Spain security reports

L

LuxQuanta Technologies S.L.

luxquanta.com

76

LuxQuanta Technologies S.L. is a specialized technology company focused on Quantum Key Distribution (QKD) systems that provide ultra-secure communication solutions resilient to quantum computer attacks. The company targets sectors with stringent security requirements such as telecommunications, government, finance, healthcare, and utilities. Their business model centers on integrating innovative quantum cryptography technology into existing telecommunication infrastructures, positioning themselves as a European pioneer with recognized awards and partnerships. The website demonstrates a moderate to good level of digital maturity, employing modern web technologies including HTML5, CSS3, JavaScript, Google Analytics, and reCAPTCHA for bot protection. The site is mobile optimized with good SEO practices and clear navigation, although some backend PHP warnings indicate minor technical debt. Privacy and cookie policies are implemented with consent mechanisms, reflecting compliance with GDPR. From a security perspective, the site enforces HTTPS and uses reCAPTCHA, but lacks explicit security headers and published security policies or incident response information. No vulnerability disclosure or security.txt files were found. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the security posture is solid but could be improved by adding security headers and formal policies. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include enhancing security headers, resolving backend warnings, publishing security and incident response policies, and establishing a vulnerability disclosure program to strengthen trust and compliance.

O

Openchip

openchip.com

60

Openchip is a technology company specializing in the integration of in-house designed System on Chips (SoCs) and full-stack software solutions for AI and High-Performance Computing (HPC) applications. The company is recognized by the European Commission as an Important Project of Common European Interest (IPCEI), supporting research, innovation, and industrial deployment of microelectronics and communication technologies across the value chain. Openchip's key offerings include modular RISC-V based accelerator chips, advanced memory technologies, orchestration frameworks, and deployment-ready system designs, targeting European digital sovereignty and competitiveness. Technically, the website is built on WordPress using the Divi theme, with common plugins such as Contact Form 7 and Yoast SEO for optimization. The site demonstrates good mobile optimization and moderate performance, with appropriate SEO metadata and structured data enhancing its digital presence. Security-wise, the site enforces HTTPS and uses secure cookie settings but lacks advanced security headers and explicit security policies or incident response information. Overall, the security posture is solid but could be improved by implementing a security.txt file, enhancing security headers, and adding explicit GDPR-compliant consent mechanisms. The domain registration aligns with the company's location and business claims, indicating legitimacy. The site is professional and trustworthy, with clear business information and partner affiliations. Strategic recommendations include enhancing security and privacy compliance, publishing detailed security and incident response policies, and improving user consent mechanisms to strengthen trust and compliance.

G

GTD System & Software Engineering

gtd.es

60

GTD System & Software Engineering is a well-established high-tech company specializing in the design, integration, and operation of complex mission-critical software and systems across aerospace, defense, energy, logistics, and scientific sectors. With a strong market presence since 1987 and a client base spanning 26 countries, GTD delivers innovative and reliable solutions tailored to critical industry challenges. Their portfolio includes advanced aerospace engineering, quantum cybersecurity, and SaaS platforms for logistics, supported by multiple international certifications. Technically, the website is built on a modern Webflow CMS platform with multilingual support and integrates Google Analytics and Tag Manager for data insights. The site is fast, mobile-optimized, and professionally designed, reflecting the company's digital maturity. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Privacy compliance is adequate with a clear privacy and cookie policy, but lacks explicit consent mechanisms. Overall, GTD presents a credible, trustworthy, and professional digital presence aligned with its business stature.

E

El Arte de la Memoria

elartedelamemoria.org

35

El Arte de la Memoria is a Spanish educational website focused on providing resources, blog content, and podcasts to help learners improve memory, concentration, and study techniques. The site targets students and individuals preparing for exams, offering guides on memorization, reading speed, and mental concentration. It operates as a small educational content provider with a niche market position in the Spanish-speaking education sector. Technically, the website is built on WordPress using the Genesis Framework and integrates common plugins for SEO, analytics, and cookie compliance. The hosting appears to be on AWS infrastructure. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and vulnerability disclosure mechanisms. Privacy compliance is good with clear privacy and cookie policies. Overall, the website is professional, well-structured, and trustworthy, though it could improve security headers and accessibility features.

G

GARDA SERVICIOS DE SEGURIDAD, S.A.

gardaseguridad.com

34

Garda Servicios de Seguridad, S.A. is a leading Spanish company specializing in private security services with over 30 years of experience and a workforce exceeding 3,000 professionals. The company offers a broad range of security solutions including surveillance, explosives custody, and installation and maintenance of security systems, tailored to client needs. Their market position is strong, with nationwide presence and multiple ISO certifications underscoring their commitment to quality and compliance. Technically, the website is built on WordPress with Elementor and Yoast SEO, reflecting a modern and well-maintained digital infrastructure. Security posture is robust, with HTTPS enforced, secure forms, and comprehensive privacy and cookie policies in place. No blocking or WAF challenges were detected, allowing full content access and analysis. Overall, Garda Seguridad demonstrates a mature security and compliance stance, with clear business credibility and professional online presence.

I

Indra Sistemas S.A.

indracompany.com

54

Indra Sistemas S.A. is a leading global technology and consulting company specializing in transportation, air traffic management, defense, and digital transformation solutions. The company serves a broad international audience including governments and large enterprises, positioning itself as a key technology partner in critical sectors. The website reflects a mature digital presence built on Drupal CMS with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools with strong privacy compliance mechanisms. Security posture is solid with HTTPS enforcement and cookie consent, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the WHOIS data aligns well with the company's claims, supporting high legitimacy. Overall, the website is professional, well-structured, and compliant with GDPR and cookie regulations.

Massada is a Spanish-based e-commerce company specializing in natural and biotechnological cosmetic products. The company formulates and manufactures its own extracts using flowers, plants, and minerals combined with organic biotechnological active ingredients to provide effective and respectful formulas. Their market position is that of a niche natural cosmetics brand with a strong emphasis on innovation and natural ingredients. The website is built on the Shopify platform, leveraging modern technologies and integrations such as Google Analytics, Facebook Pixel, and various marketing tools. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing a professional and trustworthy user experience. Security practices are solid with HTTPS enforced and no exposed sensitive data, although explicit security policies and incident response contacts are not present. Overall, the website demonstrates good compliance with GDPR and cookie regulations, with clear contact information and multiple communication channels.

Socialpoint is a well-established mobile game developer and publisher based in Spain, known for popular titles such as Dragon City and Monster Legends. As a member of Take-Two Interactive and Zynga, it holds a strong market position in the free-to-play mobile gaming sector. The website reflects a mature digital presence with modern technologies like React and Gatsby, optimized for performance and mobile devices. Security measures include HTTPS, security headers, and a comprehensive cookie consent mechanism, although explicit security and incident response policies are not publicly available. Overall, the site demonstrates a high level of professionalism and compliance with privacy regulations.

SeQura is a Spanish fintech company specializing in flexible payment solutions for e-commerce businesses, enabling customers to pay in installments or defer payments. The website demonstrates a mature digital presence with multi-language support, extensive FAQs, and integration with major analytics and marketing platforms. Security measures such as HTTPS, security headers, and CAPTCHA protections are implemented, reflecting a strong security posture. The company maintains clear contact and legal information, supporting GDPR compliance and customer trust. Overall, the site is professional, user-friendly, and well-optimized for performance and mobile devices.

R

Red Rake Tech SL

redrakegaming.com

54

Red Rake Tech SL operates the website redrakegaming.com as a B2B provider of online casino content, specializing in high-quality video slots and gaming solutions for regulated markets worldwide. The company holds multiple gaming licenses including Malta Gaming Authority, UK Gambling Commission, and Hellenic Gambling Commission, and is ISO 27001 certified, demonstrating a strong commitment to security and regulatory compliance. Their market presence spans over 20 regulated jurisdictions including recent expansions into New Jersey, Ontario, and Pennsylvania. The website showcases a professional design with multimedia content, partner logos, and media partners, targeting online casino operators and regulated gaming markets.

Legal Global Advisors is a small, specialized international law firm based in Spain, focusing on Financial Markets Law and Commercial Law. Their website presents a professional image with clear service descriptions and contact information, targeting national and international companies and family offices. The firm positions itself as a boutique practice emphasizing quality and client involvement rather than size. Technically, the website uses older technologies such as jQuery 1.4.1 and lacks modern security practices like HTTPS enforcement and security headers. There is no evidence of privacy or cookie policies, which is a compliance gap. The site does not use analytics or tracking, indicating minimal user data collection. Security posture is weak due to outdated libraries and lack of HTTPS, exposing the site to potential risks. Overall, the website is functional and professional but requires significant improvements in security and privacy compliance to meet modern standards.

T

TRUCCO

trucco.es

35

Trucco is a well-established Spanish women's fashion brand with over 30 years of market presence, offering a broad range of women's clothing through its e-commerce platform and physical stores. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics tools to enhance customer engagement and sales. The technical infrastructure is based on PrestaShop CMS with modern JavaScript libraries and third-party integrations such as Google Tag Manager, Facebook Pixel, and Sequra payment solutions. Security measures include HTTPS enforcement and Google reCAPTCHA for form protection, alongside GDPR-compliant cookie consent mechanisms. However, explicit security headers and a published security policy could further strengthen the security posture. Overall, the website demonstrates a mature digital presence with strong business credibility and compliance.

H

Hermisan

hermisan.com

39

Hermisan is a well-established Spanish company specializing in advanced agricultural irrigation solutions, including drip irrigation, automation, fertigation, and energy management. With over 40 years of experience, the company serves agricultural businesses primarily in the Mediterranean region, offering comprehensive project design, manufacturing, installation, and maintenance services. The website reflects a mature digital presence with multilingual support and professional branding. Technically, the site is built on WordPress with modern plugins and SEO tools, providing good performance and mobile optimization. Security posture is solid with HTTPS and GDPR compliance, though some security headers could be enhanced. Overall, Hermisan demonstrates a credible and trustworthy online presence aligned with its business operations.

B

Baratz, tecnología e innovación bibliotecaria

baratz.es

47

Baratz Servicios de Teledocumentación, S.A.U. is a Spanish technology company specializing in innovative software solutions for libraries and library networks. Their flagship products include AbsysNet, a comprehensive integrated library system, and AbsysCloud, a cloud-based platform. The company serves over 3000 libraries, including prestigious public and private cultural and educational institutions, positioning itself as a market leader in Spain. The website reflects a mature digital presence with professional design, clear navigation, and extensive content about products, services, client success stories, and training offerings. Technically, the site is built on WordPress with Elementor and integrates modern web technologies and SEO best practices. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be enhanced. Privacy compliance is robust, with clear GDPR-aligned policies and consent management. Overall, Baratz demonstrates a credible, professional, and trustworthy online presence aligned with its business objectives.

C

CITRIC

citric.ws

35

Citric is a small technology consultancy based in Spain specializing in custom digital product development, user experience (UX), user interface (UI) design, brand strategy, and sustainability consulting. The company targets businesses and brands seeking tailored digital solutions and brand reinvention, with a focus on sustainable and user-centered design. Their market position is that of a specialized boutique agency offering strategic and technical services to enhance digital presence and product quality. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, and various JavaScript libraries, with good mobile optimization and SEO practices. The site uses HTTPS and includes cookie consent mechanisms, reflecting a moderate level of digital maturity and privacy compliance. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and documented incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR, though improvements in security headers and explicit contact information could enhance trust further.

I

IFBB

ifbb.com

48

The International Fitness and Bodybuilding Federation (IFBB) is a globally recognized non-profit governing body for bodybuilding and fitness sports, founded in 1946 and headquartered in Madrid, Spain. It oversees a vast network of affiliated national members and organizes thousands of events annually, serving athletes, coaches, judges, and fans worldwide. The website reflects a mature digital presence with comprehensive content, event information, educational resources, and media galleries. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and GDPR compliance, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and professional online presence.

SOCOTEC España is a well-established engineering consultancy and TIC service provider operating primarily in Spain and Colombia. As part of the SOCOTEC Group, it holds a strong market position in infrastructure, construction, and environmental sectors, emphasizing sustainability and innovation. The website reflects a mature digital presence with comprehensive service offerings and a clear focus on resilience and decarbonization. Technically, the site is built on Drupal 10 with modern JavaScript libraries and includes performance monitoring and consent management tools, indicating a good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response disclosures are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting SOCOTEC's reputation as a leading engineering firm.

A

Academia MD

mdacademy.org

47

Academia MD is a small educational entity targeting Spanish-speaking audiences, currently in a pre-launch phase as indicated by the 'Próximo lanzamiento' message. The website is built on the GoDaddy Website Builder platform and uses standard web fonts and service workers for progressive web app capabilities. The technical infrastructure is basic but functional, with moderate performance and good mobile optimization. However, the site lacks critical business and security information such as privacy policies, terms of service, and contact details, which limits its trustworthiness and compliance posture. Security features are minimal, with no visible security headers or incident response policies. Overall, the website presents a basic digital presence with significant room for improvement in security, privacy compliance, and business credibility.

A

Aage Hempel Group

aagehempel.com

36

Aage Hempel Group is a specialized maritime service provider offering installation, maintenance, surveys, and spare parts supply for marine electronics worldwide. With a strong global presence through 31 offices in 11 countries and a network of certified technicians, the company ensures high-quality service for vessels on major maritime routes. Their partnerships with leading brands and classification societies position them as a trusted player in the maritime electronics sector. Technically, the website is built on WordPress using modern plugins and themes, optimized for SEO and mobile responsiveness. Security measures include HTTPS, Google reCAPTCHA, and GDPR-compliant cookie consent mechanisms, reflecting a mature security posture. No critical vulnerabilities or security issues were detected. Overall, the website and business demonstrate professionalism, compliance, and a solid market position.

M

Mecanizados Ekimen

ekimen.net

42

Mecanizados Ekimen is a small, family-owned manufacturing company specializing in complex multiaxis machining services including prototyping, unique pieces, short series, and tooling for production lines. The company targets industrial sectors such as automotive, agricultural, aerospace, and food production, offering high-quality, efficient machining solutions with ISO 9001 certification as a trust indicator. The website is built on WordPress with Elementor and includes modern features such as Google reCAPTCHA for form security and social sharing tools. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, enhancing trust and compliance. Overall, the digital infrastructure supports the business well, providing a professional and user-friendly experience.

T

TECNOSEC - Feria de Tecnologías Tecnologías Policiales, de Seguridad e Inteligencia

tecnosec.es

65

TECNOSEC is a specialized event platform focused on high technologies in security, intelligence, drones, and anti-drones, primarily targeting Spanish government security institutions, critical infrastructure, and technology providers. The event is positioned as a national and international meeting point for key stakeholders in security and intelligence sectors, held at Madrid Arena. The website reflects a professional and consistent branding approach, with clear navigation and relevant content for exhibitors and visitors. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics for visitor insights. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates good digital maturity and compliance with privacy regulations, supporting its role as a trusted event platform in the government and technology sectors.

P

PREMO

grupopremo.com

58

PREMO is a well-established global manufacturer specializing in passive electronic components, with over 60 years of industry experience. The company operates multiple business units focusing on mobility access and security, power systems, and advanced passive components, serving a diverse industrial clientele worldwide. Their website reflects a strong market position with comprehensive product offerings and global operational footprint. Technically, the website is built on the Shopify platform using modern web technologies and frameworks, ensuring fast performance, mobile optimization, and good accessibility. The integration of analytics and marketing tools is moderate and aligns with standard e-commerce practices. From a security perspective, the site enforces HTTPS, employs hCaptcha for form protection, and follows best practices in form security and data handling. However, explicit security policies and incident response information are absent, indicating room for improvement in transparency and compliance. Overall, the website presents a professional and trustworthy digital presence with minor gaps in privacy policy visibility and security documentation. The domain registration data supports the legitimacy and consistency of the business claims.

S

Salto Systems, S.L.

saltosystems.com

61

Salto Systems, S.L. is a leading provider of smart access and identity management solutions, specializing in replacing traditional mechanical keys with advanced digital and electronic locking technologies. The company offers a comprehensive ecosystem of products including smart locks, face recognition access, door intercoms, and cloud-based access control platforms. Their market position is strong, supported by a professional and content-rich website targeting businesses and organizations seeking modern security solutions. Technically, the website is built on modern frameworks such as React and Gatsby, with integrations for analytics, marketing, and privacy compliance tools like OneTrust and Pardot. The security posture is robust, featuring HTTPS, security headers, and no visible vulnerabilities, although incident response contact details and vulnerability disclosure policies are not explicitly provided. Overall, the website demonstrates a mature digital presence with good privacy compliance and a high level of professionalism.

H

Houzz

houzz.es

66

Houzz is a leading online platform providing software solutions for construction and design professionals, as well as inspiration and product discovery for homeowners. The website offers a comprehensive directory of professionals including architects, interior designers, contractors, and more, supporting a large user base in Spain and internationally. The platform is well-established with a consistent brand presence and extensive content offerings including photos, articles, and videos. Technically, the site employs modern web technologies, including JavaScript frameworks, CDNs, and performance monitoring tools, ensuring a fast and responsive user experience. Security practices are robust with HTTPS enforcement, CSRF protection, and appropriate security headers, although explicit security policy and incident response pages are not found. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, Houzz demonstrates a mature digital infrastructure, strong business credibility, and a secure environment for its users.

The website lindor.es is currently inaccessible to users due to a Cloudflare Web Application Firewall (WAF) challenge page that blocks direct access to content. This prevents any meaningful content or metadata extraction. The domain is registered with consistent WHOIS data matching the Spanish domain extension, but the lack of a valid SSL certificate and HTTPS support significantly weakens the site's security posture. No privacy, cookie, or terms of service policies are present, and no contact or business information is available on the page. The technical infrastructure relies on Cloudflare for security and hosting, but the SSL/TLS configuration is incomplete or invalid, exposing the site to potential security risks. Overall, the site appears to be in a preliminary or protected state, limiting the ability to assess its business or compliance maturity.

E

ELIX Polymers, S.L.U.

elix-polymers.com

40

ELIX Polymers, a member of Sinochem International, is a leading European manufacturer of ABS resins and derivatives, serving diverse industrial sectors including automotive, healthcare, and consumer goods. The company emphasizes innovation, sustainability, and customer service, operating globally with business relations in 40 countries. Their website reflects a professional and comprehensive digital presence with detailed corporate, product, and sustainability information. Technically, the site uses modern frameworks like Bootstrap and jQuery, hosted behind Cloudflare, but suffers from a critical lack of a valid SSL certificate and modern TLS support, which significantly impacts security posture. Privacy and cookie policies are well implemented with GDPR compliance and active consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to protect user data and enhance trust.

VALGRAP is a Spanish small business specializing in the distribution and online sales of fastening systems and related industrial tools, including brands such as STANLEY BOSTITCH and SIMES. The company targets professional and industrial customers seeking quality fastening products. The website is built on WordPress with WooCommerce, leveraging common plugins and marketing tools such as Google Analytics and Slider Revolution. While the site offers a good user experience with clear navigation and relevant content, it lacks a valid SSL certificate, which significantly impacts its security posture. Privacy and cookie policies are present with consent mechanisms, indicating basic GDPR compliance. Contact information is clearly provided, enhancing business credibility. However, the absence of advanced security headers and DNS security features suggests room for improvement in security maturity.

Security assessment completed with an overall score of 0/100 (unknown risk). 7 critical issues require immediate attention. Total of 34 security findings identified across all modules.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

P

Paradigma Digital

paradigmadigital.com

40

Paradigma Digital is a Spanish technology consulting firm specializing in digital transformation through strategy, technology, and talent experience. Established in 2007, it positions itself as a boutique with a strong focus on cloud native, strategic design, data intelligence, and digital DNA services. The company maintains partnerships with major technology providers such as Google Cloud, Red Hat, AWS, and Microsoft, enhancing its market credibility. Technically, the website uses Apache hosting on Google Cloud infrastructure, modern JavaScript, and SVG graphics, but lacks a valid SSL certificate, which is a critical security gap. Privacy and cookie policies are well implemented with consent mechanisms, reflecting GDPR compliance. The site features extensive social media integration and marketing tools like Google Tag Manager and HubSpot forms, indicating moderate user tracking. Overall, the website is professionally designed with excellent content quality and user experience but requires urgent security improvements to enable HTTPS and modern TLS protocols.

M

Mi Envío Entidad de Pago, S.L.

fonmoney.com

40

Fonmoney is an online financial services platform specializing in international money transfers and mobile top-ups. The company operates under Mi Envío Entidad de Pago, S.L., a subsidiary of Transpaygo Limited, and is regulated by the FCA and registered with the Bank of Spain. The platform targets individuals and families seeking fast, easy, and secure ways to send money or mobile credit internationally, with a presence in multiple countries through localized subdomains. Technically, the website uses the nopCommerce platform, integrates common marketing and analytics tools such as Google Analytics and Sendinblue, and is hosted behind Cloudflare. While the site offers good content quality, mobile optimization, and SEO practices, its performance is slow and accessibility features are basic. Critically, the site lacks a valid SSL certificate, resulting in no HTTPS protection, which is a major security concern. From a security perspective, the absence of HTTPS and security headers significantly lowers the security posture. No explicit security or incident response policies are published, and no direct contact emails or phone numbers are provided, limiting transparency. However, the site includes cookie consent with an opt-in mechanism and privacy policies indicating GDPR compliance. Overall, Fonmoney presents a moderately credible and professional financial service with strong regulatory backing but suffers from critical security implementation gaps. Immediate remediation of SSL issues and enhancement of security policies are recommended to improve trust and compliance.

S

SanLucar Fruit S.L.U.

sanlucar.com

39

SanLucar Fruit S.L.U. is a well-established company specializing in fresh fruits, vegetables, and related products, with a strong emphasis on quality, sustainability, and natural health benefits. The website reflects a mature digital presence with comprehensive product categories, corporate responsibility initiatives, and multilingual support targeting consumers and business partners globally. Technically, the site is built on WordPress with modern plugins and a reputable theme, offering good SEO and user experience. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to potential risks and undermining trust. Privacy policies and cookie consent mechanisms are present and appear GDPR compliant, supporting responsible data handling. Overall, while the business and content quality are high, urgent improvements in SSL/TLS implementation are necessary to enhance security and user trust.

L

lemonconsulting

lemonconsulting.es

25

Lemon Consulting is a Spanish strategic consulting company specializing in credit insurance, health insurance, and business innovation consulting. The company targets businesses seeking to improve their overall results and risk management. The website presents a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on WordPress with Elementor and uses modern web technologies and plugins for SEO, accessibility, and GDPR compliance. However, the absence of a valid SSL certificate and HTTPS significantly impacts the security posture. The site employs Google Analytics and cookie consent mechanisms aligned with GDPR. Security policies and incident response information are not publicly available, which could be improved to enhance trust. Overall, Lemon Consulting appears to be a legitimate small business with a moderate digital maturity level but requires urgent improvements in SSL/TLS security to protect user data and improve trust.

C

Campofrío Food Group, S.A.U

campofrio.es

40

Campofrío Food Group, S.A.U is a well-established Spanish company specializing in the production and commercialization of meat products. It holds a strong market position in Spain with a diverse portfolio of brands and products, focusing on quality, innovation, and sustainability. The website demonstrates a high level of content quality, with detailed product information, recipes, and corporate social responsibility initiatives. Technically, the site uses modern frameworks such as Next.js and Drupal CMS, ensuring good mobile optimization and user experience. However, the absence of a valid SSL certificate significantly impacts the security posture, reducing the overall security score. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, reflecting a mature approach to data protection. The company is part of the larger Sigma Alimentos group, with several subsidiary brands and dedicated service platforms. Overall, the website is professional and trustworthy but requires urgent attention to its SSL configuration to enhance security and user trust.

F

Firma

firma.es

28

Firma is a medium-sized innovation and branding agency based in Spain, serving visionary founders and business leaders with a comprehensive suite of branding services including insights, strategy, creative, and experience design. The company is positioned as a premium agency with notable clients such as Volkswagen and Typeform, and holds B Corp and Climate Neutral certifications, reinforcing its commitment to sustainability and social responsibility. Technically, the website is built on Webflow CMS, leveraging modern JavaScript libraries like GSAP and Lenis for smooth animations and user experience enhancements. Analytics are implemented via Google Tag Manager and Microsoft Clarity, indicating a moderate level of user tracking and data collection. However, the website currently lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security vulnerability that undermines user trust and data protection. DNS security features such as DNSSEC and CAA records are also absent, representing further areas for improvement. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, supporting GDPR adherence. Overall, the website is professionally designed and content-rich but requires urgent security upgrades to meet modern standards.

E

EVOLUXER

evoluxer.com

17

EVOLUXER is a Spanish consultancy company specializing in the comprehensive management of international tenders. The company targets businesses and public/private entities seeking to expand their international presence and develop new projects globally. Their services include advisory, administrative, and financial management throughout the project lifecycle, with experience working alongside major multilateral organizations such as EuropaAid, the World Bank, and the Inter-American Development Bank. The website reflects a professional and consistent brand image with clear contact information and relevant business content. Technically, the site is built on WordPress using Elementor and related plugins, but suffers from slow load times and lacks modern security configurations such as HTTPS and security headers. The absence of a valid SSL certificate and security policies represents a significant security risk. Privacy compliance is basic, with privacy and cookie policies present but lacking consent mechanisms. Overall, the website demonstrates moderate business credibility but requires urgent improvements in security and technical performance to enhance trust and user experience.

G

Grupo SM

grupo-sm.com

39

Grupo SM is a large international educational group with a strong presence in Spanish and Portuguese speaking countries. The company operates through multiple subsidiaries and foundations offering educational publishing and related services. The website is built on Drupal 7 and hosted behind Cloudflare, but lacks a valid SSL certificate, resulting in no HTTPS support. The site includes comprehensive privacy and cookie policies with consent mechanisms, reflecting good privacy compliance practices. Social media presence is active and consistent with the brand. However, the absence of direct contact information and security policies such as incident response or vulnerability disclosure reduces transparency. The overall security posture is weak due to missing SSL/TLS and modern security headers, which poses risks to user data confidentiality and trust. Performance metrics are not available, indicating potential issues with site speed or monitoring. Strategic improvements in security infrastructure and contact transparency are recommended to enhance trust and compliance.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 10 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

S

StackJobs

stackjobs.io

59

StackJobs is a specialized job board platform launched in 2024, focusing on frontend developer roles filtered by actual technology stack requirements such as React, Vue.js, Angular, and Svelte. The platform aggregates job listings directly from company career pages, bypassing recruiters, and offers features like job alerts, job saving, and frequent job extraction. The business targets frontend developers seeking precise job matches, positioning itself as a niche alternative to traditional job boards. Technically, the website uses modern frontend frameworks including Vue.js, Svelte, React, and Angular, with hosting and DNS managed via Cloudflare. However, the website suffers from a critical security issue: the SSL certificate is invalid or missing, and no TLS protocols are enabled, resulting in insecure HTTP connections. This significantly impacts user trust and security. Additionally, no privacy, cookie, or terms of service policies are found, and no direct contact information is provided, which may affect compliance and user confidence. Analytics are implemented using PostHog, indicating moderate user tracking. Overall, the website demonstrates good design and user experience but requires urgent improvements in security and privacy compliance to enhance trustworthiness and protect users.

E

efficy

tribecrm.es

40

Tribe CRM, operated under the parent company efficy, offers a highly adaptable CRM platform designed to help businesses grow by integrating sales, marketing, and customer service functions with AI capabilities. The website targets Spanish-speaking businesses seeking customizable CRM solutions with seamless integrations and workflow automation. The company positions itself as a modern, customer-centric CRM provider with a growing client base exceeding 10,000 users. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Piwik PRO, and Cookiebot for consent management. However, the site suffers from a lack of valid SSL/TLS certificates, resulting in insecure HTTP connections and no HTTPS enforcement, which is a critical security concern. Performance is suboptimal with slow load times and a large page size, though mobile optimization and content quality are strong. Security posture is weak due to missing HTTPS, lack of security headers, and no DMARC record, exposing the site to potential risks. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism in place. Business credibility is supported by clear contact information, professional content, and trust signals such as testimonials and partner links. Overall, while the business and content aspects are strong, the security deficiencies significantly impact the risk profile. Immediate remediation of SSL/TLS and security headers is recommended to protect user data and improve trust.

F

Freelance diseñador Wordpress SEO Mònica Cabaní

monicacabani.com

36

Mònica Cabaní operates as a freelance web designer specializing in WordPress, SEO, and Google Ads based in Barcelona, Spain. With over 12 years of experience, she offers a comprehensive suite of services including custom WordPress website design, WooCommerce online stores, SEO optimization, Google Ads consultancy, website maintenance, and GDPR compliance. The website is well-structured, professionally designed, and targets startups, freelancers, companies, and agencies seeking effective online presence and digital marketing solutions. Technically, the site is built on WordPress using the Avada theme and several popular plugins, but suffers from a lack of valid SSL certificate and slow loading times, which are critical security and performance concerns. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business information is transparent and consistent with domain registration data, enhancing trustworthiness.

F

FEADCV

feadcv.es

40

FEADCV is a non-profit federation representing entities that provide services to people with intellectual disabilities and their families in the Comunitat Valenciana, Spain. The organization focuses on advocacy, negotiation with government consellerías, and promoting social inclusion and autonomy for its target audience. The website clearly communicates its mission, vision, and values, positioning itself as a key sector representative. Technically, the site is built on WordPress with common plugins like Yoast SEO and WPBakery, hosted likely by 1&1 IONOS. However, performance is slow with a large page size and load time exceeding 8 seconds. Security posture is weak due to the absence of a valid SSL certificate, lack of HTTPS, missing security headers, and no advanced email authentication beyond SPF. Privacy policies exist but lack strong GDPR compliance indicators. Contact information is limited to an email address and social media links, with no phone numbers or physical addresses explicitly provided. Overall, the site is functional and informative but requires urgent security improvements to protect users and enhance trust.

P

Plena inclusión España

plenainclusion.org

35

Plena inclusión España is a well-established non-profit organization dedicated to advocating for the rights and inclusion of people with intellectual and developmental disabilities and their families in Spain. The organization operates a comprehensive digital presence with rich content, including news, projects, training, and support services, targeting individuals, families, and federations across Spain. Their market position is strong as a leading confederation in this sector, supported by multiple certifications and a consistent brand identity. Technically, the website is built on WordPress using Elementor and several modern plugins, providing a good user experience and mobile optimization. However, performance is slow, and there is room for improvement in speed and technical optimization. The site integrates analytics and marketing tools such as Google Analytics, Pardot, and Complianz for GDPR compliance. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. Other security headers and best practices are partially implemented, but the absence of HTTPS significantly lowers the security posture. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the website is trustworthy and professional but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include implementing HTTPS, enabling modern TLS protocols, and enhancing security headers. The domain registration data aligns well with the organization's identity, reinforcing legitimacy.

3

3dids.com Agencia de Marketing

3dids.com

56

3dids.com Agencia de Marketing is a well-established digital marketing and ecommerce agency based in Spain, specializing in Shopify platform services and ecommerce internationalization. As part of the Publicis Group, it leverages extensive industry experience and a broad partner ecosystem to deliver comprehensive digital strategies, CRM activation, SEO, and AI-driven productivity enhancements. The website reflects a mature digital presence with rich content, client testimonials, and strong branding. Technically, the site is built on Shopify with Cloudflare hosting and uses modern JavaScript libraries and analytics tools. However, the security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which poses a critical risk. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the business credibility is high, supported by strong trust signals and transparent domain registration.