Real Estate security reports

D

DKB Grund GmbH

dkb-grund.de

61

DKB Grund GmbH is a German real estate company specializing in property sales, financing, insurance, and investment services. With over 25 years of experience, it serves private and commercial clients across Germany. The website presents a comprehensive portfolio of services including property valuation, financing certificates, and energy-saving advice, supported by a strong regional presence and recognized industry partnerships. Technically, the site uses modern web technologies and analytics tools but currently lacks a valid SSL certificate, which impacts its security posture. The company demonstrates good GDPR compliance with a clear privacy and cookie policy and employs consent management tools. However, there is no explicit security policy or incident response information available. Overall, the website is professionally designed, user-friendly, and trustworthy, but the lack of HTTPS is a critical security gap that should be addressed promptly.

S

Saulės spektras, UAB

statyba.lt

48

Statyba.lt is a comprehensive Lithuanian online business directory specializing in the construction sector, offering company listings, expert advice, job postings, and industry articles. Operated by Saulės spektras, UAB, it serves as a key platform for connecting construction-related businesses and consumers in Lithuania. The website demonstrates a solid market position with a broad range of services and active content updates. Technically, the site uses modern JavaScript frameworks, Google Analytics, and Google Fonts, hosted by Hostex, but suffers from slow load times due to large page size and resource count. Security-wise, it employs TLS 1.2 with strong cipher suites but lacks TLS 1.3, HSTS, OCSP stapling, and DNSSEC, which are recommended for enhanced security. Privacy and cookie policies are comprehensive and GDPR compliant, with clear user consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for SEO and mobile use, though performance improvements are advisable.

R

RE/MAX Canada

remax.ca

63

RE/MAX Canada operates a comprehensive real estate platform focused on residential, commercial, and luxury property listings across Canada. Positioned as Canada's #1 Real Estate Brand, it serves home buyers, sellers, renters, and real estate professionals by providing extensive listings, agent search capabilities, and market insights. The website is well-branded, professionally designed, and targets a broad Canadian audience with bilingual support. Technically, the site leverages modern web technologies including Next.js and React, hosted on Amazon CloudFront with a valid SSL certificate, ensuring fast performance and good mobile optimization. However, the SSL configuration lacks modern TLS protocols and security headers could be improved. Security posture is moderate with no explicit incident response or security policies publicly disclosed. Privacy and terms of service policies are present and comprehensive, but cookie consent mechanisms are absent, which may impact GDPR compliance. Overall, the site is professional and trustworthy but could enhance security and privacy compliance to reduce risk and improve user trust.

R

RE/MAX

remaxcommercial.com

50

RE/MAX Commercial operates as a prominent commercial real estate brokerage platform, offering extensive property listings for sale and lease across multiple regions, primarily in the United States and Canada. The company leverages the strong RE/MAX brand and network to connect commercial property buyers, sellers, and brokers, providing a trusted marketplace and professional services. Their website is well-structured with clear navigation, targeting commercial real estate investors and professionals seeking brokerage services. The business model centers on brokerage commissions and facilitating commercial real estate transactions through a digital platform integrated with professional broker searches and office locators. Technically, the website is built on WordPress VIP, utilizing modern web technologies including Yoast SEO for search optimization, Google Tag Manager for analytics, and TrustArc for cookie consent management. Hosting is provided via Amazon AWS DNS infrastructure, ensuring scalability and reliability. The site demonstrates good mobile optimization and SEO practices, with structured data enhancing search engine visibility. Performance is fast, and the user experience is professional and consistent with the RE/MAX brand. From a security perspective, the site maintains a valid SSL certificate but lacks modern TLS protocol support and advanced security headers, which limits its security posture. The presence of TrustArc indicates compliance with privacy regulations including GDPR, supported by a comprehensive privacy policy and cookie consent mechanism. However, there is no explicit security policy, incident response information, or vulnerability disclosure found, which are areas for improvement. Contact information is available primarily via phone and contact forms, with no direct company emails listed. Overall, RE/MAX Commercial presents a mature digital presence with strong business positioning in commercial real estate. Security practices are adequate but could be enhanced to meet higher standards. Strategic improvements in security protocols and transparency would further strengthen trust and compliance, supporting continued growth and market leadership.

RE/MAX, LLC operates a large-scale real estate brokerage network with a significant global presence, offering comprehensive services including property listings, agent and office searches, and specialized real estate segments such as luxury and commercial properties. The company is recognized as a trusted brand in the U.S. real estate market, supported by a robust agent network and extensive resources. Technically, the website leverages modern web technologies such as Next.js and React, hosted on AWS infrastructure, with good performance and mobile optimization. Security posture is strong in terms of HTTP headers and content security policies, but the lack of modern TLS protocols and absence of DNSSEC indicate areas for improvement. The site integrates multiple marketing and analytics tools, resulting in extensive user tracking but lacks a visible cookie consent mechanism, which may impact privacy compliance. Overall, the website is professional, trustworthy, and well-branded, with clear contact and legal information.

S

StoneHardscapes, LLC

stonehardscapes.com

82

StoneHardscapes, LLC is a medium-sized manufacturer and importer specializing in natural stone and porcelain pavers, veneers, and tiles primarily for outdoor and hardscape applications. Positioned as a trusted supplier with over 20 years of experience and affiliation with the Team Horner Group, the company serves a diverse audience including design professionals, contractors, distributors, and the hospitality sector. Their business model focuses on providing premium stone products alongside installation resources and partner support. Technically, the website is built on WordPress with WooCommerce and hosted on WP Engine, utilizing various plugins for enhanced user experience and marketing. However, the site lacks a valid SSL certificate, which is a critical security concern. The security posture shows awareness with cookie consent and reCAPTCHA but requires improvements in SSL, DNS security, and published security policies. Overall, the website demonstrates good content quality, branding consistency, and trust indicators, but technical and security enhancements are recommended to strengthen digital maturity and user trust.

R

Real Estate Team OS

realestateteamos.com

66

The website's overall security posture exhibits significant gaps, particularly in foundational security controls and regulatory compliance. Critical and high-severity issues primarily relate to missing email authentication, lack of comprehensive security policies, and poor implementation of security headers, exposing the business to phishing, data breaches, and clickjacking attacks. GDPR compliance is notably weak, with absent cookie policies and consent mechanisms, risking legal penalties and reputational damage. Although network security and SSL/TLS configurations are relatively strong, imminent SSL certificate expiration and missing DNS security features present moderate risks. The absence of an incident response framework and vulnerability disclosure policy indicates unpreparedness for security incidents. Immediate remediation is essential to protect customer data, maintain regulatory compliance, and safeguard brand trust. Addressing these issues will strengthen the website’s resilience against common threats and align it with industry best practices.

This website has 8 security issue(s) identified for improvement. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

This website has 1 high-priority security issue(s) that should be addressed promptly. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

I

Immosoft

immosoft.mc

94

This website has 1 high-priority security issue(s) that should be addressed promptly. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

B

BaltPrime

baltprime.com

92

The website's overall security posture is generally solid, with no critical vulnerabilities detected, and strong performance in email security and SSL/TLS configurations. However, there is a significant risk posed by the exposure of an FTP service, which is considered high-risk due to its lack of encryption and susceptibility to interception. Medium-level concerns include missing security headers that protect against common web attacks, lack of DNSSEC implementation which can lead to DNS spoofing, and incomplete compliance with GDPR and NIS2 regulatory requirements, potentially exposing the business to legal and operational risks. Additionally, the presence of an exposed SSH service without clear context increases the attack surface. Improvements in these areas will enhance both security resilience and regulatory compliance. DNS health is fairly strong but can be improved by configuring CAA records to restrict certificate issuance. Addressing these issues will reduce the risk of data breaches, regulatory penalties, and service disruptions, thus safeguarding business reputation and continuity.

This website has 1 high-priority security issue(s) that should be addressed promptly. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

C

Chambre Immobilière de Monaco

chambre-immobiliere-monaco.mc

96

The website demonstrates a strong overall security posture with no critical or high-level issues detected. Key strengths include excellent email security, SSL/TLS configurations, and network security, all scoring 100 out of 100. However, medium-severity findings related to missing security headers, GDPR compliance gaps, NIS2 directive alignment, and DNS security weaknesses indicate areas that require attention. The absence of DNSSEC and incomplete DNS CAA record configuration slightly reduce DNS health scores and expose the domain to potential spoofing or unauthorized certificate issuance risks. Addressing these medium-level issues will not only improve security resilience but also enhance regulatory compliance and trust with customers and partners. The low-severity issues currently pose minimal risk but should be monitored as part of ongoing security hygiene. Overall, prioritizing remediation in security headers and regulatory compliance will deliver the greatest business benefit and risk reduction.

The website demonstrates a generally strong security posture with no critical or high-severity issues detected. Core security areas such as email security, SSL/TLS configurations, and overall network security are well implemented, scoring a perfect 100. However, medium-level issues related to missing or misconfigured security headers, GDPR compliance, NIS2 adherence, and disabled DNSSEC indicate gaps that could expose the business to compliance risks and potential targeted attacks. The absence of DNSSEC and CAA records slightly lowers DNS health, which while not immediately critical, could affect domain integrity and trust. Addressing these medium and low-level issues will enhance regulatory compliance, protect customer data, and strengthen defense against DNS-related threats. Proactively resolving these gaps will also reduce potential reputational and financial risks. Overall, the site is secure but requires focused improvements in headers, regulatory compliance, and DNS configurations to reach a robust security standard.

This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

P

Pillar Capital, AS

pillar.lv

54

The website https://pillar.lv currently exhibits a poor security posture with critical gaps in fundamental web security headers, GDPR compliance, and incident response readiness, exposing it to significant regulatory and operational risks. Immediate remediation is essential to protect customer data, ensure legal compliance within the EU, and safeguard business continuity.

The website convendum.se exhibits significant security and compliance gaps, particularly in privacy and regulatory adherence, resulting in a high-risk posture. While network and TLS configurations are relatively strong, critical missing security headers and lack of GDPR and NIS2 compliance expose the business to legal, reputational, and operational risks.

The website https://firstamtitle.com currently exhibits significant security vulnerabilities, primarily related to DNS configuration and email authentication, which pose critical risks to business operations and reputation. While SSL/TLS implementation is strong, unresolved critical DNS issues and lack of email security mechanisms expose the organization to potential service outages, phishing attacks, and regulatory non-compliance.

Z

zipForm

zipform.com

60

This website has 11 high-priority security issue(s) that should be addressed promptly. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

Propertybase.com exhibits a moderate to high risk security posture with multiple high-severity vulnerabilities primarily related to missing critical security headers and insufficient GDPR and NIS2 compliance measures. While foundational network and TLS configurations are strong, the absence of key policies and protections exposes the business to regulatory, reputational, and operational risks. Immediate remediation is advised to safeguard user data, ensure regulatory compliance, and mitigate potential cyber threats.

The website https://ziplogix.com exhibits significant security weaknesses, particularly in web security headers, privacy compliance, and core security policies, resulting in a high overall risk profile despite no critical vulnerabilities. These gaps expose the business to potential data breaches, regulatory fines, and reputational damage. Immediate remediation is needed to strengthen security controls and compliance posture.

The website https://zipformplus.com exhibits significant security weaknesses, particularly in compliance with privacy regulations and foundational security controls, resulting in an overall unknown risk rating. While network and SSL/TLS configurations are relatively strong, critical gaps such as missing security headers, lack of privacy policies, and absence of incident response frameworks expose the business to regulatory, reputational, and operational risks.

The website https://membersrealty.com currently exhibits significant security gaps, particularly in web security headers, data privacy compliance, and incident response preparedness, placing the business at risk of data breaches, regulatory penalties, and reputational damage. While foundational infrastructure components like SSL/TLS and DNS are relatively well managed, critical omissions such as missing security headers and policies indicate an urgent need for remediation to safeguard customer data and maintain trust.

The website https://gmo-office.com exhibits significant security and compliance gaps, particularly in web security headers, privacy policy adherence, and incident response readiness. While network security and email security show strengths, the absence of critical headers and policies expose the business to data breaches, regulatory penalties, and reputational damage. Immediate remediation is needed to protect customer data and ensure regulatory compliance.