Medium-risk security reports

Kaizen Agency is a creative web agency based in Bordeaux, France, specializing in web marketing, custom web development, digital marketing, hosting, security, and maintenance services. The company positions itself as a reliable and transparent partner focused on driving commercial success for its clients through strategic consulting and tailored digital solutions. The website reflects a professional and modern digital presence with comprehensive service offerings and a clear call to action for project engagement. Technically, the website is built on WordPress 6.6.2 and integrates advanced marketing and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and Microsoft Clarity, all managed with GDPR-compliant consent mechanisms. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Security measures include HTTPS enforcement and CAPTCHA protection on contact forms, although explicit security headers are not evident in the HTML source. From a security perspective, the site maintains a strong posture with encrypted communications and privacy compliance but would benefit from enhanced HTTP security headers and regular security audits. The absence of WHOIS registration data raises concerns about domain legitimacy, although the professional site content and certifications (Google Partner, Microsoft Advertising Partner) provide trust signals. Overall, Kaizen Agency presents a credible and professional digital footprint suitable for its target market, with recommendations to improve domain transparency and security header implementation to further strengthen trust and security posture.

The Virtuele Gemeente Assistent website serves as a virtual municipal assistant platform targeting residents of Dutch municipalities such as Utrecht, Tilburg, and Dongen. It offers chatbot-based support to facilitate access to municipal information and services. The platform appears to be a niche government service tool established in 2020, focusing on digital assistance for local government interactions. The website content is basic but functional, with moderate branding consistency and a clear target audience within the Netherlands. Technically, the site uses a combination of Bootstrap and jQuery libraries, with some Vue.js and BotUI scripts commented out, indicating potential future enhancements or incomplete features. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. Hosting and CMS details are not explicitly identified. The site benefits from HTTPS and DNSSEC, ensuring secure domain resolution and encrypted communications. From a security perspective, the website has a good SSL configuration but lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. Forms are present but commented out, indicating inactive user input mechanisms and potential gaps in secure data handling. No contact information or incident response details are provided, limiting transparency and user trust. Overall, the security posture is moderate but requires improvements to meet best practices and regulatory requirements. The overall risk assessment suggests a moderately trustworthy site with no critical vulnerabilities detected but notable compliance and security gaps. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, activating secure forms with CSRF protection, and enhancing transparency with contact and incident response information to improve user trust and regulatory compliance.

PetCity is a leading Latvian retailer specializing in pet products and veterinary services, operating both online and through multiple physical stores and clinics. The website reflects a mature e-commerce platform with a clear focus on pet owners, offering a wide range of products and services including veterinary clinics and loyalty programs. The technical infrastructure is based on Magento with integrations such as Google Tag Manager, Hotjar, and Google Translate, indicating a modern and user-friendly digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in explicit security policies and headers. Overall, the website is professional, trustworthy, and well-optimized for its target audience.

Seznam.cz, a.s. is a leading Czech internet company operating as the country's number one internet platform. The company manages over 30 services supported by more than 1,900 employees, including proprietary data centers and a broad portfolio of online services such as search, advertising, and media. The website 'O Seznamu' serves as a corporate information portal highlighting the company's vision, leadership, career opportunities, and social responsibility initiatives. Technically, the site is built on WordPress with modern web technologies including Google Tag Manager and a consent management platform, ensuring GDPR compliance and good SEO practices. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a mature digital presence with excellent content quality, user experience, and trustworthiness.

TRAG-Plan & Engineering Services Kft is a Hungarian engineering and construction company founded in 2023. The website serves as a corporate portal showcasing company information, organizational structure, completed projects, and career opportunities. It also highlights a network of subsidiaries, indicating a medium-sized enterprise with a diversified business model in the real estate and construction sectors. The site targets industry clients, partners, and potential employees within Hungary. Technically, the website uses a custom CMS with modern JavaScript libraries including jQuery, Google Maps API, and Google Analytics for tracking. The design is professional with good navigation and moderate mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit privacy or security policies. No social media presence is linked directly on the site. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

MCM beton is a Hungarian construction-related company specializing in concrete and related services, operating as part of the larger Market corporate group. The website presents company information, contact details, and links to sister companies, targeting construction industry clients primarily in Hungary. The digital infrastructure uses modern JavaScript libraries and Google services, indicating moderate digital maturity. However, some security best practices such as security headers and cookie consent mechanisms are missing or minimal. The website is professionally designed with good navigation and mobile optimization, but lacks explicit privacy and security policies on-site. Overall, the domain registration and website content align well, supporting legitimacy and trustworthiness.

Prebeton Zrt. is a Hungarian manufacturing company specializing in precast concrete products and related construction services. It operates as part of a larger corporate group with multiple subsidiaries, serving primarily B2B clients in the construction and real estate sectors. The website reflects a medium-sized enterprise with a clear business model focused on manufacturing, design, transportation, and assembly services. Technically, the website uses a modern JavaScript stack with common libraries and integrates Google Analytics and Tag Manager for tracking. The site is accessible, mobile responsive to a basic degree, and has a consistent branding approach. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Vilati Szerelő Zrt. is a well-established Hungarian construction and real estate development company, founded in 1998 and operating as part of a larger corporate group with multiple subsidiaries and partners. The company focuses on construction projects and real estate development, targeting the Hungarian market and related stakeholders. The website presents a professional image with clear navigation, project information, and corporate group affiliations. Technically, the site uses a custom CMS with common JavaScript libraries and Google services for analytics and mapping. While the site is functional and moderately optimized, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. The domain is longstanding and consistent with the business claims, indicating high legitimacy.

Moratus Kft. is a well-established Hungarian construction and real estate company founded in 2005, operating as part of a larger corporate group with multiple subsidiaries. The company focuses on construction projects, real estate development, and related services, targeting clients and partners in the construction and real estate sectors. The website presents a professional image with clear navigation, project showcases, awards, and career opportunities, reflecting a mature business presence. Technically, the website uses modern JavaScript libraries such as jQuery, Google Tag Manager, Google Analytics, and Google Maps API, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience, although accessibility features are basic. SEO optimization is present but could be improved. From a security perspective, the site uses HTTPS and implements a cookie consent banner, but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities were detected, but improvements in security headers and privacy policy publication are recommended. Overall, the website is credible and trustworthy, with a solid business foundation and digital presence. Strategic improvements in privacy compliance and security posture would enhance its risk profile and user trust.

OKM Építőipari és Szolgáltató Kft. is a Hungarian construction and service company founded in 2020, operating as part of the larger Market corporate group. The company specializes in construction, road and utility planning, and project management services targeting B2B clients in the Hungarian construction sector. The website reflects a medium-sized enterprise with consistent branding and a clear market position within its group. Technically, the site uses common JavaScript libraries and Google services, with moderate performance and good mobile optimization. Security posture is moderate with cookie consent implemented but lacks advanced security headers and explicit privacy or terms of service pages. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site is professional but could improve in privacy compliance and security best practices.

ProjectBinder is a Nordic-based company specializing in IT and industrial automation solutions tailored for the life science industry. As part of the Init Group, it benefits from a broad European presence and a skilled workforce exceeding 650 employees. The company offers a comprehensive suite of services including advisory, architecture, IoT technologies, compliance, and digital transformation, targeting life science manufacturers aiming to optimize their operations and ensure regulatory compliance. The website reflects a professional and consistent brand image with clear messaging and a focus on digital transformation in manufacturing.

Init Eldor AS is a specialized engineering consultancy focused on optimizing offshore and land-based production facilities primarily in the energy sector. Their services include alarm system improvement, control and safety systems, control room and remote operation, human factors, and process optimization. The company targets offshore and land-based production operators and engineering professionals, positioning itself as a niche expert with notable clients such as Equinor and Aker BP. The website is professionally designed, content-rich, and demonstrates strong trust signals including client testimonials and GDPR-compliant privacy practices. Technically, the site is built on HubSpot CMS with integration of modern analytics and marketing tools, though some legacy libraries like jQuery 1.7.1 are used. Security posture is good with HTTPS and cookie consent mechanisms, but could be improved by adding explicit security headers and incident response information. WHOIS data is unavailable, likely due to privacy protection, but the overall legitimacy and professionalism of the site support a high trust level.

OpenLayers is an established open source JavaScript library focused on providing dynamic web mapping capabilities. It is maintained by the Open Source Geospatial Foundation, a US-based organization, and has a long history dating back to 2005. The website offers comprehensive documentation, examples, and multiple version archives, targeting developers and organizations needing geospatial web solutions. Technically, the site leverages modern web technologies including Bootstrap, FontAwesome, and Prism.js, hosted on Netlify with CDN usage for performance and reliability. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, but lacks some advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is strong given the open source nature, transparency in domain registration, and active community presence. Overall, the site is professional and trustworthy but could improve compliance and security documentation.

OSGeo.nl is a small, community-driven non-profit organization dedicated to promoting and supporting open source geo-information software within the Dutch language area. As a local chapter of the international OSGeo Foundation, it serves a niche audience of developers, users, and enthusiasts interested in open geo technologies. The website provides information about community events, user groups, and relevant news, positioning itself as a key resource for the Dutch open geo community. Technically, the website is built using the Hugo static site generator, leveraging modern web technologies such as JavaScript bundles and CSS with Subresource Integrity. The site is served over HTTPS with DNSSEC enabled, indicating a good baseline security posture. However, there is room for improvement in security headers and privacy compliance, as no privacy or cookie policies are present, and no incident response or vulnerability disclosure information is provided. The security posture is solid in terms of transport security and resource integrity but lacks comprehensive security policies and headers that would enhance protection against common web threats. The absence of tracking and advertising technologies suggests a privacy-conscious approach, though the lack of formal privacy documentation is a compliance gap. Overall, OSGeo.nl presents a trustworthy and professional front for its community mission but should prioritize adding privacy policies, cookie consent mechanisms, and security headers to improve compliance and security maturity. Enhancing contact information and incident response details would further strengthen trust and preparedness.

The website eteverslearning.com is currently inaccessible, returning an HTTP 403 Forbidden error page with minimal content. This prevents any meaningful analysis of the site's business offerings, content, or technical infrastructure. The domain is registered with Gabia, Inc. since 2022 with a long expiry period, indicating a legitimate registration but the lack of accessible content limits trust and credibility assessment. No metadata, structured data, or contact information is available, and no security or privacy policies are present. The technical maturity appears low due to the blocked content and lack of visible technologies or frameworks. Security posture cannot be fully assessed but no HTTPS or security headers were detected from the provided data. Overall, the site appears to be either under maintenance, restricted, or misconfigured, resulting in a critical accessibility issue.

Seesawmall.com is a Korean online e-commerce platform specializing in digital products and electronics, including PCs, monitors, laptops, computer parts, printers, storage devices, tablets, and software. The website targets Korean consumers and businesses seeking a wide range of electronic products at competitive prices. The platform features multiple brand partnerships with major manufacturers such as HP, Microsoft, Lenovo, Samsung, and LG, and maintains a strong social media presence across Naver Blog, YouTube, Instagram, and KakaoTalk. The business model is focused on online retail with promotional events and customer support services.

드림어스컴퍼니 operates a corporate blog primarily focused on sharing news and updates about its services such as FLO music streaming, Astell&Kern audio products, and IRIVER services. The website targets Korean-speaking audiences interested in the company's offerings and industry news. The site is built on the Wix platform, leveraging Wix's hosting and content management capabilities, and integrates Google Analytics and Tag Manager for visitor tracking. The technical infrastructure is modern but basic, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks visible security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain registration transparency, although the site content and structured data suggest legitimate business use. Overall, the website is professional but could improve in privacy compliance and contact transparency.

Sbazar.cz is a large Czech online marketplace and classified ads platform operated by Seznam.cz, a leading Czech internet company. The platform offers free posting and browsing of millions of listings across diverse categories such as electronics, vehicles, clothing, antiques, real estate, and services. It targets consumers in the Czech Republic seeking to buy and sell new and used goods efficiently. The business model is based on providing a free-to-use classifieds service with monetization likely through advertising and premium features. Technically, the website employs modern web technologies including the Astro framework and Preact for frontend rendering, along with integrations for analytics and user tracking via Hotjar and Gemius. The site is mobile optimized and demonstrates good SEO practices with structured data and meta tags. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses modern JavaScript frameworks, but lacks explicit security headers and visible privacy or cookie policies in the provided content. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces domain trust, but the association with Seznam.cz supports legitimacy. No WAF or blocking mechanisms were detected, indicating full content accessibility. Overall, Sbazar.cz presents as a professional and trustworthy e-commerce platform with a strong market position in the Czech Republic. However, improvements in transparency around privacy, security policies, and domain registration details would enhance trust and compliance.

Volnámísta.cz is a Czech job listing platform offering thousands of daily job postings including full-time, part-time, and temporary positions directly from employers. The website targets job seekers and employers within the Czech Republic, providing a user-friendly interface with modern web technologies such as React, Next.js, and Material-UI. The platform integrates tracking and analytics tools like Gemius and Hotjar to monitor user engagement and improve service delivery. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data reduces domain trustworthiness but does not detract from the apparent legitimacy of the business based on website content and design. Strategic recommendations include implementing comprehensive privacy and cookie policies, publishing contact and incident response information, and enhancing security headers to improve overall trust and compliance.

Dataforsyningen is a Danish government-operated platform managed by Klimadatastyrelsen, providing free access to public geographic data through various digital means including APIs, web services, and map views. The platform targets both public and private sector users, including IT developers, offering comprehensive geodata services and a digital laboratory for prototype testing. The website demonstrates a mature digital infrastructure with modern JavaScript frameworks and good mobile and accessibility optimization. Privacy and cookie compliance are well implemented with detailed policies and active consent management. Security posture is solid with HTTPS and session management, though improvements such as enabling DNSSEC and publishing formal security policies could enhance trust further. Overall, the site is professional, trustworthy, and aligns well with its government mandate.

boost.ai is a Norway-based enterprise specializing in AI-powered conversational platforms tailored for regulated industries such as finance, insurance, telecommunications, and the public sector. The company positions itself as a leader in delivering secure, compliant, and scalable AI customer experience solutions, emphasizing trust and control in AI implementations. Their offerings include chat automation, voice call automation, and generative AI capabilities, supported by a robust platform and integrations. Technically, the website is built on modern frameworks including HubSpot CMS and UIkit, with extensive use of marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, with fast performance and a professional design. Hosting is via Amazon AWS, and domain registration details align well with the company's Norwegian origin and business claims. From a security perspective, the site enforces HTTPS, employs clientTransferProhibited domain status, and provides comprehensive privacy and cookie policies with user consent mechanisms. However, DNSSEC is not enabled, and there is no published security.txt or explicit incident response contact information. No critical vulnerabilities or exposed sensitive data were detected. Overall, boost.ai presents a high level of business credibility, technical maturity, and privacy compliance, making it a trustworthy and professional enterprise AI solution provider. Minor improvements in DNS security and incident response transparency could further enhance their security posture.

Omniconvert SRL is a Romanian-based technology company specializing in customer intelligence and conversion optimization solutions for eCommerce and retail businesses. Their platform suite includes Omniconvert Explore, Reveal, and Pulse, targeting customer acquisition, retention, and experience enhancement. The company positions itself as a leader in Customer Value Optimization (CVO), supported by certifications such as ISO 27001 and GDPR compliance, and recognized by industry awards like G2 Summer 2024. Their clientele includes prominent retailers and brands, reflecting a strong market presence. Technically, the website leverages modern frameworks like Astro, integrates with HubSpot, Google Analytics, and uses advanced JavaScript libraries for UI and tracking. The site is well-optimized for performance, mobile responsiveness, and accessibility, with comprehensive metadata and structured data enhancing SEO and user experience. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be more visible. The security posture is solid with no evident vulnerabilities or exposed sensitive data. However, the absence of WHOIS registration data raises concerns about domain transparency, which slightly impacts trustworthiness. Privacy compliance is well addressed with clear policies and consent management. Overall, Omniconvert demonstrates a mature digital presence with strong business credibility and technical sophistication.

Dr. Oetker is a well-established German brand specializing in baking and cooking products, with a history spanning over 125 years. The website serves as a comprehensive platform for recipe inspiration, product promotion, and consumer engagement, including an integrated online shop and contact services. The brand targets home cooks and families interested in baking and cooking, leveraging a strong market position in the retail and manufacturing sectors. Technically, the website is built on modern frameworks such as Next.js and React, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and published policies. Overall, the site reflects a professional and trustworthy digital presence consistent with the brand's reputation.

Urban Agency is an award-winning architecture firm with a broad international profile, specializing in architecture design, urban planning, and interior renovations. The company has a mature online presence with a domain registered since 2013 and a portfolio showcasing diverse international projects. The website employs modern web technologies such as Tailwind CSS, Alpine.js, Mapbox GL JS, and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but improvements are needed such as enabling DNSSEC and implementing security headers. Privacy compliance is weak due to the absence of privacy and cookie policies, and no explicit contact information or incident response details are found. Overall, the website is professional and credible but would benefit from enhanced privacy and security practices.

Cinas A/S is a Danish company specializing in the design and retail of indoor and outdoor furniture, offering a wide range of products including garden chairs, tables, benches, and accessories. The company targets both retailers and end consumers, providing a retailer login portal and extensive product catalogues. Their market position is that of an established medium-sized furniture brand with a consistent and professional online presence. Technically, the website is built on the Dynamicweb CMS platform, utilizing jQuery, Slick Slider, Google Tag Manager, and Lead Forensics for tracking and marketing purposes. The site is moderately optimized for performance and mobile devices, with basic accessibility features and good SEO practices. The presence of cookie consent mechanisms and a comprehensive privacy policy indicates a good level of privacy compliance. From a security perspective, the site enforces HTTPS and uses secure login forms but lacks visible security headers and explicit security or incident response policies. No critical vulnerabilities were detected in the content, but the absence of WHOIS data raises some concerns about domain registration legitimacy. Overall, the security posture is moderate with room for improvement in headers and transparency. The overall risk assessment suggests the website is trustworthy and professionally managed but would benefit from enhanced security practices and verification of domain registration details. Strategic recommendations include implementing security headers, publishing a security policy, and improving mobile and accessibility features to strengthen trust and compliance.

Miralix is a Danish technology company specializing in contact center solutions and customer service platforms. Established in 2000, it serves over 320 Danish companies with a comprehensive suite of services including digital communication tools, compliance-focused solutions, and business optimization features. The company positions itself as a trusted provider with a strong emphasis on data security and GDPR compliance. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies and analytics tools such as Google Analytics 4 and Google Tag Manager. The site demonstrates good mobile optimization, SEO practices, and user experience design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, Miralix presents a credible and professional online presence consistent with its business claims.

EG Electronics is a well-established Swedish company specializing in the supply of electronic and electromechanical components and custom system solutions. With over 80 years of experience and a parent company affiliation with Kamic Group, they serve a global B2B market with a focus on industrial automation, embedded computing, and connectivity solutions. Their website reflects a mature digital presence with a professional design, clear navigation, and a commitment to sustainability. Technically, the site uses modern frameworks such as Nuxt.js and Tailwind CSS, integrates multiple analytics and marketing tools, and is hosted on Microsoft Online infrastructure. Security posture is generally good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Sjællands Teater is a regional theater organization based in Denmark, offering a variety of live performances including family shows, youth theater, summer theater, comedy, and guest performances. The website positions itself as a cultural hub for the Zealand region, targeting families and young audiences. The business is relatively young, founded around 2019, and operates primarily as a small-sized cultural entity. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Cookiebot for SEO and privacy compliance respectively. The site demonstrates good mobile optimization and a professional design, with clear navigation and relevant content. Security-wise, HTTPS is properly implemented, and cookie consent mechanisms are in place, though some security headers and explicit security policies are missing. Overall, the site shows a moderate to good security posture with room for improvement in formal security documentation and headers. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and improving contact transparency for security matters.

Won Won is a Danish brand and design agency established in 2010, specializing in helping ambitious companies and organizations translate their business strategies into strong brand identities and effective communication. The company positions itself as a trusted partner in branding, with a focus on sustainability and market differentiation. The website reflects a professional and consistent brand image, supported by client testimonials and case studies. Technically, the site uses modern web technologies and integrates multiple analytics and marketing tools with a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS and error tracking, though some security headers and explicit policies could be improved. Overall, the website is well-structured, user-friendly, and trustworthy, supporting the company's business credibility.