Low-risk security reports

HES FinTech is a Lithuania-based company specializing in online lending software and loan automation systems. The company offers a comprehensive suite of lending solutions including loan management, digital onboarding, credit decisioning, and debt collection, enhanced by AI-driven decision-making platforms. With a global footprint spanning 40 countries and over 160 completed projects, HES FinTech positions itself as a reliable technology partner for financial institutions seeking scalable and customizable lending software. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to financial services providers. Technically, the website is built on WordPress and leverages modern JavaScript libraries and marketing platforms such as HubSpot, Google Tag Manager, and Facebook Pixel. The infrastructure includes Cloudflare DNS and GoDaddy domain registration. The site is mobile-optimized, SEO-friendly, and integrates advanced analytics tools, indicating a high level of digital maturity. From a security perspective, the company demonstrates strong commitment through ISO 27001 certification and secure HTTPS implementation. The website employs secure forms and does not expose sensitive data. However, DNSSEC is not enabled, and there is no public incident response or vulnerability disclosure information, which could be improved to enhance trust and security posture. Overall, HES FinTech presents a credible and professional online presence with robust business and technical foundations. Strategic recommendations include enabling DNSSEC, publishing incident response contacts, and adding vulnerability disclosure policies to further strengthen security and compliance.

Mano Būstas is a Lithuanian company specializing in comprehensive multi-apartment building maintenance services. The website presents the company as a professional service provider focused on smart solutions, property value growth, and clean environments. The target audience includes apartment owners and property managers in Lithuania. The business model centers on providing maintenance, management, and cleaning services to residential buildings. Technically, the website is built on WordPress with Bootstrap framework, integrating modern analytics and chat support tools such as Google Analytics, Google Tag Manager, and Chatwoot. The site is mobile-optimized and SEO-friendly, with proper metadata and structured data enhancing search visibility. Security-wise, the site enforces HTTPS, includes key security headers, and implements cookie consent mechanisms compliant with GDPR. However, no explicit security policy or incident response information is published, and WHOIS data is unavailable due to query limits, which slightly reduces transparency. Overall, the website is professional and trustworthy, with moderate technical maturity and good privacy compliance.

Van Merksteijn Steel Group B.V. is a well-established family-owned manufacturing company specializing in steel reinforcement products and fencing panels, serving clients primarily in Europe. The company positions itself as a market leader with a focus on quality, sustainability, and service excellence. Their website reflects a professional digital presence with multilingual support and multimedia content to engage their target audience of business partners and customers in the construction and manufacturing sectors. Technically, the website is built on WordPress with modern plugins and tools such as Gravity Forms, Google Tag Manager, and CookieYes for consent management, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and consent mechanisms in place, but lacks some advanced security headers and explicit security policies. The absence of WHOIS registration data is a notable concern for domain legitimacy verification, although the website content and business information appear consistent and trustworthy. Overall, the site demonstrates a solid business and technical foundation with room for improvement in security transparency and domain registration clarity.

Centric is an established information technology company with a regional presence in Lithuania and other European countries, focusing on IT consulting and talent acquisition. Their careers website reflects a professional approach to recruitment and employee development, targeting IT professionals and new talents. The site is well-structured, multi-lingual, and integrates modern marketing and analytics technologies, indicating a mature digital infrastructure. Security posture is generally strong with HTTPS enforced and cookie consent implemented, though explicit privacy policies and security headers could be improved. Overall, the website presents a trustworthy and professional image consistent with a medium-sized IT company.

SBA Grupė operates SBA Home, a specialized furniture industry business unit focused on strategic management, procurement, sales, production development, expansion, and investment within the furniture sector. The website presents a professional and consistent brand image targeting business stakeholders in Lithuania and the region. The digital infrastructure leverages modern JavaScript frameworks (likely Vue.js), integrates Google Analytics and Tag Manager for analytics and marketing, and uses Cookiebot for GDPR-compliant cookie consent management. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the website is professional, functional, and compliant with privacy regulations, suitable for its business purpose.