Security Directory

O

One Partners

onepartners.com.br

42

The website's overall security posture is critically weak, exposing the business to significant cyber risks and regulatory non-compliance. The absence of HTTPS encryption is a critical vulnerability impacting data confidentiality and user trust, with cascading effects on GDPR and NIS2 compliance. Multiple missing security headers increase susceptibility to common web attacks such as clickjacking, MIME sniffing, and cross-site scripting. The exposure of critical services like MySQL and FTP without adequate protections further elevates the risk of data breaches and unauthorized access. Additionally, the lack of essential documentation and policies—including privacy, cookie, security, and incident response—exposes the organization to legal and operational risks. Although email security and DNS health scores are relatively strong, they do not compensate for the critical infrastructure and governance gaps. Immediate remediation is necessary to protect sensitive data, maintain customer confidence, and ensure regulatory compliance. Failure to act could result in financial losses, reputational damage, and potential regulatory penalties.

G

GS Monaco

gsmonaco.com

42

The website exhibits a severely deficient security posture, with multiple critical vulnerabilities that expose the business to significant risks including data breaches, regulatory non-compliance, and service disruptions. Most notably, the absence of HTTPS encryption critically undermines data confidentiality and integrity, violating GDPR and NIS2 requirements and risking customer trust and legal penalties. The lack of key security headers such as Strict-Transport-Security, Content-Security-Policy, and X-Frame-Options leaves the site vulnerable to man-in-the-middle attacks, clickjacking, and cross-site scripting. Additionally, missing privacy policies and cookie consent measures expose the business to compliance violations and reputational damage. Network services like FTP and SSH are exposed without adequate protections, increasing the attack surface. Overall, the current state indicates a lack of foundational cybersecurity governance and incident preparedness. Immediate remediation is essential to protect sensitive data, ensure regulatory compliance, and maintain business continuity. Without urgent action, the company risks financial loss, legal sanctions, and erosion of customer confidence.

M

Manens S.p.A.

manens-tifs.it

48

The website's overall security posture is critically weak, primarily due to the absence of HTTPS encryption, which exposes all data transmissions to interception and manipulation. Key security headers that mitigate various web attacks are largely missing, increasing the risk of cross-site scripting, clickjacking, and content sniffing attacks. Compliance with GDPR and NIS2 regulations is significantly lacking, posing legal and reputational risks, particularly due to missing cookie consent mechanisms, insufficient privacy policies, and lack of incident response and security documentation. Although email security and network security are relatively strong, critical deficiencies in web security and regulatory compliance overshadow these strengths. The absence of an information security framework and business continuity planning further jeopardizes operational resilience. Immediate remediation is essential not only to protect sensitive data and privacy but also to maintain customer trust and avoid substantial regulatory penalties. Without prompt and focused improvements, the business faces heightened exposure to cyber threats and compliance violations.

A

Athos Partners

athospartners.com

45

The website's overall security posture is critically weak, exposing the business to significant risks including data breaches, regulatory fines, and reputational damage. The absence of HTTPS encryption is a critical vulnerability affecting secure data transmission and compliance with GDPR and NIS2 regulations. Key security headers are missing, increasing susceptibility to clickjacking, cross-site scripting, and other web-based attacks. The lack of a cookie policy and consent mechanisms further exposes the organization to GDPR non-compliance and potential legal penalties. Additionally, the absence of documented security policies, incident response plans, and vulnerability disclosure processes indicates immature security governance. While email security and network security are relatively strong, foundational web security controls and regulatory compliance require urgent attention. Immediate remediation will protect customer data, ensure legal compliance, and enhance trust with stakeholders.

The website's overall security posture exhibits critical vulnerabilities, notably the absence of HTTPS encryption and lack of email authentication, which pose significant risks to data confidentiality and email integrity. Medium-level issues related to security headers, GDPR compliance, NIS2 alignment, and DNS security measures further weaken the security framework and could lead to regulatory non-compliance and increased attack surface. While network security measures are strong and DNS health is relatively good, the failure to implement foundational protections like SSL/TLS and email authentication undermines user trust and exposes the business to potential data breaches and phishing attacks. Immediate remediation is essential to protect customer data, maintain regulatory compliance, and uphold the organization's reputation. Addressing these gaps will also support long-term security resilience and business continuity. The current email security score (75/100) and DNS health score (85/100) indicate room for improvement despite some positive aspects. Prioritizing encryption and authentication will deliver the highest security and business impact benefits. Overall, the assessment reveals critical weaknesses that require urgent and strategic attention.

O

Oceanco

builtbyoceanco.com

50

The website's overall security posture presents significant risks, primarily due to the complete lack of HTTPS encryption, which is flagged as a critical issue across multiple security domains (GDPR, NIS2, SSL/TLS). This exposes the website and its users to data interception and undermines user trust. Additionally, there are severe compliance gaps with GDPR and NIS2 regulations, including missing privacy and cookie policies, lack of cookie consent mechanisms, and absence of essential security governance documents such as incident response and security policies. While network security and security headers are relatively strong, critical foundational elements like encryption and governance are missing, which could lead to regulatory penalties, reputational damage, and increased vulnerability to cyberattacks. The absence of a vulnerability disclosure policy and business continuity planning further exacerbates risks. On a positive note, email security and DNS health receive moderate scores but still require improvements to fully mitigate risks. Immediate remediation is imperative to protect the business, comply with regulations, and maintain customer trust.

F

Federal Hotel

federal-hotel.com

40

The website exhibits a significantly weak security posture with multiple critical vulnerabilities, primarily due to the absence of HTTPS encryption, which exposes all data transmissions to interception and manipulation. Key security headers are missing, increasing susceptibility to common web-based attacks such as clickjacking, MIME sniffing, and cross-site scripting. GDPR compliance is severely lacking, with no privacy or cookie policies, no consent mechanisms, and insufficient contact information, risking regulatory penalties and loss of customer trust. The absence of an information security framework, security policies, and incident response procedures further highlights immature security governance, exposing the business to operational risks and regulatory non-compliance under frameworks like NIS2. Email authentication is inadequately configured, increasing the risk of phishing and email spoofing attacks. While network security and DNS health show some positive aspects, these strengths are overshadowed by critical gaps in encryption and governance. Immediate remediation is required to protect customer data, maintain trust, and comply with legal requirements, thereby safeguarding the business’s reputation and operational continuity.

T

Temenos

avoka.com

49

The website exhibits a severely weak security posture, primarily due to the absence of HTTPS encryption, which is classified as critical across multiple standards including GDPR, NIS2, and SSL/TLS assessments. Key security headers are largely missing, leaving the site vulnerable to attacks such as clickjacking, MIME-type sniffing, and cross-site scripting. Compliance with GDPR and NIS2 regulations is notably deficient, with no cookie consent banner, inadequate privacy policies, and lack of documented security and incident response procedures. While network security and DNS health show some strengths, critical email security measures like SPF records are missing, increasing the risk of email spoofing. The overall risk profile exposes the business to regulatory penalties, reputational damage, and potential data breaches. Immediate remediation is necessary to protect customer data, ensure legal compliance, and maintain trust. Without urgent action, the business faces significant operational and financial risks.

M

Monte Carlo Capital

montecarlocap.com

42

The website's security posture is currently at high risk due to critical vulnerabilities, most notably the absence of HTTPS encryption, which compromises data confidentiality and integrity. Multiple missing security headers expose the site to common web attacks such as clickjacking, cross-site scripting, and MIME-type sniffing. The lack of GDPR compliance elements, including privacy and cookie policies and consent mechanisms, poses significant legal and reputational risks, especially in regulated markets. Deficiencies in NIS2-related controls, such as missing incident response procedures and security policies, indicate inadequate preparedness for cyber incidents. While network security and email security show relatively better scores, critical gaps in SSL/TLS and DNS configurations undermine overall security. Immediate remediation is necessary to protect user data, maintain trust, and avoid regulatory penalties. The current state may deter customers and partners concerned about data protection and compliance.

A

Albanu

albanu.mc

41

The website's security posture is currently poor with multiple critical and high-risk vulnerabilities identified, exposing the business to significant cyber threats and regulatory non-compliance. The absence of HTTPS encryption is a fundamental and critical weakness, undermining data confidentiality and integrity. Key security headers are missing or misconfigured, increasing susceptibility to web-based attacks such as clickjacking, cross-site scripting, and content injection. The lack of GDPR compliance elements, including privacy and cookie policies and consent mechanisms, presents legal and reputational risks, especially for customer data protection. Network security is compromised by exposure of high-risk services like FTP and SSH, which can be exploited for unauthorized access. Additionally, the absence of essential security governance documents and incident response procedures indicates immature security management practices. Immediate remediation is necessary to protect customer trust, comply with regulations, and safeguard business operations. Prioritizing these issues will reduce the risk of data breaches and potential financial and legal consequences.

C

Centurion Bulk

centurionbulk.com

34

The website's overall security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and service disruptions. The absence of HTTPS encryption is a critical vulnerability that undermines all data confidentiality and integrity, putting customer data and business communications at risk. Missing essential security headers such as Strict-Transport-Security and Content-Security-Policy increase susceptibility to common web attacks like man-in-the-middle, clickjacking, and cross-site scripting. Non-compliance with GDPR is evident due to missing privacy policies, cookie consent mechanisms, and third-party privacy disclosures, which can result in heavy fines and reputational damage. Several NIS2 directive requirements are unmet, including lack of incident response, security policies, and business continuity planning, exposing the company to operational risks and regulatory penalties. Network security is compromised by exposing critical services like FTP and MySQL publicly, heightening the risk of unauthorized access. Email security is moderately implemented but lacks enforcement and reporting mechanisms, potentially increasing phishing and spoofing risks. Overall, urgent remediation is needed to protect sensitive data, comply with regulations, and maintain customer trust.

M

Meridian4G

meridian4g.com

54

The website's overall security posture is significantly compromised, primarily due to the absence of HTTPS encryption, which is a critical vulnerability exposing user data to interception and undermining trust. Compliance with GDPR and NIS2 regulations is severely lacking, risking legal penalties and damage to brand reputation. While email security and network security modules score well, major gaps exist in policy documentation, incident response planning, and user privacy protections. The presence of exposed services like SSH and missing security headers further increase the attack surface. DNS security is moderate but can be improved to prevent DNS spoofing attacks. Immediate remediation is essential to safeguard customer data, ensure regulatory compliance, and maintain business continuity. Addressing these critical issues will also boost customer confidence and reduce the risk of costly breaches.

H

Hoozin

hoozin.com

40

The website's overall security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and operational disruptions. The absence of HTTPS encryption is a critical vulnerability that undermines data confidentiality and trust, while missing essential security headers leave the site open to common web attacks such as clickjacking and cross-site scripting. GDPR compliance is severely lacking, with no cookie policy or consent mechanisms, creating legal exposure and reputational damage risks. Network security is compromised by the exposure of high-risk services like FTP and MySQL without adequate protections, increasing the attack surface. The lack of incident response, security policies, and business continuity planning under the NIS2 framework indicates immature security governance. Although email security and DNS health score relatively well, these strengths do not offset the critical deficiencies elsewhere. Immediate remediation is required to protect customer data, maintain regulatory compliance, and safeguard business continuity. Without urgent action, the organization risks financial penalties, loss of customer trust, and potential service outages.

The website's security posture is currently poor, with multiple critical and high-severity issues exposing the business to significant risks including data breaches, regulatory non-compliance, and operational disruptions. The complete lack of HTTPS encryption is a critical vulnerability that undermines all web traffic security and violates GDPR and NIS2 regulations. Key security headers are missing, increasing the risk of cross-site scripting, clickjacking, and data leakage attacks. Additionally, the absence of privacy and cookie policies, as well as consent mechanisms, exposes the organization to legal penalties under GDPR. The lack of documented information security frameworks and incident response procedures further increases the risk of inadequate breach handling and prolonged downtime. Exposed high-risk services like FTP and SSH without proper controls elevate the attack surface. Email security is moderately strong but should be improved with DMARC enforcement. Overall, immediate remediation is essential to protect sensitive data, ensure regulatory compliance, and maintain customer trust.

The website's overall security posture exhibits significant vulnerabilities, with one critical issue and multiple medium-level concerns that collectively expose the business to potential data breaches and regulatory non-compliance. The absence of HTTPS encryption is the most pressing risk, as it undermines data confidentiality and user trust. Additionally, failure to implement essential security headers and email authentication mechanisms like DKIM increases susceptibility to phishing and man-in-the-middle attacks. Compliance gaps relating to GDPR and NIS2 frameworks suggest potential legal and financial repercussions. DNS security can be improved by enabling DNSSEC and configuring CAA records to prevent domain hijacking and unauthorized certificate issuance. Despite a strong network security posture, these deficiencies represent immediate priorities to safeguard sensitive information and maintain regulatory compliance. Addressing these issues will enhance customer trust, protect brand reputation, and reduce the risk of costly security incidents.

The website's current security posture presents significant risks that could impact business operations and customer trust. The most critical issue is the absence of HTTPS encryption, exposing data transmissions to interception and manipulation. Additionally, the exposure of a high-risk service such as Remote Desktop Protocol (RDP) increases the attack surface, potentially leading to unauthorized access. Medium-level issues including missing security headers, lack of DKIM email authentication, and non-compliance with GDPR and NIS2 frameworks further weaken the security stance. The absence of DNSSEC and CAA records can lead to DNS spoofing and unauthorized certificate issuance, respectively. While some modules like email security and DNS health show moderate scores, the overall gaps indicate an urgent need for remediation. Addressing these vulnerabilities will enhance data protection, regulatory compliance, and overall resilience against cyber threats. Immediate action will reduce the risk of data breaches, reputational damage, and potential financial penalties.

The website's overall security posture is concerning due to a critical issue: the absence of HTTPS encryption, exposing users and business data to interception and tampering. While network security is strong, medium-level issues such as missing security headers, lack of DNSSEC, and failure to comply with GDPR and NIS2 requirements indicate gaps in regulatory compliance and security best practices. The lack of DKIM records increases the risk of email spoofing, potentially harming brand reputation and email deliverability. Low-level issues like missing CAA records further reduce the domain's resilience against unauthorized certificate issuance. Immediate remediation is necessary to protect sensitive information, maintain customer trust, and avoid regulatory penalties. Addressing these issues will enhance data confidentiality, integrity, and compliance readiness, thereby strengthening the business’s cybersecurity defenses and reputation.

C

Crédit Foncier

creditfoncier.com

46

The website's overall security posture is critically weak, exposing the business to significant risks including data breaches, regulatory fines, and reputational damage. The absence of HTTPS encryption is the most severe vulnerability, undermining all secure communications and violating multiple compliance requirements. Key security headers are missing or improperly configured, increasing susceptibility to common web attacks such as clickjacking and content injection. GDPR compliance is severely lacking, with missing privacy, cookie policies, and consent mechanisms, which may lead to regulatory penalties. The organization also shows minimal adherence to the NIS2 directive, lacking fundamental security policies, incident response plans, and information security frameworks. Email security is moderately strong but still requires improvements to prevent spoofing and phishing. DNS and network security are relatively better but need enhancements like DNSSEC implementation. Immediate remediation is essential to protect business operations, ensure customer trust, and comply with legal obligations.

H

Hazera

hazera.com

50

The website's overall security posture is currently at significant risk, primarily due to the complete lack of HTTPS encryption, which is critical for protecting data in transit and maintaining user trust. Multiple critical and high-severity issues indicate gaps in compliance with GDPR and NIS2 regulations, including missing privacy and cookie policies, absence of a cookie consent banner, and lack of security documentation and incident response procedures. While email security and network security show strong scores, foundational web security controls such as Content-Security-Policy headers and security frameworks are missing or weak. The absence of HTTPS not only affects security but also business credibility, search engine rankings, and regulatory compliance. Additionally, DNS security enhancements like DNSSEC are not enabled, increasing exposure to DNS-based attacks. The lack of clear privacy policies and consent mechanisms also poses legal and reputational risks. Immediate remediation is essential to safeguard customer data, ensure compliance, and protect the business from cyber threats and regulatory penalties.

W

Wyser

wyser-search.com

47

The website's current security posture is critically weak, with multiple severe vulnerabilities exposing it to significant risk. The absence of HTTPS encryption is a fundamental flaw, affecting data confidentiality and trust, and violates GDPR and NIS2 requirements. Key security headers such as Strict-Transport-Security and Content-Security-Policy are missing, increasing exposure to common web attacks like XSS and protocol downgrade attacks. GDPR compliance is notably poor, lacking essential elements like a cookie policy and consent mechanisms, which can lead to regulatory fines and reputational damage. The absence of documented information security frameworks, security policies, and incident response procedures indicates immature organizational security governance. While email security and network security are relatively strong, this does not compensate for the critical gaps in web application and data protection. Immediate remediation is necessary to protect customer data, maintain regulatory compliance, and preserve business reputation. Without swift action, the organization risks data breaches, regulatory penalties, and loss of customer trust.

S

Sonema

sonema.com

44

The website's overall security posture is critically weak, primarily due to the complete lack of HTTPS encryption, which exposes all data transmissions to interception and undermines trust and compliance. Multiple critical and high-risk issues span security headers, GDPR compliance, and NIS2 regulatory requirements, indicating significant gaps in both technical controls and governance documentation. The absence of essential headers like Strict-Transport-Security and Content-Security-Policy increases vulnerability to common web attacks such as man-in-the-middle and cross-site scripting. Non-compliance with GDPR and NIS2, including missing privacy policies, cookie consent mechanisms, and incident response procedures, exposes the business to legal risks and potential fines. While network security and DNS health show relatively stronger scores, these cannot compensate for foundational security failures. Immediate remediation is necessary to protect sensitive data, maintain regulatory compliance, and preserve customer trust. Without urgent action, the business faces increased risk of data breaches, legal penalties, and reputational damage. Overall, the current state demands prioritized investment in encryption, policy development, and security hardening.

I

Inside Systems A/S

insidesystems.com

50

The website's overall security posture is critically weak, primarily due to the absence of HTTPS encryption, which exposes all data in transit to interception and manipulation. Key security headers are missing, increasing the risk of cross-site scripting, clickjacking, and other web-based attacks. GDPR compliance is severely lacking, with no cookie policy or consent banner, potentially leading to regulatory penalties and loss of customer trust. The absence of an information security framework, incident response procedures, and security policy documentation further exacerbates the organization's vulnerability to cyber threats and operational disruptions. While email and network security are strong, these isolated strengths do not mitigate the critical risks posed by the core deficiencies. The low scores in NIS2 compliance indicate the organization is unprepared to meet mandatory cybersecurity standards, risking legal and financial consequences. Immediate remediation is necessary to protect sensitive data, maintain regulatory compliance, and uphold the company's reputation. Failure to address these issues may result in data breaches, regulatory fines, and significant business disruption.

A

Arcus Consulting LLP

arcus.uk.com

41

The website's security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and reputational damage. The absence of HTTPS encryption is a fundamental flaw impacting data confidentiality and trustworthiness. Key security headers are missing, increasing susceptibility to common web attacks such as clickjacking, content injection, and cross-site scripting. GDPR compliance is severely lacking, with no privacy policy or cookie consent mechanisms, risking legal penalties and loss of customer trust. The lack of an information security framework, incident response, and business continuity planning indicates unpreparedness for cyber incidents. Email security measures like DMARC and DKIM are insufficient, raising the risk of phishing and spoofing attacks. Exposure of high-risk services like FTP further amplifies vulnerability to unauthorized access. Immediate remediation is essential to protect sensitive data, maintain regulatory compliance, and safeguard the business’s reputation.

G

Groupe Banque Richelieu

banquerichelieu.com

42

The website's security posture is currently poor, with multiple critical and high-severity issues significantly increasing business risk. The absence of HTTPS encryption is a critical vulnerability, exposing all data transmissions to interception and undermining customer trust and compliance with regulations. Key security headers are missing, which weakens protection against common web attacks such as clickjacking and cross-site scripting. The lack of GDPR compliance elements like privacy and cookie policies, and consent mechanisms, exposes the business to legal penalties and reputational damage. Additionally, the absence of fundamental NIS2 controls such as incident response procedures, security policies, and a security framework indicates immature security governance. Email authentication mechanisms are partially implemented but need enforcement to reduce phishing risks. DNS security is moderately healthy but could be improved by enabling DNSSEC. Overall, immediate remediation is essential to protect sensitive data, maintain regulatory compliance, and safeguard customer trust.

A

AFIMAC Global

afimacglobal.com

45

The website exhibits a severely weak security posture with multiple critical vulnerabilities that expose the business to significant risks including data breaches, regulatory penalties, and reputational damage. Key deficiencies include the complete lack of HTTPS encryption, absence of essential security headers, and non-compliance with GDPR requirements such as missing cookie policies and consent mechanisms. Furthermore, the organization lacks foundational NIS2 framework elements like incident response procedures and security policy documentation, highlighting immature security governance. While email security and network security show relatively strong scores, critical SSL/TLS and web application security gaps undermine these strengths. Immediate remediation is crucial to protect customer data, ensure regulatory compliance, and maintain trust. Without swift action, the business risks financial loss, legal consequences, and operational disruptions. This assessment clearly indicates the need for urgent investment in web security controls and governance frameworks.

M

Molori Private Collection

molorisafari.com

42

The website's overall security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and reputational damage. Absence of HTTPS encryption is a critical vulnerability, undermining data confidentiality and trust. Key security headers are missing, increasing susceptibility to common web attacks such as clickjacking, content injection, and MIME-type sniffing. GDPR compliance deficiencies, including lack of privacy and cookie policies, place the company at risk of legal penalties. Additionally, the lack of an information security framework, incident response plan, and vulnerability disclosure policy signals immature security governance. Email security is moderately strong but could be improved. DNS configurations are generally good but could be enhanced with DNSSEC and CAA records. Network security posture is solid but insufficient to compensate for fundamental web security gaps. Immediate remediation is essential to protect customer data, ensure regulatory compliance, and maintain business continuity.

I

InspireME Monte Carlo sarl

inspireme-mc.com

40

The website's security posture is currently poor, with multiple critical and high-severity vulnerabilities that expose the business to significant risks, including data breaches, regulatory non-compliance, and reputational damage. The absence of HTTPS encryption is a critical flaw that jeopardizes all data in transit, undermining customer trust and violating GDPR and NIS2 regulations. Missing essential security headers like Strict-Transport-Security and Content-Security-Policy further increase exposure to common web attacks such as clickjacking, cross-site scripting, and content injection. The lack of GDPR compliance elements, including privacy and cookie policies and consent mechanisms, risks regulatory penalties and loss of customer confidence. Additionally, inadequate incident response, security policies, and business continuity planning indicate insufficient preparedness for security incidents. The exposure of high-risk services like FTP, which is inherently insecure, amplifies the attack surface. Overall, immediate remediation is needed to protect sensitive customer data, ensure regulatory compliance, and maintain business continuity.

N

NEOFA

neofa.com

35

The website's security posture is currently poor, exposing the business to significant risks including data breaches, regulatory non-compliance, and reputational damage. Critical issues include the complete lack of HTTPS encryption, which undermines all data confidentiality and integrity. The absence of essential security headers and policies leaves the site vulnerable to common web attacks such as clickjacking, cross-site scripting, and content injection. Furthermore, the lack of GDPR compliance elements such as privacy and cookie policies, and missing consent mechanisms, poses legal risks and potential fines. Deficiencies in NIS2 compliance and incident response planning highlight gaps in organizational readiness to address and recover from security incidents. While network security is strong, foundational elements like DNS health and email authentication require improvement to prevent domain spoofing and phishing. Immediate remediation is essential to protect customers, maintain trust, and comply with legal obligations.

M

Magtor

magtor.tech

34

The website's security posture is critically weak, exposing the business to significant operational, reputational, and compliance risks. The absence of HTTPS encryption across the site is the most alarming vulnerability, leaving all data transmissions unprotected and potentially interceptable by attackers. Critical gaps exist in compliance with GDPR and NIS2 regulations, including missing privacy policies, cookie consent mechanisms, and essential security documentation, which could result in hefty regulatory penalties. Email systems lack fundamental authentication protocols, increasing the risk of phishing and spoofing attacks that could damage brand trust. The website also exposes high-risk services like FTP, which are known vectors for compromise. Additionally, basic security headers are misconfigured or absent, increasing susceptibility to common web-based attacks. Overall, the current security state undermines customer trust and business continuity. Immediate remediation is essential to protect sensitive data, maintain regulatory compliance, and safeguard the company’s digital assets.

M

MTN Bénin

mtn.bj

54

The website exhibits a concerning overall security posture with several critical and high-risk vulnerabilities that expose the business to significant legal, reputational, and operational risks. The absence of HTTPS encryption is a critical flaw, undermining data confidentiality and integrity for all website visitors and users. The lack of foundational GDPR compliance elements, such as a privacy policy and cookie consent banner, further exposes the business to potential regulatory penalties and customer trust erosion. Additionally, the missing security frameworks and incident response plans highlight insufficient readiness to detect and mitigate cyber threats or respond effectively to security incidents. While email and network security postures are strong, fundamental gaps in web security headers and DNS configurations must be addressed. Immediate remediation is needed to protect customer data, ensure regulatory compliance, and safeguard business continuity. Without these improvements, the organization remains vulnerable to data breaches, legal actions, and reputational damage.

N

Nico Rosberg

nicorosberg.com

38

The website's security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and service disruptions. Key deficiencies include the absence of HTTPS encryption, leading to insecure data transmission, and missing fundamental security headers that protect against common web attacks. Additionally, the lack of GDPR compliance elements—such as privacy policies and cookie consent—poses legal risks and potential fines. Network exposure of critical services like MySQL and FTP further increases the attack surface, making unauthorized access more likely. The organization's security governance is underdeveloped, with no formal information security framework, incident response procedures, or vulnerability disclosure policies in place. Although email security and DNS health show moderate maturity, the overall low scores in core security domains highlight urgent remediation needs. Immediate action is required to safeguard business assets, maintain customer trust, and comply with regulatory requirements.

I

ITECO Oil Field Supply Group

iteco-supply.com

38

The website's security posture is critically weak, exposing the business to substantial risks including data breaches, regulatory non-compliance, and reputational damage. The absence of HTTPS encryption is a critical vulnerability that jeopardizes all data transmissions, undermining user trust and violating GDPR and NIS2 requirements. Key security headers are largely missing, increasing susceptibility to common web attacks like clickjacking and cross-site scripting. The lack of fundamental GDPR compliance elements such as a Privacy Policy, Cookie Policy, and Consent Banner further exposes the company to legal penalties. Network services like FTP and SSH are unnecessarily exposed, elevating the risk of unauthorized access. Email security is moderately strong, but critical DNS security measures such as DNSSEC are absent. Overall, urgent remediation is required to protect customer data, ensure compliance with industry regulations, and maintain business continuity.

C

COFIP

cofip.pro

37

The website exhibits a severely weak security posture with multiple critical vulnerabilities that expose the business to significant operational, reputational, and regulatory risks. The absence of HTTPS encryption is the most alarming issue, compromising data confidentiality and violating GDPR and NIS2 compliance requirements. Key HTTP security headers are missing, increasing the risk of client-side attacks such as clickjacking, XSS, and content injection. GDPR compliance is deficient, lacking privacy policies and cookie consent mechanisms, which may result in legal penalties. Network services expose critical ports like MySQL and FTP without adequate protections, creating high-risk attack surfaces. The lack of documented security policies, incident response procedures, and vulnerability disclosure policies further weakens the organization's ability to detect and respond to threats. Email and DNS security are relatively stronger, but the overall risk profile remains critical. Immediate remediation is necessary to safeguard business continuity, customer trust, and regulatory compliance.

C

Capefront Energies

naurexgroup.com

48

The website exhibits a poor overall security posture with critical vulnerabilities significantly impacting data protection and regulatory compliance. The absence of HTTPS encryption is a critical failure, exposing user data to interception and undermining trust. Missing key security headers such as Content-Security-Policy and X-Frame-Options increase the risk of cross-site scripting and clickjacking attacks. GDPR compliance is insufficient due to the lack of a cookie consent banner and incomplete privacy policy, risking regulatory penalties and reputational damage. The site also lacks essential NIS2 mandate elements including security policies, incident response procedures, and a vulnerability disclosure policy, indicating immature cybersecurity governance. Email security gaps, notably the missing DMARC record, increase the risk of phishing and email spoofing attacks. DNS security is relatively strong but could be improved with DNSSEC and CAA record implementation. Overall, urgent remediation is needed to protect customer data, ensure regulatory compliance, and maintain business continuity.

A

Arrow Monaco

arrowyacht.com

40

The website's overall security posture is critically weak, with multiple high and critical risk findings that expose the business to significant threats. The absence of HTTPS encryption is the most severe issue, jeopardizing data confidentiality and integrity, and violating compliance standards such as GDPR and NIS2. Key HTTP security headers are missing or misconfigured, increasing the risk of web-based attacks like clickjacking and cross-site scripting. GDPR compliance is notably deficient, lacking fundamental privacy policies and consent mechanisms, which can lead to legal and reputational consequences. The lack of an established information security framework, incident response procedures, and business continuity planning indicates an immature security governance posture. Network exposure of high-risk services like FTP and SSH further increases the attack surface. While email security and DNS health show moderate strength, critical gaps in encryption and policy frameworks present urgent risks. Immediate remediation is essential to protect sensitive data, maintain customer trust, and ensure regulatory compliance.

A

ACCE International

acceintl.com

47

The website's security posture is currently poor, with multiple critical and high-severity issues significantly increasing risk exposure. The absence of HTTPS encryption critically undermines data confidentiality and trust, exposing users and the business to interception and man-in-the-middle attacks. Key security headers are missing, leaving the site vulnerable to clickjacking, content injection, and cross-site scripting attacks. GDPR compliance is severely lacking, notably the absence of cookie policies and consent mechanisms, risking regulatory penalties and reputational damage. The lack of documented security policies, incident response procedures, and information security frameworks indicates immature security governance. Additionally, exposure of high-risk services like FTP further elevates attack surface risk. While email security and DNS health are relatively strong, the overall environment requires urgent remediation to protect business assets, customer data, and maintain regulatory compliance.

A

ADOM

africasie.mc

44

The website’s current security posture is critically weak, exposing the business to significant risks from data breaches, regulatory penalties, and reputational damage. The absence of HTTPS encryption is a fundamental flaw that jeopardizes all data in transit, violating GDPR and NIS2 requirements and undermining user trust. Essential security headers such as Strict-Transport-Security, X-Frame-Options, and Content-Security-Policy are missing, leaving the site vulnerable to common web attacks like clickjacking and cross-site scripting. GDPR compliance is severely lacking, with no privacy policy or cookie consent mechanisms, increasing legal exposure. The lack of a formal information security framework, incident response, and business continuity plans further weakens the organization's resilience to cyber incidents. While network security and email security show some strengths, critical gaps in encryption and policy documentation overshadow these positives. Immediate remediation is vital to protect sensitive data, meet legal obligations, and maintain customer confidence. Without urgent action, the business risks costly breaches and regulatory fines that could impact operations and brand reputation.

E

Engineering Search Firm

esf.careers

42

The website's security posture is currently weak and exposes the business to significant risks, including data breaches, regulatory non-compliance, and reputational damage. Critical issues such as the absence of HTTPS encryption and missing key security headers leave user data vulnerable to interception and attacks like clickjacking and cross-site scripting. The lack of GDPR compliance elements, including privacy policies and cookie consent mechanisms, further increases legal exposure. Additionally, there is a severe deficiency in adherence to NIS2 requirements, with no security frameworks, incident response plans, or security policies documented. While network security and email security show relatively strong scores, foundational SSL/TLS protections and DNS security features like DNSSEC are inadequate or missing. Immediate remediation is essential to protect sensitive customer information, comply with regulations, and maintain trust. Without swift action, the business risks financial penalties and operational disruptions.

F

FlyPrivate

flyprivate.com

50

The website’s current security posture exhibits significant vulnerabilities that expose the business to substantial risks, particularly due to the absence of HTTPS encryption which is flagged as critical across multiple compliance frameworks including GDPR, NIS2, and SSL/TLS standards. Key security controls such as Content-Security-Policy and X-Frame-Options headers are missing, increasing the risk of web-based attacks like clickjacking and cross-site scripting. Compliance with GDPR is severely lacking, with no cookie policy or consent mechanism in place, potentially exposing the business to regulatory fines and reputational damage. Additionally, the absence of documented security policies, incident response procedures, and vulnerability disclosure mechanisms under NIS2 requirements indicates immature information security governance. While email and network security are strong points, foundational gaps in encryption and security headers undermine overall defenses. The DNS configuration is moderately healthy but could be improved with DNSSEC and CAA records. Immediate remediation is needed to protect customer data, ensure regulatory compliance, and safeguard business continuity. Without prompt action, the business faces operational disruptions, legal penalties, and loss of customer trust.

G

GrowUp Consulting

growup-hr.com

44

The website demonstrates significant security deficiencies, particularly a complete lack of HTTPS encryption, which poses critical risks to data confidentiality and user trust. Missing essential security headers such as Strict-Transport-Security, X-Frame-Options, and Content-Security-Policy increase vulnerability to common web attacks including clickjacking and cross-site scripting. The absence of a privacy policy, cookie policy, and consent mechanisms exposes the business to regulatory non-compliance and potential legal penalties under GDPR. Furthermore, critical gaps in security governance, including missing information security frameworks, incident response procedures, and security policy documentation, indicate immature cybersecurity management. While email security and network security posture are strong, the overall security posture is weak, making the business susceptible to data breaches, reputational damage, and compliance violations. Immediate remediation is necessary to protect customer data, maintain regulatory compliance, and safeguard business continuity. Prioritizing HTTPS implementation and establishing a comprehensive security and privacy framework will significantly enhance risk mitigation. DNS security and some network controls are adequate but insufficient to compensate for the critical issues identified.

The website's overall security posture exhibits significant vulnerabilities that could expose the business to substantial risks. The absence of HTTPS encryption is a critical flaw, jeopardizing data confidentiality and user trust. Several medium-level issues, including missing security headers, inadequate GDPR compliance, lack of DNSSEC, and missing DKIM records, further increase exposure to data breaches and regulatory penalties. While the network security posture is strong, foundational web security controls need urgent attention to protect sensitive data and maintain compliance. Addressing these issues promptly will enhance customer confidence and reduce the risk of cyberattacks and legal repercussions. The current lack of key security protocols may also negatively impact SEO rankings and brand reputation. Immediate remediation of the critical SSL/TLS deficiency should be prioritized, followed by strengthening email and DNS security measures. Ensuring compliance with GDPR and NIS2 directives will safeguard against regulatory fines and improve overall security governance.

The website's security posture is concerning, primarily due to the absence of HTTPS encryption, which critically exposes all data transmissions to interception and manipulation. Several medium-severity issues, including failures in implementing key security headers, GDPR and NIS2 compliance gaps, and missing DNS security features, indicate an elevated risk of data breaches and regulatory non-compliance. Email security measures are partially implemented but lack critical components like DKIM and DMARC reporting, increasing susceptibility to spoofing and phishing attacks. Network security is moderately strong but exposing SSH services publicly can be an entry point for attackers. Overall, the site is vulnerable to both external cyber threats and legal/regulatory repercussions, necessitating immediate remedial action to protect business operations and customer trust.

E

Elkho Group

elkho-group.com

44

The website's overall security posture is critically weak, with multiple high and critical severity issues identified across core security domains. The absence of HTTPS encryption is the most severe vulnerability, exposing all communications to interception and undermining GDPR compliance. Missing key security headers such as Strict-Transport-Security and Content-Security-Policy further increase the risk of web-based attacks like man-in-the-middle, clickjacking, and cross-site scripting. The lack of GDPR-mandated elements like a cookie policy and consent banner exposes the business to regulatory penalties and reputational damage. Additionally, there is a significant deficiency in compliance with the NIS2 directive, with no documented security policies, incident response, or information security framework in place. While email security and DNS health show some strengths, critical gaps remain, including DMARC enforcement and DNSSEC configuration. Immediate remediation is essential to protect sensitive customer data, ensure regulatory compliance, and maintain customer trust. Without prompt action, the business faces increased risk of data breaches, legal sanctions, and operational disruption.

F

Frank Europe GmbH

frankeurope.com

53

The website's overall security posture presents significant concerns, particularly regarding foundational protections and regulatory compliance. Critical issues such as the lack of HTTPS encryption severely expose user data to interception and compromise trust. GDPR compliance is markedly deficient, posing legal and reputational risks due to missing cookie policies, consent mechanisms, and inadequate privacy documentation. The absence of a formal information security framework and incident response plans under NIS2 regulations further escalates operational and compliance vulnerabilities. While network security and email security scores are relatively strong, the missing security headers and weak configurations increase susceptibility to web-based attacks. DNS health is adequate but could be improved by enabling DNSSEC and configuring CAA records. Immediate remediation is essential to protect sensitive data, maintain customer confidence, and avoid regulatory penalties. Addressing these gaps will also enhance the company’s resilience against cyber threats and align security practices with industry standards.

D

DEF

def-online.com

43

The website's overall security posture is critically weak, primarily due to the absence of HTTPS encryption, which exposes all data transmissions to interception and manipulation, undermining both GDPR and NIS2 compliance. Multiple critical and high-severity issues related to missing security headers and lack of key security governance frameworks further expose the business to risks such as clickjacking, cross-site scripting, and data breaches. The absence of privacy and cookie policies, alongside missing consent mechanisms, significantly increases legal and regulatory exposure under GDPR. Additionally, the lack of documented security policies, incident response procedures, and business continuity planning suggests poor operational preparedness for cyber incidents. While email security and DNS health scores indicate some controls are in place, critical gaps remain that could lead to reputational damage, financial penalties, and loss of customer trust. Immediate remediation is essential to safeguard sensitive data, ensure regulatory compliance, and maintain business continuity. Overall, the website requires a comprehensive security overhaul to align with industry best practices and legal requirements.

B

Banque Palatine

palatine.fr

47

The website's security posture exhibits significant critical vulnerabilities, particularly the absence of HTTPS encryption, which poses severe risks to data confidentiality and regulatory compliance. Critical GDPR compliance gaps, including missing privacy and cookie policies and lack of a cookie consent banner, expose the business to potential legal penalties and reputational damage within the EU market. The lack of foundational security policies and incident response procedures further increases operational risk and undermines stakeholder trust. While network security measures appear strong, key headers like X-Frame-Options are missing, increasing susceptibility to clickjacking attacks. Email security and DNS configurations are moderately sound but can be improved to prevent phishing and DNS spoofing threats. Overall, the current state demands urgent remediation to secure customer data, ensure compliance with regulations such as GDPR and NIS2, and protect the business from cyber threats and legal consequences. Addressing these issues promptly will safeguard the organization’s reputation and maintain customer trust.

S

Siamp

siamp.com

40

The website's security posture is currently poor, with multiple critical and high-risk vulnerabilities that expose the business to significant cyber threats and regulatory non-compliance. The absence of HTTPS encryption is the most critical issue, risking data interception and eroding customer trust. Missing key security headers and lack of a Content-Security-Policy increase susceptibility to cross-site scripting and clickjacking attacks. Non-compliance with GDPR and NIS2 regulations, including missing privacy policies, cookie consent, and incident response plans, could lead to legal penalties and reputational damage. Email security protocols are partially implemented but require improvement to prevent spoofing and phishing. DNS security practices are moderate but could be enhanced by enabling DNSSEC and configuring CAA records. While the network security posture is strong, foundational web and regulatory security gaps need urgent addressing to protect business operations and customer data effectively.

E

Eve Media

evemedia.fr

40

The website's security posture is critically weak, exposing the business to significant cybersecurity risks and regulatory non-compliance. Key deficiencies include the complete absence of HTTPS encryption, which jeopardizes data confidentiality and integrity in transit, and missing fundamental security headers that protect against common web attacks. The lack of GDPR compliance, such as no privacy or cookie policies and no consent mechanisms, places the business at risk of severe legal penalties, especially as it operates within the EU. Additionally, there is no established information security framework, incident response plan, or security policy documentation, which undermines the organization's ability to manage and respond to security incidents effectively. Email authentication is also poorly configured, increasing the likelihood of phishing attacks and email spoofing. While the network security posture and DNS health show some strengths, these are overshadowed by critical systemic vulnerabilities. Immediate remediation is essential to protect customer data, maintain trust, and comply with regulatory requirements.

S

Silva International Investments

silvainternational.com

38

The website's overall security posture is critically weak, exposing the business to significant operational, reputational, and compliance risks. The absence of HTTPS encryption is a fundamental flaw, undermining data confidentiality and trust, and contravening GDPR requirements. Key security headers are missing, increasing susceptibility to web-based attacks such as clickjacking, XSS, and content injection. Furthermore, the lack of privacy and cookie policies, alongside missing consent mechanisms, exposes the company to regulatory fines and legal challenges under data protection laws. Critical internal security controls and documentation, including incident response and information security frameworks, are absent, leaving the organization vulnerable to cyber incidents and operational disruptions. The exposure of sensitive services like FTP and PostgreSQL to the internet presents high-risk attack vectors that can lead to data breaches. Although email security and DNS health show moderate maturity, critical gaps like unenforced DMARC and missing DNSSEC reduce overall resilience. Immediate remediation is essential to protect customer data, maintain compliance, and safeguard business continuity.

E

Encore®

psav.com

42

The website's overall security posture is critically weak, with numerous high and critical severity issues identified, particularly in encryption, security headers, and regulatory compliance. The absence of HTTPS encryption represents a fundamental risk, exposing all data exchanges to interception and undermining trust. Key security headers are missing, increasing vulnerability to attacks such as clickjacking, content injection, and cross-site scripting. Compliance with GDPR and NIS2 regulations is severely lacking, with missing cookie policies, consent mechanisms, and security governance documentation, exposing the business to potential legal and financial penalties. While network security and DNS health show relatively better scores, critical gaps remain, especially in email security protocols. Immediate remediation is essential to protect customer data, maintain regulatory compliance, and preserve brand reputation. Without urgent action, the business faces increased risks of data breaches, regulatory fines, and loss of customer trust.