Security Directory

R

Rosengart

rosengart.mc

38

The website's security posture is currently poor, with multiple critical and high-severity issues posing significant risks to data confidentiality, integrity, and regulatory compliance. Most notably, the absence of HTTPS encryption critically exposes user data to interception and undermines trust. Key security headers are missing, increasing susceptibility to web-based attacks such as clickjacking, content injection, and cross-site scripting. The lack of GDPR compliance elements such as a privacy policy, cookie policy, and consent mechanisms exposes the business to legal penalties and reputational damage. Additionally, the absence of NIS2-related security frameworks, policies, and incident response plans indicates inadequate preparedness against cyber threats and regulatory requirements. While network security posture and DNS health show relative strength, other foundational security controls need urgent implementation. Overall, immediate remediation is essential to protect customer data, comply with regulations, and maintain business continuity and trust.

O

OceanaGold

oceanagold.com

47

The website's overall security posture is currently poor, with critical vulnerabilities that expose the business to significant risks including data breaches, regulatory penalties, and reputational damage. The absence of HTTPS encryption is the most severe issue, compromising data confidentiality and integrity for all site visitors and transactions. Key security headers are either missing or weakly configured, increasing susceptibility to attacks such as clickjacking, cross-site scripting (XSS), and content injection. Compliance with GDPR and NIS2 regulations is notably lacking, particularly concerning cookie policies, consent mechanisms, and documented security frameworks, putting the business at risk of legal consequences. While the network security and DNS health are relatively strong, email security shows room for improvement, especially with DMARC enforcement. Immediate action is required to remediate critical and high-severity issues to protect customer data, maintain trust, and ensure regulatory compliance. Without prompt remediation, the organization faces heightened risks of cyber incidents and potential operational disruption.

The website's security posture is currently poor, exposing the business to significant risks including data breaches, regulatory non-compliance, and reputational damage. Critical vulnerabilities such as the absence of HTTPS encryption and missing core security headers leave user data and communications unprotected. The lack of privacy policies and cookie consent mechanisms violates GDPR requirements, increasing legal exposure. Additionally, key information security controls and incident response procedures are missing, indicating immature cybersecurity governance. Exposure of high-risk services like FTP further increases attack surface and potential compromise. While email security and DNS health show some strengths, these are overshadowed by critical gaps in encryption and compliance. Immediate remediation is essential to safeguard customer trust, comply with regulations, and protect business continuity. Without urgent action, the organization risks severe financial and operational consequences from cyber incidents or regulatory penalties.

The website's security posture is currently weak and exposes the business to significant risks, primarily due to the lack of HTTPS encryption and critical security headers. Absence of HTTPS not only undermines data confidentiality and integrity but also violates GDPR and NIS2 compliance requirements, risking legal penalties and loss of customer trust. Key security controls such as Content-Security-Policy and X-Frame-Options headers are missing, increasing vulnerability to cross-site scripting and clickjacking attacks. The website also lacks essential GDPR compliance elements including a cookie policy and consent mechanisms, exposing the business to regulatory fines. Incident response, information security frameworks, and security policy documentation are absent, which can hamper timely detection and mitigation of security incidents. While email security and network security have relatively strong scores, foundational web security and compliance gaps are critical and require immediate attention. Improving these areas will protect customer data, enhance trust, and reduce potential financial and reputational damage.

B

Bentley Systems

legion.com

50

The website's security posture is currently weak and exposes the business to significant risks, notably due to lack of HTTPS encryption, absence of key GDPR compliance elements, and deficient information security governance. Critical vulnerabilities, including no HTTPS, missing privacy and cookie policies, and absence of incident response procedures, pose threats to data confidentiality, regulatory compliance, and customer trust. While network security and email security configurations are strong, foundational protections such as security headers and DNS configurations require improvement. The lack of GDPR-related policies and consent mechanisms increases legal and reputational risks, particularly in data privacy jurisdictions. Additionally, missing security framework documentation and vulnerability disclosure policies hinder the organization’s ability to manage and respond to cyber incidents effectively. Overall, urgent remediation is needed to protect sensitive information, meet compliance obligations, and safeguard business continuity. Immediate attention to encryption, policy development, and security controls will significantly reduce risk exposure.

I

InfraOpS

infraops.fr

37

The website's security posture is critically weak, exposing the business to significant risk both technically and legally. The absence of HTTPS encryption and critical security headers like Strict-Transport-Security and Content-Security-Policy leaves user data vulnerable to interception and attacks such as man-in-the-middle and clickjacking. Moreover, the lack of GDPR compliance measures including privacy and cookie policies, as well as consent mechanisms, exposes the business to regulatory penalties, especially given the EU presence. The missing NIS2 security framework and incident response plans indicate inadequate preparedness for cyber incidents, increasing downtime and reputational damage risks. Email security weaknesses, such as missing DMARC and DKIM records, heighten the risk of email spoofing and phishing attacks targeting customers and partners. DNS health is moderate but could be improved with DNSSEC to prevent DNS attacks. Although network security posture is strong, this does not compensate for the critical gaps in web security and compliance. Immediate remediation is essential to protect customer trust, ensure regulatory compliance, and safeguard business continuity.

E

Engeco Engenharia e Construção LTDA

engeco.com.br

38

The website's overall security posture is critically weak, with multiple high and critical severity issues spanning encryption, compliance, and network exposure. The absence of HTTPS encryption exposes all data transmissions to interception and tampering, representing a fundamental risk. Key security headers that protect against common web attacks are missing, increasing vulnerability to clickjacking, MIME sniffing, and cross-site scripting. Compliance deficiencies, particularly with GDPR and NIS2 regulations, pose significant legal and reputational risks due to missing privacy policies, cookie consent, and documented security policies. Network services such as FTP and MySQL are exposed without adequate controls, presenting easy attack vectors for unauthorized access. While email security and DNS health show relatively better scores, critical gaps in vulnerability disclosure, incident response, and business continuity planning further weaken organizational resilience. Immediate attention is required to establish a secure baseline, ensure regulatory compliance, and protect customer data to maintain trust and avoid costly breaches.

I

Icon Connect

iconconnect.com

47

The website's overall security posture is critically weak, with significant gaps in foundational security controls and compliance requirements. The absence of HTTPS encryption is the most severe vulnerability, exposing all data transmissions to interception and undermining user trust. Key security headers are missing, increasing the risk of cross-site scripting, clickjacking, and other web-based attacks. Compliance with GDPR is poor, lacking a cookie policy, consent mechanisms, and sufficient privacy disclosures, exposing the business to regulatory penalties. The NIS2 directive requirements are largely unmet, with no documented security frameworks, incident response plans, or business continuity strategies. While email security and network posture are relatively strong, these do not compensate for the critical web and compliance deficiencies. Immediate remediation is essential to protect sensitive data, ensure regulatory compliance, and maintain customer confidence. Without urgent action, the business faces heightened cyber risk, legal exposure, and reputational damage.

M

Monaco Mediax

tvfestival.com

43

The website’s security posture is currently poor, with multiple critical and high-risk vulnerabilities that expose the business to significant cyber threats and compliance violations. The absence of HTTPS encryption is a critical and immediate risk, compromising data confidentiality and integrity, and violating GDPR and NIS2 regulatory requirements. Key security headers are missing, increasing susceptibility to web-based attacks such as clickjacking, cross-site scripting, and MIME-type sniffing. The lack of privacy and cookie policies, as well as the absence of a cookie consent banner, places the business at risk of GDPR non-compliance and potential legal penalties. Additionally, the organization has not implemented essential information security frameworks, policies, or incident response procedures, weakening its ability to manage and recover from security incidents. Although email security and network security postures are relatively strong, gaps in DNS security and policy documentation remain. Immediate remediation is necessary to protect customer data, maintain trust, and comply with regulatory mandates, thereby safeguarding the business’s reputation and operational continuity.

F

Fabi AS

fabi.no

42

The website exhibits a severely weak security posture with multiple critical vulnerabilities that expose the business to significant risk. The absence of HTTPS encryption is a critical failure, undermining data confidentiality and user trust, and violating key regulatory requirements such as GDPR and NIS2. There is a lack of foundational security policies and procedures, including incident response, security framework, and vulnerability disclosure, which impairs the organization's ability to detect and respond to threats. Privacy compliance is inadequate, with no privacy or cookie policies and no consent mechanisms, risking regulatory penalties and reputational damage. Security headers are poorly implemented, increasing exposure to common web attacks like clickjacking and cross-site scripting. Email security is incomplete, lacking enforcement of DMARC and missing DKIM records, increasing the risk of phishing and domain spoofing. DNS security is moderately strong but can be improved. Network security posture is good, indicating some positive controls in place. Immediate remediation is essential to protect sensitive data, comply with regulations, and maintain customer trust.

S

Sophia Business Angels

sophiabusinessangels.com

40

The website's overall security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and reputational damage. The absence of HTTPS encryption is a fundamental vulnerability impacting user data confidentiality and trust. Key security headers are missing, increasing exposure to common web attacks such as clickjacking, cross-site scripting (XSS), and content injection. The site also lacks essential GDPR compliance elements like privacy policies and cookie consent, risking substantial legal penalties. Organizational security governance under NIS2 directives is severely lacking with no incident response, security policies, or information security framework in place. While email security and DNS health show moderate strengths, they are insufficient to mitigate the broader critical deficiencies. Immediate remediation is required to protect customer data, meet regulatory requirements, and maintain business continuity. Without urgent improvements, the business faces heightened risk of cyber incidents and regulatory sanctions.

D

Dubai Tell Limited, Geneva Tell SA, Algiers Tell Markets SPA

tell.group

43

The website's security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and operational disruptions. The absence of HTTPS encryption is a critical vulnerability that compromises all data transmissions, severely impacting user trust and violating GDPR and NIS2 requirements. Missing essential security headers further increase susceptibility to common web attacks such as clickjacking, XSS, and content injection. Lack of privacy and cookie policies, as well as the absence of consent mechanisms, place the business at high risk of legal penalties under data protection regulations. Critical services like MySQL and FTP are publicly exposed, providing easy attack vectors for threat actors. Additionally, there is a notable deficit in security governance, including lack of incident response, security policies, and information security frameworks, which undermines the organization's ability to manage and mitigate risks effectively. While email and DNS security show some strengths, these are overshadowed by critical gaps in network and application security. Immediate action is required to address these issues to protect business assets, customer data, and maintain regulatory compliance.

R

Riviera Marine S.A.M.

rivieramarine.mc

47

The website's overall security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and operational disruptions. The absence of HTTPS encryption is a critical vulnerability, undermining data confidentiality and trust, and violating GDPR and NIS2 requirements. Missing essential security headers such as Strict-Transport-Security and Content-Security-Policy further increase exposure to common web attacks like clickjacking and cross-site scripting. The lack of a cookie consent banner and incomplete GDPR compliance could result in legal penalties and reputational damage. Additionally, no formal security frameworks, incident response processes, or business continuity plans are in place, leaving the organization ill-prepared for security incidents. The exposure of high-risk services like FTP introduces unnecessary attack vectors. While email security and DNS health show relatively better scores, critical gaps remain. Immediate remediation is crucial to protect customer data, maintain regulatory compliance, and safeguard business continuity.

P

ProTech Monte-Carlo

protech.mc

42

The website's overall security posture is critically weak, with major deficiencies in foundational security controls such as HTTPS encryption and essential security headers. Lack of HTTPS exposes user data to interception and undermines trust, while missing security headers increase vulnerability to common web attacks like clickjacking and XSS. Additionally, the absence of GDPR compliance elements such as Privacy and Cookie Policies and consent mechanisms risks regulatory penalties and damages customer trust. The site also lacks critical NIS2 framework components including incident response, security policies, and business continuity plans, which could impair the organization's ability to respond to and recover from cyber incidents. While email security and network security show relatively strong scores, the critical gaps in encryption and policy documentation represent immediate threats to business continuity and reputation. Overall, urgent remediation is needed to secure customer data, ensure regulatory compliance, and protect the business from reputational and financial harm. Failure to act promptly may result in data breaches, legal consequences, and loss of customer confidence.

R

RG Capital | Allworth Financial

rgcapital.net

66

The website's security posture presents significant risks, primarily due to the absence of HTTPS encryption, which exposes all data transmissions to interception and manipulation. While network security is strong, several medium-level issues such as missing security headers, lack of GDPR and NIS2 compliance, absence of DNSSEC, and incomplete email authentication (no DKIM) indicate gaps in regulatory adherence and protection against common attack vectors. The failure to implement GDPR and NIS2 requirements could lead to legal and financial penalties, impacting business reputation and operations. DNS configuration weaknesses further increase susceptibility to domain spoofing and DNS attacks. Although some areas like network security and CAA records show positive scores, these do not compensate for the critical encryption flaw. Immediate remediation is essential to safeguard customer data, ensure compliance, and maintain trust. A structured approach focusing on encryption, compliance, and authentication will mitigate the most significant risks effectively.

A

ACM

acm.mg

64

The website's security posture exhibits several critical and high-risk vulnerabilities that expose the business to significant threats. Most notably, the absence of HTTPS encryption (SSL/TLS) places all data transmissions at risk of interception, undermining user trust and regulatory compliance. The presence of an exposed FTP service further increases the attack surface, as FTP is an outdated and insecure protocol vulnerable to credential theft and unauthorized access. Medium-level issues such as missing security headers, lack of DNSSEC, and incomplete GDPR and NIS2 compliance introduce additional risks related to data integrity, privacy obligations, and regulatory adherence. While email security shows some strength, the missing DKIM record could lead to spoofing and phishing risks. Overall, the site requires urgent remediation to safeguard sensitive data, maintain customer confidence, and meet legal requirements. Failure to address these issues could result in data breaches, legal penalties, and reputational damage.

O

One Partners

onepartners.com.br

42

The website's overall security posture is critically weak, exposing the business to significant cyber risks and regulatory non-compliance. The absence of HTTPS encryption is a critical vulnerability impacting data confidentiality and user trust, with cascading effects on GDPR and NIS2 compliance. Multiple missing security headers increase susceptibility to common web attacks such as clickjacking, MIME sniffing, and cross-site scripting. The exposure of critical services like MySQL and FTP without adequate protections further elevates the risk of data breaches and unauthorized access. Additionally, the lack of essential documentation and policies—including privacy, cookie, security, and incident response—exposes the organization to legal and operational risks. Although email security and DNS health scores are relatively strong, they do not compensate for the critical infrastructure and governance gaps. Immediate remediation is necessary to protect sensitive data, maintain customer confidence, and ensure regulatory compliance. Failure to act could result in financial losses, reputational damage, and potential regulatory penalties.

M

Manens S.p.A.

manens-tifs.it

48

The website's overall security posture is critically weak, primarily due to the absence of HTTPS encryption, which exposes all data transmissions to interception and manipulation. Key security headers that mitigate various web attacks are largely missing, increasing the risk of cross-site scripting, clickjacking, and content sniffing attacks. Compliance with GDPR and NIS2 regulations is significantly lacking, posing legal and reputational risks, particularly due to missing cookie consent mechanisms, insufficient privacy policies, and lack of incident response and security documentation. Although email security and network security are relatively strong, critical deficiencies in web security and regulatory compliance overshadow these strengths. The absence of an information security framework and business continuity planning further jeopardizes operational resilience. Immediate remediation is essential not only to protect sensitive data and privacy but also to maintain customer trust and avoid substantial regulatory penalties. Without prompt and focused improvements, the business faces heightened exposure to cyber threats and compliance violations.

T

TB Events

tbevents.nl

38

The website exhibits a severely deficient security posture with multiple critical vulnerabilities that expose it to significant risks, including data breaches, regulatory non-compliance, and reputational damage. The absence of HTTPS encryption is the most critical flaw, leaving all data transmissions unprotected and violating EU GDPR and NIS2 regulations. Key security headers are missing, increasing the risk of clickjacking, cross-site scripting, and content injection attacks. The lack of privacy policies and cookie consent mechanisms further exposes the business to legal and compliance penalties under GDPR. Critical gaps in information security frameworks, incident response, and business continuity planning indicate immature security governance. Email security mechanisms like DMARC and DKIM are partially implemented but need enforcement and reporting improvements. DNS security is moderate but can be enhanced by enabling DNSSEC and configuring CAA records. Overall, urgent remediation of encryption, privacy compliance, and security policy documentation is essential to safeguard business operations and customer trust.

S

Solamito Properties

solamito-properties.mc

44

The website's overall security posture is critically deficient, with multiple high and critical severity issues across key areas such as encryption, privacy compliance, and security policies. The absence of HTTPS encryption exposes all data transmissions to interception and manipulation, representing the most urgent risk to both users and business integrity. Critical gaps in GDPR compliance, including missing privacy and cookie policies as well as lack of cookie consent mechanisms, put the organization at risk of regulatory sanctions and reputational damage. Security headers essential for protecting against common web attacks are largely missing, increasing vulnerability to clickjacking, XSS, and other exploits. Furthermore, foundational governance elements like incident response procedures, security policies, and vulnerability disclosure frameworks are absent, indicating a lack of mature security management. DNS and email security posture are relatively strong, but these do not compensate for the critical failures in encryption and compliance. Immediate remediation is required to safeguard customer data, maintain trust, and meet legal obligations. Without prompt action, the organization faces significant operational, financial, and reputational risks.

2

2PM Monaco

2pmmonaco.com

45

The website's security posture is critically weak, with multiple severe vulnerabilities that expose the business to significant risks including data breaches, regulatory penalties, and reputational damage. The absence of HTTPS encryption is the most critical flaw, undermining data confidentiality and integrity. Key security headers are largely missing, increasing susceptibility to common web attacks such as clickjacking, XSS, and content injection. Compliance with GDPR and NIS2 regulations is severely inadequate, notably lacking privacy policies, cookie consent mechanisms, and documented security and incident response procedures. While email and network security show strengths, the overall security framework is fragmented and insufficient for protecting sensitive data or maintaining customer trust. Immediate remediation is essential to mitigate potential legal liabilities and safeguard business continuity. Addressing these issues will not only enhance security but also improve customer confidence and regulatory compliance. Without urgent action, the organization remains exposed to high-impact cyber threats and operational disruptions.

J

JCC Consulting

jcc.com

45

The website's overall security posture is critically weak, primarily due to the complete absence of HTTPS encryption, exposing all data transmissions to interception and manipulation. Compliance with GDPR and NIS2 regulations is severely lacking, with missing cookie policies, consent mechanisms, and critical security governance documentation like incident response and security policies. Security headers are insufficiently implemented, increasing the risk of web-based attacks such as XSS and content injection. Email security practices show moderate maturity but require improvements to prevent domain spoofing and phishing. DNS security is relatively strong, but enabling DNSSEC and configuring CAA records would further protect domain integrity. Network security is well maintained, indicating some foundational controls are in place. Immediate remediation is necessary to protect customer data, maintain regulatory compliance, and safeguard the business reputation. Failure to act promptly could lead to data breaches, legal penalties, and loss of customer trust.

C

Centurion Bulk

centurionbulk.com

34

The website's overall security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and service disruptions. The absence of HTTPS encryption is a critical vulnerability that undermines all data confidentiality and integrity, putting customer data and business communications at risk. Missing essential security headers such as Strict-Transport-Security and Content-Security-Policy increase susceptibility to common web attacks like man-in-the-middle, clickjacking, and cross-site scripting. Non-compliance with GDPR is evident due to missing privacy policies, cookie consent mechanisms, and third-party privacy disclosures, which can result in heavy fines and reputational damage. Several NIS2 directive requirements are unmet, including lack of incident response, security policies, and business continuity planning, exposing the company to operational risks and regulatory penalties. Network security is compromised by exposing critical services like FTP and MySQL publicly, heightening the risk of unauthorized access. Email security is moderately implemented but lacks enforcement and reporting mechanisms, potentially increasing phishing and spoofing risks. Overall, urgent remediation is needed to protect sensitive data, comply with regulations, and maintain customer trust.

M

Meridian4G

meridian4g.com

54

The website's overall security posture is significantly compromised, primarily due to the absence of HTTPS encryption, which is a critical vulnerability exposing user data to interception and undermining trust. Compliance with GDPR and NIS2 regulations is severely lacking, risking legal penalties and damage to brand reputation. While email security and network security modules score well, major gaps exist in policy documentation, incident response planning, and user privacy protections. The presence of exposed services like SSH and missing security headers further increase the attack surface. DNS security is moderate but can be improved to prevent DNS spoofing attacks. Immediate remediation is essential to safeguard customer data, ensure regulatory compliance, and maintain business continuity. Addressing these critical issues will also boost customer confidence and reduce the risk of costly breaches.

F

FIPARC

fiparc.fr

46

The website exhibits significant security weaknesses, particularly in encryption, privacy compliance, and security governance, which pose substantial risks to business operations and customer trust. The absence of HTTPS encryption is a critical vulnerability affecting data confidentiality and regulatory compliance, especially for EU customers under GDPR. Privacy policies and cookie consent mechanisms are missing, exposing the business to legal penalties and reputational damage. Security headers are inadequately configured, increasing susceptibility to common web attacks such as cross-site scripting. The lack of a formal information security and incident response framework demonstrates immature security governance, potentially delaying breach detection and response. While network security and email protections score relatively well, critical gaps in NIS2 compliance and data protection remain. Immediate remediation is needed to secure communications, ensure regulatory adherence, and establish foundational security policies. Addressing these issues will protect business continuity, customer data, and brand reputation.

W

Wyser

wyser-search.com

47

The website's current security posture is critically weak, with multiple severe vulnerabilities exposing it to significant risk. The absence of HTTPS encryption is a fundamental flaw, affecting data confidentiality and trust, and violates GDPR and NIS2 requirements. Key security headers such as Strict-Transport-Security and Content-Security-Policy are missing, increasing exposure to common web attacks like XSS and protocol downgrade attacks. GDPR compliance is notably poor, lacking essential elements like a cookie policy and consent mechanisms, which can lead to regulatory fines and reputational damage. The absence of documented information security frameworks, security policies, and incident response procedures indicates immature organizational security governance. While email security and network security are relatively strong, this does not compensate for the critical gaps in web application and data protection. Immediate remediation is necessary to protect customer data, maintain regulatory compliance, and preserve business reputation. Without swift action, the organization risks data breaches, regulatory penalties, and loss of customer trust.

G

Groupe Banque Richelieu

banquerichelieu.com

42

The website's security posture is currently poor, with multiple critical and high-severity issues significantly increasing business risk. The absence of HTTPS encryption is a critical vulnerability, exposing all data transmissions to interception and undermining customer trust and compliance with regulations. Key security headers are missing, which weakens protection against common web attacks such as clickjacking and cross-site scripting. The lack of GDPR compliance elements like privacy and cookie policies, and consent mechanisms, exposes the business to legal penalties and reputational damage. Additionally, the absence of fundamental NIS2 controls such as incident response procedures, security policies, and a security framework indicates immature security governance. Email authentication mechanisms are partially implemented but need enforcement to reduce phishing risks. DNS security is moderately healthy but could be improved by enabling DNSSEC. Overall, immediate remediation is essential to protect sensitive data, maintain regulatory compliance, and safeguard customer trust.

M

Molori Private Collection

molorisafari.com

42

The website's overall security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and reputational damage. Absence of HTTPS encryption is a critical vulnerability, undermining data confidentiality and trust. Key security headers are missing, increasing susceptibility to common web attacks such as clickjacking, content injection, and MIME-type sniffing. GDPR compliance deficiencies, including lack of privacy and cookie policies, place the company at risk of legal penalties. Additionally, the lack of an information security framework, incident response plan, and vulnerability disclosure policy signals immature security governance. Email security is moderately strong but could be improved. DNS configurations are generally good but could be enhanced with DNSSEC and CAA records. Network security posture is solid but insufficient to compensate for fundamental web security gaps. Immediate remediation is essential to protect customer data, ensure regulatory compliance, and maintain business continuity.

N

NEOFA

neofa.com

35

The website's security posture is currently poor, exposing the business to significant risks including data breaches, regulatory non-compliance, and reputational damage. Critical issues include the complete lack of HTTPS encryption, which undermines all data confidentiality and integrity. The absence of essential security headers and policies leaves the site vulnerable to common web attacks such as clickjacking, cross-site scripting, and content injection. Furthermore, the lack of GDPR compliance elements such as privacy and cookie policies, and missing consent mechanisms, poses legal risks and potential fines. Deficiencies in NIS2 compliance and incident response planning highlight gaps in organizational readiness to address and recover from security incidents. While network security is strong, foundational elements like DNS health and email authentication require improvement to prevent domain spoofing and phishing. Immediate remediation is essential to protect customers, maintain trust, and comply with legal obligations.

N

Nico Rosberg

nicorosberg.com

38

The website's security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and service disruptions. Key deficiencies include the absence of HTTPS encryption, leading to insecure data transmission, and missing fundamental security headers that protect against common web attacks. Additionally, the lack of GDPR compliance elements—such as privacy policies and cookie consent—poses legal risks and potential fines. Network exposure of critical services like MySQL and FTP further increases the attack surface, making unauthorized access more likely. The organization's security governance is underdeveloped, with no formal information security framework, incident response procedures, or vulnerability disclosure policies in place. Although email security and DNS health show moderate maturity, the overall low scores in core security domains highlight urgent remediation needs. Immediate action is required to safeguard business assets, maintain customer trust, and comply with regulatory requirements.

C

COFIP

cofip.pro

37

The website exhibits a severely weak security posture with multiple critical vulnerabilities that expose the business to significant operational, reputational, and regulatory risks. The absence of HTTPS encryption is the most alarming issue, compromising data confidentiality and violating GDPR and NIS2 compliance requirements. Key HTTP security headers are missing, increasing the risk of client-side attacks such as clickjacking, XSS, and content injection. GDPR compliance is deficient, lacking privacy policies and cookie consent mechanisms, which may result in legal penalties. Network services expose critical ports like MySQL and FTP without adequate protections, creating high-risk attack surfaces. The lack of documented security policies, incident response procedures, and vulnerability disclosure policies further weakens the organization's ability to detect and respond to threats. Email and DNS security are relatively stronger, but the overall risk profile remains critical. Immediate remediation is necessary to safeguard business continuity, customer trust, and regulatory compliance.

O

OptimaT

optimat.be

46

The website's security posture is currently at high risk, with multiple critical and high-severity issues that directly impact business operations and regulatory compliance. Notably, the absence of HTTPS encryption exposes sensitive data to interception, undermining user trust and violating legal requirements such as GDPR and NIS2. Missing key security headers (Strict-Transport-Security, X-Frame-Options, Content-Security-Policy) increases vulnerability to common web attacks. The lack of GDPR compliance elements, including privacy and cookie policies and consent mechanisms, poses significant legal and reputational risks, especially for EU customers. Additionally, the organization lacks foundational information security frameworks, incident response procedures, and business continuity plans, indicating immature security governance. Although email security and network security show moderate to good standing, critical gaps in SSL/TLS and GDPR compliance drastically overshadow these positives. Immediate remediation is essential to protect customer data, maintain regulatory compliance, and secure business operations. The overall security readiness score reflects urgent need for comprehensive security improvements and policy implementations.

C

Capefront Energies

naurexgroup.com

48

The website exhibits a poor overall security posture with critical vulnerabilities significantly impacting data protection and regulatory compliance. The absence of HTTPS encryption is a critical failure, exposing user data to interception and undermining trust. Missing key security headers such as Content-Security-Policy and X-Frame-Options increase the risk of cross-site scripting and clickjacking attacks. GDPR compliance is insufficient due to the lack of a cookie consent banner and incomplete privacy policy, risking regulatory penalties and reputational damage. The site also lacks essential NIS2 mandate elements including security policies, incident response procedures, and a vulnerability disclosure policy, indicating immature cybersecurity governance. Email security gaps, notably the missing DMARC record, increase the risk of phishing and email spoofing attacks. DNS security is relatively strong but could be improved with DNSSEC and CAA record implementation. Overall, urgent remediation is needed to protect customer data, ensure regulatory compliance, and maintain business continuity.

A

Arrow Monaco

arrowyacht.com

40

The website's overall security posture is critically weak, with multiple high and critical risk findings that expose the business to significant threats. The absence of HTTPS encryption is the most severe issue, jeopardizing data confidentiality and integrity, and violating compliance standards such as GDPR and NIS2. Key HTTP security headers are missing or misconfigured, increasing the risk of web-based attacks like clickjacking and cross-site scripting. GDPR compliance is notably deficient, lacking fundamental privacy policies and consent mechanisms, which can lead to legal and reputational consequences. The lack of an established information security framework, incident response procedures, and business continuity planning indicates an immature security governance posture. Network exposure of high-risk services like FTP and SSH further increases the attack surface. While email security and DNS health show moderate strength, critical gaps in encryption and policy frameworks present urgent risks. Immediate remediation is essential to protect sensitive data, maintain customer trust, and ensure regulatory compliance.

A

ACCE International

acceintl.com

47

The website's security posture is currently poor, with multiple critical and high-severity issues significantly increasing risk exposure. The absence of HTTPS encryption critically undermines data confidentiality and trust, exposing users and the business to interception and man-in-the-middle attacks. Key security headers are missing, leaving the site vulnerable to clickjacking, content injection, and cross-site scripting attacks. GDPR compliance is severely lacking, notably the absence of cookie policies and consent mechanisms, risking regulatory penalties and reputational damage. The lack of documented security policies, incident response procedures, and information security frameworks indicates immature security governance. Additionally, exposure of high-risk services like FTP further elevates attack surface risk. While email security and DNS health are relatively strong, the overall environment requires urgent remediation to protect business assets, customer data, and maintain regulatory compliance.

A

ADOM

africasie.mc

44

The website’s current security posture is critically weak, exposing the business to significant risks from data breaches, regulatory penalties, and reputational damage. The absence of HTTPS encryption is a fundamental flaw that jeopardizes all data in transit, violating GDPR and NIS2 requirements and undermining user trust. Essential security headers such as Strict-Transport-Security, X-Frame-Options, and Content-Security-Policy are missing, leaving the site vulnerable to common web attacks like clickjacking and cross-site scripting. GDPR compliance is severely lacking, with no privacy policy or cookie consent mechanisms, increasing legal exposure. The lack of a formal information security framework, incident response, and business continuity plans further weakens the organization's resilience to cyber incidents. While network security and email security show some strengths, critical gaps in encryption and policy documentation overshadow these positives. Immediate remediation is vital to protect sensitive data, meet legal obligations, and maintain customer confidence. Without urgent action, the business risks costly breaches and regulatory fines that could impact operations and brand reputation.

E

Engineering Search Firm

esf.careers

42

The website's security posture is currently weak and exposes the business to significant risks, including data breaches, regulatory non-compliance, and reputational damage. Critical issues such as the absence of HTTPS encryption and missing key security headers leave user data vulnerable to interception and attacks like clickjacking and cross-site scripting. The lack of GDPR compliance elements, including privacy policies and cookie consent mechanisms, further increases legal exposure. Additionally, there is a severe deficiency in adherence to NIS2 requirements, with no security frameworks, incident response plans, or security policies documented. While network security and email security show relatively strong scores, foundational SSL/TLS protections and DNS security features like DNSSEC are inadequate or missing. Immediate remediation is essential to protect sensitive customer information, comply with regulations, and maintain trust. Without swift action, the business risks financial penalties and operational disruptions.

E

Endeavour Mining plc

endeavourmining.com

49

The website exhibits significant security and compliance deficiencies that pose substantial business and legal risks. The absence of HTTPS encryption is a critical vulnerability, exposing all data transmissions to interception and undermining user trust, while also violating GDPR and NIS2 regulations. Lack of foundational GDPR compliance elements such as Privacy Policy, Cookie Policy, and Consent Banner further exposes the organization to regulatory penalties and reputational damage. Security governance is weak, with no documented security policies, incident response plans, or vulnerability disclosure processes, compromising the organization's ability to manage and respond to threats effectively. Email security is moderate but requires enhancements to prevent phishing and spoofing attacks. While network security posture is strong, other security controls like HTTP security headers and DNS configurations show room for improvement. Immediate remediation is necessary to safeguard sensitive data, comply with legal requirements, and maintain customer confidence. Addressing these issues will substantially reduce risk exposure and support sustainable business operations.

G

GrowUp Consulting

growup-hr.com

44

The website demonstrates significant security deficiencies, particularly a complete lack of HTTPS encryption, which poses critical risks to data confidentiality and user trust. Missing essential security headers such as Strict-Transport-Security, X-Frame-Options, and Content-Security-Policy increase vulnerability to common web attacks including clickjacking and cross-site scripting. The absence of a privacy policy, cookie policy, and consent mechanisms exposes the business to regulatory non-compliance and potential legal penalties under GDPR. Furthermore, critical gaps in security governance, including missing information security frameworks, incident response procedures, and security policy documentation, indicate immature cybersecurity management. While email security and network security posture are strong, the overall security posture is weak, making the business susceptible to data breaches, reputational damage, and compliance violations. Immediate remediation is necessary to protect customer data, maintain regulatory compliance, and safeguard business continuity. Prioritizing HTTPS implementation and establishing a comprehensive security and privacy framework will significantly enhance risk mitigation. DNS security and some network controls are adequate but insufficient to compensate for the critical issues identified.

F

Frank Europe GmbH

frankeurope.com

53

The website's overall security posture presents significant concerns, particularly regarding foundational protections and regulatory compliance. Critical issues such as the lack of HTTPS encryption severely expose user data to interception and compromise trust. GDPR compliance is markedly deficient, posing legal and reputational risks due to missing cookie policies, consent mechanisms, and inadequate privacy documentation. The absence of a formal information security framework and incident response plans under NIS2 regulations further escalates operational and compliance vulnerabilities. While network security and email security scores are relatively strong, the missing security headers and weak configurations increase susceptibility to web-based attacks. DNS health is adequate but could be improved by enabling DNSSEC and configuring CAA records. Immediate remediation is essential to protect sensitive data, maintain customer confidence, and avoid regulatory penalties. Addressing these gaps will also enhance the company’s resilience against cyber threats and align security practices with industry standards.

A

AFIM S.A.M.

afim.mc

37

The website's overall security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and reputational damage. The absence of HTTPS encryption is a fundamental flaw, severely undermining confidentiality and trust. Missing key security headers such as Strict-Transport-Security, Content-Security-Policy, and X-Frame-Options further increase vulnerability to common web attacks like clickjacking, cross-site scripting, and data interception. Additionally, the lack of GDPR compliance elements such as privacy policies and cookie consent mechanisms could lead to legal penalties and customer trust erosion. The absence of an information security framework, incident response plans, and vulnerability disclosure policies highlights poor organizational security maturity. Email security is also lacking due to missing DMARC and DKIM records, increasing phishing and spoofing risks. While network security and DNS health show relative strength, critical gaps overshadow these positives. Immediate remediation is essential to protect business assets and customer data effectively.

K

Kennedy Executive Search

kennedyexecutive.com

44

The website's overall security posture is critically weak, with multiple high and critical severity issues that expose the business to significant risks. The absence of HTTPS encryption is the most severe vulnerability, compromising data confidentiality and regulatory compliance. Key security headers such as Content-Security-Policy and X-Frame-Options are missing, increasing susceptibility to common web attacks like cross-site scripting and clickjacking. GDPR compliance is severely lacking, with no privacy or cookie policies and no cookie consent mechanism, risking legal penalties and customer trust erosion. The NIS2 framework requirements are largely unmet, indicating immature information security governance and incident response capabilities. While the network security and email security show relatively better scores, critical gaps in SSL/TLS and security policies overshadow these strengths. Immediate remediation is essential to protect sensitive data, ensure compliance, and maintain business reputation. Without rapid improvements, the business remains vulnerable to data breaches, regulatory fines, and operational disruptions.

E

Eve Media

evemedia.fr

40

The website's security posture is critically weak, exposing the business to significant cybersecurity risks and regulatory non-compliance. Key deficiencies include the complete absence of HTTPS encryption, which jeopardizes data confidentiality and integrity in transit, and missing fundamental security headers that protect against common web attacks. The lack of GDPR compliance, such as no privacy or cookie policies and no consent mechanisms, places the business at risk of severe legal penalties, especially as it operates within the EU. Additionally, there is no established information security framework, incident response plan, or security policy documentation, which undermines the organization's ability to manage and respond to security incidents effectively. Email authentication is also poorly configured, increasing the likelihood of phishing attacks and email spoofing. While the network security posture and DNS health show some strengths, these are overshadowed by critical systemic vulnerabilities. Immediate remediation is essential to protect customer data, maintain trust, and comply with regulatory requirements.

S

Silva International Investments

silvainternational.com

38

The website's overall security posture is critically weak, exposing the business to significant operational, reputational, and compliance risks. The absence of HTTPS encryption is a fundamental flaw, undermining data confidentiality and trust, and contravening GDPR requirements. Key security headers are missing, increasing susceptibility to web-based attacks such as clickjacking, XSS, and content injection. Furthermore, the lack of privacy and cookie policies, alongside missing consent mechanisms, exposes the company to regulatory fines and legal challenges under data protection laws. Critical internal security controls and documentation, including incident response and information security frameworks, are absent, leaving the organization vulnerable to cyber incidents and operational disruptions. The exposure of sensitive services like FTP and PostgreSQL to the internet presents high-risk attack vectors that can lead to data breaches. Although email security and DNS health show moderate maturity, critical gaps like unenforced DMARC and missing DNSSEC reduce overall resilience. Immediate remediation is essential to protect customer data, maintain compliance, and safeguard business continuity.

E

e-Celtic Ltd.

eceltic.ie

54

The website's overall security posture is weak, with critical and high-severity issues indicative of significant vulnerabilities and compliance gaps. Missing key security headers such as Strict-Transport-Security and Content-Security-Policy expose the site to various web-based attacks, including man-in-the-middle and clickjacking. The absence of GDPR-required privacy documentation and consent mechanisms poses considerable legal and reputational risks, especially for EU operations. Lack of an information security framework, incident response plan, and security policies reflects poor organizational security maturity, further increasing exposure to threats. Network security is compromised by the presence of high-risk services like FTP and exposed SSH, which can be exploited if left unprotected. SSL/TLS configurations are suboptimal, with expiring certificates and mixed content issues undermining user trust and data confidentiality. While email security scores well, other critical areas demand immediate attention to safeguard business continuity and regulatory compliance. Addressing these gaps will reduce risk, protect customer data, and enhance stakeholder confidence.

The website's overall security posture is currently weak, with critical deficiencies in privacy compliance, email authentication, and security policy frameworks. Missing essential security headers and outdated SSL/TLS configurations expose the site to common web-based attacks and data interception risks. The absence of GDPR-related policies and consent mechanisms puts the business at significant regulatory and reputational risk, especially as it operates within the EU. Lack of documented incident response and security policies also undermines the organization's ability to manage breaches effectively. While DNS and network security scores are relatively strong, critical gaps in email security and encryption weaken overall defenses. Immediate attention is required to mitigate regulatory penalties, safeguard customer data, and maintain trust. Addressing these will also improve customer confidence and reduce potential operational disruptions from security incidents.

W

Western Stevedoring Company Limited

westeve.com

69

The website demonstrates a moderate to low overall security posture with no critical vulnerabilities but several high and medium risk issues that could expose the business to significant security, compliance, and reputational risks. Key weaknesses include missing essential security headers, lack of GDPR compliance elements such as cookie policies and consent mechanisms, and major gaps in NIS2 framework adherence including absence of incident response and security policies. While email security, SSL/TLS, DNS health, and network security show strong configurations, the lack of governance and protective controls on the web application layer and privacy compliance may lead to data breaches, regulatory penalties, and loss of customer trust. The website’s SSL certificate nearing expiration adds urgency to maintain encrypted communication uninterrupted. Addressing these gaps will enhance resilience against common web attacks, ensure regulatory compliance, and protect the organization’s brand. Immediate focus should be on implementing security headers, GDPR cookie compliance, and establishing formal security policies and incident response plans. Strengthening these areas will provide a solid foundation for ongoing security and compliance maturity.

D

DreamCatcher

dreamcatcher.mc

61

The website demonstrates notable security weaknesses primarily in its HTTP security headers, GDPR compliance, and adherence to the NIS2 cybersecurity framework, resulting in a low overall security posture in these critical areas. While there are no critical vulnerabilities detected, multiple high and medium severity issues expose the business to risks such as data breaches, regulatory fines, reputational damage, and operational disruptions. The absence of essential security headers like Strict-Transport-Security and Content-Security-Policy increases susceptibility to man-in-the-middle and cross-site scripting attacks. Non-compliance with GDPR requirements, including missing privacy and cookie policies and lack of a consent banner, elevates legal risk and undermines customer trust. Deficiencies in NIS2-related documentation and procedures reflect inadequate organizational readiness for incident response and business continuity. Conversely, strong network security and good email, SSL/TLS, and DNS configurations provide a solid foundation to build upon. Addressing these gaps promptly will significantly improve security resilience, regulatory compliance, and stakeholder confidence.

T

TWW Yachts

twwyachts.com

57

The website exhibits multiple significant security gaps that pose risks to data protection, regulatory compliance, and business continuity. While no critical issues were found, 11 high-severity and 14 medium-severity findings indicate vulnerabilities in key areas such as security headers, GDPR compliance, network security, and incident response readiness. Essential security headers like Strict-Transport-Security and Content-Security-Policy are missing, increasing exposure to man-in-the-middle and cross-site scripting attacks. GDPR compliance is inadequate, with no privacy policy or cookie consent banner, which could lead to legal penalties and reputational damage. Network security risks are heightened by the exposure of high-risk services like FTP and insufficient protection in email and SSL/TLS configurations. The absence of a formal information security framework, security policies, and incident response procedures presents significant operational risks. Overall, the organization's security posture requires urgent attention to protect customer data, ensure regulatory compliance, and reduce exposure to cyber threats.

L

LEVMET

levmet.com

62

The website displays a concerning security posture with no critical issues but multiple high and medium-risk vulnerabilities primarily related to compliance, policy documentation, and security headers. GDPR compliance is notably weak, lacking fundamental privacy and cookie policies, consent mechanisms, and adequate contact information, exposing the business to regulatory penalties and reputational damage. The absence of an information security framework, incident response procedures, and security policy documentation indicates immature governance, increasing operational risk and potential downtime. Weak SSL configurations and missing email authentication mechanisms could lead to data interception and phishing risks. DNS and network security appear relatively strong, with good DNS health and network posture. Immediate remediation is necessary to address privacy and policy gaps to ensure regulatory compliance and protect customer trust. Strengthening security headers and cryptographic configurations will enhance protection against common web attacks. Overall, the website requires focused improvements in governance, compliance, and technical controls to reduce business risk and meet industry standards.