Security Directory

L

LWND Kreativagentur GmbH

lwnd.com

50

LWND Kreativagentur GmbH is a small Austrian creative agency specializing in providing customized teams of specialists across various disciplines to drive brand success. The company positions itself as a modern and innovative agency with a strong focus on digital marketing, branding, campaigns, and UX design. Their website showcases a comprehensive portfolio of services, detailed case studies, and a professional team presentation, targeting brands and companies seeking tailored creative solutions. Technically, the website uses common web technologies such as jQuery, Swiper, and Google reCAPTCHA, hosted on Hetzner infrastructure. However, the site suffers from a critical security weakness due to the absence of a valid SSL/TLS certificate and lack of HTTPS support, which undermines user trust and data protection. DNS and email security configurations are properly implemented with SPF and DMARC policies. Overall, the website demonstrates excellent content quality and branding consistency but requires urgent security improvements to protect user data and comply with best practices.

D

Deutsche Bank AG

deutsche-bank.de

64

Deutsche Bank AG is a leading financial institution offering a wide range of banking and investment services primarily targeting private, corporate, and institutional clients in Germany and internationally. The website reflects a mature digital presence with comprehensive service offerings, strong branding, and user-centric design. The technical infrastructure leverages Adobe Experience Manager CMS, Adobe Launch for tag management, and integrates advanced customer interaction tools such as Genesys widgets and Usercentrics for consent management. Security configurations are solid with valid SPF and DMARC policies, TLS 1.2 encryption with strong cipher suites, but could benefit from enhancements like TLS 1.3 support, HSTS, and DNSSEC. Privacy and cookie policies are well implemented with GDPR compliance, though explicit security and incident response policies are not publicly found. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with regulatory requirements.

LexisNexis operates as a leading provider of legal, regulatory, and business information services, targeting primarily legal professionals and researchers. The website analyzed is a secure sign-in portal for accessing their research services, reflecting a mature enterprise-level business model with a strong market position. The company provides comprehensive customer support with multiple international phone numbers and maintains clear links to privacy and terms of service policies, demonstrating regulatory awareness and user transparency. Technically, the site employs standard web technologies including jQuery and OneTrust for cookie consent management. While the SSL certificate is valid and issued by a reputable CA, the absence of modern TLS protocols and security headers indicates room for improvement in security hardening. Performance is moderate to slow, and mobile optimization is basic, suggesting potential areas for technical enhancement. From a security perspective, the site shows good foundational practices such as valid SSL and cookie consent but lacks advanced security headers, DNSSEC, and CAA records. No explicit security policies, incident response contacts, or vulnerability disclosure mechanisms were found, which could be addressed to improve security posture and user trust. Overall, the website is professional and trustworthy but would benefit from technical and security upgrades to align with best practices and compliance standards.

A

A3 WEB

a3web.fr

53

A3 WEB is a French digital agency based in Cholet specializing in the creation of websites, SEO, SEA campaigns, mobile applications, and webmarketing services. With over 20 years of experience, the agency serves primarily small to medium-sized enterprises and local businesses in the Maine-et-Loire and Vendée regions. Their service offerings include bespoke website development, e-commerce solutions, mobile app development using Ionic, and comprehensive digital marketing strategies. The agency emphasizes local presence and personalized client relationships, supported by a professional website with strong SEO and marketing integrations. Technically, the website is built on WordPress with a suite of plugins including Yoast SEO, Ninja Forms, WP Rocket, and Complianz for GDPR compliance. The site uses a valid SSL certificate but lacks modern TLS protocol support and some advanced security headers. Hosting and email services appear to be provided by OVH. Performance is optimized with caching and lazy loading, and the site is mobile-friendly with good SEO practices including structured data. From a security perspective, the site has a valid SSL certificate and no known major vulnerabilities but lacks DNSSEC and HSTS enforcement. Cookie consent is managed properly with a consent mechanism in place. No explicit security policy or incident response information is found. The agency demonstrates good privacy compliance with a comprehensive privacy policy and cookie policy. Overall, A3 WEB presents a solid digital presence with a focus on local market needs, good technical infrastructure, and a moderate security posture. Strategic improvements in security protocols and enhanced transparency on terms of service and incident response would strengthen their trustworthiness and compliance posture.

R

RED Digital Cinema, Inc.

red.com

68

RED Digital Cinema, Inc. is a leading manufacturer of professional digital cinema cameras, offering advanced modular camera systems such as the V-RAPTOR and KOMODO lines. The company targets professional filmmakers and broadcast professionals, maintaining a strong market position through innovation in large format global shutter technology. Their business model focuses on direct sales, supported by a dealer network and educational resources. Technically, the website is built on SuiteCommerce Advanced hosted on AWS with strong branding and good mobile optimization. Security posture is solid with valid SSL certificates and strong security headers, though modern TLS protocols are not enabled and no explicit cookie consent mechanism is present. Privacy and terms policies exist but GDPR compliance is not explicitly stated. Overall, the site demonstrates high professionalism and trustworthiness with room for security and compliance improvements.

A

AlphaTauri GmbH

alphatauri.com

72

AlphaTauri GmbH operates a premium fashion e-commerce platform focused on innovative textile technologies and purposeful design. The company targets men and women seeking aspirational styles and premium materials, positioning itself as a technologically advanced fashion brand. The website demonstrates a mature digital infrastructure with modern web technologies, comprehensive navigation, and strong branding consistency. Security measures include a valid SSL certificate with HSTS and secure cookie settings, although TLS protocols are not currently enabled. Privacy and terms policies are clearly linked and GDPR compliant, with cookie consent mechanisms in place. The site integrates marketing and analytics tools such as New Relic, Google Tag Manager, Exponea, and Gigya, reflecting a moderate level of user tracking balanced with privacy compliance. Overall, the website presents a professional, trustworthy, and well-optimized online retail experience.

E

Exterro

exterro.net

73

The website demonstrates a generally solid security posture with no critical issues and strong SSL/TLS implementation. However, significant gaps exist in compliance with GDPR and NIS2 regulatory frameworks, reflected by low module scores and several high-severity findings. The absence of fundamental policies such as cookie consent and incident response, coupled with exposure of high-risk services like FTP, present notable operational and reputational risks. Email and DNS security are reasonably well managed, though improvements can be made to further reduce threat vectors. Security headers are mostly configured correctly, but minor enhancements would strengthen protection against common web-based attacks. Immediate attention to regulatory compliance and incident management will mitigate potential legal and business continuity risks. Overall, the organization should prioritize closing governance and policy gaps to improve resilience and trust with customers and regulators.

N

NORGATE.LV SIA

norgate.lv

49

The website exhibits a weak overall security posture with critical gaps in privacy compliance, security headers, and core security policies. There is a critical GDPR compliance failure due to the absence of privacy and cookie policies, as well as no cookie consent mechanism, exposing the business to regulatory and reputational risks in the EU market. Security headers are largely missing, increasing vulnerability to common web-based attacks such as clickjacking, cross-site scripting, and data injection. The SSL/TLS configuration is suboptimal with weak keys and impending certificate expiration, risking data interception and trust issues. Absence of a formal information security framework, incident response plan, and security documentation further increases operational risks and slows incident handling. Exposure of high-risk services like FTP and lack of DNSSEC can be exploited by attackers to gain unauthorized access or manipulate traffic. While email security and DNS health scores are relatively better, they still require improvements to prevent spoofing and domain abuse. Overall, the website is at high risk for security breaches, non-compliance fines, and damage to customer trust unless prompt remediation occurs.

V

Velocity Frequent Flyer Pty Limited

velocityfrequentflyer.com

68

The website demonstrates a moderate security posture with no critical vulnerabilities detected but multiple high and medium-risk issues that expose the organization to regulatory, reputational, and operational risks. Key weaknesses lie in missing essential security headers, lack of compliance with GDPR requirements, and absence of fundamental NIS2 cybersecurity governance frameworks. While foundational network and email security measures are strong, gaps in security policy documentation, incident response readiness, and privacy transparency present significant business risks. Failure to implement privacy policies and consent mechanisms may lead to regulatory fines and loss of customer trust. Additionally, missing headers like Strict-Transport-Security and Content-Security-Policy increase exposure to man-in-the-middle and cross-site scripting attacks. The organization should prioritize closing these gaps to protect sensitive information, ensure regulatory compliance, and maintain customer confidence. Immediate remediation combined with policy development and communication enhancements is essential to strengthen overall security posture.

W

WEB.DE

web.de

68

The website's overall security posture reveals significant compliance and governance gaps, particularly concerning GDPR and NIS2 regulatory requirements, which present substantial legal and reputational risks. While technical controls such as SSL/TLS encryption, email security, DNS health, and network security are generally strong, critical deficiencies in privacy policies, cookie management, and incident response frameworks undermine stakeholder trust and regulatory compliance. The absence of a cookie consent banner and adequate privacy measures for EU users exposes the business to potential fines under GDPR. Additionally, the lack of documented security policies, incident response procedures, and business continuity planning under NIS2 regulations increases operational vulnerability to cyber incidents. Security headers are improperly configured, which can lead to exploitation of common web vulnerabilities. Immediate remediation is essential to mitigate legal penalties, safeguard customer data, and maintain business continuity. Addressing these issues will strengthen compliance posture and enhance overall cybersecurity resilience.

C

Cleartrip

cleartrip.com

70

The website demonstrates a strong foundation in core network, email, and SSL/TLS security, evidenced by high scores in these areas. However, significant gaps exist in web security headers, GDPR compliance, and adherence to NIS2 security standards, exposing the business to regulatory risks and potential reputational damage. Critical privacy policies and user consent mechanisms are missing, which can lead to non-compliance fines and loss of customer trust. The absence of an incident response plan and security policy documentation further increases operational risk in the event of a security breach. Additionally, missing key HTTP security headers weakens defenses against common web-based attacks. While DNS security is generally healthy, the lack of DNSSEC implementation leaves potential vulnerabilities unmitigated. Overall, the website requires urgent attention to governance, compliance, and web security controls to minimize legal, financial, and operational risks.

A

Amazon.com, Inc.

amazonpay.in

70

The website demonstrates a generally strong technical security foundation with excellent SSL/TLS and network security postures and solid email security and DNS health scores. However, significant gaps exist in compliance with GDPR and NIS2 regulatory frameworks, posing substantial legal, reputational, and operational risks. Critical deficiencies include the absence of key privacy policies, cookie consent mechanisms, and comprehensive security governance documentation such as incident response and security policies. Security header configurations are suboptimal but represent a lower risk compared to compliance failures. The lack of vulnerability disclosure policies and business continuity planning further exposes the organization to prolonged downtime and unaddressed security incidents. Addressing these compliance and governance issues is essential to mitigate regulatory penalties, build customer trust, and ensure resilience against cyber threats. Immediate remediation will strengthen the overall security posture and align the organization with industry best practices and legal requirements.

G

Gadgets 360 German

gadgets360.de

53

The website exhibits significant security and compliance gaps, particularly in privacy, email authentication, and regulatory adherence. Critical issues include lack of GDPR compliance for EU operations and absence of essential email authentication mechanisms, exposing the business to legal risks and email-based attacks. Security headers are inadequately configured, increasing vulnerability to common web attacks such as clickjacking and content sniffing. Organizational security policies and incident response plans are missing, which undermines the ability to manage and recover from security incidents effectively. While network security and SSL/TLS configurations are relatively strong, foundational improvements in security frameworks and privacy policies are urgently needed. Overall, the current posture presents substantial risk for data breaches, regulatory penalties, and reputational damage. Immediate remediation is necessary to protect customer data, ensure compliance, and maintain trust. Addressing these issues will help align the business with industry best practices and regulatory requirements.

This website has 3 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

This website has 8 security issue(s) identified for improvement. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

B

BforBank

bforbank.com

93

This website has 6 security issue(s) identified for improvement. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

The website demonstrates a generally strong security posture with no critical or high-severity issues detected, reflecting effective baseline security controls. SSL/TLS and network security configurations are robust, scoring 100/100, which helps ensure secure data transmission and resilience against network attacks. However, several medium-severity issues related to compliance and security best practices remain unresolved, including missing security headers, lack of GDPR and NIS2 compliance validation, and DNS security gaps such as absent DNSSEC. Email security is moderate, with a complex SPF record but lacking DKIM signatures, which can increase the risk of email spoofing and phishing. Low-severity issues like missing CAA records indicate room for improvement in certificate management. Addressing these medium-level findings is critical not only to enhance security but also to maintain regulatory compliance and protect brand reputation. Overall, while the site is secure enough to support business operations currently, targeted improvements will reduce risk exposure and strengthen trust with customers and partners.

The website demonstrates a generally strong security posture with no critical or high severity issues detected. SSL/TLS and network security configurations are robust, scoring a full 100, indicating secure encrypted communications and a solid network defense. However, medium-level weaknesses in email security, DNS configuration, and compliance frameworks present notable risks. The lack of DMARC enforcement and missing DKIM records increase the risk of email spoofing and phishing attacks, potentially harming brand reputation and customer trust. DNSSEC absence leaves domain name resolution vulnerable to spoofing or cache poisoning attacks. Additionally, incomplete security headers and failures in GDPR and NIS2 compliance checks indicate gaps in regulatory adherence and security best practices. Addressing these medium-level issues will significantly improve overall security resilience and regulatory compliance, safeguarding both operational integrity and customer data privacy.

The website demonstrates a strong overall security posture with no critical or high-risk issues identified. Key areas such as email security, SSL/TLS configurations, and network security are fully compliant and well managed, reflecting robust protection against common threats. However, several medium-level issues related to security headers, GDPR compliance, NIS2 readiness, and DNS health indicate gaps that could expose the business to regulatory and operational risks. The failure in security headers could weaken defenses against web-based attacks, while lacking DNSSEC and CAA records may increase vulnerability to DNS spoofing and unauthorized certificate issuance. GDPR and NIS2 analysis failures suggest potential non-compliance with important data protection and cybersecurity regulatory frameworks, which could result in legal and financial consequences. Addressing these medium and low-level issues promptly will enhance regulatory compliance, reduce attack surfaces, and strengthen overall resilience. Prioritizing these improvements aligns security efforts with business continuity and reputation protection goals.

The website exhibits a moderate overall security posture with no critical vulnerabilities detected but several high and medium-risk issues that require immediate attention. GDPR compliance is notably weak, scoring 43/100, primarily due to the absence of a cookie policy and consent banner, exposing the business to regulatory risks and potential fines. The NIS2 compliance score is critically low at 25/100, reflecting significant gaps in information security governance, incident response, and security documentation, which could impair the organization’s ability to manage cyber threats and regulatory obligations. Security headers and email security are average but have room for improvement to mitigate common web and email-based attacks. SSL/TLS and DNS configurations are generally strong, but mixed content and missing DNSSEC reduce overall protection. Network security posture is excellent, indicating robust infrastructure defenses. Immediate remediation will reduce legal liability, enhance trust with customers, and strengthen the organization's resilience against cyber threats.

K

Koroyd

koroyd.com

50

The website's overall security posture is currently poor, with critical vulnerabilities that expose the business to significant risks including data breaches and regulatory non-compliance. The absence of HTTPS encryption is a critical flaw, undermining user data confidentiality and trust, while also violating GDPR and NIS2 requirements. Key security headers are missing, increasing the risk of cross-site scripting and data leakage. GDPR compliance is severely lacking, with no cookie policy or consent mechanism, risking legal penalties and reputational damage. The lack of documented security policies, incident response, and business continuity plans highlights operational weaknesses. Email and DNS security are relatively strong, but gaps remain that could be exploited. Immediate remediation is essential to protect customer data, maintain regulatory compliance, and safeguard business continuity. Without urgent corrective actions, the business faces increased risk of cyber incidents and legal consequences.

The website's security posture is currently critically deficient, exposing the business to significant security, compliance, and reputational risks. The absence of HTTPS encryption is a fundamental vulnerability that jeopardizes data confidentiality and integrity, undermining user trust and violating key regulations such as GDPR and NIS2. Additionally, the lack of critical security headers like Strict-Transport-Security, X-Frame-Options, and Content-Security-Policy further increases the risk of attacks such as clickjacking, cross-site scripting, and man-in-the-middle exploits. Compliance gaps are evident with missing privacy policies, cookie consent mechanisms, and incomplete GDPR documentation, heightening the risk of regulatory penalties. The absence of a formal information security framework, incident response procedures, and business continuity planning signals a lack of preparedness for security incidents. While some network security measures are well implemented, the overall low scores in core areas require urgent remediation to protect business assets and maintain customer trust. Immediate action is necessary to address these critical vulnerabilities and align with industry standards and legal requirements.

E

Eve Media

evemedia.fr

40

The website's security posture is critically weak, exposing the business to significant cybersecurity risks and regulatory non-compliance. Key deficiencies include the complete absence of HTTPS encryption, which jeopardizes data confidentiality and integrity in transit, and missing fundamental security headers that protect against common web attacks. The lack of GDPR compliance, such as no privacy or cookie policies and no consent mechanisms, places the business at risk of severe legal penalties, especially as it operates within the EU. Additionally, there is no established information security framework, incident response plan, or security policy documentation, which undermines the organization's ability to manage and respond to security incidents effectively. Email authentication is also poorly configured, increasing the likelihood of phishing attacks and email spoofing. While the network security posture and DNS health show some strengths, these are overshadowed by critical systemic vulnerabilities. Immediate remediation is essential to protect customer data, maintain trust, and comply with regulatory requirements.

S

Saga

saga.co.uk

56

The website saga.co.uk exhibits a severely deficient security posture with critical vulnerabilities, notably the absence of HTTPS encryption, which exposes user data to interception and undermines trust. Additionally, there are significant compliance gaps with GDPR and NIS2 regulations, posing legal and reputational risks to the business. Immediate remediation is necessary to protect customer data, ensure regulatory compliance, and maintain brand integrity.

D

dstecheetah

dstecheetah.com

67

The dstecheetah.com website demonstrates significant security gaps, particularly in foundational web security headers, GDPR compliance, and network security, exposing the business to data breaches, regulatory penalties, and operational risks. While email security and DNS health show relative strength, critical exposures like the publicly accessible MySQL service and missing incident response protocols indicate urgent remediation is needed to protect business assets and customer trust.

The website exhibits a solid foundational security posture with strong SSL/TLS and network security implementations; however, medium-level issues related to security headers, GDPR and NIS2 compliance, email authentication, and DNS security indicate areas of risk that could impact regulatory compliance and trust. Addressing these gaps will enhance data protection, regulatory adherence, and overall resilience against common threats.

R

Ready Logistics

readylogistics.com

64

ReadyLogistics.com currently exhibits significant security gaps, particularly in web security headers, GDPR compliance, and incident response preparedness, resulting in a high overall risk profile despite no critical vulnerabilities detected. Immediate remediation is essential to protect customer data, maintain regulatory compliance, and reduce exposure to web-based attacks. Strengthening these areas will improve trust with clients and partners and reduce potential legal and financial liabilities.

T

Travelpayouts

travelpayouts.com

75

Travelpayouts.com demonstrates a generally sound network and email security posture but exhibits significant gaps in compliance, security governance, and web security headers. Critical areas like incident response, security policies, and GDPR compliance require urgent attention to reduce regulatory risk and improve overall security resilience. Addressing these issues promptly will enhance customer trust and reduce potential legal and operational impacts.

S

Skandinaviska Enskilda Banken AB (publ)

sebgroup.com

71

The website exhibits a generally strong technical security posture in network, SSL/TLS, and email security domains, but significant compliance and governance gaps severely undermine overall risk management. Major deficiencies in GDPR compliance and NIS2-related policies expose the business to regulatory, reputational, and operational risks. Addressing these gaps is critical to ensuring legal compliance, customer trust, and resilient security operations.

The website https://seesam.lv exhibits significant security and compliance gaps, particularly related to missing critical HTTP security headers and inadequate GDPR privacy measures, posing legal and operational risks. While network security and DNS health are strong, the absence of fundamental security policies and incident response procedures exposes the business to potential data breaches and regulatory penalties.

The website baltikums.lv exhibits significant security and compliance gaps, particularly concerning critical GDPR compliance and fundamental security header implementations. These deficiencies expose the business to regulatory penalties, data breaches, and reputational damage, undermining customer trust and operational resilience.

The website https://bizzarodevs.com currently exhibits a high-risk security posture with critical gaps in email authentication, privacy compliance, and security governance. These vulnerabilities expose the business to legal risks, phishing attacks, and potential data breaches, which could severely impact reputation and operational continuity. Immediate remediation is needed to align with industry standards and regulatory requirements.

The website modernizr.com currently exhibits a concerning security posture with multiple high and medium risk issues, particularly in security headers, GDPR compliance, and information security frameworks. While network security and email security show relatively strong performance, critical gaps in privacy policies, SSL configuration, and incident response planning expose the business to regulatory, reputational, and operational risks.

The website https://sidearm.com currently exhibits significant security vulnerabilities, most notably in DNS configuration and email authentication, which pose immediate risks to business operations and reputation. Despite strong SSL/TLS implementation, critical DNS failures and lack of essential email security controls expose the organization to domain hijacking, email spoofing, and regulatory non-compliance.

Yahoo Finance demonstrates a generally stable network and email security posture but exhibits significant gaps in key security frameworks and headers, particularly related to NIS2 compliance and content security policies. The absence of critical documentation and weak SSL configurations expose the platform to potential regulatory and cyber risks, which could impact business continuity and customer trust.

Z

zipForm

zipform.com

60

This website has 11 high-priority security issue(s) that should be addressed promptly. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.