Their market position is strong as a pioneer in the region with a medium-sized business footprint and a clear focus on digital media and marketplaces. The website reflects a professional and consistent brand with good content quality and SEO optimization. Technically, the site is built on WordPress with Elementor and uses modern web technologies, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Overall, the site is credible but could improve in privacy and security transparency.

N

New Era Solutions

newerasol.co.za

32

New Era Solutions is a South African technology company specializing in digital transformation services including ERP, CRM, systems integration, IoT, and robotic process automation. The company leverages two decades of experience and global partnerships to deliver integrated business solutions primarily targeting other businesses. The website is professionally designed using WordPress and modern plugins, providing a good user experience with clear navigation and mobile optimization. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is decent with HTTPS enabled but could be improved by adding security headers and vulnerability disclosure mechanisms. Contact information is clearly provided, enhancing business credibility.

T

TerraCore

terracoregeo.com

49

TerraCore is a specialized technology company focused on providing advanced hyperspectral imaging solutions for mineral analysis, primarily serving the mining and energy sectors. The company positions itself as a world leader in hyperspectral core imaging, offering a range of services including onsite and in-lab imaging, equipment rental and sales, consulting, and digital core storage. Their technology enables clients to gain detailed mineralogical insights to optimize exploration and production processes. The website reflects a professional and content-rich digital presence with clear navigation and strong branding. Technically, the website is built on WordPress using Elementor and Astra theme, hosted likely on GoDaddy infrastructure. It employs modern web technologies and integrates Google Tag Manager for analytics. The site is mobile-optimized and performs well, with good SEO and accessibility features. Security-wise, HTTPS is enforced and anti-spam measures are in place, but there is room for improvement in security headers and privacy compliance mechanisms. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of cookie consent and detailed security policies indicates partial compliance with privacy regulations like GDPR. The domain registration details align well with the business claims, supporting the legitimacy of the website. Overall, TerraCore demonstrates a mature digital presence with strong business credibility but could enhance privacy and security transparency. Strategic recommendations include implementing a cookie consent mechanism, publishing comprehensive security and incident response policies, adding terms of service, and enhancing security headers to strengthen trust and compliance.

Pepkor Lifestyle is a large South African retail and consumer finance group operating multiple well-known brands including Russells, Bradlows, Rochester, Sleepmasters, HiFiCorp, Incredible, Everyshop, and Connect FS. The company targets value-conscious mass-market consumers in Southern Africa, offering furniture, appliances, electronics, and tailored finance options. The website content is professionally presented with consistent branding and comprehensive contact information for all subsidiaries. Technically, the site uses established JavaScript libraries such as jQuery and fullPage.js, but some libraries are outdated, which may pose security risks. The site lacks visible cookie consent mechanisms and security headers, indicating room for improvement in privacy compliance and security posture. No WAF or blocking mechanisms were detected, and the site is fully accessible.

M

MAS PLC

masrei.com

43

MAS PLC is a publicly listed property investor and operator focused on green real estate investments in Central and Eastern Europe. The company is listed on the Johannesburg Stock Exchange and A2X Limited, with a business model centered on direct income property investments and co-investment developments with partners such as Prime Kapital. The website is built on WordPress and uses modern web technologies including jQuery and Mailchimp integration for marketing. It features GDPR-compliant cookie consent mechanisms and provides financial reports and announcements to investors. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact information is primarily via a contact form and newsletter subscription, with no explicit security or incident response policies published. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

Standard Bank Group is a leading financial services provider with a strong focus on Africa's growth and development. The company offers a wide range of banking and financial services including personal, commercial, corporate, and investment banking, as well as insurance and asset management. With over 160 years of history, Standard Bank Group holds a prominent market position as Africa's biggest bank by assets. The website reflects a mature digital presence with comprehensive content, clear navigation, and mobile optimization. Technically, the site employs modern analytics and marketing technologies such as Adobe Launch, Google Tag Manager, and OneTrust for cookie consent, ensuring robust data collection and user tracking capabilities. Security posture is strong with HTTPS, reCAPTCHA Enterprise, and appropriate security headers, although explicit security policy and incident response information are not found. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations including GDPR. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure information.

N

Nedgroup Investments

nedgroupinvestments.com

58

Nedgroup Investments is a well-established financial services company specializing in investment products such as unit trusts, tax-free investments, retirement annuities, and global investment options. The company targets individual investors and financial planners primarily in South Africa, with offerings that extend globally through feeder and foreign-denominated funds. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site leverages modern web technologies including Angular, Adobe Experience Manager CMS, and integrates multiple analytics and performance monitoring tools such as Google Analytics, Adobe Analytics, Dynatrace, and Qualtrics. The presence of a virtual assistant enhances user engagement and support. While the site is mobile-optimized and SEO-friendly, there is room for improvement in accessibility and additional security headers. From a security perspective, the website enforces HTTPS, uses anti-CSRF tokens, and manages cookie consent effectively. However, security headers are minimal and could be enhanced to improve protection against common web vulnerabilities. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear policies and consent mechanisms aligned with GDPR requirements. Overall, Nedgroup Investments demonstrates a high level of business credibility and digital maturity. The domain registration details align with the business identity, reinforcing trustworthiness. Strategic recommendations include enhancing security headers, improving accessibility, and publishing a vulnerability disclosure policy to further strengthen security posture and user trust.

D

Derivco

derivco.com

57

Derivco is a well-established global technology company specializing in innovative software solutions for the iGaming industry. With over 30 years of experience and operations spanning Australia, Europe, and South Africa, Derivco positions itself as a leader in delivering advanced gaming platforms and integration services. Their product suite includes CORE+, CONNECT+, SPORTS+, Arena+, and Kipem+, targeting online casino operators and gaming businesses seeking cutting-edge technology and personalized player experiences. The website reflects a mature digital presence with professional design, clear branding, and comprehensive content tailored to their industry audience. Technically, the site is built on WordPress with Elementor, leveraging modern JavaScript libraries and Google services for analytics and tag management. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly disclosed. Overall, Derivco demonstrates a strong business credibility and digital maturity, with room for improvement in transparency around security policies and direct contact information.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

G

Glacier Financial Solutions (PTY) LTD

glacier.co.za

40

Glacier by Sanlam is a South African licensed financial services provider specializing in wealth management and investment solutions, including unit trusts, retirement products, and financial planning. The website serves as a comprehensive portal for personal and business clients, offering detailed product information and access to intermediary and client login portals. The business is positioned as a significant player within the Sanlam group, leveraging its brand and resources to serve a broad market segment. Technically, the website is built on Microsoft SharePoint with integration of common web technologies such as jQuery and Google Tag Manager, indicating a mature but somewhat traditional digital infrastructure. However, the absence of a valid SSL certificate and HTTPS severely undermines the site's security posture, exposing users to risks and impacting trust. Security headers are partially implemented, but critical modern security practices like HSTS and TLS are missing. Privacy and terms of service policies are linked to the parent Sanlam domain, suggesting centralized compliance management, though explicit cookie consent mechanisms are lacking. Overall, the site is professionally designed with good content quality and navigation but requires urgent security improvements to protect user data and maintain regulatory compliance.

M

MIT

marmit.co.za

23

MIT is a specialized manufacturer and supplier of professional and calibrated light and UV meters in Africa, with a strong market position as the only manufacturer of such instruments on the continent. They also provide custom solutions for radiation measurement and imaging sourced from global manufacturers, including the Goldilux series of light meters and Tissuegnostics products. The website is built on WordPress with Elementor and includes detailed product information, staff profiles, and partner testimonials, indicating a professional digital presence. However, the lack of HTTPS and security headers represents a significant security risk. The site uses Google Analytics for user tracking but lacks comprehensive privacy and cookie policies, which may impact compliance. Overall, the business appears credible and focused on niche industrial and scientific markets in South Africa, but improvements in security and privacy compliance are recommended.

C

CAPESPAN | We Deliver

capespan.com

27

Capespan is a large, established global distributor, marketer, and producer of fresh fruit with a strong market position supported by recognized brands such as Cape, Outspan, Outspan Gems, and Goldland. The company operates an integrated business model encompassing fruit growing, packing, marketing, and distribution, serving grower partners and retail customers worldwide. Their website reflects a professional and content-rich digital presence with active social media engagement and regular press updates. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and social media integration, hosted on Apache servers. However, the lack of a valid SSL certificate and absence of HTTPS significantly undermine the security posture, exposing users to risks. Privacy compliance is well addressed with GDPR-compliant policies and cookie consent mechanisms. Overall, the site demonstrates good business credibility and digital maturity but requires urgent security improvements to protect data and maintain trust.

H

Handel

handel.co.za

40

Handel is a South African-based small B2B marketing and communications agency offering a variety of services including brand positioning, content creation, event management, and digital marketing. The company targets business clients seeking creative and impactful marketing solutions. The website is built on HubSpot CMS and hosted behind Cloudflare, indicating a modern digital infrastructure. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security flaw. Security headers are partially implemented, but the absence of HTTPS significantly reduces the overall security posture. Privacy compliance is weak, with no privacy or cookie policies found. Contact information is clearly presented, enhancing business credibility. Overall, the site demonstrates good content quality and professional design but requires urgent security improvements.

P

PPS Professionals Connect

professionalsconnect.co.za

51

ProfessionalsConnect.co.za presents a minimal web presence with very limited content and no visible business descriptions or contact information. The website title suggests a professional networking or connection platform, but no further details are provided to clarify the business model, services, or target audience. Technically, the site uses the Angular framework and common icon libraries but lacks performance data and SEO optimizations. Critically, the site does not have a valid SSL certificate, does not support HTTPS, and lacks essential security headers, exposing it to potential security risks. There are no privacy or cookie policies, and no contact or business information is available, which significantly reduces trust and compliance posture. Overall, the site appears incomplete or underdeveloped, with a low security and privacy maturity level.

P

Professional Provident Society Insurance Company

pps.co.za

40

PPS (Professional Provident Society Insurance Company) is a mature South African financial services provider specializing in insurance, investment, and healthcare solutions tailored for graduate professionals. The company operates on a mutuality model, allowing members to share in profits, and maintains a strong market position supported by professional associations and comprehensive service offerings. The website is built on Drupal 10 with modern frontend libraries and hosted behind Cloudflare, demonstrating a moderate level of digital maturity. However, the absence of a valid SSL/TLS certificate and lack of HTTPS significantly undermine the security posture. While security headers are partially implemented, critical vulnerabilities exist due to missing encryption and lack of advanced security features. Privacy compliance is basic, with no explicit cookie consent mechanism and limited GDPR indicators. Overall, the site presents professional content and good business credibility but requires urgent security improvements to protect user data and enhance trust.

E

edu.za

edu.za

45

The edu.za domain is associated with the education sector in South Africa, likely serving as a domain registry or portal for educational institutions. However, the website is currently non-functional, displaying a database connection error that prevents access to any meaningful content or services. The technical infrastructure is minimal, running on Apache with PHP 7.4.33, but lacks modern security configurations such as a valid SSL certificate and TLS support. The absence of security headers, DNSSEC, and email authentication mechanisms further weakens the security posture. There are no visible privacy or cookie policies, contact information, or business details, indicating a lack of transparency and user engagement. Overall, the site exhibits poor performance, accessibility, and security maturity, posing risks to users and stakeholders.

M

Molori Private Collection

molorisafari.com

42

The website's overall security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and reputational damage. Absence of HTTPS encryption is a critical vulnerability, undermining data confidentiality and trust. Key security headers are missing, increasing susceptibility to common web attacks such as clickjacking, content injection, and MIME-type sniffing. GDPR compliance deficiencies, including lack of privacy and cookie policies, place the company at risk of legal penalties. Additionally, the lack of an information security framework, incident response plan, and vulnerability disclosure policy signals immature security governance. Email security is moderately strong but could be improved. DNS configurations are generally good but could be enhanced with DNSSEC and CAA records. Network security posture is solid but insufficient to compensate for fundamental web security gaps. Immediate remediation is essential to protect customer data, ensure regulatory compliance, and maintain business continuity.