Security Directory

K

Kristensson i Skåne AB

kiskane.se

45

Kristensson i Skåne AB is a specialized consulting firm founded in 2014, focusing on IT and information security, project management, and strategic IT management. The company targets businesses in regulated sectors requiring tailored IT security solutions. Their website reflects a professional small business with a consistent brand and clear contact information, though lacking formal privacy and cookie policies. Technically, the website is built on WordPress using modern frameworks like Bootstrap and jQuery, with moderate performance and good mobile optimization. Analytics are implemented via Plausible, indicating a privacy-conscious approach with minimal tracking. However, the absence of security headers and formal privacy compliance mechanisms suggests room for improvement in security posture. Security-wise, the site uses HTTPS but lacks visible security headers and incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The domain registration aligns well with the business claims, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy and security practices. The risk level is moderate with recommendations to implement privacy and cookie policies, add security headers, and establish incident response contacts to improve compliance and trust.

Roxtec International AB is a global leader in manufacturing flexible sealing solutions for cables and pipes, serving multiple demanding industries worldwide. Their website reflects a mature digital presence with comprehensive product information, engineering tools, and customer support services. The company emphasizes safety, quality, and innovation, supported by ISO 27001 certification and a strong privacy compliance framework. Technically, the site leverages modern technologies including Azure hosting, Google Tag Manager, and OneTrust for cookie consent, ensuring good performance and user experience. Security posture is robust with HTTPS enforcement and monitoring tools, though some HTTP security headers could be enhanced. Overall, Roxtec demonstrates a professional, trustworthy, and compliant online presence aligned with their market leadership.

Varner is a well-established retail company specializing in fashion apparel, operating multiple brand concepts such as Cubus, Dressmann, and Bik Bok. The website targets consumers interested in fashion and job seekers, providing information on available jobs, sustainability efforts, and contact details. The company positions itself as a significant player in the retail sector in Norway, with a focus on sustainability and customer engagement. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, Cookiebot for consent management, and Cloudflare for CDN and security. The site is mobile optimized and uses Google Maps API for location services. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism via Cookiebot, categorizing cookies into necessary, functional, statistics, and marketing. However, explicit security policies and incident response contacts are not found, and security headers are not explicitly detected. The site uses Google Analytics for user tracking with moderate privacy compliance. Overall, the website is professional, trustworthy, and compliant with GDPR requirements regarding cookie consent. Recommendations include publishing explicit security and incident response policies, enhancing security headers, and adding terms of service to improve transparency and trust.

P

Pactumize

pactumize.com

45

Pactumize is a Swedish legal technology company specializing in contract drafting automation and digital negotiation solutions. Their platform targets legal teams and business users who require efficient, remote contract management and negotiation capabilities. The website reflects a niche market position with a SaaS business model offering free trials and demos to attract users. Technically, the site employs modern frontend technologies such as Vue.js and Tailwind CSS, integrates analytics and tracking tools like Google Analytics and FullStory, and implements standard security measures including HTTPS and reCAPTCHA. However, explicit security policies and terms of service are absent, which could be improved to enhance trust and compliance. Overall, the website is professionally designed, mobile-optimized, and provides clear navigation and relevant content, supporting a positive user experience.

O

Ortelius

ortelius.com

52

Ortelius is a Swedish technology consultancy specializing in data readiness and Enterprise AI solutions. The company positions itself as a bridge between business, technology, and subject matter expertise to enable reliable AI-driven business growth. Their services include data infrastructure assessment, digital capabilities development, and AI strategy alignment. The website reflects a professional and focused approach targeting enterprises aiming for digital transformation and AI adoption. Technically, the site is built on WordPress with modern plugins and frameworks such as Elementor and WPForms, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy. The site lacks explicit terms of service and detailed security or incident response policies, which could be areas for enhancement.

C

Cloudmore AB

cloudmore.com

53

Cloudmore AB operates a sophisticated digital commerce platform tailored for managed service providers (MSPs) and related technology sectors. The platform focuses on subscription management, billing automation, and scalable integration solutions that help MSPs streamline operations and enhance customer experience. Positioned as a B2B SaaS provider, Cloudmore targets MSPs, CSPs, distributors, and telcos, offering a comprehensive suite of tools to unify sales, billing, and service delivery processes. The website reflects a mature digital presence with consistent branding and professional content, supported by HubSpot CMS and marketing technologies.

B

Bharat Forge Kilsta

bfkilsta.com

44

Bharat Forge Kilsta is a well-established manufacturing company specializing in heavy forged automotive and transportation components, with a rich history dating back to 1646. As part of the global Bharat Forge Group, it leverages Swedish craftsmanship combined with advanced technology to serve both local and international markets. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some areas like explicit security policies and incident response contacts could be improved. Overall, the domain registration and business information are consistent and trustworthy, supporting the company's legitimacy.

Ö

Östersunds kommun

ostersund.se

44

Östersunds kommun operates as the official municipal government website for the city of Östersund, Sweden, providing comprehensive information and services related to education, care, culture, infrastructure, business, and politics. The website targets residents and visitors, offering e-services, news updates, and contact channels to facilitate community engagement and service delivery. The site holds a strong market position as a trusted government portal with consistent branding and clear communication of municipal functions. Technically, the website is built on the SiteVision CMS platform, utilizing jQuery and standard web technologies. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The presence of cookie consent mechanisms and Google site verification indicates a reasonable level of digital maturity. From a security perspective, the site uses HTTPS and includes some security best practices such as CSRF token placeholders and cookie consent. However, it lacks explicit security headers, published security policies, and incident response contacts, which are areas for improvement. Tracking is performed via Vizzit analytics, with moderate user tracking levels. Overall, the website is professional, trustworthy, and well-suited for its public sector role. Strategic enhancements in security policy transparency and technical security controls would further strengthen its posture and compliance.

The website detonate.se currently serves as a minimal placeholder page announcing the rebranding of the agency Detonate to Fiction, with a redirect to the new domain fictionreal.com. The page contains very limited content, no interactive elements, and lacks any privacy, cookie, or terms of service policies. There is no contact information or business details provided, which limits the ability to assess the company's market position or services from this domain alone. Technically, the site is minimal with no detected scripts, analytics, or security headers, and no HTTPS status was provided, indicating a potentially insecure setup. The security posture is weak due to the absence of HTTPS and security best practices. Overall, the site appears to be a transitional redirect page rather than a fully developed business website.

P

Papirfly

brandmaster.com

57

Papirfly is a technology company specializing in digital asset management and templated content creation solutions designed to empower brands to organize and create content at scale. The company positions itself as a leading SaaS provider in brand content management, serving a broad audience of marketing teams and enterprises. The website demonstrates strong branding consistency, professional design, and clear navigation, supported by notable customer logos and testimonials. Technically, the site is built on WordPress with modern optimization and marketing tools integrated, including HubSpot, Google Tag Manager, and AI-driven analytics services. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security policies and cookie consent mechanisms are absent. Overall, the site reflects a mature digital presence with room for enhanced privacy compliance and security transparency.

C

The Compadres + Cordovan |

cordovan.se

25

The website 'The Compadres + Cordovan' is a minimalistic single-page site primarily featuring a fullscreen video background and a single call-to-action button linking to gritti.se. There is no detailed business description, contact information, or policy documentation present. The site is built on WordPress using the Divi theme and includes standard JavaScript libraries such as jQuery and MediaElement.js. HTTPS is enabled, but no advanced security headers are detected. The absence of privacy, cookie, and terms of service policies, as well as contact details, indicates low privacy compliance and business transparency. Overall, the site appears to be a small-scale or early-stage project with limited digital maturity and security posture.

D

Desenio Group Inc.

desenio.com

53

Desenio Group Inc. operates a large-scale e-commerce platform specializing in Scandinavian-style wall art, including posters, canvas prints, and frames. The company collaborates with artists and offers personalized and AI-generated art creation tools, targeting consumers seeking stylish and affordable home decor solutions. The website demonstrates a mature digital infrastructure built on modern technologies such as Next.js and React, with integrated analytics and marketing tools. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting a positive user experience and business credibility.

NORD DDB is a Nordic full-service creative agency specializing in igniting brand fame and creating emotional connections to drive business growth. The agency positions itself as the top-ranked Nordic agency with a broad portfolio of award-winning clients and diverse marketing capabilities including strategy, creative, digital, PR, and influencer marketing. The website is built using modern technologies such as Next.js and React, with content managed via DatoCMS. However, the current website content is inaccessible due to a client-side application error, limiting the ability to fully assess the user experience and content quality. Security posture is weak based on the absence of security headers and lack of visible HTTPS confirmation. Privacy and cookie policies are missing, and no contact information is available on the accessible page, which impacts trust and compliance. Minimal user tracking is implemented via Plausible Analytics, indicating some privacy consideration. Overall, the site requires technical fixes and enhanced compliance documentation to improve security and user trust.

M

Merchworld

merchworld.se

49

Merchworld is a Sweden-based e-commerce business specializing in designing, producing, and fulfilling merchandise for artists, bands, companies, and start-ups. They emphasize sustainable production and provide third-party logistics and warehousing services. The website is built on Shopify, leveraging modern e-commerce technologies and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Segment Analytics. Social media presence on Instagram and Facebook supports their brand visibility. The site is well-designed with good navigation and mobile optimization, though cookie consent mechanisms are lacking. Security posture is solid with HTTPS and form protection via hCaptcha, but could benefit from enhanced security headers and explicit incident response policies.

S

Södertälje kommun

sodertalje.se

38

Södertälje kommun operates as the official municipal government website for the Södertälje municipality in Sweden, providing a broad range of public services including education, social support, cultural activities, urban planning, environmental management, and political governance. The website targets local residents and citizens, offering access to e-services, news, and contact information. It holds a strong position as a trusted government entity with a large organizational size and a comprehensive service portfolio. Technically, the website employs modern web technologies such as JavaScript frameworks, Google Fonts, Material Icons, and integrates advanced analytics tools including Microsoft Application Insights, Vizzit Analytics, and Confirmit Digital Feedback. The site is built likely on the Episerver CMS platform, optimized for mobile devices, and includes accessibility features. Performance is moderate with good SEO and structured navigation. From a security standpoint, the site enforces HTTPS, uses cookie consent mechanisms, and integrates telemetry for monitoring. However, explicit security headers and a published security policy or incident response contacts are absent. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with GDPR-aligned policies and cookie management. Overall, the website is professionally maintained, trustworthy, and compliant with relevant privacy regulations. Strategic improvements could include enhanced security header implementation and formal vulnerability disclosure processes to further strengthen security posture.

Medinet is a healthcare portal operated by Medical Networks Scandinavia AB, providing scheduling, on-call, educational, and administrative services primarily for medical professionals in Scandinavia. The website serves as a login gateway to these services and targets healthcare staff requiring access to scheduling and educational resources. The business operates in the healthcare sector with a medium-sized presence in Sweden. Technically, the website uses standard web technologies including JavaScript, HTML5, and CSS3, with some security best practices such as CSRF tokens and HTTPS enforcement. However, it lacks visible privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for compliance and trust. The site is accessible without WAF or blocking mechanisms and provides clear contact information, enhancing business credibility.

G

Genexis

tilgin.com

47

Genexis is a medium-sized telecommunications technology company specializing in innovative fiber termination and Wi-Fi home network solutions. The company positions itself as an innovative and award-winning provider, targeting ISPs and businesses requiring advanced fiber and home networking products. Their website reflects a mature digital presence with strong SEO, modern technology stack, and comprehensive content including customer success stories and sustainability achievements. Technically, the site is built on WordPress with popular plugins and scripts, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, though explicit incident response contacts and vulnerability disclosure policies are not found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and compliance.