Security Directory

K

Koongo

koongo.dk

40

Koongo is a Danish-based SaaS company specializing in product feed management and multi-channel marketplace integration for online sellers. The platform supports over 500 sales channels including Amazon, eBay, and Google Shopping, enabling sellers to synchronize product data and orders automatically. Koongo positions itself as a cost-effective and user-friendly solution with extensive e-commerce platform integrations and a strong customer support reputation. The website is professionally designed, multilingual, and includes comprehensive business and contact information. Technically, the site is built on WordPress with modern JavaScript libraries and analytics tools, but suffers from a critical lack of valid SSL/TLS configuration, exposing it to security risks. Security headers are partially implemented, and privacy compliance is well addressed with cookie consent mechanisms and a detailed privacy policy. Overall, Koongo demonstrates a mature digital presence but must urgently address SSL issues to improve security posture and trust.

K

Koongo

koongo.gr

40

Koongo is a medium-sized e-commerce SaaS provider specializing in product feed management and marketplace integration, enabling online sellers to automate synchronization of product data and orders across multiple sales channels. The company is positioned as a trusted provider with a comprehensive service offering, including integrations with major marketplaces like Amazon and eBay, and supports over 500 sales channels. Technically, the website is built on WordPress with modern analytics and marketing tools, but lacks a valid SSL certificate, which impacts security posture significantly. Security headers and cookie consent mechanisms are properly implemented, reflecting good privacy compliance. However, the absence of HTTPS and modern TLS protocols is a critical vulnerability that must be addressed to improve trust and security. Overall, the site is content-rich, professionally designed, and provides clear business and contact information, supporting a positive user experience and business credibility.

K

Koongo

koongo.es

40

Koongo is a SaaS platform specializing in product feed management and multi-channel marketplace integration for online sellers. The company offers extensive integrations with over 500 sales channels including Amazon, eBay, and Google Shopping, enabling sellers to synchronize inventory, automate order processing, and optimize product data. Positioned as a reliable and scalable solution, Koongo targets e-commerce businesses seeking to expand their online presence efficiently. The website is professionally designed with clear navigation and multilingual support, primarily in Spanish, and includes trust signals such as customer testimonials and third-party review badges. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tools. However, the lack of a valid SSL certificate and HTTPS implementation is a critical security shortfall that undermines user trust and data protection. Privacy compliance is well addressed with comprehensive cookie consent mechanisms and a detailed privacy policy. Overall, Koongo demonstrates a solid business and technical foundation but requires urgent improvements in security infrastructure to meet industry standards.

K

Koongo

koongo.de

40

Koongo is a medium-sized e-commerce technology company specializing in product feed management and multi-channel marketplace integration. The company offers a SaaS platform that enables online sellers to synchronize product data, inventory, and orders across over 500 sales channels including Amazon, eBay, and Google Shopping. Koongo positions itself as a comprehensive solution provider with integrations to numerous e-commerce platforms such as Magento, Shopify, WooCommerce, and others. The website is professionally designed, content-rich, and targets e-commerce businesses seeking to expand their online sales footprint efficiently. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Analytics, and Intercom for customer engagement. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall that undermines user trust and data protection. The site implements a detailed cookie consent mechanism and complies with GDPR requirements, reflecting a strong privacy posture. Overall, Koongo demonstrates a solid market presence with good business credibility but requires urgent improvements in its security infrastructure to meet industry standards.

K

Koongo

koongo.nl

40

Koongo is a medium-sized e-commerce technology company based in the Netherlands, owned by NoStress Commerce s.r.o. It provides a SaaS platform for product feed management and order synchronization across over 500 online marketplaces including Amazon, eBay, and Google Shopping. The website is professionally designed, content-rich, and targets online sellers seeking to expand multi-channel sales efficiently. Technically, the site runs on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tools. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, exposing users to potential risks. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the business demonstrates strong market positioning and trust signals but must urgently address security shortcomings to protect user data and maintain credibility.

E

ECIU University

eciu.org

63

ECIU University is an international alliance of 13-14 universities focused on innovative education, research, and collaboration to address real-life challenges. The website serves as a platform to engage learners, researchers, and collaborators with news, events, and program information. Technically, the site is built on Webflow with integrations including Google Fonts, Vimeo, Microsoft Forms, and analytics tools like Plausible and Microsoft Clarity. Hosting and CDN services are provided via Cloudflare. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which severely impacts the site's security posture. While security headers and HSTS are configured, the lack of proper TLS protocols and certificate transparency compliance are significant vulnerabilities. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service detected. Contact information is primarily via web forms and social media, with no direct emails or phone numbers published. Overall, the site is professionally designed and content-rich but requires urgent security improvements to protect users and enhance trust.

K

Koelnmesse GmbH

koelnmesse.de

58

Koelnmesse GmbH is a leading international trade fair and event organizer based in Germany, with a strong market position and a comprehensive portfolio of over 80 trade fairs and events globally. The company serves a diverse audience including exhibitors, visitors, and business partners, providing key services such as exhibitions, conferences, and venue management. Technically, the website employs modern web technologies including jQuery, OneTrust for cookie consent, Google Tag Manager, and Plausible Analytics, hosted on Amazon AWS infrastructure. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocol support, which poses risks to secure communications. Despite these issues, the company demonstrates strong compliance with GDPR and provides clear privacy and cookie policies, along with active incident response contacts. Overall, Koelnmesse maintains a high level of professionalism and trustworthiness in its digital presence.

K

Koelnmesse GmbH

koelnmesse.com

63

Koelnmesse GmbH is a leading trade fair and event organizer based in Cologne, Germany, with a century-long history since its founding in 1924. The company operates over 80 trade fairs and exhibitions both locally and in key global markets, serving a diverse audience including exhibitors, visitors, and trade fair organizers. Koelnmesse has a strong market position, recognized for its sustainability efforts and industry leadership, including recent awards such as 'Company of the Year' 2025 and 'Pioneer in Sustainability 2024'. Technically, the website employs a modern tech stack including jQuery, OneTrust for privacy management, Google Tag Manager, and various third-party integrations for social media and advertising. Hosting is provided via Amazon AWS infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are good, supporting the company's digital presence. From a security perspective, while email security is well managed with valid SPF and DMARC records, the absence of a valid SSL certificate and lack of modern TLS protocols represent significant vulnerabilities. The site lacks HSTS, OCSP stapling, and other advanced security headers, lowering its overall security posture. No vulnerability disclosure or security.txt files were found, indicating limited transparency in security incident handling. Overall, Koelnmesse presents a professional and trustworthy online presence with strong business credentials but requires urgent improvements in its SSL/TLS configuration and security best practices to protect user data and maintain compliance with modern security standards.

S

S B SERVICOS DIGITAIS LTDA

2i9.com.br

59

2i9 negócios digitais is a Brazilian digital agency specializing in the development and maintenance of news portals, websites, hotsites, and digital branding services. With over 12 years of market presence, the company positions itself as an innovative and multidisciplinary agency focused on delivering tailored digital solutions to its clients. Their key services include web development, digital media planning, email marketing, and server infrastructure, targeting businesses seeking to enhance their digital footprint. The company maintains a moderate market position supported by client testimonials, awards, and certifications such as D4Sign. Technically, the website leverages a mix of established web technologies including jQuery, Bootstrap, Google Fonts, and integrates Google reCAPTCHA v3 for spam protection. Hosting and DNS services are provided via Cloudflare, enhancing performance and security at the network level. However, the website suffers from a critical security flaw due to an invalid SSL certificate and lack of modern TLS protocol support, which undermines secure communications. Performance is suboptimal with a slow page load time and a large page size, indicating potential for optimization. From a security perspective, while some best practices like reCAPTCHA and Cloudflare usage are in place, the absence of valid SSL, security headers, DNSSEC, and HSTS significantly lowers the security posture. There is no visible security policy or incident response information, and no data protection officer contact is provided, which may impact compliance with data protection regulations. Privacy and terms of service documents exist but appear basic in scope. Overall, 2i9 negócios digitais demonstrates a solid business foundation and digital maturity but requires urgent improvements in security infrastructure and compliance transparency to reduce risk and enhance trustworthiness. Strategic investments in SSL certification, security headers, and performance optimization are recommended to align with industry best practices and regulatory expectations.

I

Interlink

interlink.org

66

Interlink is a socially-driven company builder focused on developing, funding, and implementing solutions to social, environmental, and economic challenges. Positioned as a medium-sized enterprise based in Germany, it operates multiple companies across sectors such as green energy, bot protection, coworking spaces, and resource reuse. The website reflects a strong commitment to sustainability and social entrepreneurship, targeting startups, freelancers, and established companies. Technically, the site is built on WordPress with Elementor and optimized for performance and SEO, employing modern plugins and privacy-compliant analytics. Security posture is generally strong with valid SSL, HSTS, and security headers, though TLS protocols are currently disabled, which is a critical area for improvement. No explicit security or incident response policies are published, indicating room for maturity in security governance. Overall, Interlink presents a professional and trustworthy digital presence aligned with its mission and audience.

U

Unified Streaming

unified-streaming.com

70

Unified Streaming is a specialized technology company focused on video delivery solutions that simplify and optimize streaming content for global clients. Their product suite addresses various streaming needs including VOD packaging, live streaming, ad insertion, and media processing, positioning them as a key player in the media technology industry. The website reflects a mature digital presence with strong branding, comprehensive content, and a user-friendly interface. Technically, the site is built on Webflow CMS, leveraging Cloudflare CDN and modern JavaScript frameworks, with good mobile optimization and fast performance. Security posture is solid with proper HTTPS enforcement, security headers, and cookie consent mechanisms, though improvements are needed in TLS protocol support and DNS security. Overall, the company demonstrates a professional and trustworthy online presence with room for enhanced security transparency and compliance documentation.

The website's security posture is currently weak with multiple critical and high-severity issues that expose the business to significant risks. The absence of HTTPS encryption is a critical vulnerability affecting data confidentiality and compliance with GDPR and NIS2 regulations. Missing key security headers such as Strict-Transport-Security and Content-Security-Policy leave the site vulnerable to man-in-the-middle attacks and content injection. GDPR compliance is poor, lacking basic cookie policies and consent mechanisms, which can lead to legal penalties and reputational damage. The lack of a formal information security framework, incident response procedures, and security policies indicates immature security governance. While network security and DNS health show some strengths, critical gaps in email security and vulnerability management remain. Overall, immediate remediation is required to protect customer data, ensure regulatory compliance, and maintain stakeholder trust. Failure to act promptly could result in data breaches, legal consequences, and loss of business credibility.

S

Spotware LTD

spotware.com

68

Spotware.com demonstrates a generally strong network and infrastructure security posture but exhibits significant weaknesses in web application security and regulatory compliance, particularly regarding missing security headers and GDPR adherence. These gaps expose the business to potential data breaches, regulatory fines, and reputational damage if not addressed promptly.