Medium-risk security reports

Sydjysk Sparekasse is a regional Danish savings bank focused on serving private and business customers in Southern Denmark. The bank emphasizes competent financial advice and supports local and regional development. Their website reflects a mature digital presence with integration of modern analytics and marketing tools such as Google Analytics, Dynamic Yield, and Microsoft Azure services. The use of Sitecore CMS and cloud hosting platforms like AWS and Azure indicates a robust technical infrastructure. Security posture is strong with HTTPS enforcement, security headers, and Cloudflare protection, although explicit security policies and incident response information are not publicly disclosed. Privacy compliance is well addressed through a comprehensive cookie consent mechanism and clear privacy policies, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and well-optimized for user experience and compliance.

Paritas A/S is a Danish graphic communications agency specializing in comprehensive print and design solutions. Positioned among the top providers in Denmark, they offer services including digital and offset printing, advertising, and communication with a strong emphasis on quality and environmental responsibility. Their website reflects a professional and consistent brand image, targeting businesses seeking integrated print and communication services. Technically, the site is built on the GoMINIsite CMS platform, utilizing modern web technologies such as jQuery and Google Analytics, and includes a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Overall, the site demonstrates good digital maturity and business credibility with trust signals like Trustpilot reviews. Recommendations include enhancing security headers, publishing a security policy, and improving accessibility features.

Queen® is a well-established Danish family-owned company specializing in the breeding and supply of high-quality plants and flowers worldwide. With a history dating back to 1939, the company operates globally with a strong focus on innovation, sustainability, and quality. Their business model includes multiple specialized business units and subsidiaries, serving customers in over 75 countries. The website reflects a professional and consistent brand image, targeting growers and consumers interested in sustainable and innovative horticultural products. Technically, the website employs modern web technologies including jQuery, GSAP for animations, and integrates analytics and user tracking tools such as Google Analytics and Hotjar. The site is hosted on Azure CDN, ensuring reliable performance and availability. The design is responsive and optimized for mobile devices, with good SEO and accessibility considerations. From a security perspective, the site uses HTTPS with strong SSL configuration and implements a cookie consent mechanism compliant with GDPR. However, it lacks visible security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital presence with strong business credibility and good security posture. Strategic improvements in transparency around security policies and incident response would further strengthen trust and compliance.

TV 2 Kosmopol is a Danish media outlet providing metropolitan news coverage focused on Denmark's only metropolitan area. The website offers news articles, video streaming, and user engagement features such as tips and questions. It is positioned as a regional news leader under the TV 2 Danmark A/S umbrella, targeting Danish-speaking audiences interested in local metropolitan news. The site employs modern web technologies including Livewire, Alpine.js, JWPlayer, and Statamic CMS, indicating a mature digital infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit privacy and terms of service policies are not found in the provided content. Overall, the domain registration and WHOIS data align with the business identity, supporting legitimacy and trustworthiness.

Elmer Systems is a Denmark-based software company specializing in CRM and integrated business management solutions tailored for various industries including catering, insurance, retail, and entrepreneurship. Their offerings include a comprehensive CRM system compatible with multiple platforms (Mac, Windows, iPhone, iPad) and modules for accounting integration, forecasting, and specialized business needs. The company positions itself as a niche provider with a strong focus on customization and modularity, supported by detailed product documentation and client-oriented services. Technically, the website is built using One.com Web Editor and hosted on One.com infrastructure. The site demonstrates moderate performance and basic mobile optimization. While the content is well-structured and professionally presented, there is room for improvement in SEO, accessibility, and modern web practices. No advanced frameworks or analytics tools are detected, indicating a relatively simple technical stack. From a security perspective, the site uses HTTPS but lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available, which could be a concern for security-conscious clients. The absence of tracking scripts suggests minimal user data collection, but also a lack of marketing analytics. Overall, Elmer Systems presents a credible and professional business with a solid product offering. However, to enhance trust and compliance, the company should implement comprehensive privacy and cookie policies, improve security headers, and provide clear incident response contacts. These steps will strengthen their security posture and align with regulatory requirements.

The website naturgas.dk currently returns an HTTP 404 error page indicating that the requested resource is not found. This prevents access to any meaningful content, metadata, or business information on the site. The domain is registered since 1997 with Eurodns S.A and is active, suggesting a legitimate and long-standing presence in the energy sector, specifically related to natural gas in Denmark. However, the lack of accessible content and security features severely limits the ability to assess the company's digital maturity or security posture. From a technical perspective, no modern technologies, frameworks, or CMS platforms are detectable due to the minimal HTML content. There is no evidence of HTTPS enforcement, security headers, or privacy compliance mechanisms such as cookie consent banners or privacy policies. This indicates a poor technical implementation and a high risk from a security and compliance standpoint. Security posture is weak with no visible security best practices implemented. The absence of contact information, incident response channels, or vulnerability disclosure policies further exacerbates the risk profile. The domain registration is consistent with a legitimate business, but the website's current state undermines trust and user confidence. Overall, the website is currently non-functional for end users and lacks critical security and compliance features. Immediate remediation is required to restore website availability, implement HTTPS, add privacy and cookie policies, and provide clear contact and business information to improve trust and compliance.

Musikkens Hus is a Danish cultural foundation focused on music and concert events, serving the Aalborg region. The website provides comprehensive visitor information, event calendars, and hospitality services, positioning itself as a key regional cultural institution. The business model is non-profit and community-oriented, targeting music enthusiasts and cultural visitors. Technically, the site uses a modern CMS (Dynamicweb Baseline), integrates multiple third-party marketing and analytics tools, and employs Cloudflare for hosting and security. The website is well optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS enforced and a detailed cookie consent mechanism, though some security headers could be improved. Privacy compliance is strong, with a comprehensive cookie policy and GDPR-aligned consent management. Overall, the site is professional, trustworthy, and well maintained, with no critical vulnerabilities detected.

The Royal Academy of Music is a prestigious UK-based conservatoire offering comprehensive music education, research degrees, and performance opportunities. The website reflects its status as a leading educational institution with a strong focus on artistic excellence and student development. The site is well-designed, mobile-optimized, and provides rich content relevant to prospective students, alumni, and the wider music community. Technically, the site uses modern JavaScript libraries, YouTube integration, and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site projects high professionalism and trustworthiness, supporting the Academy's reputation.

Rumas ApS is a Danish company specializing in the design and production of commercial furniture, serving businesses with tailored furniture solutions and environment creation. Established in 1996, the company maintains a strong market presence in Denmark, emphasizing quality design as part of its core DNA. The website reflects a professional and consistent brand image, targeting commercial clients seeking bespoke furniture products. Technically, the website is built on WordPress, leveraging modern plugins such as LayerSlider, Google Tag Manager, Google Analytics 4, PixelYourSite, and ActiveCampaign for marketing and analytics purposes. The site is well-optimized for SEO and mobile responsiveness, with a comprehensive cookie consent mechanism ensuring GDPR compliance. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and employs cookie consent management, though it lacks explicit security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent with the business claims, supporting the site's legitimacy. Overall, Rumas.dk presents a trustworthy and professional online presence with good privacy compliance and a solid technical foundation. Strategic improvements in security headers and incident response transparency would further enhance its security posture.