Security Directory

D

DEKRA México

dekra.mx

76

DEKRA México is a leading global expert organization specializing in vehicle inspections, product testing, certification, and environmental protection services. With a presence in over 60 countries and a workforce of approximately 48,600 employees, DEKRA focuses on long-term safety, environmental quality, and compliance. The website reflects a mature digital presence with multilingual support and comprehensive service offerings tailored to businesses and consumers in Mexico and beyond. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, hosted on Azure, with strong security headers and extensive use of analytics and marketing tools. However, the SSL configuration lacks support for modern TLS versions, which is a security improvement opportunity. Privacy and cookie policies are well implemented with consent mechanisms, but explicit security policies and incident response information are absent. Overall, DEKRA México demonstrates a high level of professionalism and trustworthiness in its online presence.

D

DEKRA Korea

dekra.kr

77

DEKRA Korea is a large, well-established service provider specializing in safety, testing, certification, and consulting services primarily in the energy and transportation sectors. As part of the global DEKRA group founded in 1925, it holds a strong market position with a comprehensive portfolio of services including digital product solutions and regulatory updates. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as Nuxt.js and Vue.js, hosted on Azure cloud, with good mobile optimization and accessibility. Security posture is strong with valid SSL certificates and strict security headers, although TLS protocols could be updated for enhanced security. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the company presents a professional and trustworthy online presence aligned with its global brand.

D

DEKRA

dekra.fi

76

DEKRA is a globally recognized expert organization specializing in testing, inspection, and certification services, with a strong presence in Finland and operations in 60 countries. Their website showcases a comprehensive portfolio of services including industrial inspections, non-destructive testing, product certification, vehicle inspections, and advisory and training services. The company positions itself as a trusted partner in safety and sustainability across multiple industrial sectors. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on Azure, and employs advanced security headers and SSL configurations, although TLS 1.2+ is not currently enabled. The site integrates multiple analytics and marketing tools, indicating a mature digital marketing strategy. Security posture is strong with no detected vulnerabilities, but some improvements are recommended, such as enabling modern TLS protocols and enhancing XSS protection. Overall, DEKRA's digital presence reflects a professional, secure, and user-friendly platform aligned with its market leadership in industrial safety and certification.

D

DEKRA

dekra.nl

77

DEKRA is a globally recognized enterprise specializing in safety, testing, inspection, and certification services with nearly 100 years of experience. The company holds a strong market position as a reliable partner across multiple sectors including energy, transportation, healthcare, and manufacturing. Their key services encompass audits, claims and expertise, advisory and training, industrial inspection, product testing, and specialized divisions such as DEKRA People and Rail. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, hosted on Azure, and employs a comprehensive set of analytics and marketing tools, reflecting a mature digital infrastructure. Security-wise, the site enforces strong HTTP security headers, uses a valid SSL certificate, and adheres to best practices, although it lacks enabled TLS versions and could improve X-XSS-Protection settings. Overall, DEKRA demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR and industry standards.

D

DEKRA India

dekra.in

77

DEKRA India is a large, well-established part of the global DEKRA Group, specializing in safety, inspection, certification, and consulting services across multiple industrial sectors including energy, automotive, and manufacturing. The website demonstrates a mature digital infrastructure using modern frameworks like Nuxt.js and Vue.js, hosted on Azure, with strong performance and mobile optimization. Security posture is robust with comprehensive security headers, valid SSL certificates, and a clear cookie consent mechanism, although TLS protocols could be updated and X-XSS-Protection header enabled for enhanced security. The site integrates multiple analytics and marketing tools with good privacy compliance. No explicit incident response or vulnerability disclosure information was found, indicating an area for improvement. Overall, the site reflects a professional, trustworthy, and comprehensive online presence aligned with its market position.

D

DEKRA德凱

dekra.com.tw

77

DEKRA德凱 is a globally recognized independent testing, inspection, and certification (TIC) organization founded in 1925. It operates as one of the largest non-listed TIC experts worldwide, serving diverse industries with a focus on safety and sustainability. With a workforce exceeding 49,000 employees and operations in over 60 countries, DEKRA德凱 offers comprehensive services including automotive testing, IoT cybersecurity compliance, 5G certification, and industrial equipment certification. The company holds prestigious certifications such as ISO 26262 ASIL B and has achieved EcoVadis Platinum status, reflecting its commitment to sustainability and quality. Technically, the website is built on modern frameworks like Nuxt.js and Vue.js, hosted on Azure, and integrates multiple analytics and marketing tools, demonstrating a mature digital infrastructure. Security-wise, the site employs strong HTTP headers, HSTS, and CSP policies, though TLS 1.3 is not enabled, which is a potential area for improvement. Overall, DEKRA德凱 maintains a strong security posture with no critical vulnerabilities detected, supporting its reputation as a trusted global partner in safety and certification services.

D

DEKRA

dekra-uk.co.uk

76

DEKRA UK is a large, well-established service provider specializing in industrial safety, automotive coaching, process safety, certification, claims management, and sustainability services. With a history dating back to 1925, it holds a strong market position as a trusted global partner with comprehensive service offerings. The website is built on modern technologies including Nuxt.js and Vue.js, hosted on Azure, and uses a sophisticated CMS (e-Spirit). Security is robust with strong headers and valid SSL, though TLS 1.2+ is not enabled, which is a potential area for improvement. The site employs multiple analytics and marketing tools with appropriate consent mechanisms, reflecting good privacy compliance. Contact is primarily via forms, with no direct email or phone numbers publicly listed. Overall, the website demonstrates excellent design, content quality, and user experience, supporting DEKRA's brand as a professional and trustworthy entity.

D

DEKRA North America, Inc.

dekra.us

76

DEKRA North America, Inc. is a leading global provider of safety solutions, offering comprehensive testing, inspection, certification, and consulting services across multiple industries including automotive, manufacturing, energy, and healthcare. With over 47,000 employees and significant global revenues, DEKRA holds a strong market position as a trusted partner for safety and compliance. The website demonstrates a mature digital infrastructure utilizing modern frameworks such as Nuxt.js and Vue.js, hosted on Azure, with a well-structured content management system (e-Spirit). Security measures are robust, including strong SSL configurations and comprehensive security headers, although enabling modern TLS protocols and enhancing CSP could further improve security. The site integrates extensive analytics and marketing tools, balanced with clear privacy and cookie policies, reflecting a commitment to user privacy and regulatory compliance. Overall, the website presents a professional, trustworthy, and user-friendly experience aligned with DEKRA's business objectives.

D

DEKRA

dekra.com

77

DEKRA is a globally established enterprise founded in 1925, specializing in safety, security, and sustainability services across multiple sectors including automotive, industrial inspection, cybersecurity, and sustainability advisory. The company operates in over 50 countries, providing comprehensive services such as testing, certification, consulting, and training. Technically, DEKRA employs modern web technologies including Nuxt.js and Vue.js, hosted on Microsoft Azure, with strong performance and mobile optimization. Security measures are robust, featuring strict transport security, secure cookies, and a comprehensive content security policy, though enabling modern TLS versions would enhance security further. The website demonstrates good compliance with GDPR and includes detailed privacy and cookie policies. Overall, DEKRA maintains a high level of professionalism and trustworthiness, supported by extensive certifications and a strong global presence.

U

Uneed

indiehackerquiz.com

63

The website exhibits significant security gaps that expose the business to regulatory, reputational, and operational risks. While there are no critical vulnerabilities, multiple high and medium severity issues indicate insufficient implementation of fundamental security controls, especially within security headers and GDPR compliance. The absence of key HTTP security headers leaves the site vulnerable to common web attacks such as clickjacking, content injection, and cross-site scripting. Non-compliance with GDPR, including missing privacy and cookie policies and lack of consent mechanisms, risks legal penalties and loss of customer trust. The lack of an information security framework, incident response, and business continuity planning under the NIS2 directive further exposes the organization to operational disruptions and regulatory fines. Email and TLS configurations are relatively stronger but still require attention to maintain trust and secure communications. Immediate remediation will improve security posture, support compliance, and protect customer data and business continuity. Prioritizing these issues will reduce the risk of data breaches, regulatory sanctions, and damage to brand reputation.

U

Uneed directories

uneed-directories.com

61

The website’s overall security posture reveals significant gaps, particularly in foundational web security headers, GDPR compliance, and adherence to the NIS2 directive requirements. While there are no critical vulnerabilities, the presence of 11 high and 10 medium severity issues indicates elevated risk exposure. Missing key HTTP security headers such as Strict-Transport-Security and Content-Security-Policy weaken defenses against common web attacks. Compliance-related shortcomings, including absence of Privacy and Cookie Policies and consent mechanisms, expose the business to regulatory penalties and reputational damage. The lack of formalized information security frameworks, incident response, and business continuity plans highlights immature security governance. SSL/TLS configurations need urgent attention due to weak keys and impending certificate expiry, potentially impacting data confidentiality and trust. Network security and DNS configurations are relatively strong, but improvements like DNSSEC adoption can further enhance resilience. Addressing these gaps promptly will improve security posture, reduce risk exposure, and ensure regulatory compliance critical for business continuity and customer trust.

This website has 7 security issue(s) identified for improvement. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

D

Dubai Tell Limited, Geneva Tell SA, Algiers Tell Markets SPA

tell.group

43

The website's security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and operational disruptions. The absence of HTTPS encryption is a critical vulnerability that compromises all data transmissions, severely impacting user trust and violating GDPR and NIS2 requirements. Missing essential security headers further increase susceptibility to common web attacks such as clickjacking, XSS, and content injection. Lack of privacy and cookie policies, as well as the absence of consent mechanisms, place the business at high risk of legal penalties under data protection regulations. Critical services like MySQL and FTP are publicly exposed, providing easy attack vectors for threat actors. Additionally, there is a notable deficit in security governance, including lack of incident response, security policies, and information security frameworks, which undermines the organization's ability to manage and mitigate risks effectively. While email and DNS security show some strengths, these are overshadowed by critical gaps in network and application security. Immediate action is required to address these issues to protect business assets, customer data, and maintain regulatory compliance.

V

VENUS

venus.com

51

The website's overall security posture is critically weak, primarily due to the absence of HTTPS encryption, which exposes all data transmissions to interception and undermines trustworthiness. Compliance with GDPR and NIS2 regulations is severely lacking, with no cookie policies, consent mechanisms, or documented security frameworks in place, putting the business at significant legal and operational risk. While network security and DNS health scores are relatively strong, critical gaps in encryption and incident response capabilities overshadow these strengths. Security headers and email security have moderate scores but require improvements to reduce attack surface and phishing risks. The lack of HTTPS also negatively impacts SEO and customer confidence. Immediate remediation is necessary to protect sensitive information, ensure regulatory compliance, and maintain business continuity. Failure to address these issues could result in data breaches, regulatory penalties, and reputational damage. The current state indicates an urgent need for a strategic security overhaul aligned with industry standards and legal requirements.

K

Kona Bicycle Company USA

konaworld.com

55

The website's overall security posture is currently weak and exposes the business to significant risks, particularly due to the absence of HTTPS encryption, which is critical for protecting data in transit. Compliance with GDPR and NIS2 regulations is severely lacking, putting the organization at risk of legal penalties and reputational damage. While network security and email security show relatively strong scores, foundational gaps such as missing security policies, incident response plans, and consent mechanisms undermine trust and resilience. Security headers are partially implemented but need improvement to enhance browser-based protections. DNS health is adequate but can be strengthened further. Immediate focus is required on encryption, regulatory compliance, and formalizing information security governance to safeguard customer data and ensure business continuity. Failure to address these issues could lead to data breaches, regulatory fines, and erosion of customer confidence.

R

Roshan

roshan.af

67

The website demonstrates a moderate security posture with no critical vulnerabilities detected; however, multiple high and medium severity issues significantly increase its risk profile. Key deficiencies include missing essential security headers, absence of GDPR compliance mechanisms such as privacy and cookie policies, and lack of comprehensive information security governance aligned with NIS2 directives. These gaps expose the business to legal, reputational, and operational risks, including potential data breaches and regulatory penalties. While email security and underlying SSL/TLS configurations are relatively strong, foundational controls like HSTS and DNSSEC are not fully implemented. The presence of an exposed SSH service further amplifies attack surfaces if not properly managed. Immediate attention to governance policies, regulatory compliance, and core web security headers is critical to safeguard customer trust and ensure business continuity. Overall, the assessment underscores a need for a holistic security strategy integrating technical controls and policy frameworks.

C

Chrome Industries

chromeindustries.com

72

ChromeIndustries.com demonstrates a moderate security posture with no critical vulnerabilities but several high-risk issues, particularly around GDPR compliance and foundational security frameworks. The absence of key policies and weak encryption practices expose the business to regulatory risks and potential incident management challenges. Addressing these gaps is essential to protect customer data, maintain regulatory compliance, and uphold brand trust.

FraserYachts.com currently exhibits significant security vulnerabilities, particularly in web security headers, GDPR compliance, and information security governance, placing the business at risk of data breaches, regulatory fines, and reputational damage. While foundational network and email security measures are relatively strong, critical gaps remain in SSL configuration and incident response preparedness that must be addressed promptly to reduce exposure.

D

Dienas Bizness

ekiosks.lv

57

The website ekiosks.lv exhibits significant security and compliance deficiencies, particularly in privacy measures and foundational cybersecurity frameworks, exposing the business to regulatory, reputational, and operational risks. While some network and email security controls are in place, critical gaps like missing GDPR compliance elements and weak SSL configurations undermine overall security posture.

The website https://bizzarodevs.com currently exhibits a high-risk security posture with critical gaps in email authentication, privacy compliance, and security governance. These vulnerabilities expose the business to legal risks, phishing attacks, and potential data breaches, which could severely impact reputation and operational continuity. Immediate remediation is needed to align with industry standards and regulatory requirements.

The website https://icmarketspartners.com currently exhibits a weak overall security posture, with critical gaps in email authentication and essential security headers, alongside significant non-compliance with GDPR and NIS2 regulatory requirements. While network and transport layer protections are relatively strong, the absence of key policies and controls exposes the business to reputational, legal, and operational risks.

J

Jyllands-Posten

jyllands-posten.dk

57

The website jyllands-posten.dk exhibits significant security and compliance deficiencies, particularly in foundational web security headers and GDPR compliance, exposing the business to legal risks and potential cyber threats. While network and email security postures are relatively strong, the absence of critical privacy policies and security frameworks undermines trust and regulatory adherence.

The website https://pepperstonepartners.com exhibits significant security gaps, especially in HTTP security headers, GDPR compliance, and information security governance, resulting in an overall unknown risk rating. While network and email security show relative strength, the absence of critical controls like HSTS, content security policies, and incident response procedures exposes the business to potential data breaches, regulatory penalties, and reputational damage.

The website convendum.se exhibits significant security and compliance gaps, particularly in privacy and regulatory adherence, resulting in a high-risk posture. While network and TLS configurations are relatively strong, critical missing security headers and lack of GDPR and NIS2 compliance expose the business to legal, reputational, and operational risks.

The website https://watchmedier.dk currently exhibits significant security gaps, particularly in foundational security headers, GDPR compliance, and NIS2 regulatory readiness. Although network and email security are relatively strong, the absence of critical policies and protective headers exposes the business to data breaches, regulatory fines, and reputational damage. Immediate remediation is essential to strengthen the security posture and ensure compliance with data protection regulations.

The website https://finanswatch.se exhibits significant security gaps, particularly in email authentication, web security headers, GDPR compliance, and incident response readiness, exposing the business to data breaches, regulatory penalties, and reputational damage. While network and SSL/TLS configurations are relatively strong, critical omissions in security policies and protective headers create substantial risk that must be addressed promptly.

The website exhibits a concerning security posture with multiple high-risk vulnerabilities primarily related to missing essential security headers, inadequate GDPR compliance, and lack of foundational information security policies. While network security and DNS health are strong points, critical gaps in SSL/TLS configuration and absence of incident response frameworks expose the business to potential data breaches, regulatory penalties, and reputational damage.

AtroposJS.com currently exhibits a high-risk security posture with multiple critical and high-severity issues spanning security headers, GDPR compliance, email authentication, and incident management. The absence of foundational security controls and policies exposes the business to data breaches, regulatory penalties, and reputational damage. Immediate remediation is needed to protect user data, ensure regulatory compliance, and secure communication channels.

The website https://framework7.io exhibits a concerning security posture with multiple critical and high-risk issues, particularly in email authentication, security headers, GDPR compliance, and incident response readiness. These vulnerabilities expose the business to data breaches, regulatory penalties, phishing risks, and reputational damage. Immediate remediation is essential to safeguard user data, comply with legal requirements, and maintain customer trust.

The website exhibits a concerning security posture with multiple high and medium risk issues, particularly in web security headers, GDPR compliance, and information security governance. While network security appears strong, critical gaps in privacy policies, SSL configuration, and incident response planning expose the business to regulatory, reputational, and operational risks.

The website https://walgreensspecialtyrx.com exhibits significant security weaknesses, particularly in critical header configurations, compliance with GDPR and NIS2 requirements, and email security protocols. While foundational network security and DNS health are relatively strong, the absence of key security policies and protections poses material risks to data privacy, regulatory compliance, and brand trust.

The website bitgo.ae exhibits significant security gaps, particularly in web security headers, compliance with privacy regulations, and organizational security policies, resulting in an overall high-risk posture. While network security and DNS configurations show relative strength, critical vulnerabilities in email authentication, SSL configurations, and incident response preparedness pose substantial business and reputational risks.