Security Directory

F

Field International Group Ltd

fieldinternational.com

52

Field International Group Ltd is a medium-sized, UK-based manufacturing and engineering company specializing in Boeing aircraft tooling and ground support equipment. The company operates globally with multiple subsidiaries and regional offices across Europe, Asia, the Middle East, and North America. Their business model focuses on providing turnkey engineering solutions, manufacturing, calibration, repair, and maintenance services primarily targeting airline operators and MROs. The website reflects a professional and consistent brand presence with good content quality and clear navigation. Technically, the website is built on a modern WordPress platform using WooCommerce for product management and Elementor for design. It integrates SEO best practices via Yoast SEO and uses Google Analytics and Tag Manager for tracking. The site is mobile-optimized and performs moderately well, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms and privacy policies indicate GDPR compliance, though explicit security policies and incident response contacts are not publicly available. Overall, the website and business demonstrate a high level of credibility and trustworthiness, supported by consistent WHOIS data and clear company information. The absence of WAF or blocking mechanisms allows full content accessibility. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance to further strengthen the security and compliance posture.

R

Ražots Kurzemē

razotskurzeme.lv

40

Ražots Kurzemē is a regional Latvian website dedicated to promoting local producers and artisans in the Kurzeme region. It serves tourists and visitors interested in local crafts, food, and cultural experiences by offering listings of open artisan farms, workshops, tastings, and gift options. The website is built on WordPress with a focus on SEO and accessibility, using popular plugins such as Yoast SEO and Cookie Law Info. While the site provides rich content and a clear business focus, it lacks explicit privacy and terms of service pages and does not expose advanced security headers. The cookie consent mechanism is implemented, indicating some level of GDPR awareness. No direct contact emails or phone numbers are found, which may impact user trust and support accessibility.

A

A J Hodge Associates

ajhodgeassociates.co.uk

52

A J Hodge Associates is a small, established Chartered Building Surveyor firm based in Bristol, UK, specializing in residential and commercial property surveying and consultancy services. The company emphasizes director-led projects ensuring high-quality service and competitive pricing. Their market position is strengthened by professional memberships and positive client testimonials. Technically, the website is built on WordPress with the Divi theme, employing modern SEO and privacy compliance tools such as Yoast SEO and GDPR cookie consent mechanisms. Security posture is solid with HTTPS enforced and anti-spam protections in place, though some security headers could be improved. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations.

F

Flexprint (part of delfortgroup AG)

delfortflexibles.com

30

Flexprint is a medium-sized, family-owned manufacturing company specializing in flexible packaging solutions for food, non-food, and tobacco products primarily in Eastern Europe. The company is part of the larger delfortgroup AG and has over 14 years of experience with a strong market presence in 40 countries and 200 clients. The website is built on WordPress using the Salient theme and WPBakery page builder, with a moderate level of technical sophistication but lacks a valid SSL certificate, which is a critical security concern. The site implements a cookie consent mechanism compliant with GDPR and links to a comprehensive privacy policy hosted on the parent company's domain. However, there is no visible terms of service or incident response policy. Security posture is weak due to missing HTTPS and modern TLS protocols, no HSTS, and lack of security headers. Business credibility is supported by multiple certifications and positive customer testimonials. Strategic improvements in security infrastructure and transparency policies are recommended to enhance trust and compliance.

N

NDI

ndi.video

63

NDI.video is a leading technology provider specializing in IP-based video connectivity solutions that enable seamless multimedia experiences across various industries including broadcast, corporate collaboration, education, and content creation. The company offers a comprehensive ecosystem including SDKs, tools, certification programs, and a connected community platform to support developers and users. Their market position is strong, supported by a large product ecosystem and partnerships with notable organizations. Technically, the website is built on a modern WordPress VIP platform with Elementor and optimized for performance, mobile responsiveness, and SEO. Security posture is adequate with HTTPS and basic security headers, though improvements in DNS security and HTTPS hardening are recommended. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website reflects a professional and trustworthy business with a strong focus on developer enablement and user engagement.

A

A-Commerce

a-commerce.at

22

A-Commerce is a German-language online magazine specializing in e-commerce news, business insights, and marketing strategies primarily targeting e-commerce professionals and entrepreneurs in Austria and German-speaking regions. The website offers regularly updated content including articles, interviews, and tool reviews, positioning itself as a niche media outlet in the e-commerce sector. Technically, the site is built on WordPress with a modern tech stack including PHP 8, nginx, and various JavaScript libraries for UI enhancements. However, the site lacks HTTPS, which is a critical security deficiency. The cookie consent mechanism is implemented and GDPR compliant, but no explicit contact or security policies are published. Overall, the site demonstrates good content quality and user experience but requires urgent security improvements.

F

F/LIST

f-list.at

38

F/LIST is a well-established Austrian family business specializing in luxury interior outfitting for business jets, private jets, and high-end living spaces such as hotels. The company emphasizes craftsmanship, innovation, and premium materials, positioning itself as a global leader in the luxury interiors market. The website reflects a professional and consistent brand image with multilingual support and rich content tailored to its affluent target audience. Technically, the site is built on WordPress with modern plugins and libraries, hosted on Hostinger with LiteSpeed server technology. However, the security posture is weakened by the absence of a valid SSL certificate and lack of modern TLS protocol support, which critically impacts secure communications. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a clear privacy policy. Contact information is transparent and includes multiple channels, enhancing business credibility. Overall, the site is functional and professional but requires urgent security improvements to meet modern standards.

Arthur Hunt is a French-based human resources consulting firm specializing in executive search, HR strategy consulting, transition management, and talent development across France and Europe. The company positions itself as a medium-sized, established player with a professional and consistent brand presence. The website is built on WordPress using the Divi theme and incorporates modern plugins for multilingual support and user experience enhancements. However, the technical infrastructure lacks a valid SSL certificate and does not support modern TLS protocols, which poses a significant security risk. The site includes GDPR-compliant cookie consent mechanisms and clear contact information but lacks explicit security policies or incident response details. Overall, the business is credible and professionally presented, but the absence of HTTPS critically impacts the security posture.

R

rieg marketing

rieg-marketing.de

22

rieg marketing is a small German marketing consultancy specializing in creative marketing, communication, and promotional services primarily for the sporting goods, marine, and fashion industries. The company offers tailored marketing strategies, project management, public relations, promotions, and visual merchandising services. The website is built on WordPress and uses common plugins such as Contact Form 7 and Cookie Law Info for user interaction and compliance. While the website content is professional and well-structured, the technical infrastructure lacks a valid SSL certificate, resulting in no HTTPS support, which is a significant security concern. Cookie consent mechanisms and a privacy policy compliant with GDPR are present, indicating attention to privacy compliance. However, no incident response or security policy information is provided, and no terms of service page is found.

N

Next Research GmbH

nextresearch.org

40

Next Research GmbH is a specialized contract research organization (CRO) based in Austria, focusing on clinical research, scientific consulting, and market analytics primarily in the healthcare sector, especially interventional radiology. The company leverages a decade of experience and strong ties to the CIRSE medical society to deliver tailored research services. Their website presents a professional image with comprehensive service descriptions, a detailed team section, and clear contact options including direct scheduling links. Technically, the site is built on WordPress with modern plugins for cookie consent and analytics, but suffers from a critical lack of a valid SSL certificate, impacting security and trust. Privacy policies are thorough and GDPR compliant, with user-friendly cookie consent mechanisms and opt-out options for analytics tracking. Overall, the business appears credible and well-positioned in its niche, but the absence of HTTPS is a significant security gap.

C

CAPESPAN | We Deliver

capespan.com

27

Capespan is a large, established global distributor, marketer, and producer of fresh fruit with a strong market position supported by recognized brands such as Cape, Outspan, Outspan Gems, and Goldland. The company operates an integrated business model encompassing fruit growing, packing, marketing, and distribution, serving grower partners and retail customers worldwide. Their website reflects a professional and content-rich digital presence with active social media engagement and regular press updates. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and social media integration, hosted on Apache servers. However, the lack of a valid SSL certificate and absence of HTTPS significantly undermine the security posture, exposing users to risks. Privacy compliance is well addressed with GDPR-compliant policies and cookie consent mechanisms. Overall, the site demonstrates good business credibility and digital maturity but requires urgent security improvements to protect data and maintain trust.

syslab.com GmbH is a well-established German software company specializing in content management, risk assessment, and digital collaboration solutions. With over 25 years of experience, it holds a strong market position as a leading Plone and Python developer in Germany, serving a diverse clientele including enterprises, government agencies, and research institutions. The company emphasizes open source contributions and maintains strategic partnerships with notable organizations. Technically, the website is built on WordPress with modern themes and SEO plugins, offering a rich user experience and good mobile optimization. However, the security posture is currently weak due to the absence of a valid SSL certificate and lack of HTTPS support, which poses significant risks. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, syslab.com demonstrates strong business credibility and digital maturity but requires urgent improvements in SSL/TLS security to protect user data and enhance trust.

P

promitto organisationsberatung gmbh

promitto.at

26

promitto organisationsberatung gmbh is a small Austrian consulting firm specializing in organizational development, leadership coaching, and change management. Their website presents a professional image with clear descriptions of their services, targeting organizations and leadership teams seeking vitality and transformation support. The technical infrastructure is based on WordPress with common plugins like Yoast SEO and Contact Form 7, but lacks a valid SSL certificate, which is a significant security concern. The site includes GDPR-compliant privacy and cookie policies with consent mechanisms, but no terms of service or explicit security policies are found. Contact information is clearly provided, including email, phone, and physical address, enhancing business credibility. Overall, the website is functional and informative but requires urgent security improvements to protect user data and improve trust.

D

Distillery | Paranormal Agency

distillery.cc

20

Distillery | Paranormal Agency is a small creative agency based in Austria specializing in transformative branding, experiential marketing, media production, and communication design. The company positions itself as a niche player focusing on immersive and genuine cultural experiences. The website is built on WordPress with a modern tech stack including Yoast SEO and Contact Form 7, but lacks a valid SSL certificate, which is a critical security concern. The site implements cookie consent mechanisms indicating GDPR awareness but lacks explicit privacy policy and terms of service pages. Contact information including company emails and physical address is clearly presented, alongside active social media profiles. Overall, the website is professionally designed with good content quality and navigation but suffers from poor security posture due to missing HTTPS.

K

Kollective Technology

kontiki.com

39

Kollective Technology operates a sophisticated enterprise video and collaboration platform focused on delivering observability, analytics, and optimization for large-scale video events. The company targets large enterprises and IT leadership teams, positioning itself as a leader in the technology sector with AI-powered solutions. The website is professionally designed, content-rich, and well-branded, reflecting a mature digital presence. Technically, the site is built on WordPress with modern plugins and integrations, hosted behind Cloudflare, and uses various marketing and analytics tools. However, the security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS, which poses significant risks. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates strong business credibility but requires urgent security improvements.

S

Schiebel

schiebel.net

27

Schiebel is a mature, internationally recognized company specializing in the development and production of unmanned air systems and mine detection equipment, founded in 1951 and headquartered in Austria. Their product portfolio includes the CAMCOPTER® S-100 UAS and advanced mine detection systems, supported by a composite technology division. The company maintains multiple global offices and emphasizes quality certifications such as ISO 9001 and AS/EN 9100. Technically, the website is built on WordPress with common plugins and scripts, offering good content quality and SEO optimization. However, the absence of HTTPS and SSL/TLS encryption is a critical security vulnerability, severely impacting the site's security posture. While security headers are implemented, the lack of encryption exposes users and data to risks. Privacy compliance is well addressed with cookie consent and GDPR-aligned policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business. Strategic improvements in security infrastructure are urgently recommended to protect the company's digital presence and customer trust.

A

Avconjet

avconjet.at

40

Avconjet is a prominent European private jet management and charter company operating a fleet of over 100 aircraft worldwide. The company offers comprehensive services including jet management, business jet charter, aircraft sales and acquisition, aviation consulting, and asset management. Their market position is strong with an international presence and recognized certifications such as IS-BAO Stage 2 and WYVERN verification. Technically, the website is built on WordPress with Elementor and optimized using WP Rocket, providing a good user experience and SEO optimization. However, the security posture is weak due to the absence of a valid SSL certificate and lack of modern TLS protocols, which poses a significant risk. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional and trustworthy but requires urgent improvements in SSL and security configurations.

D

DaoPay GmbH

daopay.com

40

DaoPay GmbH is a licensed Austrian payment service provider offering a broad range of secure and simple payment solutions for online merchants globally. The company supports over 80 payment methods including major credit cards, PayPal, SEPA, and direct carrier billing, positioning itself as a comprehensive payment gateway and merchant account provider. Their target audience includes online businesses seeking to expand payment options and increase customer convenience. The website is professionally designed with clear navigation and relevant content, supporting a medium-sized enterprise profile in the finance and technology sectors. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap and Visual Composer, indicating a mature digital infrastructure. However, performance is slow and accessibility is basic. The site is mobile optimized and SEO is well implemented. Security posture is weak due to the absence of a valid SSL certificate and outdated TLS protocols, which poses significant risks for a payment service provider. Privacy and cookie policies are comprehensive and GDPR compliant, with explicit consent mechanisms in place. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Social media presence and contact information are comprehensive, enhancing business credibility. Strategic recommendations include immediate remediation of SSL/TLS issues, enabling modern security protocols, and enhancing DNS security configurations to improve trust and compliance.

M

Mubea Carbo Tech GmbH

carbon.at

26

Mubea Carbo Tech GmbH is a medium-sized Austrian company specializing in the design, development, and manufacturing of fiber composite components primarily for the automotive, motorsport, aeronautics, and industrial sectors. As part of the global Mubea Group, it holds a leading market position as a pioneer in lightweight construction technology since its founding in 1993. The company offers full-service solutions from design to series production, targeting automotive manufacturers and other high-tech industries. The website reflects a professional and comprehensive digital presence with multilingual support and detailed business information. Technically, the site is built on WordPress with Elementor and includes modern web technologies, though performance is hampered by the lack of a valid SSL certificate and HTTPS support, which is a critical security concern. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. However, explicit security policies and incident response information are absent. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

V

Valneva

valneva.com

35

Valneva is a specialty vaccine company focused on the development, manufacturing, and commercialization of prophylactic vaccines addressing infectious diseases with unmet medical needs. The company has a strong market position with multiple commercialized vaccines and a robust pipeline targeting diseases such as chikungunya, Lyme disease, Shigella, and Zika. The website reflects a professional corporate presence with comprehensive investor relations and media resources, targeting healthcare professionals, investors, and partners globally. Technically, the website is built on WordPress with modern SEO and marketing tools, including Google Tag Manager and social media integrations. However, the security posture is weakened by an invalid SSL certificate and lack of TLS protocol support, which poses significant risks to data confidentiality and user trust. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional and credible but requires urgent remediation of SSL/TLS issues to improve security and trust.

I

Interview Network Solutions GmbH

interviewns.de

21

Interview Network Solutions GmbH operates a professional website offering advanced IT monitoring solutions, primarily through their SharkMon platform and related services. The company targets IT professionals and enterprises seeking comprehensive network traffic analysis, protocol support, and incident management tools. The website is built on WordPress with the Divi theme and includes multiple plugins for SEO, analytics, and cookie consent. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts its security posture. Cookie consent mechanisms are implemented, but no explicit privacy policy or terms of service pages are found. Contact information is clearly provided, enhancing business credibility. Overall, the site demonstrates good content quality and business professionalism but requires urgent security improvements.

M

Marc Martí

marc-marti.com

25

Marc Martí is a well-established Spanish company specializing in large format digital printing and advertising services, operating since 1977 with offices in Barcelona, Madrid, and Valencia. The company offers a comprehensive range of advertising and visual communication services targeting businesses and events across Spain and Europe. The website reflects a mature business with consistent branding and a professional online presence, including multilingual support and active social media channels. Technically, the site is built on WordPress using popular plugins and themes, but suffers from slow performance and lacks a valid SSL certificate, which is a critical security concern. Privacy compliance is well addressed with clear cookie and privacy policies and a consent mechanism. However, the absence of HTTPS and security headers lowers the security posture significantly. Overall, the site is functional and professional but requires urgent security improvements to protect user data and enhance trust.

L

Libraesva

esvacloud.com

52

Libraesva is a technology company specializing in advanced email security, archiving, phishing awareness, and DMARC protection solutions. Positioned as an industry leader, the company serves a broad B2B audience seeking to protect business communications from evolving cyber threats. Their product suite integrates with major platforms like Microsoft 365 and Google, emphasizing zero-day threat prevention and compliance. The website reflects a mature digital presence with professional design, rich content, and multiple industry recognitions. However, the absence of a valid SSL certificate is a critical security flaw that undermines trust and secure communications. The technical infrastructure leverages WordPress with modern plugins and Cloudflare CDN, but performance metrics are unavailable. Security headers and content security policies are well implemented, though the lack of HTTPS significantly reduces the overall security posture. Privacy compliance is partially addressed through a cookie consent mechanism, but no explicit privacy policy or terms of service pages were found. Contact information is limited to physical addresses without direct emails or phone numbers. Overall, the site demonstrates good business credibility and technical maturity but requires urgent remediation of SSL issues to ensure secure user interactions.

M

Momentin Restaurants

momentinrestaurants.com

57

Momentin Restaurants is a Finnish hospitality company operating a portfolio of 10 pubs and restaurants primarily in the Helsinki metropolitan area. The website serves as a booking and informational platform for event spaces, group activities, and dining experiences. The company positions itself as an established local player with 30 years of experience, targeting individuals and groups seeking cozy and versatile restaurant venues. Technically, the website is built on WordPress with modern front-end frameworks like Tailwind CSS and uses plugins for SEO, analytics, and cookie consent. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security deficiency. The security posture is basic, relying on Cloudflare for CDN and some protection but missing essential TLS configurations and security headers. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy page, supporting GDPR requirements. Overall, the site is functional and professionally designed but requires urgent security improvements to protect user data and enhance trust.

H

HPP Attorneys

hppattorneys.com

53

HPP Attorneys is a medium-sized Finnish business law firm specializing in comprehensive legal services for domestic and international clients, with a strong focus on cross-border transactions, green transition, and renewable energy projects. The firm holds a reputable market position supported by international legal rankings and a professional online presence. Technically, the website is built on WordPress with Elementor and integrates advanced search and analytics tools, but suffers from slow loading times and lacks a valid SSL certificate, which critically impacts security posture. Privacy compliance is well addressed with a clear cookie consent mechanism and a comprehensive privacy policy. Overall, the firm demonstrates strong business credibility but must urgently address security vulnerabilities to protect client data and maintain trust.

H

HPP Asianajotoimisto

hpp.fi

40

HPP Asianajotoimisto Oy is a specialized Finnish law firm focusing on business law, serving leading Finnish and international companies. The firm offers a broad range of legal services including corporate transactions, financing, taxation, dispute resolution, technology law, and environmental law, positioning itself as a key player in green transition and technology-related legal matters. The website is professionally designed using WordPress and Elementor, featuring comprehensive content, clear navigation, and multi-language support. Technical infrastructure includes modern plugins and analytics tools such as Matomo and Leadfeeder, with hosting provided by Seravo and DNS managed by Hetzner. However, the security posture is weakened by the absence of a valid SSL certificate and lack of HTTPS support despite HSTS headers, which is a critical vulnerability. Privacy compliance is well addressed with a detailed cookie consent mechanism and a comprehensive privacy policy. Contact information is clearly presented with multiple channels including email, phone, and a contact form protected by reCAPTCHA. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements.

C

Calls for Transfer

callsfortransfer.de

31

Calls for Transfer (C4T) is a specialized funding program based in Hamburg, Germany, designed to support innovative projects emerging from the city's state universities and scientific research institutions. The program offers up to 35,000 Euro in funding for a 12-month project period, aiming to facilitate the transfer of knowledge and technology from academia to practical applications. The website presents a professional and well-structured portal with clear navigation, targeting researchers and innovators in Hamburg. Technically, the site is built on WordPress with popular plugins such as Elementor and LayerSlider, but it suffers from critical security shortcomings including the absence of a valid SSL certificate and disabled TLS protocols, which significantly impact its security posture. Privacy compliance is well addressed with a cookie consent mechanism and links to privacy and terms of service hosted on the parent organization's domain. Overall, while the business and content aspects are strong, the lack of HTTPS and modern security configurations pose a significant risk that should be urgently addressed.

H

Hamburg Institute for Innovation, Climate Protection and Circular Economy GmbH

hiicce.de

40

Hamburg Institute for Innovation, Climate Protection and Circular Economy GmbH (HiiCCE) is a specialized institute focused on advancing the circular economy and climate protection through integrated environmental consulting, project development, and research. The organization serves a diverse clientele including corporations, NGOs, government entities, and international organizations, positioning itself as a national and international pioneer in sustainable resource management. The website reflects a professional digital presence built on WordPress with multilingual support and SEO optimization, although performance data is limited. Security posture is weak due to the absence of HTTPS and modern TLS protocols, exposing the site to potential risks. Privacy compliance is strong with comprehensive cookie and privacy policies and consent mechanisms in place. Contact information is clearly presented, enhancing business credibility.

I

Incepa

incepa.com.br

53

Incepa is a well-established Brazilian manufacturer specializing in porcelain tiles and ceramic coatings, serving a broad audience including architects, designers, and commercial clients. The company maintains a professional online presence with multilingual support, product catalogs, technical assistance, and showroom information. Technically, the website is built on WordPress with modern front-end frameworks and plugins, providing good user experience and SEO optimization. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks and reducing trust. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to meet modern standards.

W

WSD

solvians.com

60

WSD is a technology company specializing in full automation solutions for structured products, serving a global clientele primarily in the financial sector. The company positions itself as a critical infrastructure provider in the structured products value chain, offering cloud-based, scalable, and resilient technology solutions. Their website reflects a professional and consistent brand with strong industry partnerships and certifications such as ISO and EcoVadis. Technically, the site is built on WordPress with Elementor and uses various modern JavaScript libraries and plugins, but suffers from slow load times and lacks HTTPS encryption, which is a significant security concern. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. However, the absence of SSL and security headers lowers the overall security posture. The company provides multiple contact channels including email, phone, and a detailed contact form, supporting good business credibility. Strategic recommendations include immediate implementation of HTTPS, enhancement of security headers, and performance optimization to improve user experience and security.

R

Roca Brasil Cerámica - Porcelanatos e Revestimentos Cerâmicos

rocaceramica.com.br

57

Roca Brasil Cerámica is a large Brazilian manufacturer and retailer specializing in porcelain and ceramic tiles, targeting architects, designers, engineers, and commercial clients. The company emphasizes sustainability and offers a comprehensive product catalog with technical support and showroom experiences. The website is built on WordPress with modern front-end frameworks and integrates multiple marketing and analytics tools. However, the site lacks a valid SSL certificate, which severely impacts its security posture. While privacy and cookie policies are well implemented with consent mechanisms, no explicit security or incident response policies are found. The overall digital maturity is moderate, with good content quality and user experience but technical and security improvements are needed.

M

Mondoni Press

mondonipress.com.br

48

Mondoni Press is a Brazilian PR and communication agency specializing in press advisory, institutional communication, digital marketing, and content creation. The company positions itself as a trusted partner for businesses seeking to enhance their credibility, media presence, and visibility. It has received recognition such as the PR Agency of the Year award in South America (Prestige Awards 2023/24) and serves a diverse client base across various sectors. Technically, the website is built on WordPress with a range of popular plugins and marketing tools, including Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital marketing infrastructure. However, the website suffers from a critical security issue: the SSL certificate is invalid or missing, which undermines user trust and data security. The cookie consent mechanism is implemented, but no explicit privacy policy or terms of service pages were found, which may pose compliance risks. Overall, the company demonstrates good branding and content quality but should urgently address security and compliance gaps to maintain trust and regulatory adherence.

S

SucesuSP

sucesusp.org.br

51

SucesuSP is a well-established technology user society based in São Paulo, Brazil, with a history dating back to 1967. The organization focuses on fostering technological development, digital transformation, and innovation through networking, educational events, and interest groups in areas such as cybersecurity, artificial intelligence, and IoT. Their business model revolves around membership and partnerships, providing value to technology professionals and companies in the region. Technically, the website is built on WordPress with Elementor and Yoast SEO, but suffers from performance issues and lacks a valid SSL certificate, which poses security risks. The presence of a cookie consent mechanism indicates some level of privacy compliance, though no explicit privacy or security policies are found. Overall, the security posture is weak due to missing HTTPS and security headers, exposing the site to potential risks. Strategic improvements in security infrastructure and policy transparency are recommended to enhance trust and compliance.

A

Associação Brasileira de Internet das Coisas

abinc.org.br

47

Associação Brasileira de Internet das Coisas (ABINC) is a Brazilian technology association focused on the Internet of Things (IoT) sector. It provides membership services including access to digital materials, event participation, brand exposure, and committee involvement. The organization targets IoT industry stakeholders and professionals primarily in Brazil. The website is built on WordPress with Elementor and integrates event calendars and cookie consent mechanisms, reflecting a moderate level of digital maturity. However, the site suffers from critical security weaknesses, notably the absence of a valid SSL certificate and lack of modern TLS protocols, which exposes visitors to security risks. While cookie consent is implemented, no explicit privacy or security policies are published, indicating compliance gaps. Overall, ABINC maintains a good content quality and user experience but requires urgent improvements in security posture to protect its users and enhance trust.

P

Protected Tomorrows Inc.

protectedtomorrows.com

67

Protected Tomorrows Inc. is a specialized non-profit organization dedicated to providing compassionate guidance and resources for families and caregivers of individuals with special needs. Their market position is focused on niche services including advocacy, financial advisory, educational programs, and membership-based community support. The website offers a comprehensive range of services and resources, including free tools, expert Q&A, and a shop with educational materials, positioning them as a trusted ally in future planning for special needs families. Technically, the website is built on WordPress with WooCommerce and integrates multiple plugins for events, forms, payments, and analytics. The hosting is managed via WP Engine with Cloudflare CDN, ensuring good performance and availability. Security-wise, the site has a valid SSL certificate but lacks modern TLS protocol support and some advanced security headers. Cookie consent and privacy policies are implemented with GDPR compliance in mind, and accessibility is addressed via an ADA widget. Overall, the site demonstrates a good balance of business focus, technical maturity, and security awareness, though there is room for improvement in security hardening and transparency.

C

CNHI

cnhi.com

62

The website demonstrates a concerning security posture with no critical issues but multiple high and medium risks that could expose the business to data breaches, regulatory penalties, and reputational damage. Key deficiencies include missing essential security headers, poor GDPR compliance, lack of documented security policies, and weak SSL/TLS configurations. While network security and email security appear relatively strong, significant gaps in incident response, vulnerability disclosure, and security governance are evident. The absence of cookie policies and consent banners increases legal exposure under GDPR. Additionally, weak encryption and missing HTTP Strict Transport Security reduce protection against common web attacks. Immediate remediation is necessary to safeguard customer data, ensure regulatory compliance, and maintain stakeholder trust. Addressing these issues will strengthen the overall security posture and reduce business risk significantly.

The website demonstrates a generally strong network and email security posture but exhibits significant deficiencies in compliance with GDPR and NIS2 regulations, which expose the business to legal and operational risks. The absence of fundamental privacy documentation such as Privacy and Cookie Policies, combined with missing consent mechanisms, places the company at high risk of regulatory penalties, particularly given its operations within the EU. Critical gaps in information security frameworks, incident response, and business continuity planning indicate insufficient preparedness against cybersecurity incidents. SSL/TLS configurations are suboptimal, with weak key lengths and an expiring certificate, potentially undermining data confidentiality and trust. While foundational DNS and security header settings are adequate, improvements are needed to enhance overall resilience. Addressing these issues promptly is essential to protect sensitive data, ensure regulatory compliance, and maintain customer trust. Prioritizing remediation of privacy and security governance will significantly reduce business exposure and strengthen the security posture.

The website exhibits significant security gaps, particularly in GDPR compliance and NIS2 regulatory adherence, posing substantial legal and operational risks for the business. While network security and email security demonstrate strong postures, critical issues such as the absence of cookie consent mechanisms and privacy policies expose the organization to regulatory penalties and reputational damage. The presence of a weak SSL key length and upcoming SSL certificate expiration increases the risk of encrypted data interception. Missing incident response, security policies, and business continuity plans indicate unpreparedness for security events, threatening operational resilience. Low scores in GDPR and NIS2 modules highlight urgent needs for privacy governance and information security frameworks. Overall, the site’s technical security measures are mixed, but compliance deficiencies must be addressed immediately to avoid fines and customer trust erosion. Immediate attention to privacy policies and foundational security documentation will substantially improve the business risk profile.

The website exhibits a generally strong network and email security posture, but critical deficiencies exist in GDPR compliance, NIS2 security governance, and SSL/TLS configuration. The critical GDPR issue indicates the business is operating in the EU without adequate privacy measures, posing significant regulatory and reputational risks. Multiple high-severity issues around the lack of security policies, incident response, and vulnerability disclosure reflect immature information security management, potentially leading to delayed breach detection and response. SSL/TLS weaknesses, including an expiring certificate and weak key length, expose the site to man-in-the-middle attacks and data interception. While security headers and DNS health are relatively strong, minor improvements would further harden the environment. Immediate remediation of GDPR non-compliance and NIS2 framework adoption are essential to avoid legal penalties and ensure business continuity. Addressing these gaps will significantly reduce risk exposure and enhance trust with customers and regulators.

The website exhibits a mixed security posture with strong network security and email protections but significant gaps in GDPR compliance and information security governance. Critical and high-severity findings around privacy policies, cookie consent, and EU data protection requirements expose the business to regulatory penalties and reputational risk. Additionally, the absence of key NIS2 security governance elements—including incident response, security policies, and business continuity planning—indicates immature cybersecurity management. SSL/TLS configurations also present vulnerabilities, such as weak key lengths and imminent certificate expiration, which could lead to compromised data in transit. While foundational controls like security headers and DNS health are generally good, low-level misconfigurations suggest opportunities for improvement. Addressing these issues holistically will reduce legal exposure, enhance customer trust, and strengthen resilience against cyber incidents. Immediate focus on GDPR compliance and security governance will yield the highest business impact.

B

Balt Group

balt.fr

50

The website's overall security posture is critically weak, primarily due to the complete lack of HTTPS encryption, exposing all data in transit to interception and manipulation risks. Compliance with GDPR and NIS2 regulations is severely deficient, risking significant legal penalties and reputational damage. Key security headers are mostly missing, increasing vulnerability to clickjacking, cross-site scripting, and content injection attacks. Absence of essential policies such as incident response and security frameworks further heightens operational risks. Although DNS and email security show moderate strength, they cannot compensate for fundamental flaws in transport security and regulatory compliance. Network security posture is strong, indicating underlying infrastructure may be well-managed, but website-level controls are inadequate. Immediate remediation is necessary to protect customer data, maintain trust, and ensure regulatory adherence. Without urgent action, the business faces data breaches, compliance fines, and loss of customer confidence.

The website mprevents.org exhibits significant security and compliance gaps, particularly in regulatory adherence and information security governance, resulting in an unknown overall risk score. While no critical vulnerabilities were detected, multiple high and medium severity issues expose the organization to data privacy risks, potential regulatory penalties, and operational disruptions. Immediate attention to privacy policies, incident response, and security headers is essential to strengthen the site's security posture and maintain stakeholder trust.