Medium-risk security reports

Qant is a Danish consultancy specializing in infrastructure expertise, particularly in the railway sector, along with organizational and leadership development services. The company appears to be a small-sized business founded in 2011, with a focused market position serving organizations involved in transportation infrastructure. The website is built on WordPress using the Divi theme, indicating a standard and widely used CMS platform. The technical infrastructure is moderate with basic mobile optimization and SEO features. Security posture is basic with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms. Contact information and social media presence are not evident in the provided content, which limits direct communication channels and trust signals. Overall, the website reflects a functional but basic digital presence with room for improvement in security, privacy, and business transparency.

DrugRebels is a Danish non-profit organization dedicated to educating youth and parents about drugs and empowering them to make informed choices. The website serves as a platform offering interactive ROADSHOW lectures, educational content about various substances, support resources for parents, and a podcast series. The organization is well-positioned within the Danish non-profit sector focused on drug prevention and youth education, supported by multiple sponsors and testimonials that enhance its credibility. Technically, the website is built on a modern React and Next.js framework with Sanity CMS as the content backend. The site demonstrates excellent performance, mobile optimization, and accessibility. It uses HTTPS with a good SSL configuration but lacks some advanced security headers. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site shows good practices such as secure mailto links and no exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and cookie consent mechanisms. The absence of WHOIS data for the domain is unusual but does not appear to impact the legitimacy of the site based on its content and contact information. Overall, DrugRebels presents a professional, trustworthy, and well-maintained online presence with minor areas for improvement in security headers and privacy compliance. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing security headers to further strengthen trust and compliance.

Concept Data a/s is a Danish IT company specializing in the resale and consultancy of the Uniconta ERP system, alongside comprehensive IT infrastructure solutions. Established in 1998, the company positions itself as the most experienced Uniconta reseller in Denmark, offering expert consultancy, support, programming, and training services. Their business model focuses on B2B services targeting companies seeking robust ERP and IT infrastructure solutions. The website reflects a professional and consistent brand image with good content quality and clear navigation, primarily in Danish. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and integrates various third-party tools such as Zendesk, Google Tag Manager, and Sleeknote for customer support and marketing. The site is mobile-optimized and performs moderately well, though some accessibility features could be enhanced. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and explicit security headers, which are recommended for improvement. Overall, the security posture is solid but could benefit from enhanced security policies and headers. Privacy compliance is demonstrated through a comprehensive GDPR policy, though cookie consent mechanisms are not clearly implemented. The domain's WHOIS data aligns well with the business claims, indicating legitimacy and trustworthiness. Strategic recommendations include enabling DNSSEC, implementing security headers, and adding explicit incident response and vulnerability disclosure policies to strengthen trust and compliance.

GAN Integrity Inc. is a provider of ethics and compliance management software designed to unify and streamline compliance, risk management, and ethics programs across enterprises. Their platform offers a comprehensive suite of products including third-party risk management, integrity due diligence, conflict of interest management, and training solutions. The company targets compliance teams and risk managers in medium to large enterprises seeking integrated and configurable compliance solutions. The website demonstrates a strong market position with reputable customer logos and a professional digital presence. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies and marketing tools such as Google Tag Manager and HubSpot Analytics. The site is mobile-optimized, well-structured, and SEO-friendly, indicating a mature digital infrastructure. Performance is moderate with good accessibility features. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is unusual and suggests further verification is needed, but the overall trust signals from the website content and branding are strong. Overall, GAN Integrity presents a credible and professional online presence with a solid product offering in the compliance software market. Strategic improvements in privacy policy transparency and security header implementation would enhance their security posture and compliance alignment.

RAMCON is a medium-sized company operating primarily in the healthcare and scientific equipment sector, serving customers in Denmark and Sweden. Their business model focuses on supplying scientific and laboratory equipment combined with service contracts and calibration services, supported by ISO 17025 accreditation. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to scientific professionals and institutions. Technically, the site uses modern technologies including Umbraco CMS, Google Tag Manager, and Piwik Pro analytics, with good mobile optimization and accessibility features. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is robust, featuring a comprehensive cookie consent mechanism aligned with GDPR requirements. WHOIS data is privacy protected as per EURid policy, which is typical for EU domains and does not detract from legitimacy. Overall, RAMCON presents a trustworthy and professional online presence suitable for its industry and audience.

Testrup Højskole is a well-established Danish folk high school founded in 1866, offering a variety of cultural and artistic educational programs including keramik, teater, filosofi, kunst, skriv, and musik. The institution targets students seeking a creative and intellectual environment near Aarhus, Denmark. The website reflects a mature digital presence with multimedia content, event listings, and a clear navigation structure. Technically, the site is built on WordPress, leveraging modern tools such as Google Tag Manager, Google Analytics, and Cloudflare for performance and security. The security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism that aligns with GDPR requirements. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent with the institution's long history, enhancing trustworthiness. Overall, the website demonstrates good professionalism, privacy compliance, and user experience, supporting the school's educational mission effectively.

BOEL Brand & Business is a Danish consulting firm specializing in strategy, business development, and branding services. The company targets businesses seeking to enhance their strategic positioning and brand presence. The website is built on WordPress using the Divi theme and incorporates SEO best practices via the Yoast SEO plugin. Although Google Analytics is included via the ExactMetrics plugin, it is not configured, indicating limited analytics data collection. The site is well-designed, mobile-optimized, and presents consistent branding and clear service offerings. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and explicit privacy or cookie policies. The WHOIS data for the domain is missing or indicates the domain may not be registered, raising concerns about domain legitimacy. Overall, the site is professional but would benefit from improved privacy compliance and verified domain registration.

Septima P/S is a Danish company specializing in geographic IT solutions and services, focusing on leveraging free public geodata for businesses, public authorities, and private organizations. Their offerings include system development, consulting, products like Septima Map Services and Onedoor, as well as training courses. The company holds a reputable market position as a specialist in geographic data services within Denmark, supported by certifications such as QGIS and participation in SKI framework agreements. Technically, the website employs modern analytics tools including Matomo and Google Tag Manager, uses HTTPS with a content security policy, and provides a responsive, well-structured user experience. Privacy compliance is strong with explicit cookie consent mechanisms and a comprehensive privacy policy. Security posture is good, though additional headers and a published security policy could enhance it further. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

Aleris.dk represents a leading private healthcare provider in Denmark with over 20 years of experience. The website clearly targets private patients seeking high-quality medical treatments and specialist services. The business positions itself as a market leader in the Danish private healthcare sector, emphasizing expertise and quality care. The site content and branding are consistent and professional, supporting a strong market presence.

Microphone Entertainment ApS is a Danish booking agency specializing in stand-up comedy, speakers, and entertainment management. Established in 2013, the company represents a roster of exclusive Danish artists and offers booking and management services nationwide. Their website reflects a professional and modern digital presence, leveraging Next.js and React technologies, hosted on Vercel, with integrated analytics and marketing tools such as Google Tag Manager. The site is well-optimized for performance and mobile use, providing rich content including artist profiles, tours, and contact information. Security posture is strong with HTTPS enforced and appropriate security headers, though DNSSEC is not enabled. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, though terms of service and security policies are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Fredericia Spildevand og Energi A/S is a municipal utility company based in Denmark, specializing in the transport, treatment, and energy production from wastewater within Fredericia Kommune. The company operates as a key player in the local water cycle, providing essential environmental and energy services to residents and businesses in the region. Their website reflects a professional and consistent brand presence, targeting local customers with clear service information and support channels. Technically, the website is built on modern web technologies including Alpine.js and Tiny Slider, with Umbraco CMS likely powering the backend. The site is mobile-optimized, accessible, and incorporates privacy-compliant analytics via Plausible. Cookie consent is actively managed with a detailed banner and declaration, supporting GDPR compliance. Performance is moderate, with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms effectively. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident and could be improved. There is no visible security policy or incident response contact information, which are areas for enhancement. No vulnerabilities or suspicious patterns were detected. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, supporting a trustworthy user experience. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic improvements in security headers and transparency policies would further strengthen the site’s security and compliance standing.

Atea is a leading IT infrastructure provider in Denmark and the Nordic region, specializing in cloud backup and data protection services. The company serves a broad range of customers including public sector, education, healthcare, retail, and private enterprises. Their market position is strong, being the largest backup provider in the Nordics with over 40,000 clients and extensive data under protection. The website reflects a mature digital presence with comprehensive service offerings and strategic partnerships with major technology vendors such as IBM, VEEAM, Commvault, and Microsoft. Technically, the site uses modern web technologies including AngularJS, Google Tag Manager, and personalization tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and privacy compliance evident through detailed policies and cookie consent mechanisms. However, explicit security headers could be improved. Overall, the site demonstrates professionalism, trustworthiness, and a strong business credibility.

TEC Technical Education Copenhagen is a well-established educational institution founded in 1997, specializing in vocational and technical education in the Copenhagen region. The website presents a professional and content-rich platform targeting students and companies interested in technical training, including vocational education (EUD), technical gymnasium (HTX), and continuing education courses. The institution emphasizes practical learning and real-world skills development. Technically, the website is built on the Umbraco CMS platform, utilizing modern web technologies and integrating analytics and marketing tools such as Google Tag Manager, Hotjar, and Klaviyo. The site is mobile-optimized and provides clear navigation and structured content. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks DNSSEC and visible security headers, and does not publish explicit security or incident response policies. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy and trustworthiness.

KeepFocus is a Danish web application focused on user authentication and account management, branded in association with Wise Home. The site is primarily a login portal with minimal public-facing content, targeting Danish-speaking users. The technical infrastructure includes React for frontend rendering and likely Ruby on Rails backend, indicated by CSRF tokens and form structure. The website is functional but basic in design and content, with limited SEO and accessibility features. Security posture shows some best practices such as CSRF protection but lacks visible security headers and privacy policies, which are critical for compliance and trust. WHOIS data is unavailable, suggesting privacy protection or lack of public registration data, which limits trust and transparency. Overall, the site is moderately trustworthy but would benefit from enhanced security, compliance, and business transparency measures.

The website saglobal.com is currently inaccessible due to a Web Application Firewall (WAF) or security challenge page employing a JavaScript-based Proof-of-Work CAPTCHA. This mechanism blocks direct access to the site's content, preventing a full assessment of business, security, and compliance aspects. The domain is registered since 2006 with GoDaddy and appears legitimate based on registration age and status. However, no business or contact information is exposed on the challenge page. The technical infrastructure includes use of modern JavaScript features and Amazon CloudFront CDN for content delivery, but no security headers or privacy policies are visible. Overall, the site’s security posture cannot be fully evaluated due to access restrictions, resulting in a low AI score and limited insights.

Danish Aerospace Company is a specialized technology developer focused on innovative aerospace technologies that support human presence in space and applications in extreme environments on Earth. Founded in 2013, the company maintains a professional web presence with investor relations, product information, and partnership details. Their market position is that of a niche aerospace technology innovator with a clear focus on space and transportation sectors. The website content is well-structured and professionally designed, targeting aerospace professionals, investors, and partners. Technically, the website is built on Joomla CMS with modern frontend libraries such as jQuery, Bootstrap, and Swiper. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. Hosting and domain registration are stable and consistent with the business profile, though DNSSEC is not enabled. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism with detailed categories. However, it lacks visible security headers and a published security policy or vulnerability disclosure. No explicit contact information or incident response channels are provided, which limits transparency. The domain registration is legitimate and consistent with the company’s history, enhancing trust. Overall, the website scores well in business credibility and content quality but has room for improvement in security posture and privacy compliance. Strategic enhancements in security headers, privacy policy publication, and contact transparency would strengthen the site’s trustworthiness and compliance posture.

Nordic Star is a Denmark-based destination management company specializing in group and individual travel services across the Nordic countries and the Baltics. Established in 2011, the company offers personalized travel itineraries and expert destination advice, positioning itself as a specialist DMC in its niche market. The website reflects a professional and consistent brand image, with clear navigation and relevant content targeting travel groups and FIT travelers interested in Nordic and Baltic destinations. Technically, the site is built on the One.com Web Editor platform, utilizing standard web technologies and Google Fonts, hosted by One.com. Performance is moderate with good mobile optimization, though accessibility features are basic. Security posture is adequate with HTTPS enabled and a contact form employing anti-spam measures, but lacks DNSSEC and security headers, which are recommended for enhancement. Privacy compliance is weak due to the absence of privacy and cookie policies, representing a compliance risk. The site uses SiteWit analytics for user tracking at a moderate level. Overall, Nordic Star demonstrates strong business credibility with awards and clear contact information but should improve privacy compliance and security hardening to reduce risk and enhance trust.

Serviceteam is a London-based professional property services provider specializing in 24/7 plumbing, electrical, gas and heating engineering, and handyman services. Established in 2006, the company positions itself as a leading service provider in the London property maintenance market, targeting property owners and managers requiring reliable and rapid response services. The website reflects a mature digital presence built on WordPress with modern SEO and performance optimizations, including Yoast SEO, WP Rocket, and Perfmatters plugins. The technical infrastructure leverages Google Tag Manager and Microsoft Clarity for analytics and user behavior tracking, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and some security best practices observed, though explicit security headers and policies are absent. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

Sanita is a well-established footwear brand specializing in handcrafted leather clogs and shoes, with a heritage dating back to 1907. The company targets professionals and consumers seeking quality European-made footwear, offering a wide range of styles for women, men, and kids. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations to provide a seamless shopping experience. The brand maintains a consistent and professional online presence with active social media channels and customer review systems. Technically, the site is well-optimized for performance and mobile responsiveness, with good SEO practices and accessibility at a basic level. Security posture is strong with HTTPS enforced and trusted third-party scripts, though explicit security policies and incident response information are absent. The lack of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy, but overall the site demonstrates a mature e-commerce operation. Strategic recommendations include enhancing security header implementation, publishing security policies, and verifying domain registration transparency to strengthen trust.

Monsenso is a digital health company specializing in mental healthcare solutions that connect individuals, clinicians, and carers through mobile and web platforms. Their CE-marked Class 1 medical device captures real-world health data from smartphones and wearables to support personalized treatment and research in mental health and psychiatry. The company targets healthcare providers, pharmaceutical companies, researchers, insurance firms, and social care organizations globally. The website demonstrates a professional and consistent brand presence with comprehensive content, multimedia, and partner collaborations. Technically, the website is built on WordPress using the Divi theme, integrating modern marketing and analytics tools such as Zoho SalesIQ, Facebook Pixel, LinkedIn Insight Tag, and Oribi Analytics. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is strong, supported by ISO 27001, Cyber Essentials, HIPAA compliance, and CE marking, although HTTP security headers are not explicitly detected. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professional, though the absence of WHOIS data and lack of explicit contact emails or phone numbers slightly reduce transparency. There is no evidence of WAF blocking or security challenges, allowing full content access and analysis.

The website dynamic-linx.com, hosted on the subdomain ww53.dynamic-linx.com, presents minimal content primarily focused on displaying advertisements via Google Ad Services. There is no identifiable business information, contact details, or meaningful content describing any products or services. The domain WHOIS query returned no registration data, indicating the domain is either unregistered or a placeholder subdomain, which raises significant legitimacy concerns. Technically, the site uses basic HTML, CSS, and JavaScript with Google ad scripts but lacks HTTPS and security headers, which are critical for secure web presence. Privacy compliance is minimal with only a basic privacy policy page and no cookie consent mechanism. Overall, the site exhibits a low security posture and poor business credibility, suggesting it is likely a parked or ad-serving domain rather than a legitimate business website.

Audi Danmark operates as the official Danish portal for Audi vehicles, offering a comprehensive range of new and used cars, including electric and hybrid models. The website serves as a digital showroom and sales platform, providing detailed model information, pricing, financing options, and after-sales services. Audi Danmark is positioned as a premium automotive brand within the Danish market, supported by a strong dealer network and extensive customer support resources. The site is well-structured, mobile-optimized, and integrates advanced technologies to enhance user experience and engagement. From a technical perspective, the website leverages modern frameworks such as Adobe Experience Manager Headless CMS and Audi's proprietary Falcon platform. It employs multiple third-party services for analytics, advertising, and cookie management, ensuring compliance with GDPR and other privacy regulations. The site demonstrates excellent performance, accessibility, and SEO optimization, reflecting a mature digital infrastructure. Security posture is robust, with HTTPS enforced, comprehensive security headers, and no visible vulnerabilities or exposed sensitive data. The presence of cookie consent mechanisms and detailed privacy policies further strengthens compliance and user trust. However, the absence of publicly available WHOIS data limits domain registration transparency, though this is common for large brands employing privacy protections. Overall, Audi Danmark presents a secure, professional, and user-friendly online presence aligned with its premium brand image. Strategic recommendations include enhancing transparency around incident response and vulnerability disclosure, and continuous monitoring of third-party scripts to mitigate emerging risks.

Aros' Kommunikations- og Erhvervs Blog is a Danish language blog focused on communication, business, marketing, and investment topics. The site is operated by Obsidian Digital A/S, a Danish company with a physical address listed in the footer. The blog provides regularly updated articles targeting Danish business professionals and marketers, positioning itself as a niche informational resource in the media sector. Technically, the website is built on WordPress CMS, utilizing jQuery and the Yoast SEO plugin, indicating a modern and SEO-conscious infrastructure. The site is mobile responsive and well-structured, providing a good user experience. Security-wise, the site uses HTTPS but lacks advanced security headers and explicit privacy or cookie policies, which are important for GDPR compliance and user trust. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the presence of company information on the site adds credibility. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening.

Paroc is a well-established manufacturer and provider of stone wool insulation products focused on energy efficiency and fire resilience for building, HVAC, and industrial applications. The website reflects a mature digital presence with a modern React-based tech stack, integration of Adobe and Google analytics, and a comprehensive cookie consent mechanism ensuring GDPR compliance. The brand is associated with Owens Corning, indicating strong market positioning and corporate backing. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the professional website and branding. Strategic recommendations include publishing Terms of Service, security policies, and vulnerability disclosure information to enhance transparency and trust.

LGT Logistics is a well-established Nordic specialist in furniture logistics, providing a range of tailored transport and supply chain services across Europe. The company positions itself as a leader in the Nordic market, serving furniture companies with high-quality logistics solutions. The website is built on Drupal 10 and integrates modern UI libraries and a comprehensive cookie consent mechanism, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and domain transfer protections, though improvements such as DNSSEC and security headers could enhance resilience. Privacy compliance is addressed through Cookiebot consent management, but explicit privacy and security policies are not found on the analyzed page. Overall, the site demonstrates good professionalism and trustworthiness, with moderate tracking via Google Analytics and clear user consent controls.

Arpe Kjeldsholm is a Copenhagen-based construction company specializing in total contracting services, operating since 2003. The website presents a professional and consistent brand image targeting local businesses and individuals seeking construction solutions. The technical infrastructure includes standard web technologies such as jQuery, Google Analytics, and Iubenda cookie consent, hosted under a domain registered with Eurodns S.A. The website is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place; however, the use of an outdated jQuery version and lack of DNSSEC represent areas for improvement. Privacy compliance is good, with a visible privacy and cookie policy, though no explicit terms of service or security policies are found. Overall, the website is trustworthy and credible, with a domain age consistent with the business history.

The Harel Group is a specialized life science business advisory firm focusing on business development transactions for pharmaceutical and medical device companies. Founded by an industry veteran, the firm leverages deep expertise and a global network to deliver tailored solutions. The website reflects a professional and consistent brand presence with clear contact information and multimedia content supporting trust and engagement. Technically, the site is built on Squarespace, uses modern web fonts, and embeds YouTube videos, providing a moderate performance and good mobile experience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvement. The absence of WHOIS data raises some legitimacy concerns, though the active and professional website presence mitigates risk. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and verifying domain registration details to strengthen trust and compliance.

The website carcel.co is currently inaccessible due to a Cloudflare robot challenge security page that blocks direct access to its content. This challenge page is designed to verify that visitors are legitimate users and not automated bots. As a result, no meaningful business or contact information is available on the site. The domain is registered through NameCheap with privacy protection enabled, and uses Cloudflare DNS services. The lack of visible privacy policies, cookie consent mechanisms, or terms of service indicates low privacy compliance. The technical infrastructure relies heavily on JavaScript for the captcha challenge, with no SEO or accessibility features detected. Overall, the site’s security posture is limited to the WAF challenge, with no additional security headers or best practices evident. Due to the blocking mechanism, a full security and business analysis is not possible at this time.

BoostCode is a small Danish technology service provider specializing in custom coding, online marketing automation, and startup project support. Founded in 2018, the company offers services including smart scripts, API integrations, lead collection, email automation, and IT strategy consulting. Their business model includes flexible pricing and startup partnership options, positioning them as an affordable and hands-on IT partner. Technically, the website is built on Angular 16 and integrates modern marketing and analytics tools such as Google Tag Manager, Google Analytics, and SendPulse. Hosting is managed via Azure DNS. Security posture is generally good with HTTPS enabled, but lacks DNSSEC and important security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is limited to an email address and contact form. Overall, the website is professional and well-branded but could improve transparency and security practices.