Security Directory

The website demonstrates a generally strong security posture in network security and SSL/TLS configurations, minimizing exposure to common network-level attacks. However, significant gaps exist in GDPR compliance, primarily the absence of a cookie policy and consent banner, which pose legal and reputational risks. The lack of proper security headers and DNSSEC configuration further weakens the site against web-based and DNS-related attacks. Email security is adequate but could be enhanced with DKIM implementation to improve email authenticity and reduce phishing risks. Addressing these issues will not only improve legal compliance but also strengthen customer trust and reduce potential vulnerabilities. Overall, the site is secure in core infrastructure but requires urgent attention to privacy regulations and web security best practices to mitigate business risk.

This website has 1 high-priority security issue(s) that should be addressed promptly. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

The website demonstrates a generally solid security foundation with perfect scores in SSL/TLS and network security, indicating strong encryption and network controls. However, critical vulnerabilities exist in email security, notably the complete lack of email authentication mechanisms, exposing the business to risks such as email spoofing and phishing attacks. Medium-level issues with missing security headers, GDPR compliance gaps, and NIS2 directive adherence highlight regulatory and operational risks. DNS health is moderately good but lacks DNSSEC and CAA records, which could leave DNS queries vulnerable to tampering. Overall, while network and transport layers are well protected, deficiencies in email authentication, compliance, and header security could lead to reputational damage, legal penalties, and increased attack surface. Immediate remediation of email authentication and compliance issues should be prioritized to mitigate these risks. Strengthening DNS security and implementing security headers will further enhance the website’s resilience to cyber threats and regulatory scrutiny.

This website has 9 security issue(s) identified for improvement. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

This website has 8 security issue(s) identified for improvement. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

This website has 8 security issue(s) identified for improvement. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

The website's overall security posture exhibits significant vulnerabilities that pose considerable business risks. Critical DNS health issues, including DNS resolution failures and missing name servers, threaten the website's availability and accessibility, directly impacting customer trust and revenue. Additionally, the absence of email authentication mechanisms such as DKIM and other configurations exposes the business to email spoofing, phishing attacks, and potential brand damage. Compliance failures related to GDPR and NIS2 further increase legal and regulatory risk. Security headers are inadequately configured, weakening defenses against common web-based attacks. While SSL/TLS implementation is strong, the network security scan highlights moderate risks that require attention. Immediate remediation of critical DNS and email security issues should be prioritized to ensure operational continuity and protect customer data.

The website's security posture exhibits several critical and high-risk vulnerabilities that could severely impact business operations and data integrity. The presence of critical issues such as lack of email authentication and exposure of MySQL services pose immediate threats that could lead to data breaches or service disruptions. High-risk exposures like FTP services and DNS misconfigurations further increase the attack surface and risk of unauthorized access. Medium-level issues, including missing security headers, GDPR and NIS2 compliance failures, and expiring SSL certificates, indicate gaps in regulatory adherence and defense-in-depth strategies. Overall, the security hygiene needs urgent improvement to protect sensitive information, maintain customer trust, and ensure compliance with legal and industry standards. Immediate remediation of critical vulnerabilities and strengthening of network security controls should be prioritized. Failure to address these concerns promptly could result in reputational damage, regulatory penalties, and operational downtime. Investing in a comprehensive security enhancement plan will align the website with best practices and reduce business risk significantly.

The website demonstrates a strong overall security posture with no critical or high-severity issues detected and perfect scores in email security, SSL/TLS, and network security modules. However, medium-level issues related to missing or misconfigured security headers, incomplete GDPR compliance, lack of NIS2 adherence, and absence of DNSSEC indicate gaps that could expose the business to regulatory risks and potential attack vectors. Low-severity DNS configuration gaps like missing CAA records represent additional opportunities to strengthen domain security. While these medium and low findings do not pose immediate threats, addressing them proactively will reduce the risk of data breaches, regulatory penalties, and reputational damage. The DNS health score of 85/100 reflects room for improvement in domain validation and protection mechanisms. Overall, the site is well-secured but requires targeted enhancements to elevate regulatory compliance and DNS-based defenses to industry best practices.

The website demonstrates a generally sound security posture with no critical vulnerabilities; however, there are several medium and one high-risk issues that require immediate attention. The absence of a DMARC record poses a significant risk to the organization's email security, increasing susceptibility to phishing and spoofing attacks. Medium-level deficiencies such as missing DKIM records, lack of security headers, and disabled HSTS reduce protection against common web-based threats and data interception. Additionally, failure to enable DNSSEC and configure CAA records exposes DNS infrastructure to manipulation risks. Compliance-related gaps including failed GDPR and NIS2 analyses highlight potential regulatory and legal exposure. The strong network security posture is a positive indicator but does not mitigate risks introduced by the highlighted configuration weaknesses. Addressing these issues will reinforce defense-in-depth and enhance trust with customers and partners. Proactive remediation will also reduce potential regulatory penalties and safeguard brand reputation.

The website's overall security posture shows serious vulnerabilities primarily in its DNS infrastructure and compliance frameworks. While email security and SSL/TLS configurations are robust, critical DNS issues such as resolution failures and domain registration problems pose immediate operational and reputational risks. The failure to implement essential security headers and compliance with GDPR and NIS2 regulations exposes the business to potential data breaches and regulatory penalties. Medium-level concerns in network security and missing DNS security extensions further increase the attack surface. Addressing these issues promptly is vital to ensure business continuity, protect customer data, and maintain regulatory compliance. Without remediation, the organization risks service outages, data compromise, and loss of customer trust. Prioritizing DNS health and compliance will substantially improve the overall security posture. A holistic security strategy integrating technical fixes and compliance measures is recommended.

The website demonstrates a generally strong security posture with no critical or high-level issues detected. Core infrastructure components such as SSL/TLS and network security are well-configured, scoring 100/100, ensuring encrypted communications and robust network defenses. However, several medium-level vulnerabilities exist, primarily related to email authentication, security headers, and compliance frameworks like GDPR and NIS2. The absence of enforced DMARC and missing DKIM records expose the domain to email spoofing risks, potentially leading to phishing attacks and reputational damage. Additionally, the failure in security headers and lack of DNSSEC implementation weaken defense-in-depth strategies. These gaps could undermine customer trust and regulatory compliance, suggesting a need for prioritized remediation. Addressing these issues will enhance overall security resilience and better protect business operations and data privacy obligations.

The website's security assessment reveals significant vulnerabilities that pose critical risks to business operations and reputation. Key issues include critical failures in DNS health, such as DNS resolution failures, absence of name servers, and domain registration problems, which threaten website availability and could lead to service outages or domain hijacking. Email security is severely compromised due to lack of email authentication and missing DKIM records, increasing the risk of phishing attacks and email spoofing that can damage customer trust. Medium-level issues with security headers and compliance frameworks like GDPR and NIS2 indicate gaps in regulatory adherence and data protection, potentially leading to legal and financial penalties. While SSL/TLS implementation scores well, the overall DNS and email security posture undermines the website's reliability and trustworthiness. Network security is moderately strong but requires attention to address scan failures. Immediate remediation is critical to protect business continuity, customer data, and regulatory compliance. Proactive resolution of these issues will strengthen security resilience and support business growth.

F

Farfetch

farfetch.com

96

The website demonstrates a strong overall security posture with no critical or high-level vulnerabilities detected. Key security modules such as email security, SSL/TLS, and network security have achieved perfect scores, indicating robust protections in these areas. However, medium-level issues related to security headers, GDPR compliance, NIS2 directives, and DNS health have been identified, suggesting gaps in regulatory adherence and certain technical security controls. The absence of DNSSEC and CAA records weakens domain name system security, potentially exposing the business to DNS spoofing or certificate mis-issuance risks. Addressing these medium and low-level issues will strengthen compliance, improve trustworthiness, and reduce potential attack surfaces. Overall, the organization is well-positioned but should prioritize remediating regulatory and DNS-related weaknesses to maintain and enhance security and compliance. The lack of critical findings provides confidence but continuous monitoring and improvement are advised.

The website's overall security posture reveals critical vulnerabilities primarily related to DNS infrastructure and compliance gaps, posing significant risks to business continuity and data protection. While encryption protocols (SSL/TLS) and network security show strong performance, critical DNS resolution failures and domain registration issues undermine accessibility and trustworthiness. Medium-level issues in security headers, GDPR, NIS2 compliance, and email security highlight gaps in regulatory adherence and attack surface hardening. The lack of DNSSEC implementation and CAA records further expose the domain to spoofing and unauthorized certificate issuance. These weaknesses could lead to service disruptions, reputational damage, and regulatory penalties. Immediate remediation of DNS and domain registration problems is essential to maintain service availability and trust. Enhancing compliance controls and email security will mitigate data leakage and phishing risks. Overall, the organization must prioritize DNS stability and regulatory compliance to secure its online presence and customer trust.

The website demonstrates a generally strong security posture with no critical or high severity issues detected. Key strengths include excellent SSL/TLS implementation and robust network security, indicating reliable encryption and infrastructure defenses. However, medium severity gaps exist primarily around compliance and configuration areas such as missing security headers, GDPR and NIS2 compliance failures, absent DKIM records for email authentication, and lack of DNSSEC implementation. These gaps could expose the business to regulatory penalties, email spoofing risks, and potential DNS-based attacks. Low severity issues like missing CAA records are less urgent but still warrant attention to prevent unauthorized certificate issuance. Addressing these medium severity findings will enhance trustworthiness, regulatory compliance, and resilience against common attack vectors. Overall, the current security posture supports business continuity but requires targeted improvements to mitigate emerging risks and compliance challenges.

The website exhibits a moderate security posture with strong network security and SSL/TLS configurations, but critical gaps in email authentication and compliance frameworks. Notably, the absence of SPF, DKIM, and overall email authentication exposes the business to significant risks such as phishing, spoofing, and email fraud. Medium-level issues in security headers, GDPR, and NIS2 compliance indicate potential vulnerabilities to data privacy breaches and regulatory non-compliance, which could lead to legal and reputational consequences. DNS health is adequate but can be improved by enabling DNSSEC and configuring CAA records to enhance domain integrity and prevent unauthorized certificate issuance. Overall, while core infrastructure security is solid, critical improvements are needed in email security and compliance to mitigate business risks and protect customer trust.

The website currently maintains a strong overall security posture with no critical vulnerabilities detected and excellent SSL/TLS and network security scores. However, there are notable gaps in email security protocols, particularly the absence of a DMARC record, which poses a high risk for phishing and email spoofing attacks that could damage brand reputation and customer trust. Medium-level concerns include missing key security headers, incomplete GDPR and NIS2 compliance, lack of DNSSEC, and missing DKIM records, which collectively increase exposure to regulatory penalties and technical attacks. Although DNS health and network security are generally good, improvements are needed to fully protect domain integrity and maintain compliance with evolving cybersecurity regulations. Addressing these issues promptly will mitigate risks, enhance email deliverability, improve compliance posture, and safeguard customer data. Overall, the organization is advised to prioritize email security enhancements and compliance-related controls to reduce business risks effectively. Continuous monitoring and periodic reassessment will ensure sustained security alignment with industry standards and regulations.

The website demonstrates a generally solid network and SSL/TLS security posture, indicating strong foundational protections against common external threats. However, critical gaps exist in email security, with no email authentication mechanisms configured, exposing the business to phishing and spoofing risks that can damage brand reputation and customer trust. Medium-severity issues related to security headers, GDPR, and NIS2 compliance highlight potential regulatory and operational vulnerabilities that could lead to legal repercussions and operational disruptions. DNS security is moderately strong but lacks DNSSEC and CAA records, which help prevent DNS spoofing and unauthorized certificate issuance. Addressing these vulnerabilities will enhance the site's resilience against cyber threats and regulatory penalties, safeguarding business continuity and customer confidence. Prioritizing email authentication and compliance-related controls will yield the most significant risk reduction. Overall, the company should act promptly to remediate critical and medium issues to maintain a robust security and compliance stance.

P

Pay.nl

pay.nl

96

The website demonstrates a generally strong security posture with no critical or high-risk issues identified. Core technical controls such as SSL/TLS configurations and network security are robust, scoring near perfect. However, several medium-severity gaps exist, notably the absence of essential security headers, incomplete GDPR compliance measures, lack of NIS2 framework adherence, and missing DNSSEC implementation. These shortcomings expose the business to potential regulatory penalties, increased risk of data interception or manipulation, and reduced trust from users and partners. Low-level issues like a complex SPF record indicate minor email security management challenges but do not pose immediate threats. Promptly addressing medium-risk items will enhance regulatory compliance, improve defense-in-depth, and safeguard the company’s brand reputation. Overall, the current state is secure but requires targeted improvements to align with best practices and evolving regulatory landscapes.

The website demonstrates a generally solid security posture with no critical vulnerabilities detected and strong SSL/TLS and network security scores. However, there are notable gaps in email security, particularly the absence of a DMARC record and missing DKIM configurations, which expose the business to phishing and email spoofing risks. The failure to implement essential security headers weakens protection against common web-based attacks. Additionally, the lack of DNSSEC leaves DNS queries vulnerable to manipulation or cache poisoning attacks. Compliance-related frameworks such as GDPR and NIS2 are not adequately addressed, potentially leading to regulatory risks and penalties. While DNS health is relatively good, the absence of CAA records means that certificate issuance is less tightly controlled. Addressing these issues will strengthen defenses against both technical threats and compliance violations, safeguarding brand reputation and customer trust.

W

Wrigley

wrigley.com

95

The website demonstrates a solid overall security posture with no critical or high-risk issues detected, reflecting strong foundational protections such as excellent email security and SSL/TLS configurations. Medium-level issues primarily relate to missing or weak security headers, incomplete compliance with GDPR and NIS2 frameworks, and DNS configurations that could expose the site to specific attack vectors. While network security is robust, the absence of certain security headers and DNSSEC implementation suggests room for improvement in preventing data leakage and enhancing domain validation. Addressing these medium-priority findings will help mitigate potential regulatory risks and strengthen defenses against emerging threats. The low-level issues, including weak Referrer-Policy and missing CAA records, present minimal immediate risk but should be remediated to maintain comprehensive security hygiene. Overall, the site is secure but should act promptly on medium-level findings to safeguard reputation and ensure compliance with evolving regulations. Proactive improvements in headers and DNS security will enhance both trustworthiness and resilience.

This website has 9 high-priority security issue(s) that should be addressed promptly. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

P

Pedigree

pedigree.com

75

This website has 6 high-priority security issue(s) that should be addressed promptly. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

P

PayTabs

paytabs.com

95

The website demonstrates a generally strong security posture, with no critical or high-severity issues detected. Key foundational elements such as SSL/TLS implementation and network security are robust, scoring at 100/100. However, medium-severity gaps related to security headers, GDPR compliance, NIS2 alignment, and DNS health indicate areas of concern that could expose the business to regulatory risks and potential exploitation. The absence of DNSSEC and incomplete security headers reduce protection against DNS spoofing and certain web-based attacks. Missing DMARC reporting, while low risk, limits visibility into email spoofing threats. Addressing these medium-severity findings will enhance overall resilience, regulatory compliance, and customer trust. Proactive improvements will also mitigate future risk as regulatory frameworks evolve and threat landscapes grow more sophisticated.

S

Sony Corporation

sony-asia.com

73

The website demonstrates a generally solid security posture in network security, SSL/TLS configuration, and email security, indicating strong foundational protections. However, critical gaps exist in compliance with GDPR and NIS2 regulations, which pose significant legal and operational risks. The absence of essential GDPR elements such as a cookie policy and consent banner exposes the business to potential fines and reputational damage. Equally concerning is the lack of an information security framework, security policies, incident response procedures, and vulnerability management processes required by NIS2, which undermines the organization's ability to effectively manage cybersecurity threats and incidents. Security headers are moderately configured but require enhancements to improve protection against web-based attacks. DNS security is adequate but could be strengthened by enabling DNSSEC and configuring CAA records. Addressing these compliance and governance deficiencies is critical to mitigating regulatory penalties and enhancing overall resilience against cyber threats.

S

Sony Professional

pro.sony

71

This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

S

Sony UK Limited

sony.co.uk

64

This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

Q

Qualcomm Incorporated

qualcomm.com

72

The website demonstrates a mixed security posture with strong network security and SSL/TLS configurations, but significant gaps remain in compliance and governance areas. While no critical vulnerabilities were identified, the presence of multiple high-severity issues related to GDPR and NIS2 compliance exposes the business to regulatory and reputational risks. Key deficiencies include the absence of privacy and cookie policies, lack of cookie consent mechanisms, and missing fundamental information security frameworks and incident response plans. Security headers are partially implemented but require enhancement to protect against common web threats. Email security and DNS health are generally sound, though improvements such as enabling DKIM and DNSSEC are needed. Addressing these gaps will not only improve security resilience but also ensure compliance with evolving regulatory requirements, thus safeguarding customer trust and minimizing legal exposure. Immediate focus on governance and privacy-related controls is essential to align with industry standards and reduce potential penalties.

A

Advanced Micro Devices, Inc.

amd.com

76

The website demonstrates a strong foundation in network security, SSL/TLS configuration, and email security, scoring above 85 in these areas. However, significant gaps exist in compliance with GDPR and NIS2 regulations, reflected by low scores in these modules and multiple high-severity issues. The absence of a cookie policy and consent banner poses legal and reputational risks under GDPR, potentially leading to fines and customer distrust. Furthermore, the lack of documented security policies, incident response procedures, and business continuity planning under NIS2 threatens the organization's ability to manage security events effectively. Missing critical security headers and disabled DNSSEC also expose the site to certain attack vectors. Overall, while baseline technical controls are solid, strategic governance, regulatory compliance, and incident preparedness require urgent attention to minimize business risk and ensure regulatory adherence.

A

Amber Experiences

amber-experiences.com

70

The website's overall security posture reveals significant gaps, particularly in security headers, GDPR compliance, and adherence to NIS2 requirements, despite strong email security, SSL/TLS, DNS health, and network security. No critical vulnerabilities were detected, but the presence of multiple high and medium severity issues indicates potential risks that could lead to data exposure, regulatory non-compliance, and increased attack surface. The absence of key HTTP security headers such as Content-Security-Policy and X-Frame-Options exposes the site to common web attacks like clickjacking and cross-site scripting. GDPR compliance deficiencies, including missing cookie policies and consent mechanisms, risk legal penalties and damage to customer trust. Major shortcomings in NIS2-related policies and incident response preparedness undermine the organization's ability to effectively manage security events and comply with European cybersecurity regulations. SSL/TLS and DNS configurations are generally solid but require attention to certificate renewal and DNSSEC enablement. Immediate remediation of these issues will mitigate business risks, enhance customer confidence, and align the organization with regulatory standards.

K

KOTA

kota.co.uk

73

The website demonstrates a generally strong network and TLS security posture, with no critical vulnerabilities identified. However, significant gaps exist in GDPR compliance and NIS2 regulatory adherence, which pose legal and operational risks. High-severity issues such as the absence of a cookie policy, consent banner, security framework, incident response procedures, and security policy documentation undermine trust and regulatory standing. Medium-level risks like missing vulnerability disclosure and business continuity plans further amplify potential exposure to cyber threats and operational disruptions. Security headers and email security configurations are moderately implemented but require enhancements for better protection. Immediate focus on compliance and governance frameworks is essential to mitigate regulatory penalties and reputational damage. Addressing these weaknesses will strengthen overall security resilience and ensure alignment with legal requirements.

T

TheraScience

therascience.com

70

The website demonstrates a moderate overall security posture with no critical issues but several high and medium severity findings that could expose the business to regulatory, reputational, and operational risks. GDPR compliance is notably weak, with missing cookie policies and consent mechanisms, which could lead to significant legal penalties and loss of customer trust. The absence of a formal information security framework, security policies, and incident response procedures under NIS2 regulations indicates a lack of mature security governance, increasing vulnerability to cyber incidents. SSL/TLS configurations are suboptimal, with weak key lengths and an imminent certificate expiration, potentially compromising data confidentiality and user trust. DNS and network configurations are generally strong but could be improved by enabling DNSSEC and closing exposed services like SSH to reduce attack surfaces. Security header implementations are mostly sound but require enhancements to better protect user data privacy. Addressing these issues promptly will mitigate compliance risks, strengthen defenses against cyber threats, and enhance overall business resilience.

C

Christie's International Real Estate

christiesrealestate.com

66

The website demonstrates a moderate to low overall security posture with no critical issues but several high and medium severity gaps that expose the business to compliance risks, data exposure, and operational disruptions. Key weaknesses include missing essential security headers, lack of GDPR compliance elements such as cookie policies and consent mechanisms, and absence of foundational NIS2 security management practices like incident response and security policy documentation. While network security and SSL/TLS configurations score relatively well, the absence of strict transport security (HSTS) and DNSSEC adoption weaken the defense-in-depth strategy. Email security is adequate but can be improved by enabling DKIM. Addressing these issues is imperative to reduce regulatory risks, protect customer data, and ensure business continuity. Overall, the website requires urgent enhancements in security governance, privacy compliance, and HTTP security controls to meet industry standards and protect brand reputation.

The website demonstrates a generally strong foundation in network security, SSL/TLS implementation, and email security, reflected by high module scores in these areas. However, critical weaknesses exist in GDPR compliance and NIS2 regulatory adherence, posing significant legal and operational risks, especially for EU business operations. Missing privacy and cookie policies, lack of cookie consent mechanisms, and inadequate privacy measures expose the business to potential fines and reputational damage. The absence of an information security framework, incident response plans, and documented security policies undermines the organization's ability to manage and respond to security incidents effectively. Additionally, some security headers and DNS configurations are incomplete, which could increase exposure to data leakage and DNS-based attacks. Immediate remediation in privacy compliance and governance documentation is essential to mitigate regulatory risks and enhance trust with customers and partners. Overall, while technical defenses are strong, governance and compliance gaps represent the most pressing concerns for business continuity and legal compliance.

C

CIEPP

ciepp.ch

62

The website's overall security posture shows strong network security and solid SSL/TLS and DNS configurations, but reveals significant vulnerabilities in privacy compliance, email authentication, and information security governance. Critical gaps exist in GDPR compliance, including missing privacy and cookie policies and consent mechanisms, exposing the business to regulatory and reputational risks. The lack of an information security framework, security policies, and incident response procedures indicates immature security management, increasing exposure to cyber threats and operational disruptions. Email security is critically weak due to missing SPF and DKIM records, raising the risk of phishing and domain spoofing attacks. Security headers are partially implemented but omit key protections against cross-site scripting and feature abuse. Addressing these deficiencies will mitigate regulatory exposure, improve customer trust, and reduce the risk of cyber incidents. Prioritizing compliance and governance controls alongside email security enhancements is vital for business resilience and trustworthiness.

The website demonstrates a generally stable security posture with no critical or high severity vulnerabilities detected. However, several medium and low-risk issues indicate areas requiring improvement to strengthen overall defenses and regulatory compliance. Notably, failures in security headers, GDPR, and NIS2 compliance analyses suggest gaps in privacy and cybersecurity controls that could expose the business to regulatory and reputational risks. DNS configuration weaknesses such as lack of DNSSEC and CAA records increase susceptibility to DNS spoofing and certificate mis-issuance. The exposure of SSH services without adequate controls represents a potential entry point for attackers if not properly secured. Email security is mostly robust, though the absence of DMARC reporting reduces visibility into email abuse. Addressing these medium and low-level issues will enhance the company’s security posture, reduce risk exposure, and support compliance with evolving regulations.

I

Icecat

icecat.fr

59

The website's overall security posture reveals significant gaps, especially in privacy compliance and email security, which pose substantial risks to business reputation and regulatory adherence. Critical findings include the absence of essential GDPR-related policies and mechanisms, notably for an EU-based business, exposing the company to potential legal penalties and customer trust erosion. Email authentication is critically lacking, increasing the risk of phishing and domain spoofing attacks that could harm brand integrity. While SSL/TLS and network security are robust, foundational security controls such as Content-Security-Policy headers and security policy documentation are missing or insufficient. The NIS2 compliance score is notably low, indicating inadequate preparedness for incident response and governance requirements. DNS health is generally good but would benefit from enabling DNSSEC to protect against DNS spoofing. Addressing these issues will strengthen regulatory compliance, reduce cyber risk, and protect business continuity and customer trust.

S

SupplHi S.r.l. Società Unipersonale

supplhi.com

63

The website demonstrates a moderate security posture with no critical vulnerabilities but several high and medium risk issues that warrant immediate attention. Key deficiencies exist in security header implementations, GDPR compliance, and adherence to NIS2 requirements, potentially exposing the business to regulatory, reputational, and operational risks. The absence of essential headers like Content-Security-Policy and X-Frame-Options increases susceptibility to web-based attacks such as clickjacking and cross-site scripting. GDPR-related gaps, including missing cookie policies and consent mechanisms, expose the company to legal penalties and erode customer trust. NIS2 compliance is particularly weak, lacking formal security frameworks, incident response plans, and documented policies, which could impair the company’s ability to handle cyber incidents effectively. Email security measures are moderate but require improvements to prevent phishing and spoofing threats. SSL/TLS and DNS configurations are relatively strong but need minor updates to maintain robustness. Overall, the organization should prioritize closing regulatory gaps and enhancing web security controls to protect its assets and reputation.

S

Swissquote

swissquote.ch

74

The website demonstrates a generally strong technical security foundation, with excellent SSL/TLS, network security, and DNS health scores. However, significant gaps exist in compliance with GDPR and NIS2 regulations, indicated by missing privacy and cookie policies, absence of consent mechanisms, and lack of documented security and incident response procedures. These deficiencies expose the business to regulatory risks, potential fines, and reputational damage, especially in regions governed by GDPR and NIS2 mandates. While some medium severity issues like missing X-XSS-Protection header and lack of DKIM records impact security, the primary concern is the absence of governance frameworks and policies. Addressing these will not only reduce compliance risk but also improve overall security posture and stakeholder trust. Immediate prioritization of privacy compliance and formal security documentation is critical to align with legal obligations and industry best practices. The organization's proactive network and SSL/TLS configurations provide a solid base to build upon. Overall, the security posture is solid technically but requires urgent policy and compliance enhancements to mitigate business risks effectively.

The website's overall security posture shows significant gaps, particularly in compliance with data protection regulations and information security management. Critical and high-severity issues, including lack of email authentication and absence of privacy and cookie policies, expose the business to legal risks and potential reputational damage. The missing security headers and absence of incident response and security policy documentation indicate vulnerabilities to common web-based attacks and inadequate preparedness for cybersecurity incidents. While network security and SSL/TLS configurations score reasonably well, foundational controls like HSTS and DNSSEC are missing, reducing the effectiveness of transport layer security. The very low NIS2 compliance score highlights a critical deficiency in meeting regulatory and operational cybersecurity standards. Addressing these issues promptly is essential to reduce risks of data breaches, regulatory penalties, and customer trust erosion. A structured security improvement plan aligned with business objectives and compliance requirements is urgently recommended.

G

Gruppo Santa Devota

santadevota.it

59

The website exhibits significant security gaps, particularly in privacy compliance, email authentication, and core security policies, posing substantial risks to business reputation and regulatory adherence. Critical issues in GDPR compliance and email authentication indicate exposure to legal penalties and phishing attacks. Missing key security headers and lack of incident response and business continuity plans reflect immature security governance. While network and DNS health are relatively strong, foundational security controls such as HSTS and DNSSEC require enhancement. The low scores in GDPR and NIS2 modules highlight urgent needs for privacy policies and security frameworks. Immediate remediation is necessary to reduce vulnerability exposure and align with regulatory requirements. Overall, the security posture is weak and demands prioritized, strategic improvements to protect customer data and maintain trust.

The website demonstrates a mixed security posture with no critical vulnerabilities but several high and medium-risk issues that could expose the business to significant threats. Major gaps exist in security headers, GDPR compliance, and adherence to the NIS2 directive, particularly around incident response and information security frameworks. The absence of essential security headers like Content-Security-Policy and X-Frame-Options increases the risk of web-based attacks such as clickjacking and cross-site scripting. GDPR compliance weaknesses, including missing cookie consent and privacy policy concerns, expose the business to regulatory penalties and reputational damage. Key NIS2 deficiencies highlight a lack of documented security policies and incident management, which could impair response to cyber incidents. SSL/TLS weaknesses and missing DNS security measures further elevate risk by potentially allowing interception or manipulation of data. Positively, email security and network security postures are strong, reducing some risks related to email spoofing and network-based attacks. Overall, urgent remediation is needed to protect the business, customer data, and ensure regulatory compliance while maintaining stakeholder trust.

U

University Sesame

universitesesame.com

42

The website's security posture is currently weak and exposes the business to significant risks, including data breaches, regulatory non-compliance, and reputational damage. Critical issues such as the absence of HTTPS encryption and lack of email authentication mechanisms put sensitive data and communications at risk of interception and spoofing. The failure to implement GDPR requirements, including missing privacy and cookie policies and consent mechanisms, may lead to legal penalties and loss of customer trust. Additionally, the lack of a formal information security framework, incident response, and business continuity plans highlights an immature security governance environment. While network security measures appear strong, the overall ecosystem is vulnerable due to foundational security gaps. Immediate remediation is necessary to safeguard business operations, comply with regulations, and maintain customer confidence. The current module scores, especially for GDPR and NIS2 compliance, indicate urgent attention is required to align with industry standards and legal obligations.

P

Panerai

panerai.com

50

The website exhibits a severely weak security posture, with multiple critical vulnerabilities primarily around encryption and regulatory compliance. The absence of HTTPS encryption is a critical risk that undermines data confidentiality and integrity, exposing users to potential data interception and man-in-the-middle attacks. Compliance with GDPR and NIS2 requirements is significantly lacking, which poses legal and reputational risks for the business. Security headers are inadequately configured, increasing exposure to common web-based attacks. While network security and email security show relatively better scores, foundational SSL/TLS protections are missing. The lack of documented security policies, incident response, and vulnerability disclosure processes indicates immature security governance. Overall, the site is vulnerable to data breaches, regulatory penalties, and loss of customer trust. Immediate remediation is essential to protect sensitive data and comply with legal frameworks.

K

Koroyd

koroyd.com

50

The website's overall security posture is currently poor, with critical vulnerabilities that expose the business to significant risks including data breaches and regulatory non-compliance. The absence of HTTPS encryption is a critical flaw, undermining user data confidentiality and trust, while also violating GDPR and NIS2 requirements. Key security headers are missing, increasing the risk of cross-site scripting and data leakage. GDPR compliance is severely lacking, with no cookie policy or consent mechanism, risking legal penalties and reputational damage. The lack of documented security policies, incident response, and business continuity plans highlights operational weaknesses. Email and DNS security are relatively strong, but gaps remain that could be exploited. Immediate remediation is essential to protect customer data, maintain regulatory compliance, and safeguard business continuity. Without urgent corrective actions, the business faces increased risk of cyber incidents and legal consequences.

U

UPS Supply Chain Solutions

ups-scs.com

50

The website's overall security posture is currently poor and exposes the business to significant risks, particularly in data protection and regulatory compliance. The absence of HTTPS encryption is a critical vulnerability affecting confidentiality and trust, simultaneously violating GDPR and NIS2 requirements. Key policies and procedures related to information security, incident response, and privacy are missing, which undermines the organization's ability to manage security events and comply with legal obligations. While network security and DNS health scores are relatively strong, foundational security controls such as security headers and cookie management are insufficient. The lack of GDPR compliance, including missing privacy and cookie policies and consent mechanisms, poses legal and reputational risks. Email security is reasonably well implemented but can be further improved. Immediate remediation is needed to protect sensitive data, ensure regulatory compliance, and maintain customer trust. Without these improvements, the business risks data breaches, regulatory penalties, and damage to its brand reputation.

I

Indosuez Wealth Management

ca-indosuez.fr

43

The website's overall security posture is critically weak and exposes the business to significant risks, particularly regarding data protection and regulatory compliance. The absence of HTTPS encryption is a critical vulnerability affecting GDPR, NIS2, and SSL/TLS compliance, jeopardizing user data confidentiality and trust. Key security headers are missing or poorly configured, increasing exposure to web-based attacks such as clickjacking and cross-site scripting. The lack of a cookie policy and consent mechanisms indicates non-compliance with GDPR, which could lead to legal penalties and reputational damage. Furthermore, the absence of essential NIS2 security policies, such as incident response and security documentation, suggests insufficient organizational security governance. DNS and email security configurations reveal gaps that could enable phishing or spoofing attacks. While network security posture is good, the overall lack of fundamental protections necessitates urgent remediation to safeguard the business and meet regulatory requirements.

M

MonacoTech

monacotech.mc

49

The website's overall security posture is currently inadequate, exposing the business to significant legal, reputational, and operational risks. Critical deficiencies include the complete lack of HTTPS encryption, which undermines data confidentiality and user trust. Compliance with GDPR and NIS2 regulations is severely lacking, notably with no privacy policy, cookie consent mechanisms, or security incident response procedures in place. The presence of high-risk services like FTP further increases the attack surface. While some security headers and email security configurations are reasonably implemented, foundational elements such as an information security framework and vulnerability disclosure policies are missing. These gaps could lead to data breaches, regulatory fines, and loss of customer confidence. Immediate remediation is essential to mitigate these risks and establish a secure, compliant environment. Without urgent action, the business may face substantial financial and reputational damage.

F

Finaxy Group

finaxygroup.com

43

The website's overall security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and reputational damage. The absence of HTTPS encryption is a critical vulnerability affecting confidentiality and data integrity, impacting GDPR and NIS2 compliance. Key security headers are either missing or misconfigured, increasing the risk of cross-site scripting (XSS), clickjacking, and content injection attacks. The lack of privacy and cookie policies along with missing consent mechanisms exposes the company to legal penalties under data protection regulations. Furthermore, insufficient information security governance, including missing incident response and business continuity plans, indicates poor preparedness against cyber threats. While network security and email security show strengths, they are overshadowed by critical gaps in web security and compliance. Immediate remediation is required to protect sensitive customer data, maintain trust, and meet regulatory requirements. Without urgent action, the business is vulnerable to legal actions, data loss, and operational disruptions.