Security Directory

E

Erste Asset Management

erste-am.com

40

Erste Asset Management operates as an international asset management company serving both institutional and private investors, primarily based in Austria. The website presents a professional and well-structured digital presence targeting these investor groups with clear navigation and relevant content. Technically, the site leverages a modular GEM framework hosted on AWS CloudFront CDN, ensuring scalability and modern web practices. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the security posture, despite the presence of several security headers and a strict DMARC policy. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR adherence is evident. Overall, while the business credibility and content quality are strong, the critical lack of HTTPS is a major risk that needs immediate remediation.

N

Netural GmbH

netural.com

40

Netural GmbH is a mature and reputable digital services provider based in Austria, specializing in digital transformation, web and mobile app development, augmented reality, and eCommerce solutions primarily for B2B clients. The company has a strong market position supported by multiple industry awards and a professional online presence. Technically, the website uses modern web technologies and a CMS (Storyblok), with content optimized for mobile and SEO. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks. Privacy policies and cookie consent mechanisms are well implemented, indicating good GDPR compliance. Overall, the business credibility is high, but urgent security improvements are needed to protect data and enhance trust.

C

CMA CGM Group

cmacgm-group.com

49

CMA CGM Group operates as a global leader in transportation and logistics, providing integrated sea, land, air, and logistics solutions. The company targets a global customer base requiring comprehensive supply chain services. The website reflects a mature enterprise with consistent branding and a professional online presence. Technically, the site uses modern frameworks such as React and Next.js, hosted on AWS CloudFront with caching via Varnish, and a Drupal CMS backend. However, the absence of a valid SSL/TLS certificate critically undermines the security posture, exposing users to risks and reducing trust. Security headers are partially implemented but lack completeness, and no advanced security policies or data protection officer contacts are visible. The site includes cookie consent mechanisms and a responsible disclosure program, indicating some compliance awareness. Overall, the site is functional and professional but requires urgent security improvements to meet modern standards.

K

KUT Public Media

kut.org

38

KUT Public Media operates as a prominent public media and NPR-affiliated radio station serving Austin and Central Texas. The organization provides a broad range of news, cultural programming, podcasts, and community engagement services, supported by donations, memberships, and sponsorships. The website reflects a mature digital presence with professional design, clear navigation, and rich content tailored to its regional audience. Technically, the site leverages Brightspot CMS, Amazon CloudFront CDN, and integrates advertising and analytics tools from Google and Facebook, indicating a modern infrastructure. However, a critical security gap exists due to the absence of a valid SSL certificate, resulting in no HTTPS support, which significantly impacts user trust and security posture. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is credible and well-positioned in its market but requires urgent security improvements to protect users and maintain trust.

S

StoryToys Limited

marvelhq.com

56

MarvelHQ.com is a digital content publishing website for the Marvel HQ app, published by StoryToys Limited, a Team17 company. The site offers access to games, videos, books, comics, and activities featuring Marvel characters, targeting a family audience. The business operates in the media and entertainment sector with a focus on licensed digital content distribution across multiple platforms including iOS, Android, Amazon, and Samsung stores. The website is professionally designed with consistent branding and clear calls to action for app downloads.

24xtra.hu is a user authentication portal associated with the Hungarian media brand 24.hu, providing login and registration services including social login options via Facebook, Apple, and Google. The site targets Hungarian-speaking users of 24.hu services and acts as a gateway for accessing content or services requiring user authentication. The business model centers on user identity management for a media platform. Technically, the site is hosted on Amazon AWS infrastructure using CloudFront CDN and employs Keycloak for single sign-on capabilities. The technology stack includes modern JavaScript modules and standard web technologies, but performance metrics are unavailable or minimal, indicating potential areas for improvement. Mobile optimization and accessibility are basic but functional. From a security perspective, the site implements several important HTTP security headers and enforces HSTS with preload. However, the absence of a valid SSL certificate and lack of HTTPS support critically undermine the security posture. No OCSP stapling or session resumption is configured, and no privacy or cookie policies are published, indicating compliance gaps. No contact or business information is provided on the site, limiting transparency. Overall, the site is functional as a login portal but requires urgent improvements in SSL/TLS configuration and privacy compliance to enhance trust and security. The domain registration is consistent with the 24.hu brand, supporting legitimacy. Strategic recommendations include obtaining a valid SSL certificate, publishing privacy and cookie policies, and improving performance and accessibility.

C

Central Médiacsoport Zrt.

24.hu

40

24.hu is a leading Hungarian news portal operated by Central Médiacsoport Zrt., offering a wide range of news content including domestic and international news, culture, sports, and lifestyle. The site features multimedia content such as videos and podcasts, and supports subscription services. Technically, the site is built on WordPress with WPBakery Page Builder and hosted on AWS infrastructure with CloudFront CDN and Redis caching for performance optimization. However, the security posture is weak due to the absence of a valid SSL certificate and lack of TLS protocol support, which poses significant risks for user data protection and trust. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user consent mechanisms. Overall, the site is professionally designed and content-rich but requires urgent security improvements to protect users and maintain credibility.

R

Rete di Top Segnalatori Business Certificati

retesegnalatori.com

31

The website 'retesegnalatori.com' serves as a platform for individuals and businesses interested in becoming certified business referrers and growing within a referral network. It positions itself as a niche network focused on business introductions and certification in the Italian-speaking market. The content is minimal and primarily marketing-oriented, with limited business or legal information provided. Technically, the site is built on the Kartra platform, utilizing common web fonts and CDNs, but suffers from slow load times and lacks modern performance optimizations. Security posture is weak, with no valid SSL certificate or HTTPS support, absence of security headers, and no privacy or cookie policies, exposing users to potential risks. Overall, the site demonstrates low trustworthiness and poor compliance with privacy regulations. Strategic improvements in security, privacy compliance, and content richness are recommended to enhance credibility and user trust.

T

The Walt Disney Company

disneynow.com

49

DisneyNOW is a digital streaming platform operated by The Walt Disney Company, offering a wide range of Disney Channel, Disney Junior, and Disney XD shows, movies, and video clips targeted primarily at children and families. The platform is well-branded and professionally designed, providing an excellent user experience with clear navigation and rich content offerings. Technically, the site uses modern web technologies including React, Nginx, Varnish Cache, and AWS hosting, along with performance monitoring via New Relic. However, the site suffers from a critical security issue due to an invalid SSL certificate, which undermines the security posture and user trust. Privacy policies and terms of service are comprehensive and properly linked, indicating good compliance with privacy regulations such as GDPR. Overall, the site is a high-quality media platform with strong business credibility but requires urgent remediation of its SSL configuration to improve security and trust.

BookAppSter is a marketing platform focused on helping authors and entrepreneurs acquire clients through book marketing and viral app creation. The business operates primarily in Italy and leverages the Kartra platform for its digital marketing and webinar delivery. The website content is professionally presented in Italian, featuring testimonials, videos, and clear calls to action for webinars. However, the technical infrastructure shows significant weaknesses, notably the absence of a valid SSL certificate and missing DNS records, which undermine trust and security. Privacy and cookie policies exist but are hosted externally on Kartra subdomains, and no direct contact or security policies are provided. Overall, the business appears legitimate but would benefit from improved technical and security measures.

R

Rove Hotels

rovehotels.com

55

Rove Hotels is a hospitality brand offering stylish and affordable hotel accommodations primarily in Dubai and the UAE. The website presents a comprehensive portfolio of hotels, detailed descriptions, booking capabilities, and promotional offers targeting families, travelers, and business guests. The brand is positioned as a modern, accessible hotel chain with a strong digital presence and multi-language support. Technically, the website is built on WordPress, leveraging modern JavaScript frameworks and CDN services to deliver a responsive and user-friendly experience. However, the security posture is weakened by the absence of a valid SSL certificate and lack of TLS protocol support, which poses significant risks to user data confidentiality and trust. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional and credible but requires urgent remediation of its SSL/TLS configuration to ensure secure communications.

D

De christelijke zorgverzekeraar

dechristelijkezorgverzekeraar.nl

40

De christelijke zorgverzekeraar is a Dutch health insurance provider focused on integrating Christian values with healthcare services. It operates as part of the larger Zilveren Kruis group, offering basic and supplementary insurance products tailored to its target audience. The website is professionally designed, well-structured, and provides comprehensive information about insurance options, Christian care, and customer services. Technically, the site uses modern technologies including Sitecore CMS, Vue.js, and Coveo search integration, ensuring a good user experience and SEO optimization. However, the security posture is weakened by the absence of a valid SSL/TLS certificate and disabled TLS protocols, which is a critical issue that must be addressed to protect user data and maintain trust. Privacy policies and cookie statements are present and GDPR compliance is indicated, though no explicit consent mechanism was detected. Overall, the site is credible and trustworthy but requires urgent security improvements.

F

FBTO

fbto.nl

40

FBTO is a Dutch insurance provider offering a wide range of customizable insurance products including auto, health, travel, home, and legal assistance insurance. The company operates under the Achmea group umbrella, which strengthens its market position and trustworthiness. The website is professionally designed with clear navigation and good content quality, targeting Dutch consumers seeking flexible insurance solutions. Technically, the site uses a modern tech stack including Sitecore CMS, Azure hosting, and integrates multiple marketing and analytics tools. However, the security posture is weakened by the absence of a valid SSL certificate and disabled TLS protocols, which are critical issues that must be addressed immediately to protect user data and maintain trust. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is functional and credible but requires urgent security improvements.

C

Centraal Beheer

centraalbeheer.nl

40

Centraal Beheer is a well-established Dutch insurance and financial services provider with over 115 years of history, operating under the parent company Achmea. The website offers a comprehensive range of services including insurance products, investment options, savings accounts, pensions, and mortgages, targeting both private individuals and businesses. The site is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, the website uses a modern tech stack including Sitecore CMS, Azure hosting, and various marketing and analytics tools, though performance metrics are not available. Security posture is moderate; while several security headers are implemented, the SSL certificate is invalid or missing, and no modern TLS protocols are enabled, which poses a significant risk. Privacy compliance is good with clear privacy and cookie policies and GDPR adherence. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness.

P

Ping Identity

pingidentity.com

60

Ping Identity is a leading enterprise identity security company specializing in identity and access management solutions. Their platform offers comprehensive services including customer identity, workforce identity, B2B identity, decentralized identity, and advanced authentication methods such as passwordless and zero trust. The company targets large enterprises across various sectors including government, financial services, healthcare, retail, media, and telecommunications. With a strong market position supported by industry analyst recognitions, Ping Identity delivers secure and seamless digital experiences for its customers. Technically, the website is built on a modern infrastructure leveraging Adobe Experience Manager CMS, AWS hosting, and advanced web technologies such as Lottie animations and Google Tag Manager. The site demonstrates good mobile optimization, accessibility, and SEO practices. However, the SSL certificate is currently invalid, and no TLS protocols are enabled, which significantly impacts the security posture. Security-wise, the site implements strong security headers and cookie policies with consent mechanisms, indicating good privacy compliance. Certifications like ISO 27001, SOC 2, and FedRAMP further strengthen their security credibility. Nonetheless, the invalid SSL certificate and lack of TLS support are critical issues that must be addressed urgently to ensure secure communications. Overall, Ping Identity's website reflects a mature and professional digital presence with strong business credibility and privacy compliance. Addressing the SSL and TLS issues will elevate their security posture and trustworthiness further.

Y

Yelp

yelp.fi

70

Yelp.fi is the Finnish localized version of Yelp, a leading online platform providing user-generated reviews and business listings primarily for the Helsinki area. The website offers extensive content including business categories, user reviews, and search capabilities for local services. It targets consumers seeking trusted local business information and provides business owners with advertising and management tools. The platform is built on modern web technologies including React and is hosted on Amazon AWS infrastructure with CDN support. While the site demonstrates strong content quality, branding consistency, and good privacy compliance with GDPR, it suffers from an invalid SSL certificate and lacks support for modern TLS protocols, which impacts its security posture. Security headers and content security policies are implemented, but some CSP directives allow unsafe inline scripts, which could be improved. Overall, the site is professional and trustworthy but should address SSL and TLS issues to enhance security and user trust.

P

Prosek Partners

prosek.com

51

Prosek Partners is a well-established integrated communications and marketing firm with over 30 years of experience, primarily serving clients in finance, investor relations, and related sectors. The company offers a broad range of services including PR, crisis management, digital marketing, and public affairs, positioning itself as a future-focused leader in its industry. The website reflects a professional and polished brand image with comprehensive content and strong SEO and accessibility features. Technically, the site is built on WordPress with modern plugins and integrations but suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS enforcement. This significantly impacts the security posture and trustworthiness from a technical perspective. Privacy and cookie policies are present and indicate GDPR compliance, though no explicit security or incident response policies are published. Overall, the site is user-friendly and credible but requires urgent security improvements to protect user data and enhance trust.

T

TopCV

topcv.com

65

TopCV is a leading global professional CV writing service operating under the parent company Talent Inc. The company offers a comprehensive suite of career services including CV writing, cover letter creation, LinkedIn profile optimization, and interview preparation. Their market position is strong, supported by extensive customer testimonials and high Trustpilot ratings. Technically, the website is built on a modern Next.js and React stack, hosted on AWS CloudFront, ensuring good performance and mobile optimization. However, the security posture is weakened by an invalid SSL certificate, despite the presence of HSTS headers and other security best practices. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital presence with room for improvement in SSL management and advanced security headers.

M

Monster

monster.com

55

Monster.com is a leading online job search and recruitment platform dedicated to connecting job seekers with relevant career opportunities and providing employers with hiring resources. The website offers a comprehensive job search engine, career advice, resume upload capabilities, and employer services, positioning itself as a major player in the employment technology sector. The platform targets both job seekers and employers, leveraging modern web technologies such as Gatsby and React to deliver a responsive and user-friendly experience. However, the site currently lacks a valid SSL certificate, which significantly impacts its security posture and user trust. While security headers are properly configured, the absence of HTTPS and modern TLS protocols presents a critical vulnerability. Privacy compliance is partially addressed with a clear privacy policy, but no explicit cookie consent mechanism is detected. Overall, Monster.com demonstrates strong business credibility and content quality but requires urgent improvements in SSL/TLS security to enhance trust and compliance.

S

Shiftboard, Inc.

shiftboard.com

51

Shiftboard, Inc. is an enterprise-level SaaS provider specializing in employee scheduling software tailored for mission-critical industries such as manufacturing, energy, and corrections. The company operates as a subsidiary of UKG and offers products like SchedulePro and ScheduleFlex to streamline workforce management, improve scheduling efficiency, and enhance employee engagement. The website demonstrates strong branding, customer trust signals, and comprehensive content targeting workforce managers in shift-based operations. Technically, the website is built on WordPress with performance optimizations via WP Rocket and hosted on AWS infrastructure using S3 and CloudFront. It integrates multiple marketing and analytics tools including Google Analytics, Google Ads, HubSpot, and social media platforms. The site is mobile-optimized and SEO-friendly with structured data and Open Graph metadata. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. While some security headers like HSTS are present, the absence of TLS protocols and secure cipher suites significantly lowers the security posture. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website is professional and content-rich but requires urgent remediation of SSL/TLS issues to ensure secure user interactions and maintain trust.

G

GeneXus

genexus.com

61

GeneXus is an established enterprise low-code software development platform powered by AI, with over 35 years of market presence and a global customer base. The platform offers a comprehensive suite of tools including AI assistants, business process management, code generators, and testing frameworks, targeting enterprises, ISVs, startups, and students. Technically, the website is hosted on Microsoft IIS with ASP.NET and uses AWS CloudFront CDN, Google Tag Manager, and Google Analytics for tracking. The site is well-designed, mobile-optimized, and content-rich, but suffers from a critical security issue due to an invalid or missing SSL certificate, which severely impacts its security posture. Privacy and cookie policies are not explicitly found, indicating potential compliance gaps. Overall, the site demonstrates strong business credibility and technical maturity but requires urgent security improvements.

P

Persistent Systems

persistent.com

59

Persistent Systems is a well-established technology services company specializing in AI, digital engineering, and enterprise modernization. The company positions itself as a trusted partner for enterprises seeking to transform their AI journey and digital capabilities. Their website reflects a mature digital presence with comprehensive service offerings, a strong partner ecosystem, and extensive client success stories. The company targets large enterprises across multiple industries, leveraging a B2B business model with a focus on innovation and technology leadership. Technically, the website is built on WordPress and employs a modern tech stack including jQuery, Bootstrap, and various marketing and analytics tools such as Google Tag Manager, Pardot, and CookiePro. Hosting is via AWS CloudFront CDN, ensuring global content delivery. The site is well-optimized for SEO and accessibility, with multilingual support and responsive design. However, performance metrics are not explicitly available. From a security perspective, the site has several security headers configured and uses HttpOnly cookies and a detailed Content Security Policy. However, a critical issue is the absence of a valid SSL certificate and HTTPS support, severely impacting the security posture. Other TLS protocols and features like OCSP stapling and session resumption are not enabled. DNS CAA records appear malformed, which could affect certificate issuance policies. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a high level of professionalism and business credibility but suffers from a critical security gap due to missing HTTPS. Strategic remediation of SSL/TLS configuration is essential to improve trust and security compliance.

K

Kirschbaum Development

kirschbaumdevelopment.com

49

Kirschbaum Development is a small technology company specializing in web application development, staff augmentation, training, and technical leadership services. They primarily focus on Laravel, Vue.js, Angular, Drupal, and Wordpress frameworks, serving a diverse client base including Fortune 50 companies and smaller organizations. Their market position is strengthened by partnerships with Laravel and endorsements from industry leaders. The website presents a professional and consistent brand image with comprehensive service offerings and client testimonials. Technically, the website leverages modern web technologies including Laravel and Vue.js frameworks, hosted on AWS CloudFront CDN. The site includes Google Tag Manager for analytics and marketing purposes. While the site is mobile optimized and SEO friendly, performance metrics are unavailable. Accessibility is basic but functional. From a security perspective, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical vulnerability. No advanced security headers or mechanisms such as HSTS or OCSP stapling are implemented. Cookie consent mechanisms are absent, indicating limited privacy compliance. The site uses secure cookies with CSRF tokens but overall security posture is weak. Overall, the website is professional and credible but requires urgent improvements in SSL/TLS implementation and privacy compliance to enhance security and user trust.

C

Camif

camif.fr

40

Camif is a French e-commerce company specializing in sustainable and locally manufactured furniture and home decor. The website presents a professional and well-branded platform targeting consumers interested in eco-responsible products. The company emphasizes French and European manufacturing, supported by certifications such as B Corp and Entreprise à mission. The site features a rich product catalog, promotional offers, and strong social media presence. Technically, the site uses modern JavaScript libraries, analytics, and marketing tools, but lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security concern. Security headers are well implemented, but the absence of TLS protocols and session resumption reduces the security posture significantly. Privacy policies and cookie consent mechanisms are present and comprehensive, supporting GDPR compliance. Contact information is available primarily via phone and contact forms, with no explicit emails found in the content. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain compliance.

The website medigate.de is currently a parked domain landing page primarily serving advertisements and indicating the domain is for sale. There is no substantive business content, contact information, or service offerings present. The technical infrastructure relies on parking nameservers and third-party ad networks, with no valid SSL certificate, resulting in an insecure HTTP-only site. Performance is poor with a very slow load time. Security posture is weak due to lack of HTTPS, security headers, and privacy compliance mechanisms. Overall, the site does not present a credible or professional business presence and lacks essential security and privacy features.

B

Boxmyjob SAS

taleez.com

60

Taleez, operated by Boxmyjob SAS, is a French-based SaaS company specializing in recruitment management software (ATS). The company offers a comprehensive platform that centralizes recruitment processes, including job offer multi-diffusion, candidate sourcing, process automation, and analytics. With over 15,000 users and a strong presence in the French market, Taleez positions itself as a reliable and user-friendly solution for HR teams, managers, and candidates. The website reflects a professional and consistent brand image, supported by numerous client testimonials and case studies. Technically, the website is built on Webflow CMS and integrates multiple marketing and analytics tools such as HubSpot, Google Analytics, Amplitude, and ConvertBox. Hosting is managed via OVH with CDN support from Cloudfront. Despite a rich content offering and good mobile optimization, the site suffers from slow load times and lacks a valid SSL certificate, which critically impacts its security posture. Security-wise, the absence of a valid SSL certificate and HTTPS enforcement is a major vulnerability, exposing users to potential data interception risks. Additionally, the lack of security headers and modern TLS protocols further weakens the site's defense. Privacy compliance is well addressed with comprehensive GDPR-aligned policies and cookie consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, while Taleez demonstrates strong business credibility and content quality, its technical and security shortcomings, especially regarding SSL/TLS, pose significant risks. Addressing these issues is paramount to safeguarding user data and maintaining trust.

F

freenet Internet

freenet-internet.de

40

freenet Internet is a German telecommunications provider specializing in flexible internet tariffs that can be managed entirely via a mobile app. Their offerings include DSL and 5G internet services with monthly cancellable contracts, targeting customers who value freedom and simplicity. The website is built on modern JavaScript frameworks (Nuxt.js and Vue.js) and hosted on Amazon Web Services infrastructure, leveraging CloudFront CDN for content delivery. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a significant security concern. The presence of SPF and DMARC records indicates some email security awareness, but no advanced security headers or mechanisms are implemented. Privacy and terms of service documents are present and appear comprehensive, but no cookie consent mechanism is detected. Overall, the site provides good content quality and user experience but requires urgent improvements in security posture to protect users and enhance trust.

B

Bertelsmann SE & Co. KGaA

bertelsmann.com

52

Bertelsmann SE & Co. KGaA is a leading international media conglomerate headquartered in Germany, operating through multiple divisions such as RTL Group, Penguin Random House, BMG, and Arvato Group. The company provides a wide range of media, publishing, entertainment, and service offerings targeting journalists, investors, applicants, and the general public. The website reflects a mature digital presence with comprehensive corporate, investor, and media information, supported by strong branding and consistent content quality. Technically, the site uses established technologies like jQuery, Bootstrap, and Cookiebot for consent management, hosted on AWS CloudFront CDN. However, the absence of a valid SSL/TLS certificate and disabled HTTPS protocols represent critical security gaps. Security headers and content security policies are implemented but cannot compensate for the lack of HTTPS, which is essential for protecting user data and trust. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is professional and trustworthy but requires urgent security improvements to meet modern standards.

G

Grazer Wechselseitige Versicherung AG

grawe.at

40

Grazer Wechselseitige Versicherung AG (GRAWE) is a well-established Austrian insurance company founded in 1828, offering a broad range of insurance products including private, business, and agricultural insurance, alongside financial services. The company maintains a strong market position in Austria with a large customer base and extensive service network. Their website reflects a mature digital presence with comprehensive content, clear navigation, and multi-language support. Technically, the site is built on TYPO3 CMS, uses modern JavaScript and CDN services, but suffers from slow load times due to high resource count and page size. Security posture is good with valid SSL, strong cipher suites, and proper DNS security records like SPF and DMARC, though improvements such as enabling HSTS and OCSP stapling are recommended. Privacy compliance is robust with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the site demonstrates high professionalism and trustworthiness, suitable for its large enterprise status.

S

sysmkt.com.br is almost here!

sysmkt.com.br

52

The website sysmkt.com.br currently serves as a placeholder page hosted by DreamHost, indicating that the domain owner has not yet uploaded any website content. There is no business information, contact details, or services described on the site. The technical infrastructure is minimal, relying on DreamHost's hosting and CloudFront CDN for static content delivery. Performance is poor with a high load time relative to the minimal content served. Security posture is weak, as no SSL/TLS certificate is installed, resulting in no HTTPS support and lack of essential security headers or policies. DNS configuration is standard with valid SPF records but lacks DNSSEC and DMARC, which are important for email and domain security. Overall, the site is not production-ready and lacks any compliance or security documentation.

R

Readly

readly.com

70

Readly is a digital media company offering a subscription-based magazine app that provides unlimited access to thousands of magazines globally. The company has a strong market position with a broad international footprint, targeting consumers who prefer digital reading experiences with features like offline access and family sharing. Technically, the website is built on Ruby on Rails and leverages modern web technologies and cloud hosting via AWS, with moderate performance and good mobile optimization. Security-wise, Readly employs strong TLS configurations, SPF and DMARC email protections, but lacks some advanced security features such as HSTS and OCSP stapling. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear cookie consent mechanism. Overall, the company demonstrates a mature digital presence with room for security enhancements.

M

Mercado Pago Instituição de Pagamento Ltda.

mercadopago.com.br

61

Mercado Pago is a leading digital bank and payment platform in Brazil, operating as a subsidiary of Mercado Libre, the largest e-commerce company in Latin America. The platform offers a comprehensive suite of financial services including digital accounts, credit cards, loans, and payment processing solutions tailored for both individuals and businesses. The website demonstrates a strong market position with a focus on user experience, accessibility, and comprehensive service offerings. Technically, the site employs modern web technologies such as React-based frameworks, New Relic for monitoring, and integrates multiple analytics and advertising tools. Security headers are well implemented, though the SSL certificate is currently invalid, which poses a risk to secure communications. Privacy and cookie policies are present and indicate compliance with GDPR standards. Overall, the platform exhibits a mature digital infrastructure with extensive tracking and marketing integrations, balanced with clear privacy disclosures.

I

Ideris

ideris.com.br

57

Ideris is a leading Brazilian e-commerce technology company specializing in marketplace integration and multichannel sales optimization. The company offers a comprehensive hub platform that consolidates product management, pricing automation, invoice issuance, and logistics management, targeting medium to large e-commerce operators. Recognized as a top technology partner by Mercado Livre for two consecutive years, Ideris holds important certifications such as AWS Partner Qualified Software and SOC 2 Audit, reinforcing its market leadership and trustworthiness. The website reflects a mature digital presence with advanced search capabilities, rich content, and multi-channel marketing tools. However, the absence of a valid SSL certificate and lack of modern TLS protocols represent significant security risks that could impact user trust and data protection.

I

Infotech

bidx.com

52

Infotech operates Bidx.com, a specialized electronic bidding platform tailored for the highway construction industry, serving 44 state transportation agencies. The platform facilitates secure and efficient bidding processes, offering tools such as competitive analysis, plan sheets access, and a small business network to empower contractors. Infotech positions itself as a market leader with a significant volume of bids processed, reflecting strong industry trust and adoption. Technically, the website is built on WordPress with the Divi theme, hosted on AWS infrastructure, and integrates various marketing and analytics tools including HubSpot and Google Tag Manager. However, the security posture reveals critical gaps including an invalid SSL certificate, lack of modern TLS protocols, and incomplete DNS security configurations. While basic security headers and DMARC policies are present, the absence of HSTS, OCSP stapling, and session resumption reduces overall security robustness. The website lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for compliance and trust. Overall, the digital maturity is moderate with room for improvement in security and privacy compliance to align with industry best practices.

V

Vindi

vindi.com.br

64

Vindi is a leading Brazilian payment hub platform specializing in managing and processing online payments, with a strong focus on recurring billing, e-commerce, and financial services. The company offers a comprehensive suite of services including payment gateways, credit lines, antifraud solutions, and APIs for seamless integration with marketplaces and other platforms. Their market position is reinforced by significant transaction volumes and a portfolio of reputable clients. Technically, the website is hosted on Amazon S3 with CloudFront CDN, uses modern frontend frameworks like Bootstrap, and integrates Google Tag Manager for analytics and marketing. The site demonstrates good SEO and mobile optimization practices. Security-wise, Vindi maintains a valid SSL certificate and avoids known SSL vulnerabilities, but lacks enabled TLS protocols and HSTS, and DNSSEC is not configured, indicating areas for improvement. Overall, the company shows a mature digital presence with strong branding and trust signals, though security hardening and compliance transparency could be enhanced.

O

Olist

tiny.com.br

61

Olist Tiny is a comprehensive ERP, integration hub, and digital account platform targeting Brazilian e-commerce businesses. It offers a stable and integrated system to streamline sales, inventory, and financial operations, positioning itself as a key player in the Brazilian e-commerce technology market under the Olist group umbrella. The website demonstrates a mature technical infrastructure leveraging Next.js, React, Cloudflare, and AWS services, ensuring fast performance and good mobile optimization. Security posture is solid with a valid SSL certificate and modern security practices, though improvements such as enabling HSTS and DNSSEC are recommended. Privacy policies and terms of service are present and comprehensive, but cookie consent mechanisms are lacking. Overall, the platform shows strong business credibility, technical sophistication, and a clear focus on serving small to medium-sized e-commerce enterprises in Brazil.

V

Volkswagen Financial Services

volkswagen-versicherungsdienst.de

65

Volkswagen Financial Services AG operates the volkswagen-versicherungsdienst.de website, providing a comprehensive portfolio of automotive insurance products including liability, partial and full coverage, warranty extensions, leasing rate insurance, credit protection, and travel insurance. The site targets primarily German private and business customers, leveraging the strong Volkswagen brand and integrated financial services ecosystem. The website is built on Adobe Experience Manager with extensive use of modern web technologies and content delivery networks, ensuring excellent performance and user experience. However, the SSL configuration is critically flawed with a self-signed certificate and no enabled TLS protocols, which undermines secure communications. Security headers are well implemented, but the absence of a cookie consent mechanism and explicit security or incident response policies indicates gaps in compliance and transparency. The site integrates multiple marketing and analytics tools, including Adobe Analytics, Google Tag Manager, and UserZoom, reflecting extensive user tracking. Overall, the site is professional, content-rich, and trustworthy from a business perspective but requires urgent security improvements to protect user data and comply with best practices.

V

Volkswagen Financial Services AG

volkswagen-bank.de

65

Volkswagen Financial Services AG operates a comprehensive digital platform offering automotive financial services including leasing, financing, insurance, and mobility solutions primarily targeting private and business customers in Germany. The website demonstrates a mature digital infrastructure leveraging Adobe Experience Manager, advanced analytics, and multiple integrations with marketing and tracking tools. However, the security posture is weakened by an invalid self-signed SSL certificate and disabled TLS protocols, which pose significant risks to secure communications. The site includes strong security headers and content policies but lacks visible cookie consent mechanisms and explicit security or incident response policies. Overall, the platform is professionally designed, content-rich, and well-branded, supporting a leading position in automotive financial services within the Volkswagen Group ecosystem.

Volkswagen Financial Services AG operates as the financial and mobility services provider for the Volkswagen Group across Europe, managing financing, leasing, insurance, and mobility solutions in 17 markets. The company holds a strong market position as a wholly-owned subsidiary of Volkswagen AG, with a large operational footprint and a focus on sustainability and customer mobility. The website reflects a professional and consistent brand presence with comprehensive investor relations and media content. Technically, the site is built on Adobe Experience Manager, leveraging modern content delivery and third-party integrations for analytics and marketing. Security headers and policies are well implemented, though some SSL/TLS configuration anomalies were detected, likely due to scanning artifacts or misconfigurations. Overall, the security posture is solid but could be improved by enabling modern TLS protocols and publishing explicit security policies. The site demonstrates good privacy compliance with a comprehensive privacy policy and consent mechanisms for external data sources. Social media presence and trust indicators support a high level of trustworthiness.

Honda France operates as a major enterprise in the transportation and manufacturing sectors, offering a diverse range of products including automobiles, motorcycles, marine engines, industrial equipment, garden tools, and snow throwers. The website serves as a portal to various product divisions and regional Honda sites, targeting French consumers and related markets. The business model focuses on manufacturing and retail with a strong brand presence and consistent branding across multiple languages and regions. Technically, the website is built on a modern infrastructure likely powered by Adobe Experience Manager CMS, hosted on Amazon CloudFront CDN, and uses ES6 JavaScript modules. Performance is inferred to be fast with good mobile optimization and basic accessibility and SEO. The site integrates Google Tag Manager for analytics and OneTrust for cookie consent, indicating a moderate level of digital maturity. From a security perspective, the site employs a valid DigiCert SSL certificate with strong security headers including HSTS and X-Frame-Options. However, no TLS protocols are currently enabled, which is a critical issue. The site lacks explicit privacy, terms of service, security policies, or incident response information. DNSSEC is not enabled, and no vulnerability disclosure or security.txt files are present. Overall, the security posture is good but could be significantly improved by enabling TLS, enforcing CSP, and publishing clear security and privacy documentation. The overall risk is moderate due to missing compliance documentation and TLS configuration gaps. Strategic recommendations include enabling TLS 1.2+, enforcing CSP, publishing privacy and security policies, and enhancing incident response readiness to improve trust and compliance.

A

ARRI GmbH

arri.com

69

ARRI GmbH is a well-established leader in the media industry, specializing in the design and manufacture of professional camera and lighting systems for the film and broadcast sectors. With a history dating back to 1917, ARRI maintains a strong market position supported by a comprehensive product portfolio including camera systems, lenses, lighting, rental services, and virtual production solutions. The company targets industry professionals and production companies worldwide, leveraging a large-scale operational footprint and partnerships such as ARRI Rental and Claypaky. Technically, the website is built on a modern stack including CoreMedia CMS, React, and is hosted on AWS CloudFront, delivering fast performance and good mobile optimization. Security measures include a valid SSL certificate and several HTTP security headers, though the lack of modern TLS protocols and DNSSEC indicates room for improvement. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented via Usercentrics. Overall, ARRI demonstrates a mature digital presence with strong branding, comprehensive content, and good security hygiene, though enhancements in encryption protocols and security disclosures could further strengthen its posture.

A

Arctic Wolf Networks

arcticwolf.com

77

Arctic Wolf Networks is a leading cybersecurity company specializing in AI-driven, 24x7 managed security operations tailored to diverse organizational needs. Positioned as a market leader, Arctic Wolf offers a comprehensive suite of services including the Aurora Platform, managed detection and response, incident response, and risk transfer solutions. Their extensive partner ecosystem and industry recognitions underscore their strong market presence and commitment to reducing cyber risk for enterprises globally. Technically, the website leverages modern technologies such as WordPress with Elementor, integrates advanced marketing and analytics tools, and employs robust security measures including an EV SSL certificate and strict security headers. The security posture is strong with no detected vulnerabilities, though improvements in TLS protocol support and DNS security could enhance it further. Overall, Arctic Wolf demonstrates a mature digital infrastructure, excellent content quality, and a high level of professionalism, making it a trustworthy and authoritative source in the cybersecurity domain.

V

VicOne Inc.

vicone.com

79

VicOne Inc. is a specialized cybersecurity company focused on providing future-ready vehicle protection reinforced with proven automotive threat intelligence. The company targets automotive manufacturers, Tier 1 suppliers, EVSE manufacturers, and other stakeholders in the connected car ecosystem. VicOne offers a broad portfolio of cybersecurity software and services including threat intelligence platforms, vehicle security operations centers, intrusion detection/prevention systems, vulnerability and SBOM management, and penetration testing services. The company holds multiple industry certifications and has strategic partnerships with major technology and automotive players, positioning it as a trusted leader in automotive cybersecurity. Technically, the website is hosted on Microsoft IIS with ASP.NET backend, leveraging AWS CloudFront CDN for delivery. The tech stack includes modern JavaScript libraries such as jQuery, Owl Carousel, ScrollReveal, and HubSpot for analytics and marketing automation. The site demonstrates good mobile optimization and fast performance, with a comprehensive content strategy and clear navigation. However, the SSL configuration lacks modern TLS protocol support, and DNSSEC is not enabled, indicating areas for security enhancement. From a security posture perspective, VicOne implements strong HTTP security headers including CSP, HSTS, X-Frame-Options, and XSS protection. The SSL certificate is valid and issued by a trusted CA, but the absence of TLS 1.2 or higher protocols is a notable gap. The company provides comprehensive privacy and cookie policies with consent mechanisms, but lacks explicit incident response contact information and terms of service page. Overall, the security maturity is good with room for improvements in protocol support and DNS security. The overall risk assessment suggests VicOne is a well-positioned and trusted player in automotive cybersecurity with strong technical and security foundations. Strategic recommendations include enabling modern TLS protocols, implementing DNSSEC, publishing incident response contacts, and enhancing accessibility compliance to further strengthen trust and security posture.

D

Dropbox Sign

helloworks.com

60

Dropbox Sign, formerly known as HelloSign, is a leading provider of electronic signature solutions designed to streamline contract signing and document workflows for businesses and developers. Positioned as a scalable and easy-to-use SaaS platform, it offers legally binding eSignatures, API integrations, and additional services such as fax. The company benefits from strong brand recognition as part of Dropbox and serves a broad enterprise audience with a comprehensive suite of features and integrations. Technically, the website is built on Webflow CMS, hosted on AWS CloudFront, and leverages modern marketing and analytics tools like Adobe DTM and Marketo. The site is well-optimized for performance, mobile, accessibility, and SEO, reflecting a mature digital presence. Security-wise, the site employs essential headers and valid SSL certificates but lacks modern TLS protocol support and DNS security extensions, indicating room for improvement. Overall, Dropbox Sign demonstrates a robust business and technical foundation with a strong market position in the eSignature industry.

D

Dropbox Sign

hellosign.com

69

Dropbox Sign, formerly HelloSign, is a leading electronic signature platform integrated with Dropbox, offering easy-to-use eSignature solutions for businesses and developers. The company provides SaaS-based services including document signing, API integration for embedded signatures, fax services, and multiple platform integrations. Their market position is strong, supported by a large enterprise customer base and consistent branding aligned with Dropbox. The website demonstrates excellent content quality, user experience, and trust indicators such as compliance badges and customer testimonials. Technically, the site is built on Webflow CMS, hosted on AWS CloudFront, and uses modern marketing and analytics tools like Adobe DTM and Marketo. Performance and mobile optimization are excellent, with good accessibility and SEO practices. Security posture is solid with valid SSL and security headers, but lacks modern TLS protocols and DNSSEC, and could improve with HSTS and security.txt publication. Overall, Dropbox Sign presents a mature digital presence with strong business and technical foundations, though some security enhancements are recommended.

B

broadpeak.io

broadpeak.io

66

Broadpeak.io is a medium-sized SaaS company specializing in advanced video streaming APIs and contextualization services. Positioned as a trusted platform globally, it offers key services such as Dynamic Ad Insertion, Content Replacement, Virtual Channels, and Adaptive Streaming CDN. The company targets developers, PayTV operators, OTT providers, and streaming service DevOps teams, providing scalable and adaptable streaming solutions. Technically, the website is built on WordPress with a strong SEO and marketing technology stack including Google Analytics, Intercom, and Pardot, hosted on AWS with CloudFront CDN. Security posture is solid with valid SSL and HSTS but lacks modern TLS protocols and DNSSEC, indicating room for improvement. Privacy and cookie policies are comprehensive and GDPR compliant, with a robust consent mechanism. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.

The website demonstrates a solid technical security foundation with strong network security and security headers, and generally good SSL/TLS and DNS health. However, significant gaps exist in compliance with GDPR and NIS2 regulatory frameworks, exposing the business to legal, operational, and reputational risks. The absence of a cookie policy, consent banner, and comprehensive privacy policy undermines user trust and violates privacy regulations. Critical NIS2 shortcomings, including missing information security framework, security policies, incident response procedures, and security contact information, leave the organization vulnerable to cyber incidents and regulatory penalties. Email security is moderate but requires improvement to prevent phishing and spoofing attacks. Addressing these gaps is urgent to reduce exposure to compliance fines, data breaches, and operational disruptions. Overall, while technical controls are strong, governance and compliance controls need immediate attention to ensure holistic security and regulatory adherence.