Medium-risk security reports

Scan Lux Flexible A/S is a Danish manufacturing company specializing in innovative plastic and paper packaging solutions with a strong focus on environmental sustainability and customer-tailored consultancy. The company has a solid market position supported by its parent company, Stok Group, and emphasizes reducing environmental impact through its services. The website reflects a professional and consistent brand image targeting business customers in Denmark. Technically, the site is built on Drupal 9 with modern web technologies and includes performance and mobile optimization features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and DNSSEC are missing. Privacy compliance is basic, lacking a dedicated privacy policy page. Overall, the website is trustworthy and functional, supporting the company's business credibility.

Pelion is a specialized mentorship platform designed to connect professionals with experienced mentors to help them excel in their careers, particularly in technology and product management roles. The platform offers curated mentor matching, mentorship calls, and educational content to support professional development. Pelion positions itself as a niche player focusing on personalized mentorship experiences with a human touch, supported by testimonials and logos from reputable tech companies. Technically, the website is built using modern web technologies including React and Next.js, with integrations for Google Analytics, Facebook Pixel, and Rollbar for monitoring and marketing. The site is well-optimized for mobile and desktop, with fast performance and good SEO practices. However, there is room for improvement in security headers and privacy compliance. From a security perspective, the site enforces HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks explicit privacy and cookie policies, security incident response information, and vulnerability disclosure mechanisms. These gaps reduce the overall privacy compliance and security posture scores. Overall, Pelion presents a professional and trustworthy online presence with strong business credibility and technical implementation. Addressing privacy and security policy gaps would further enhance trust and compliance, supporting its growth in the competitive mentorship market.

ITEMA ApS is a Danish IT service provider specializing in delivering tailored IT solutions including Microsoft 365, network infrastructure, IT security, support, hosting, backup, endpoint protection, and GDPR compliance services. The company targets businesses seeking to optimize and secure their IT environments, positioning itself as a trusted partner with a focus on strategic consulting and operational efficiency. The website reflects a mature digital presence with professional design, structured data, and clear contact information. Technically, the site is built on WordPress using modern plugins and frameworks, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some enhancements like DNSSEC and security headers could improve resilience. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and accessible platform. Overall, ITEMA demonstrates a strong business credibility and technical maturity suitable for its market niche.

Huscompagniet is a well-established Danish construction company specializing in building houses, with a claimed 50 years of experience. The website targets individuals and families in Denmark seeking reliable house building services, emphasizing timely delivery and fixed pricing. The company positions itself as a trusted partner in the real estate construction sector. Technically, the website employs a modern technology stack including Google Tag Manager, Matomo Analytics, Hotjar, and live chat support via Tawk.to, indicating a mature digital infrastructure. The site is well-optimized for mobile devices and accessibility, with good SEO practices and a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and session management cookies in use, though some recommended security headers are not explicitly detected. The absence of WHOIS data limits domain trust analysis, but the website's content quality and compliance measures suggest legitimacy. Overall, the site presents a professional and trustworthy digital presence suitable for its business domain.

Øens Kaffe ApS is a Danish retail company specializing in coffee and related products, targeting both business and private customers. Established in 2013, the company offers a wide range of coffee, tea, coffee machines, grinders, and accessories, supported by advisory services to help customers choose the right coffee solutions. The website reflects a mature e-commerce platform with integrated customer account management and order processing capabilities. The presence of Trustpilot reviews and clear contact information enhances customer trust and engagement. Technically, the website is built on the HostedShop CMS platform with AngularJS for frontend interactivity. It employs modern web technologies including Font Awesome icons, Google Analytics for traffic analysis, and social media SDKs for Facebook integration. The site is mobile-optimized and demonstrates good SEO practices with comprehensive meta tags and Open Graph data. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and includes CSRF tokens in forms, indicating attention to secure data handling. However, DNSSEC is not enabled, and several important security headers are not explicitly present, suggesting opportunities to strengthen security posture. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR requirements. No explicit security policy or incident response information is provided, which could be enhanced to improve transparency and readiness. Overall, Øens Kaffe ApS presents a trustworthy and professional online presence with solid business credibility and technical implementation. Strategic improvements in security headers, DNS security, and incident response transparency would further enhance the site's security and compliance stature.

SmartCam Security is a Danish security company specializing in intelligent security systems including alarms, access control, video surveillance, and fog security solutions. Established in 2014, the company serves private customers, businesses, and public sector clients with tailored security services and installations. Their market position is that of a professional, responsible, and service-minded certified security firm with recognized certifications such as F&P Godkendt for their AIA systems. The website reflects a mature business with clear branding and trust indicators such as customer testimonials and Trustpilot integration. Technically, the website is built on the One.com Web Editor platform, utilizing modern JavaScript libraries like Swiper.js for image sliders and Termly for cookie consent management. Hosting is provided by One.com, and the site demonstrates good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility and additional security headers. From a security perspective, the site uses HTTPS with a good SSL configuration and secure contact forms featuring CAPTCHA. However, it lacks advanced security headers and a dedicated security policy or incident response information. The domain WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no privacy protection, which supports legitimacy. Overall, the website presents a trustworthy and professional image with solid business credibility and compliance with privacy regulations. Strategic recommendations include enhancing security headers, publishing detailed security and incident response policies, enabling DNSSEC, and improving accessibility features to strengthen compliance and user trust.

Gigtforeningen is a well-established Danish non-profit patient association founded in 1936, dedicated to improving the lives of people affected by arthritis through advice, research funding, advocacy, and community engagement. The organization maintains a professional and content-rich website targeting Danish-speaking individuals seeking information and support related to arthritis and related diseases. The site includes a webshop and multiple subdomains supporting various organizational activities. Technically, the website employs modern analytics and marketing tools such as Google Tag Manager, Visual Website Optimizer, and Sleeknote, alongside a robust cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and reputable third-party services used, although explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is a notable gap but does not significantly detract from the overall legitimacy given the comprehensive business and contact information presented. Strategic recommendations include publishing a dedicated security policy, incident response details, and a vulnerability disclosure policy to enhance trust and compliance.

Upright Music Scandinavia (HQ) is a small, independent music supervision and licensing company based in Denmark, specializing in providing music for film, advertising, TV, and digital media. With nearly 20 years of experience, it holds a leading position in Northern Europe for independent music provision. The website showcases a professional portfolio of projects and integrates multimedia content effectively, targeting production companies and creatives in the audiovisual sector. Technically, the site is built on Squarespace, leveraging modern web technologies and hosting, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and some security headers, but lacks advanced headers and DNSSEC. Privacy compliance is weak, with no visible privacy or cookie policies, which is a gap given GDPR requirements. The domain WHOIS data is missing, raising concerns about domain registration legitimacy despite the active and professional website presence. Overall, the site is trustworthy in content and business presentation but requires improvements in privacy compliance and domain registration transparency.

SOHO operates as a hospitality business with venues in Holbæk and Roskilde, Denmark, offering food, lounge, music, restaurant, night club, and event hosting services. The website is designed to attract local customers and visitors interested in dining and nightlife experiences. The business appears to be small-sized and established since 2013, with a clear focus on hospitality services in the Danish market. Technically, the website is built on WordPress using popular plugins such as LayerSlider and EventON for event management, along with Yoast SEO for search optimization. The site uses Google Maps API for location services and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements cookie consent mechanisms, supporting GDPR compliance. However, DNSSEC is not enabled, and security headers are missing, which are areas for improvement. No exposed sensitive data or vulnerable libraries were detected. The absence of explicit security policies or incident response information suggests room for enhancing security transparency. Overall, the website presents a professional and trustworthy front for a local hospitality business with good content quality and privacy compliance. The security posture is moderate but can be strengthened by implementing DNSSEC, security headers, and formal security policies. The business credibility is supported by consistent WHOIS data and domain age appropriate for the business history.

ProAlign Idrætsfysioterapi is a specialized private physiotherapy clinic based in Copenhagen, Denmark, focusing on sports injuries, concussion treatment, and chronic conditions. The clinic offers advanced rehabilitation services including unique concussion assessments and state-of-the-art equipment such as the AlterG Anti-Gravity treadmill. Their market position is that of a niche specialist provider with a strong reputation supported by patient testimonials and professional certifications. Technically, the website is built on WordPress with Elementor, employing modern web technologies and optimization plugins like WP Rocket, ensuring a good user experience and SEO performance. Security posture is solid with HTTPS, security headers, and no evident vulnerabilities, though there is room for improvement in formal security policies and incident response disclosures. Privacy compliance is well addressed with clear GDPR and cookie policies and consent mechanisms. Overall, the website reflects a trustworthy and professional healthcare provider with a strong digital presence.

Computerworld is a well-established technology media brand focused on delivering news, analysis, and opinion on enterprise IT topics including generative AI, Windows, mobile, and productivity software. Owned by Foundry, it serves IT professionals and business decision makers with a comprehensive content offering including articles, videos, podcasts, and events. The website demonstrates a mature digital presence with professional design, structured data, and strong SEO practices. Technically, it is built on WordPress and leverages modern analytics and advertising technologies such as Google Tag Manager, New Relic, and Permutive. Security posture is solid with HTTPS enforced and some security best practices observed, though explicit security headers and incident response information are lacking. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. WHOIS data is unavailable, which is unusual but likely due to privacy or registry policies rather than malicious intent. Overall, the site is trustworthy, professional, and well-positioned in the technology media market.

Salescorp is a Danish telemarketing service provider established in 2006, positioning itself as a reliable partner for businesses seeking telemarketing solutions and individuals looking for career opportunities. The website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable technical infrastructure. The presence of Cookiebot for cookie consent and tracking tools like Google Tag Manager and Facebook Pixel shows a moderate level of digital maturity and marketing sophistication. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy and terms policies, which are recommended for compliance and trust. Overall, the website is functional and professional but could improve in privacy transparency and security best practices.

Redia is a Danish technology company specializing in digital solutions for libraries, including user apps, staff tools, self-service machines, and digital signage. Established in 2010, it serves primarily Danish and Nordic libraries, positioning itself as a key player in the library technology sector. The website reflects a professional and consistent brand with good content quality and clear navigation, targeting library institutions and their users. Technically, the site is built on HubSpot CMS with Bootstrap and uses several JavaScript libraries, though some are outdated, which poses minor security concerns. Security posture is generally good with HTTPS enforced and cookie consent implemented, but improvements are recommended in updating libraries and adding security headers. Privacy compliance is strong with a clear GDPR-compliant privacy and cookie policy. Business credibility is supported by customer testimonials and partner logos. Overall, the site scores well on content, technical implementation, security, privacy, and business credibility, with an overall AI score of 81.

Aspiro is a Danish consulting firm specializing in fundraising, strategic advisory, and analysis services primarily targeting non-profit organizations and entities seeking fundraising support. The company operates a professional WordPress-based website with a clear focus on strategic consulting and fundraising in Denmark. The site demonstrates good SEO practices and uses modern technologies such as the Kadence theme, Cookiebot for cookie consent, and Google Tag Manager for analytics. However, explicit privacy policies and terms of service are not present, which could be improved to enhance compliance and user trust. Security posture is adequate with HTTPS enabled and consent mechanisms in place, but lacks advanced security headers and DNSSEC. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

Zangenberg Analytics, operated by Zangenberg & Company ApS, is a specialized consulting firm based in Denmark focusing on IT pricing, outsourcing advisory, and digital transformation services primarily for large enterprises and public organizations in the Nordic region. The company positions itself as a leading expert in IT sourcing, benchmarking, and negotiation support, offering a broad range of services including cloud optimization, SAP cost reduction, and agile IT productivity. The website reflects a mature digital presence with professional design, comprehensive content, and strong SEO optimization. Technically, the website is built on WordPress with modern marketing and analytics integrations such as Google Tag Manager, Google Analytics, LinkedIn Insight Tag, and ActiveCampaign forms. The site is mobile-optimized, accessible, and performs moderately well. Security posture is good with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved and DNSSEC is not enabled. No explicit security policy or incident response information is published, which is a gap in transparency. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the website and domain registration data indicate a trustworthy and professional business with a strong market position in IT consulting in the Nordic region. Strategic improvements in security transparency and additional contact channels could enhance trust further.

The website praestegaardsystem.com currently serves as a placeholder page hosted by One.com, offering basic webhosting services. The content is minimal and does not provide any detailed business information, privacy policies, or contact details. The domain is registered since 2009 to One.com A/S, consistent with the hosting provider, but the lack of active content suggests the domain may be parked or not actively used for business purposes. The technical infrastructure is basic, with no detected CMS or advanced frameworks, and limited mobile optimization. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present, indicating non-compliance with GDPR and other privacy regulations. Overall, the website lacks professionalism and trust indicators, resulting in a low security and business credibility score.

Cavi-art is a small, family-owned Danish company specializing in sustainable, plant-based alternatives to traditional caviar. Established in 2002, it occupies a niche market focused on environmentally friendly food products. The website presents a professional and consistent brand image, targeting consumers interested in sustainable and plant-based food options. The company leverages social media platforms such as Facebook, Instagram, and LinkedIn to engage with its audience. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies and marketing tools like Google Tag Manager and Hubspot. Performance and mobile optimization are adequate, with good SEO practices in place. Security posture is solid with HTTPS enforced and cookie consent managed via Cookiebot, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is moderate, with a cookie consent mechanism but no explicit privacy policy or terms of service found in the analyzed content. Overall, the domain registration data supports the legitimacy of the business, showing a long-standing domain with consistent registration details.

Shipwaves operates as a digital freight forwarding and logistics solutions provider, targeting businesses requiring international shipping and supply chain optimization. The company offers a comprehensive suite of services including ocean and air freight, land transport, trade finance, warehousing, and customs clearance, supported by a digital platform with real-time tracking and online booking capabilities. Their market position emphasizes technology-enabled, cost-efficient, and integrated logistics solutions primarily serving the Indian and UAE markets. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Vercel, and integrates third-party services like Zoho SalesIQ and Google Maps API. The site demonstrates good performance, mobile optimization, and accessibility, with secure HTTPS connections and validated forms. However, some security best practices like security headers are missing, and no explicit cookie consent mechanism is implemented. From a security perspective, the site maintains a good posture with HTTPS and secure form handling but lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, which impacts overall trustworthiness. Privacy compliance is basic, with a privacy policy present but no clear GDPR consent mechanisms. Overall, Shipwaves presents a professional and functional digital logistics platform with solid technical foundations but requires improvements in transparency, privacy compliance, and domain legitimacy verification to enhance trust and security assurance.

CK&CO ApS is a Danish consulting firm specializing in strategic advisory services in urban development, construction, and retail trade analysis. The company serves municipalities, builders, and private actors, positioning itself as one of Denmark's leading retail trade advisors. Their business model focuses on tailored consulting solutions leveraging expertise in economics, urban planning, and risk management. The firm holds notable recognitions such as the Børsen Gazelle prize 2024 and participates in SKI framework agreements, indicating a strong market presence and credibility. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery and Google Analytics for performance and user insights. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Cookie consent is managed via Cookiebot, ensuring compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks visible security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits full trust verification of the domain registration, though the professional presentation and business references mitigate concerns. Overall, CK&CO's digital presence reflects a mature and professional organization with room for improvement in security transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and clarifying domain registration details to strengthen trust and compliance.

3P Technology is a Denmark-based company specializing in software development for industrial automation systems including DCS, PLC, and SCADA. Established in 2007, the company offers both standard and customized software solutions tailored to process industries, leveraging expertise in Siemens PCS7 and plant engineering tools. Their website reflects a focused business model targeting industrial clients requiring automation and control software solutions. Technically, the website is built on WordPress with common plugins and scripts, hosted on One.com, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance measures.

BI4Dynamics is a specialized software provider offering business intelligence solutions tailored for Microsoft Dynamics ERP systems. Their product suite includes ready-to-use Power BI dashboards and data modeling tools designed to deliver actionable insights with minimal setup. The company targets businesses using Microsoft Dynamics seeking enhanced analytics capabilities. The website demonstrates a professional and modern digital presence built on WordPress with Elementor, integrating analytics and marketing tools such as Google Tag Manager and MailerLite. Security posture is strong with HTTPS enforcement and security headers, though the absence of a published security policy and incident response contacts indicates room for improvement. Privacy compliance is well addressed with comprehensive policies and cookie consent mechanisms. However, the lack of WHOIS registration data raises concerns about domain legitimacy, which should be further investigated. Overall, the site is functional, secure, and business-focused, but would benefit from enhanced transparency and direct contact information.

finduddannelse.dk is a Danish educational platform specializing in helping users find and compare continuing education courses, with a focus here on entrepreneurship courses. The platform offers a comprehensive search and filtering system to assist individuals in locating relevant courses. The website is well-established, with indications of being founded in 2008, and targets Danish-speaking users seeking educational advancement. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics 4, FontAwesome, and Swiper.js, ensuring a responsive and user-friendly experience. The use of structured data enhances SEO and discoverability. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and a published privacy policy, which are areas for improvement. Overall, the site presents a professional and trustworthy front, though the absence of WHOIS data limits domain ownership verification.

Ivaldi ApS is a Danish web and IT solutions provider specializing in custom digital services tailored to business needs. Their offerings include web development, IT operations, digital marketing, and CRM solutions, targeting businesses seeking professional IT support and digital transformation. The company presents itself with a professional website featuring clear navigation, mobile optimization, and comprehensive cookie and privacy policies compliant with GDPR regulations. Technically, the website leverages AngularJS framework, integrates multiple third-party services such as Google Analytics, Google Tag Manager, TeamViewer, Zendesk, and Weply chat, indicating a mature digital infrastructure. The site uses HTTPS and provides granular cookie consent mechanisms, though security headers are not evident in the provided data, suggesting room for security enhancements. From a security perspective, the site demonstrates good practices in privacy compliance and secure data handling via consent banners and third-party privacy policies. However, the absence of WHOIS registration data limits domain trust assessment, and no explicit security or incident response policies are published. The extensive use of tracking and marketing cookies reflects a moderate to extensive user tracking level, balanced by transparent consent mechanisms. Overall, Ivaldi ApS maintains a solid digital presence with good business credibility and privacy compliance but should improve transparency in domain registration and enhance security headers and incident response disclosures to strengthen trust and security posture.

Unibio is a Denmark-based company specializing in sustainable protein production through advanced fermentation technology. Their flagship product, Uniprotein®, serves multiple sectors including aquaculture, livestock, pet food, and human nutrition. The company positions itself as an innovator addressing global protein demand with environmentally friendly solutions. Technically, the website is built on Webflow, leveraging modern web technologies and hosting on Amazon CloudFront, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response information are absent. The lack of WHOIS data limits domain ownership verification, slightly impacting trustworthiness. Overall, the site reflects a professional and credible business with room for enhanced transparency in security and contact information.

Relevent Sports, LLC is a leading global commercial partner specializing in international football. The company manages media, sponsorship, and licensing rights for top football leagues and governing bodies, including landmark partnerships with UEFA, LALIGA, Bundesliga, Premier League, and EFL. Their business model focuses on rights commercialization, event organization, and strategic partnerships, positioning them as a dominant player in the football media rights market. The company is part of the Stephen Ross portfolio, which includes major sports and entertainment assets. Technically, the website is built on a modern stack using React and Next.js, with content managed via Prismic CMS. The site demonstrates excellent design quality, mobile optimization, and SEO practices, delivering a fast and accessible user experience. However, some security headers are not evident, and no explicit cookie consent mechanism is implemented, which could be improved for compliance. Security posture is solid with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS registration data is a notable concern, reducing trust in domain legitimacy. Privacy and cookie policies are present and comprehensive, supporting GDPR compliance. No contact emails or phone numbers are explicitly listed, which may impact user trust and contactability. Overall, Relevent Sports presents a professional and authoritative online presence with strong business credibility. Addressing WHOIS transparency, enhancing security headers, and implementing cookie consent would further strengthen their security and compliance posture.