Security Directory

A

Advania

advania.no

66

The website demonstrates a moderate overall security posture with no critical vulnerabilities but multiple high and medium-risk issues that could expose the business to regulatory penalties, reputational damage, and security breaches. Key weaknesses are evident in compliance with GDPR and NIS2 requirements, including the absence of privacy policies, cookie consent mechanisms, and formal security frameworks. Missing essential security headers and weak SSL configurations increase the risk of web-based attacks and data interception. While network and email security are robust, the gaps in policy documentation and incident response readiness pose significant operational risks. Immediate attention to regulatory compliance and cryptographic standards is necessary to protect customer data and ensure business continuity. Overall, the environment requires a focused remediation plan to elevate both security controls and governance policies to industry standards. Addressing these issues proactively will reduce legal exposure and enhance customer trust.

A

Advania

advania.fi

60

The website's overall security posture is concerning, with critical and high-severity issues particularly in privacy compliance and information security management. The absence of fundamental GDPR elements such as a Privacy Policy, Cookie Policy, and Consent Banner exposes the business to legal and regulatory risks, especially as it operates in the EU market. Additionally, missing key security headers and lack of a formal information security framework indicate vulnerabilities to common web-based attacks and operational risks. While SSL/TLS configuration and network security posture are strong, deficiencies in email security and DNS settings further weaken the defense-in-depth strategy. The lack of incident response and business continuity planning raises concerns about the organization's readiness to handle security incidents. Immediate remediation is required to mitigate potential financial, reputational, and compliance damages. Prioritizing privacy compliance and establishing a robust security governance framework will provide significant risk reduction and stakeholder confidence.

A

Advania

advania.dk

59

The website's overall security posture is concerning, with critical and high-severity issues predominantly in GDPR compliance, security headers, and information security governance. The absence of basic privacy policies and consent mechanisms exposes the business to regulatory and reputational risks, especially within the EU. Security headers are inadequately configured, increasing the risk of common web-based attacks such as clickjacking and content spoofing. Furthermore, missing security framework documentation, incident response plans, and vulnerability disclosure policies indicate a lack of mature cybersecurity governance, elevating operational risks. SSL/TLS weaknesses and expiring certificates further threaten secure communications and user trust. While email security and network security show strong scores, critical gaps in legal compliance and technical controls must be addressed urgently. Immediate remediation will reduce legal liabilities, protect customer data, and strengthen overall resilience against cyber threats.

A

Advania

advania.com

65

The website demonstrates a moderate security posture with no critical vulnerabilities detected; however, multiple high and medium severity issues indicate significant gaps in both technical and compliance areas. Key concerns include missing essential security headers, weak SSL/TLS configurations, and poor GDPR compliance such as absence of privacy and cookie policies, which expose the business to legal and reputational risks. Additionally, the lack of an information security framework and incident response procedures under NIS2 regulations suggests unpreparedness for cyber incidents, increasing operational risk. While network security and email security are strong points, foundational policies and controls require urgent attention to safeguard data and maintain regulatory compliance. Addressing these vulnerabilities will reduce the risk of data breaches, regulatory penalties, and customer trust erosion. Immediate remediation efforts should focus on compliance documentation, security policy implementation, and improving encryption standards. Overall, the business must prioritize governance, risk management, and technical controls to strengthen its cybersecurity resilience and regulatory standing.

C

Casted

casted.us

69

The website demonstrates a moderate security posture with no critical vulnerabilities but several high and medium severity issues that could expose the business to regulatory, reputational, and operational risks. Key deficiencies exist in GDPR compliance, NIS2 security governance, and SSL/TLS configurations, which could lead to legal penalties and undermine customer trust. Missing essential security headers increase the risk of web-based attacks such as clickjacking and cross-site scripting. The absence of incident response and security policies indicates immature cybersecurity governance, potentially prolonging recovery times after an incident. Although email and network security are strong, foundational security practices require urgent attention to safeguard sensitive customer data and ensure regulatory compliance. Immediate remediation will strengthen the company's defenses, reduce legal exposure, and improve overall resilience. Prioritizing these gaps aligns security efforts with business continuity and customer trust imperatives.

V

Virtuous Software

virtuous.org

69

The website demonstrates a moderate overall security posture with no critical vulnerabilities detected but multiple high and medium priority issues that expose it to significant risk. Key weaknesses lie in missing essential security headers, lack of GDPR compliance measures, and inadequate implementation of NIS2 security frameworks, which collectively threaten data protection and regulatory adherence. SSL/TLS configurations need urgent improvement due to weak key lengths and impending certificate expirations, increasing susceptibility to interception. DNS and network security are relatively strong, and email security is excellent, providing a solid foundation in those areas. However, the absence of incident response procedures and security policy documentation highlights a lack of preparedness for security incidents. The missing cookie policy and consent mechanisms further expose the business to legal and reputational risks under data privacy regulations. Addressing these issues promptly will strengthen the website’s defenses, ensure compliance, and safeguard customer trust.

C

Consensus Sales, LLC

goconsensus.com

73

The website demonstrates a moderate overall security posture with no critical issues but several high and medium severity vulnerabilities that require urgent attention. Key gaps exist in security headers, GDPR compliance, and especially in adherence to NIS2 requirements, indicating insufficient information security governance and incident response preparedness. Missing Content-Security-Policy and Permissions-Policy headers expose the site to client-side attacks, while the absence of a cookie consent banner and incomplete privacy documentation risk regulatory non-compliance and potential fines. SSL/TLS and network security are strong areas, but upcoming certificate expiry and missing DNSSEC present risks to data integrity and trust. Email security shows room for improvement with missing DKIM signatures, which could affect email authenticity. Addressing these issues will strengthen both the technical defenses and regulatory compliance, reducing the risk of data breaches, reputational damage, and legal penalties.

W

WorkSpan, Inc.

workspan.com

70

The website demonstrates a moderate security posture with no critical vulnerabilities detected, but multiple high and medium severity issues significantly undermine its overall security and regulatory compliance. Key weaknesses include missing critical HTTP security headers, lack of GDPR-compliant cookie policies, and an absence of foundational NIS2 security governance such as incident response and security documentation. While email security, SSL/TLS, DNS health, and network security show strong performance, gaps in security headers and compliance frameworks expose the business to risks including clickjacking, cross-site scripting, data privacy violations, and regulatory penalties. The absence of a formal information security framework and incident response procedures increases exposure to operational disruption and reputational damage. Immediate remediation is essential to strengthen defenses and meet legal obligations. Addressing these issues will reduce the risk of data breaches, improve customer trust, and ensure regulatory compliance, safeguarding business continuity and brand reputation.

A

Acentra Health

acentra.com

65

The website's overall security posture reveals significant gaps in compliance and foundational security controls, particularly concerning regulatory requirements and cryptographic protections. While no critical vulnerabilities were found, multiple high and medium severity issues pose material risks to data privacy, legal compliance, and customer trust. Key weaknesses include missing security headers, lack of GDPR-compliant cookie policies and consent mechanisms, absence of formal information security and incident response frameworks, and weak SSL/TLS configurations. Conversely, network security and DNS health show relatively strong scores, indicating some effective controls are in place. The deficient NIS2 compliance score highlights the urgent need for documented security policies and incident handling procedures. Immediate remediation will reduce exposure to data breaches, regulatory penalties, and reputational damage. Investment in security governance and cryptographic standards is needed to align with industry best practices and legal mandates.

C

CNECT

cnectgpo.com

65

The website demonstrates a moderate security posture with no critical issues but several high and medium-risk vulnerabilities across key domains. Significant gaps exist in security headers, GDPR compliance, and adherence to NIS2 cybersecurity standards, exposing the business to regulatory, reputational, and operational risks. Missing essential headers like Strict-Transport-Security and Content-Security-Policy weaken defense against common web attacks. GDPR-related deficiencies, including lack of a cookie policy and consent mechanisms, risk non-compliance penalties. The absence of documented security policies, incident response, and business continuity plans under NIS2 further increases exposure to cyber threats and operational disruptions. SSL/TLS configurations are suboptimal with weak key length and upcoming certificate expiry, potentially compromising secure communications. Encouragingly, network security and email security show relatively strong scores, indicating some foundational controls are in place. Immediate remediation focused on regulatory compliance and critical security controls will substantially reduce risk and improve trustworthiness.

B

Bricz

bricz.com

64

The website demonstrates significant security and compliance gaps, particularly in foundational security headers and regulatory adherence, which expose the business to increased risk of data breaches, regulatory penalties, and reputational damage. Although no critical vulnerabilities were found, multiple high and medium risk issues related to missing security headers, incomplete GDPR compliance, and absence of essential NIS2 security frameworks indicate inadequate protection and governance. Email security and network security show relatively strong posture, but weaknesses in SSL/TLS management and DNS configuration could impact trust and data integrity. Immediate attention is needed to establish security policies, incident response capabilities, and enforce data protection measures to align with industry standards and regulations. The low scores in security headers, GDPR, and NIS2 compliance highlight urgent areas that require remediation to safeguard customer data, maintain regulatory compliance, and ensure business continuity. Overall, the website’s security posture is currently insufficient for high-risk operational environments and requires prioritized remediation to reduce exposure and improve stakeholder confidence.

S

ShowingTime+

showingtime.com

67

The website demonstrates a moderate overall security posture with strong network security and solid SSL/TLS and email security implementations. However, significant gaps exist in compliance and governance areas, particularly concerning GDPR and NIS2 regulatory requirements, which present considerable legal and reputational risks. The absence of fundamental privacy policies, cookie consent mechanisms, and incident response procedures exposes the business to potential regulatory penalties and customer trust erosion. Missing critical security headers like X-Frame-Options increases susceptibility to web-based attacks such as clickjacking. While core infrastructure like DNS and SSL is generally well-managed, some improvements are needed to maintain robust protection. Immediate focus on establishing comprehensive privacy and security policies, alongside addressing critical security headers, will substantially improve risk posture. Without remediation, these vulnerabilities could lead to data breaches, compliance violations, and operational disruptions impacting business continuity and customer confidence.

O

Osano, Inc.

trusthub.com

71

The website demonstrates a generally stable security posture with no critical vulnerabilities detected and strong scores in SSL/TLS and network security. However, significant gaps exist in compliance-related areas, notably GDPR and NIS2 regulatory requirements, which expose the business to legal and operational risks. Missing cookie policies, consent mechanisms, and privacy policy issues create potential non-compliance liabilities under data protection laws. Additionally, the absence of documented security policies, incident response procedures, and security contact information undermines the organization's ability to effectively manage security incidents and regulatory audits. Security headers are partially implemented but lack key protections, increasing the risk of clickjacking and cross-site scripting. Email security is reasonably well configured but can be improved with DKIM and DMARC enhancements. DNS security is good but would benefit from enabling DNSSEC and configuring CAA records to prevent unauthorized certificate issuance. Overall, the company should prioritize compliance maturity and governance to reduce business risk while reinforcing technical controls.

A

Allworth Financial

allworthfinancial.com

93

The overall security posture of the website is solid with no critical issues detected, and strong performance in email security, SSL/TLS, and network security modules. However, there are notable medium and high-risk concerns primarily related to DNS configuration and regulatory compliance. The most pressing issue is an unregistered MX record, which can lead to email delivery failures and potential exposure to phishing or spoofing attacks. Additionally, failure to enable DNSSEC and configure CAA records weakens DNS integrity and increases exposure to domain hijacking. The absence of key security headers and incomplete GDPR and NIS2 compliance analyses indicate gaps that could impact regulatory adherence and increase vulnerability to certain web-based attacks. Addressing these issues will significantly improve security posture, regulatory compliance, and trust with customers and partners. Immediate remediation of DNS configuration issues is critical to maintaining business continuity and safeguarding brand reputation.

U

USLI

usli.ca

63

The website's overall security posture reveals significant vulnerabilities, particularly in foundational security controls and regulatory compliance. While no critical issues were found, numerous high and medium severity gaps exist, notably in security headers, GDPR compliance, and adherence to NIS2 requirements. The absence of key HTTP security headers like Strict-Transport-Security and Content-Security-Policy exposes the site to common web attacks such as clickjacking and cross-site scripting. GDPR non-compliance, especially lacking cookie policies and consent mechanisms, risks substantial legal and reputational damage. NIS2 deficiencies, including missing security policies and incident response plans, indicate unpreparedness for managing cybersecurity incidents. However, email security, SSL/TLS configurations, DNS health, and network security demonstrate comparatively better maturity. Immediate remediation is essential to mitigate risk exposure, protect customer data, and align with regulatory frameworks. Addressing these weaknesses will enhance trust, reduce liability, and strengthen the organization's cybersecurity resilience.

F

Fabi AS

fabi.no

42

The website exhibits a severely weak security posture with multiple critical vulnerabilities that expose the business to significant risk. The absence of HTTPS encryption is a critical failure, undermining data confidentiality and user trust, and violating key regulatory requirements such as GDPR and NIS2. There is a lack of foundational security policies and procedures, including incident response, security framework, and vulnerability disclosure, which impairs the organization's ability to detect and respond to threats. Privacy compliance is inadequate, with no privacy or cookie policies and no consent mechanisms, risking regulatory penalties and reputational damage. Security headers are poorly implemented, increasing exposure to common web attacks like clickjacking and cross-site scripting. Email security is incomplete, lacking enforcement of DMARC and missing DKIM records, increasing the risk of phishing and domain spoofing. DNS security is moderately strong but can be improved. Network security posture is good, indicating some positive controls in place. Immediate remediation is essential to protect sensitive data, comply with regulations, and maintain customer trust.

The website's security posture is currently poor and exposes the business to significant risks, including data breaches, regulatory non-compliance, and operational disruptions. Critical vulnerabilities such as the complete lack of HTTPS encryption and exposure of critical services like MySQL and FTP pose immediate threats to data confidentiality and integrity. Missing key security headers and policies increase the likelihood of web-based attacks such as clickjacking, content injection, and cross-site scripting. Additionally, the absence of GDPR compliance elements like privacy policies and cookie consent can lead to regulatory penalties and damage to brand reputation. The lack of defined information security frameworks, incident response, and business continuity planning further exacerbates the organization's exposure to cyber threats and slows recovery from incidents. Email security and DNS configurations are moderately strong but require improvements to align with best practices. Overall, urgent remediation is required across infrastructure, compliance, and web application security to protect business assets and customer trust.

R

RG Capital | Allworth Financial

rgcapital.net

66

The website's security posture presents significant risks, primarily due to the absence of HTTPS encryption, which exposes all data transmissions to interception and manipulation. While network security is strong, several medium-level issues such as missing security headers, lack of GDPR and NIS2 compliance, absence of DNSSEC, and incomplete email authentication (no DKIM) indicate gaps in regulatory adherence and protection against common attack vectors. The failure to implement GDPR and NIS2 requirements could lead to legal and financial penalties, impacting business reputation and operations. DNS configuration weaknesses further increase susceptibility to domain spoofing and DNS attacks. Although some areas like network security and CAA records show positive scores, these do not compensate for the critical encryption flaw. Immediate remediation is essential to safeguard customer data, ensure compliance, and maintain trust. A structured approach focusing on encryption, compliance, and authentication will mitigate the most significant risks effectively.

C

Caroline Olds Real Estate

carolineolds.com

68

The website demonstrates a concerning security posture with no critical issues but multiple high and medium risk vulnerabilities, primarily related to missing security headers, insufficient GDPR compliance, and lack of key NIS2 security frameworks. The absence of crucial HTTP security headers such as Strict-Transport-Security and Content-Security-Policy exposes the site to man-in-the-middle attacks, clickjacking, and cross-site scripting risks. GDPR non-compliance, including the lack of a cookie consent banner and incomplete privacy policies, poses legal and reputational risks, especially in jurisdictions enforcing data protection laws. Additionally, the site lacks documented security policies, incident response plans, and business continuity procedures required under the NIS2 directive, increasing operational risk and regulatory exposure. SSL/TLS configurations are suboptimal, with weak key lengths and impending certificate expiry risking data confidentiality and trust. DNS security is moderate but could be strengthened by enabling DNSSEC and configuring CAA records. While email and network security appear robust, the overall low scores in security headers and NIS2 compliance indicate urgent remediation is necessary to protect business assets and maintain customer trust.

S

Starlight Analytics

starlightanalytics.com

74

Starlight Analytics demonstrates a moderate security posture with strong email security and network defenses but exhibits significant gaps in compliance and governance frameworks, particularly related to GDPR and NIS2 requirements. The absence of critical policies and headers exposes the business to regulatory risks and potential security vulnerabilities that could impact customer trust and operational resilience.

U

USLI

usli.com

61

The website usli.com demonstrates significant security weaknesses, particularly in foundational security headers, GDPR compliance, and overall information security governance, resulting in a concerning overall risk posture. While network security and email security are relatively strong, critical gaps in SSL/TLS configuration, security policies, and privacy practices expose the business to potential data breaches, regulatory penalties, and reputational damage.

P

Privatam

privatam.com

57

The website https://privatam.com exhibits significant security weaknesses, particularly in foundational security headers, GDPR compliance, and organizational security policies, resulting in a high overall risk despite the absence of critical vulnerabilities. Immediate attention is required to address missing security controls and regulatory requirements to protect user data, maintain trust, and avoid potential legal and reputational damage.

F

Foundation Marketing

foundationinc.co

66

The website foundationinc.co currently exhibits significant security and compliance gaps, with critical omissions in security headers, GDPR compliance, and organizational security policies that expose the business to data breaches, regulatory penalties, and reputational damage. While network security and email security show relative strength, the overall security posture is weak and requires urgent remediation to protect sensitive data and ensure regulatory adherence.

The website https://events365.com exhibits significant security gaps, particularly in HTTP security headers, GDPR compliance, and information security governance frameworks, leading to a high risk of data exposure and regulatory non-compliance. While network and SSL/TLS configurations are relatively strong, critical omissions in security policies and headers expose the business to potential cyberattacks and legal liabilities.

The website exhibits a generally strong technical security posture in network and SSL/TLS configurations but has significant gaps in governance, compliance, and incident management, particularly related to GDPR and NIS2 requirements. These deficiencies pose regulatory, reputational, and operational risks that could impact business continuity and customer trust.

The website loanspq.com currently exhibits significant security and compliance gaps, particularly in regulatory adherence (GDPR, NIS2) and security policy implementation, resulting in a high risk posture despite having strong network and SSL/TLS configurations. The absence of critical headers, cookie compliance mechanisms, and incident response policies exposes the business to potential data breaches, regulatory penalties, and reputational damage. Immediate remediation is essential to safeguard customer data and maintain trust.

E

Exclusive Networks

exclusive-networks.com

64

The website exclusive-networks.com exhibits significant security weaknesses, particularly in web security headers, GDPR compliance, and NIS2 regulatory adherence, which collectively expose it to data breaches, regulatory penalties, and reputational damage. While network security and email security show strengths, critical SSL/TLS and privacy policy gaps present immediate risks that must be addressed to safeguard business operations and customer trust.

The website demonstrates strong technical security controls in network, SSL/TLS, and email security, but significant gaps exist in governance, compliance (especially GDPR), and security policy frameworks, which expose the business to regulatory risks and potential incident mismanagement. The absence of key security headers and privacy mechanisms further undermines user trust and data protection efforts.

The website convendum.se exhibits significant security and compliance gaps, particularly in privacy and regulatory adherence, resulting in a high-risk posture. While network and TLS configurations are relatively strong, critical missing security headers and lack of GDPR and NIS2 compliance expose the business to legal, reputational, and operational risks.

The website https://xtm.ai currently exhibits significant security and compliance gaps, particularly in GDPR adherence and information security governance under NIS2 frameworks. While network security posture is strong, critical weaknesses in SSL configuration, missing security headers, and lack of essential policies expose the business to regulatory, reputational, and operational risks.

PenguinStrategies.com exhibits significant security and compliance gaps, particularly in privacy policies, incident response, and security headers, which collectively increase legal exposure and risk of cyber incidents. While foundational protections like SSL and DNS are relatively strong, the absence of key security controls and policies undermines the overall security posture and may impact customer trust and regulatory compliance.

The website ops-stars.com currently exhibits significant security gaps, particularly in its security headers, GDPR compliance, and incident response capabilities, resulting in a high overall risk profile. While basic network and DNS security measures are well implemented, the lack of foundational security controls and policies exposes the business to potential data breaches, regulatory penalties, and reputational damage.

The website tnsr.com demonstrates a moderately secure technical infrastructure with strong network and SSL/TLS configurations but exhibits significant gaps in security governance, GDPR compliance, and security header implementation. Critical deficiencies in incident response, security policies, and user privacy practices expose the business to regulatory, reputational, and operational risks. Addressing these areas promptly will strengthen overall security posture and reduce potential liabilities.

The website exhibits a moderate security posture with no critical vulnerabilities but several high and medium risk issues, particularly in governance frameworks and compliance areas such as GDPR and NIS2. While technical controls like email security, SSL/TLS, and network security are strong, significant gaps in security policies, incident response, and privacy compliance present potential business and regulatory risks.

Extensis.com exhibits several significant security gaps, particularly in governance, compliance, and web security headers, which collectively elevate the risk of data breaches and regulatory non-compliance. While foundational network and SSL/TLS configurations are strong, the absence of critical policies and protections exposes the business to operational and reputational risks.