Medium-risk security reports

The website expert.pt is currently in maintenance mode, displaying a message in Portuguese indicating that the store is being updated and will be back online soon. There is minimal content available, no metadata such as title or description, and no visible contact or policy information. The business appears to be an e-commerce entity based in Portugal, but no further business details or market positioning can be determined from the current content. Technically, the site uses basic HTML and CSS with no detected advanced frameworks or CMS. There is no evidence of analytics, tracking, or advertising technologies. Security posture cannot be fully assessed due to lack of data, but no HTTPS or security headers were detected in the provided content. Overall, the site lacks essential compliance and trust indicators, resulting in a low risk and quality score.

ProCore ApS is a Danish company specializing in professional web development, digitalization, and IT system integration primarily targeting small and medium-sized enterprises. The company has a solid market presence since 2002 and offers tailored solutions using the Umbraco CMS platform. Their website reflects a professional and trustworthy image with clear service offerings and customer testimonials. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, and CookieHub for cookie consent management. The website is mobile optimized and SEO friendly, though accessibility could be improved. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published security policies. No privacy policy or terms of service pages were found, which is a compliance gap. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and consistency.

modl.ai ApS is a Denmark-based technology company specializing in AI-driven solutions for the game development lifecycle. Their core offerings include AI bots for automated QA testing and player behavior simulation, targeting game developers and studios seeking to enhance testing efficiency and player experience. The company positions itself as a niche provider of advanced AI tools that integrate seamlessly into game development workflows. Technically, the website is built on WordPress with modern front-end libraries and integrates multiple analytics and marketing tools such as Google Analytics, HubSpot, and Hotjar, indicating a mature digital presence. The site is mobile optimized and SEO friendly, with clear navigation and professional design. Security posture is good with HTTPS enforced and cookie consent implemented; however, the absence of DNSSEC and security headers suggests room for improvement. No explicit security or incident response policies are published, which could be enhanced to build trust. Overall, the domain registration details align well with the business claims, supporting legitimacy. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security policies, and providing clearer direct contact information to improve trust and compliance.

Ubisoft is a leading global video game developer and publisher, focused on creating original and memorable gaming experiences for a diverse audience. The company operates at an enterprise scale with a broad portfolio of games and entertainment content, including film, TV, books, music, and themed experiences. The website reflects a mature digital presence with professional design, clear navigation, and rich content aimed at gamers, investors, and potential employees. Technically, the site leverages modern web technologies such as React, Contentful CMS, and Akamai CDN, ensuring good performance and mobile optimization. The integration of analytics and marketing tools like Algolia and Qualtrics indicates a data-driven approach to user engagement. However, some accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable libraries. The absence of explicit security headers and published privacy or cookie policies suggests room for improvement in compliance and transparency. The WHOIS data is notably missing, which is unusual for a major brand and slightly reduces trustworthiness, though the website content and branding strongly support legitimacy. Overall, Ubisoft's website demonstrates a strong business and technical foundation with good security hygiene but would benefit from enhanced privacy disclosures and WHOIS transparency to further strengthen trust and compliance.

Kantar Gallup is a well-established Danish media and market research company specializing in audience measurement, market insights, and marketing effectiveness solutions. The company targets marketing professionals and media agencies in Denmark, offering a range of services including shopper marketing insights, digital campaign activation, and outdoor media measurement. The website reflects a professional and consistent brand presence aligned with its business focus. Technically, the website is built on Drupal 8 CMS, utilizing Bootstrap and Swiper libraries for responsive design and interactive elements. The site is mobile-optimized with good navigation and content quality, though some SEO and accessibility features could be enhanced. No blocking or WAF mechanisms were detected, and the site is fully accessible. From a security perspective, HTTPS is used, but no advanced security headers or DNSSEC are enabled. There is no visible incident response or security policy information, and cookie consent mechanisms are absent despite the presence of cookie and privacy policies. The domain registration data is consistent and supports the legitimacy of the business. Overall, the website scores well in business credibility and content quality but could improve in technical security and privacy compliance areas. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance trust and compliance.

PIPER ApS is a Danish small business specializing in graphic design and signage solutions, offering unique visual branding services. The website presents a professional design with clear branding and is targeted at businesses and individuals seeking creative signage and graphic design. The company has a long-established domain since 1998, indicating a stable market presence in Denmark. Technically, the website is built using the BaseKit CMS platform, leveraging external resources hosted on builder.nu domains and Google Fonts. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. Security-wise, the website uses HTTPS but lacks important security headers and DNSSEC, which are recommended to enhance protection. Privacy compliance is limited, with no explicit privacy policy or terms of service pages found, although a cookie consent mechanism is implemented. Overall, the website is functional and professional but would benefit from improved security and privacy practices to strengthen trust and compliance.

Lundgrens Advokatpartnerselskab is a Danish law firm that has announced the cessation of its independent operations as of February 28, 2025. The firm operates as a partnership and is recognized as among the best within its business areas, focusing on providing high-quality legal services. The website communicates the transition of its partners to other established law firms, ensuring continuity of service for clients. The firm targets clients seeking professional legal advisory services in Denmark. Technically, the website is built on Drupal 9 CMS, utilizing modern JavaScript libraries such as jQuery and GSAP for enhanced user experience. It employs Plausible Analytics for privacy-conscious visitor tracking and is optimized for mobile devices with good accessibility and SEO practices. The site is served over HTTPS, though DNSSEC is not enabled, and some security headers are missing, indicating room for improvement in security hardening. From a security perspective, the website shows a moderate security posture with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. However, the absence of DNSSEC and security headers like Content-Security-Policy suggests potential risks that could be mitigated. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Contact information is transparent, including company emails and physical address, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-maintained, with a good balance of content quality, technical implementation, and privacy compliance. Strategic recommendations include enabling DNSSEC, implementing comprehensive security headers, and continuous monitoring of third-party scripts to further enhance security and trust.

The website fynoti.com is currently inaccessible, serving a Cloudflare 523 error page indicating that the origin server is unreachable. Due to this, no substantive website content, metadata, or business information is available for analysis. The domain is registered since 2016 with a reputable registrar, but the lack of accessible content limits the ability to assess the company's market position, services, or technical maturity. The technical infrastructure relies on Cloudflare as a CDN and WAF, but the origin server connectivity issue is a critical availability problem. Security posture cannot be fully evaluated due to lack of data, but no security policies or incident response information are published. Overall, the site is currently non-functional, resulting in a low AI score and limited trustworthiness.

Institut for hjernetræning is a specialized healthcare provider in Denmark offering advanced neurofeedback brain training using 19 active electrodes and brainmapping diagnostics. The company targets individuals with neurological and psychological conditions such as ADHD, PTSD, depression, and stress, as well as high-performance clients like athletes and business professionals. Their unique approach leverages FDA-approved normative EEG databases, positioning them as a leading provider in their niche market. The website is built on Drupal 10, featuring responsive design and modern tracking technologies such as Google Tag Manager and Facebook Pixel. Privacy and cookie compliance are well managed through Iubenda and Cookiebot integrations. Security posture is solid with HTTPS and CAPTCHA protections, though some security headers could be improved. WHOIS data confirms a long-standing domain registration consistent with the business's history, enhancing trustworthiness.

Ingeniørgruppen Syd is a Danish consulting engineering firm established in 2002, specializing in a broad range of construction and installation consulting services including energy management, building consulting, and alternative energy solutions. The company targets public and private building owners and developers, offering expertise in planning, design, supervision, and energy consultancy. Their market position is that of a well-established small business with a consistent brand presence and a professional website. Technically, the website is built on WordPress using common plugins and themes, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with no explicit privacy or terms of service pages found. Business credibility is strong due to clear company identity, consistent branding, and a long domain history. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

The website amazingspace.co.uk currently presents a security verification page employing Google reCAPTCHA v3, which blocks access to the actual site content. This indicates the presence of a Web Application Firewall (WAF) or similar security mechanism preventing automated access. Due to this, no business-specific content, contact information, or policies are accessible for analysis. The domain is long-standing, registered since 1998 with a reputable UK registrar, suggesting legitimacy at the registration level. However, the lack of accessible content limits the ability to assess the company's market position, services, or compliance posture. Technically, the site uses Bootstrap 5.3.3 and Google reCAPTCHA for bot protection, but no other modern frameworks or CMS are detected. Security headers and HTTPS status could not be confirmed from the provided data. Overall, the site’s security posture shows basic bot protection but lacks visible compliance and trust indicators due to content blocking.

AutoBranchen Danmark is a well-established Danish industry organization founded in 2012, serving new and used car dealers, auto body shops, workshops, and leasing companies. It holds a strong market position with approximately 1200 members, offering legal and business advisory services, training, industry news, and member benefits. The website reflects a professional and consistent brand image with good content quality and clear navigation tailored to its target audience in the automotive sector. Technically, the site is built on WordPress with modern technologies including React and Google Tag Manager, optimized for mobile and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though it could benefit from additional security headers and published incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Bilwinco is a well-established Danish manufacturer specializing in high-quality weighing and packaging machinery primarily serving the food and hardware industries. Founded in 1996, the company offers customized solutions to enhance production efficiency and profitability. Their market position is strong within manufacturing sectors requiring precise weighing and packaging solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target industries. Technically, the website employs modern web technologies including JavaScript, Google reCAPTCHA for bot protection, and Cookiebot for GDPR-compliant cookie management. The site is built on a Sitebuilder CMS platform and hosted with a reputable registrar and DNS provider. Performance and mobile optimization are good, with accessibility and SEO features well implemented. From a security perspective, the site enforces HTTPS with a good SSL configuration and uses security best practices such as CSRF protection cookies and bot detection. However, some security headers like Content-Security-Policy and X-Content-Type-Options are not explicitly set, and DNSSEC is not enabled, which could be improved. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and compliant with privacy regulations, featuring a comprehensive privacy policy and cookie consent mechanism. Contact information is available via contact forms, though no direct emails or phone numbers were found. There is no visible incident response or vulnerability disclosure information, which could be added to enhance security transparency.

Terra Navtica is a specialized transportation and marine engineering company established in 2000 and based in Denmark. They provide integrated heavy lift, transport, handling, installation, and removal services supported by a skilled workforce including naval architects and engineers. Their market position is that of a niche service provider with a portfolio of international projects and reputable clients in the energy and transportation sectors. The website showcases their services, project portfolio, and contact information but lacks formal privacy, cookie, and security policies. Technically, the site uses a modern but basic stack including Bootstrap and jQuery, with moderate performance and good mobile optimization. Security posture is moderate; the domain is protected against unauthorized transfer but lacks DNSSEC and security headers. No WAF or blocking mechanisms were detected, and the site is fully accessible.

Agrolab A/S is a well-established Contract Research Organization specializing in field research and regulatory consulting within the agricultural and food production sectors, primarily serving the EU North Zone including Scandinavia and the Baltic states. The company holds recognized certifications such as GEP and GLP, reinforcing its credibility and expertise in the industry. Their website reflects a professional and consistent brand image, offering clear information about their services including drone imaging and research and development. Technically, the website is built on a modern WordPress platform utilizing popular plugins for SEO, marketing, and GDPR compliance. The infrastructure supports good performance and mobile optimization, with integration of major analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The hosting provider appears to be UnoEuro, a known hosting service. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. The WHOIS data confirms the legitimacy of the domain registration, consistent with the business information presented. Overall, Agrolab's digital presence is strong, with good content quality, technical implementation, and privacy compliance. The absence of a terms of service page and explicit security policy are minor gaps. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and adding incident response information to further strengthen trust and security posture.

Vertica A/S is a Danish full-service e-commerce development agency with approximately 20 years of experience, specializing in building scalable and growth-oriented e-commerce solutions. Their market position is strong within Denmark, serving notable clients and focusing on digital strategy, AI, UX design, and app development. The website demonstrates a mature digital infrastructure using modern technologies such as React and Next.js, with excellent mobile optimization and SEO practices. Security posture is robust with HTTPS enforcement and standard security headers, though no explicit security policy or incident response information is published. Privacy compliance is well addressed with comprehensive privacy and cookie policies, and GDPR adherence is evident. The absence of WHOIS data for the domain is a concern for domain legitimacy verification but does not detract from the professional presentation and business credibility of the site.

Povl Klitgaard & Co. is a Danish company specializing in the distribution of high-quality art and office supplies from leading European and Japanese manufacturers. Established in 1998, the company aims to be the leading supplier in the Nordic region, offering a broad product range, excellent customer service, marketing support, and employee training. Their website reflects a professional retail business model targeting both businesses and consumers in the Nordic market. Technically, the website uses modern frontend technologies such as Bootstrap and jQuery, with a custom CMS or proprietary platform. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security posture is moderate; while HTTPS is presumably enabled, DNSSEC is not, and no advanced security headers are detected. Privacy compliance is addressed with a cookie consent banner and a basic privacy policy, but no explicit security or incident response policies are visible. Overall, the website is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

Falcon Maritime A/S is a Danish maritime transportation company specializing in dry bulk shipping across Atlantic markets. The company operates through three subsidiaries and emphasizes personal service, operational excellence, and strong customer relationships. Their website reflects a professional maritime business with clear branding and relevant content targeting customers and suppliers in the shipping industry. Technically, the site is built on WordPress with modern frameworks and includes multimedia elements such as embedded videos and social media integration. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks visible security headers and published privacy or security policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and business information appear legitimate. Overall, the site is functional and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

Grieg Shipbrokers KS is a Norwegian maritime shipbroking company with a long history dating back to 1884. The company offers expert advice and comprehensive market coverage to maritime industry clients. The website reflects a professional and consistent brand image, targeting maritime professionals and companies. Technically, the site is built on WordPress with modern technologies such as jQuery and Google Tag Manager, and it implements SEO best practices. Security posture is generally good with HTTPS enabled and cookie consent mechanisms in place, but lacks visible security headers and published security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service. Overall, the site is trustworthy and credible, but could improve in privacy and security transparency.

Pipol A/S is a Denmark-based company specializing in international ERP implementations, particularly focusing on Microsoft Dynamics 365 solutions. Established in 2000, the company has built a strong market position with local expertise in over 85 countries and a large team of more than 4500 Dynamics 365 consultants. Their business model centers on providing centralized management combined with local delivery and support, targeting international companies seeking efficient and risk-minimized ERP implementations. The website reflects a professional and consistent brand image with clear service offerings and a strong emphasis on global reach and local knowledge. Technically, the website is built on the Webflow CMS platform, utilizing modern JavaScript libraries such as jQuery and analytics tools including Microsoft Clarity and Google Tag Manager. The site is hosted on servers associated with Dandomain, with good SSL configuration and moderate performance. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. The presence of cookie consent mechanisms and a privacy policy indicates compliance with GDPR requirements. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and explicit security headers. There is no visible security policy or incident response information, nor a vulnerability disclosure program. The domain WHOIS data is consistent with the business claims, showing a long-established registration without privacy protection, enhancing trustworthiness. Overall, Pipol's website demonstrates a mature digital presence with good business credibility and privacy compliance. Security posture is adequate but could be improved by adding security headers, DNSSEC, and incident response disclosures. The site is accessible without WAF or blocking mechanisms, allowing full content analysis.

Qorvo, Inc is a leading enterprise technology company specializing in innovative RF and power solutions for mobile, infrastructure, and defense markets. Their website showcases a comprehensive product catalog, industry applications, and a strong commitment to innovation and sustainability. The company targets engineers, technology firms, and defense contractors globally, positioning itself as a key player in advanced semiconductor and RF technologies. The site features extensive resources including blogs, design tools, and technical articles to support their B2B audience. Technically, the website employs modern web technologies including JavaScript libraries, analytics tools, and marketing automation platforms. It is well-structured with good SEO and mobile optimization, though accessibility features could be enhanced. Security posture is solid with HTTPS and cookie consent mechanisms, but could benefit from additional security headers and explicit security policies. The absence of WHOIS data suggests privacy protection, common for enterprises, and does not detract from the site's legitimacy. Overall, Qorvo's digital presence reflects a mature, professional organization with strong branding and comprehensive content. Security practices are adequate but could be improved to align with best practices. Privacy compliance is well addressed with clear policies and consent mechanisms. The site supports business credibility through detailed product information, certifications, and active social media engagement.

Nordic Food Partners is a Danish-based business focused on food partnerships or distribution within the Nordic region. The website is built on the Wix platform and primarily targets Danish-speaking users. The site content is basic but functional, with moderate design quality and good mobile optimization. Technically, the site uses standard Wix scripts and polyfills, ensuring compatibility and moderate performance. Security-wise, the site enforces HTTPS but lacks visible security headers and privacy compliance mechanisms such as a privacy policy or cookie consent banner. The absence of WHOIS data reduces trustworthiness and raises questions about domain registration transparency. Overall, the site is operational but would benefit from enhanced security and compliance features to improve trust and professionalism.

LeanLinking is a technology company offering a SaaS platform focused on supplier relations and negotiation management. Their solution targets procurement teams aiming to improve supplier visibility, automate compliance, and strengthen supplier relationships. The website is professionally designed using Webflow, with good mobile optimization and clear navigation. The technical infrastructure includes modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag, integrated via Google Tag Manager. The site enforces HTTPS and provides a comprehensive cookie consent mechanism compliant with GDPR. However, the absence of WHOIS data raises concerns about domain registration legitimacy. No explicit privacy policy or terms of service pages were found, and contact information is limited to a contact form without direct emails or phone numbers. Overall, the security posture is good but could be improved by adding security headers and explicit security policies.