High-risk security reports

P

Página inacessível

apprbs.com.br

30

The website apprbs.com.br currently serves a minimal 'Página inacessível' (Page inaccessible) message with no accessible business content or user interaction features. The DNS configuration shows hosting on Google Cloud infrastructure and email services via Google Workspace with SPF records including Elastic Email. However, the site lacks a valid SSL certificate and does not support HTTPS, representing a critical security vulnerability. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available, indicating the site is either down, under maintenance, or improperly configured. From a technical perspective, the site uses basic HTML5 and CSS with JSON-LD structured data indicating the domain name but no further business details. Performance is moderate but limited by minimal content. SEO is poor due to a malformed robots meta tag set to noindex and lack of metadata. Accessibility and mobile optimization are basic at best. Security posture is weak with no HTTPS, no security headers, no HSTS, and a DMARC policy set to none, exposing the domain to email spoofing risks. No WAF or security challenge was detected, but the site is effectively inaccessible to users. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic recommendations include immediate installation of a valid SSL certificate, enabling HTTPS, improving security headers and policies, publishing privacy and cookie policies, and restoring accessible business content to improve trust and compliance.

A

Atria Design & Inovação

studioatria.com.br

47

Atria Design & Inovação is a Brazilian small design studio specializing in innovation, branding, and digital experience services. The company targets businesses seeking to enhance their brand and user experience through strategic design solutions. Their website showcases multiple client case studies and a clear service offering, positioning them as an innovative design partner in their market segment. Technically, the website uses modern frontend libraries such as Bootstrap, jQuery, and Owl Carousel, hosted on Locaweb, but suffers from slow load times and lacks a CMS or structured data for SEO enhancement. Security posture is weak due to the absence of a valid SSL certificate, no HTTPS support, and missing security headers, exposing the site to significant risks. Privacy compliance is basic with a cookie consent popup and a privacy policy page, but no GDPR-specific indicators or terms of service are present. Overall, the site is professional in design and content but requires urgent security improvements to protect user data and build trust.

M

Madri Lab

madriproducoes.com.br

40

Madri Lab is a Brazilian company specializing in educational technology services, particularly focused on EAD (distance education) and LMS (Learning Management System) platforms such as Moodle. They provide a range of services including hosting, platform customization, web development, and corporate training. The company positions itself as a specialized provider for educational institutions and corporate clients seeking to enhance their online course offerings. Technically, the website is built on WordPress with Elementor and several plugins, hosted likely on AWS infrastructure. However, the site lacks a valid SSL certificate, serving content over HTTP only, which is a significant security concern. The security posture is weak with no HTTPS, no HSTS, and missing security headers, exposing users to potential risks. Privacy compliance is partial with a privacy policy and terms of service present but no cookie consent mechanism. Overall, the site demonstrates moderate digital maturity but requires urgent improvements in security and privacy compliance to protect users and build trust.

L

leadlovers

leadlovers.app

40

Leadlovers is a technology company offering marketing automation and lead generation services primarily through a SaaS platform. The website targets digital marketers and businesses seeking to optimize email marketing and sales funnels. The platform integrates various third-party tools for analytics and user engagement, indicating a moderate level of digital maturity. However, the website suffers from a critical security issue due to the absence of a valid SSL certificate, resulting in no HTTPS protection. This significantly impacts the security posture and user trust. Additionally, the lack of privacy and cookie policies suggests poor privacy compliance. Performance is suboptimal with a slow load time and large page size, which may affect user experience. Overall, while the business model and content quality are good, the technical and security shortcomings present risks that should be addressed promptly.

F

FoccoERP - Sistema de Gestão

foccoerp.com.br

40

FoccoERP is a Brazilian ERP software provider specializing in management systems for manufacturing and distribution companies. The company offers integrated solutions that enhance operational efficiency, reduce costs, and support business growth with AI-driven planning tools. Their market position is strong with over 1000 clients and 20,000 active users, supported by a professional website and active social media presence. Technically, the website is built on WordPress with Elementor and hosted on Hostinger with Cloudflare DNS, but lacks a valid SSL certificate, which is a critical security gap. Security posture is basic with SPF and DMARC configured but no HTTPS or modern TLS protocols enabled. Privacy compliance is partial with a privacy policy and terms of service present but no cookie consent mechanism despite tracking pixels. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

Mozaik Software operates a UK-based e-commerce website offering software subscriptions and online training services. The company targets businesses and professionals seeking specialized software solutions and training. The website is built on WordPress with WooCommerce, indicating a standard e-commerce platform setup. However, the site suffers from slow performance and minimal content, with only a single product listed. Technically, the site uses common marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity, but lacks modern security configurations. Critically, the absence of an SSL certificate means the site is served over HTTP, exposing users to potential risks and undermining trust. Privacy and cookie policies are present but hosted on a third-party domain, which may affect compliance perception. Overall, the site demonstrates basic digital maturity but requires significant improvements in security and performance to enhance user trust and compliance.

A

Arztsuche24.at

arztsuche24.at

40

Arztsuche24.at is an Austrian online healthcare directory providing comprehensive listings of doctors, pharmacies, and health institutions across Austria. The platform offers detailed information including health insurance affiliations, opening hours, directions, and contact details, targeting patients and healthcare seekers within Austria. The site collaborates with Verlagshaus der Ärzte, enhancing its credibility and content quality. Technically, the website is built on WordPress with a custom theme and utilizes common web technologies such as jQuery, Bootstrap, and Leaflet.js for maps. However, the site suffers from a lack of a valid SSL certificate, resulting in no HTTPS support and outdated security protocols, which significantly impacts its security posture. Privacy compliance is addressed through a cookie consent banner and links to comprehensive privacy and terms policies hosted on a partner domain. Overall, while the site provides valuable healthcare information, its security shortcomings and slow performance present risks that should be addressed to improve user trust and compliance.

S

SoSafe

humanfirewallconference.com

40

SoSafe operates the Human Firewall Conference, a leading European cybersecurity event focused on the human factor in security. The company provides cybersecurity awareness training and human risk management services, positioning itself as a key player in the cybersecurity education and event space. The website is professionally designed, content-rich, and targets security professionals and CISOs. Technically, the site uses WordPress CMS, integrates with HubSpot for forms, Matomo and Google Analytics for tracking, and Cookiebot for GDPR-compliant cookie management. However, the site suffers from an invalid SSL certificate and lacks important security headers and DNS security features, which lowers its security posture. Privacy compliance is well addressed with clear cookie consent and a comprehensive privacy policy. Business credibility is strong with clear contact information, social media presence, and trust signals such as testimonials and speaker highlights. Overall, the site is functional and professional but requires improvements in security infrastructure to enhance trust and compliance.

S

SoSafe

sosafe.de

40

SoSafe is a leading European provider of security awareness training and human risk management solutions, serving over 4.5 million users. Their platform leverages behavioral psychology, gamification, and AI to empower employees to recognize and mitigate cyber threats effectively. The company offers a suite of products including personalized e-learning, phishing simulation tools, an AI chatbot named Sofie, and a comprehensive human risk management dashboard. Technically, the website is built on WordPress, uses Cloudflare for hosting and CDN, and integrates marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer. While the site is content-rich, well-designed, and privacy compliant with GDPR and cookie consent mechanisms, it suffers from a critical security issue: an invalid SSL certificate and disabled TLS protocols, which significantly lowers its security posture. The company demonstrates strong trust signals through ISO 27001, TISAX certifications, customer testimonials, and industry awards. Overall, SoSafe presents a professional and credible online presence but must urgently address its SSL/TLS configuration to ensure secure communications and maintain trust.

1

1-2-3-Plakat.de GmbH

123plakat.de

40

1-2-3-Plakat.de GmbH operates a specialized online platform focused on poster advertising across Germany, providing a comprehensive service that includes location selection, printing, and campaign management. The company targets businesses and freelancers seeking effective outdoor advertising solutions, leveraging a large inventory of over 160,000 poster locations. The website is built on TYPO3 CMS and integrates modern marketing and analytics tools such as Google Tag Manager and Google Analytics. Despite a well-structured and content-rich site with good user experience and clear contact information, the absence of a valid SSL certificate and HTTPS significantly undermines the security posture. The site employs cookie consent mechanisms and maintains GDPR-compliant privacy policies, reflecting good privacy compliance. Overall, the business demonstrates solid credibility and market positioning but requires urgent security improvements to protect user data and enhance trust.

P

ProSiebenSat.1 Welt

prosiebensat1welt.de

40

ProSiebenSat.1 Welt was a German Pay TV channel operated under the ProSiebenSat.1 media group, offering entertainment content including TV programs, films, and series. The channel ceased operations at the end of 2023 after nearly two decades. The website serves primarily as an informational and redirect portal to partner channels and provides compliance and legal information. Technically, the site is built using modern web technologies including Next.js and React, hosted likely on AWS infrastructure, and uses Contentful as a CMS. However, the site suffers from a critical security issue: the SSL certificate is invalid or missing, resulting in no HTTPS support, which severely impacts security posture and user trust. No advanced security headers or TLS protocols are enabled, and DNSSEC is not configured. Privacy compliance is addressed with a privacy policy and cookie consent mechanism, but no direct contact information or incident response details are provided. Overall, the site is functional and professionally designed but requires urgent security improvements to protect users and maintain credibility.

J

Joyn

joyn.at

40

Joyn.at is a regional streaming media platform targeting German-speaking users in Austria, Germany, and Switzerland. The service offers video content with geo-restrictions limiting access outside these countries. The website is built using modern web technologies including Next.js and React, hosted on AWS infrastructure. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security concern. Privacy and cookie policies are present, indicating some compliance with GDPR requirements, but no explicit security or incident response policies are found. Overall, the site provides a professional user experience but requires significant improvements in security posture to protect user data and enhance trust.

F

FRIDAY Versicherungen

friday.de

40

FRIDAY Versicherungen is a German digital insurance provider offering flexible and simple online insurance services, including a customer portal (MyFRIDAY) and claims reporting. The company is majority owned by Baloise and has recently ceased offering new insurance products, focusing on servicing existing contracts. The website is built on modern web technologies such as Next.js and Prismic CMS, hosted on AWS infrastructure. While the site provides good content quality, clear navigation, and GDPR-compliant privacy policies, it suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which significantly impacts its security posture. Email authentication is well configured with SPF and DMARC policies. Overall, the site is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to ensure secure communications.

O

ottonova Krankenversicherung AG

ottonova.de

40

Ottonova Krankenversicherung AG is a digitally advanced private health insurance provider based in Germany, founded in 2015. The company offers a range of private health insurance products including full coverage, supplementary dental and hospital insurance, and corporate health insurance, all delivered through a modern app-based platform. Ottonova positions itself as an innovative market player with high customer satisfaction and multiple industry awards. Technically, the website is built on Craft CMS and hosted on AWS infrastructure, employing modern JavaScript frameworks and consent management tools. However, a critical security issue is the lack of a valid SSL certificate and HTTPS support, which significantly impacts the security posture. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. Overall, the website demonstrates strong business credibility and user experience but requires urgent security improvements to protect user data and maintain trust.

V

vedisys AG

vedisys.de

40

vedisys AG is a German software company specializing in providing modular, scalable software solutions for public transport companies (ÖPNV). Their flagship product, AMIS®7, supports multichannel sales, subscription management, ticketing, and customer dialogue platforms. The company has a strong market presence since 1996 and integrates with partner platforms such as mobilityportal® and payment services like Payone. The website reflects a professional and comprehensive digital presence with detailed product information, customer testimonials, and news updates. Technically, the site is built on WordPress with modern plugins and SEO optimizations, but lacks a valid SSL certificate and proper HTTPS configuration, which is a critical security gap. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the security posture is basic and requires urgent improvements to SSL/TLS and security headers to protect user data and enhance trust.

U

Unit M GmbH

unit-m.de

40

Unit M GmbH is a German-based specialist company focused on automating routine tasks in B2B sales and customer service, leveraging over 30 years of industry experience. The company offers a comprehensive suite of services including B2B eCommerce webshops, spare parts shops for mechanical engineering, customer portals, configurators, and IT consulting services. Their market position is strengthened by a solid client portfolio featuring well-known brands and recognized innovation funding. Technically, the website is built on WordPress with the Divi theme, integrating modern tools like Cookiebot for privacy compliance and Matomo for analytics. However, the site suffers from a critical security issue due to an invalid SSL certificate and lack of modern TLS protocol support, which undermines its security posture. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website is professional, content-rich, and trustworthy but requires urgent security improvements to protect user data and maintain credibility.

L

Landitec GmbH

landitec.de

40

Landitec GmbH is a medium-sized German company specializing in high-quality, flexible, and high-performance appliance solutions and services for the B2B sector. They focus on tailored IT security and network solutions, including hardware appliances, virtualization, SD-WAN, and industrial applications. The company holds a strong market position as an OPNsense Platinum Partner and collaborates with several notable technology providers such as Barracuda, 6WIND, and SECUDOS. Their offerings include customized appliances, pre-installed systems, and comprehensive customer support through an online portal. Technically, the website is built on Joomla CMS with Helix Ultimate framework and utilizes modern web technologies including Bootstrap 5 and jQuery. They employ Google Tag Manager and Google reCAPTCHA for analytics and security. However, a critical security gap is the absence of HTTPS/SSL, which significantly impacts their security posture. The site is mobile-optimized with good content quality and SEO practices. From a security perspective, while some security headers are present, the lack of SSL/TLS encryption, HSTS, and modern TLS protocols exposes the site to potential risks. No explicit security or incident response policies were found. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism. Overall, the site is professional and trustworthy in content and business representation but requires urgent security improvements to protect data and enhance user trust.

E

E-MEDIAD GmbH

e-mediad.de

40

E-MEDIAD GmbH is a small, established creative agency based in Cologne, Germany, specializing in digital design, web development, and branding services since 2002. The company targets businesses and startups seeking professional digital and design solutions. Their website showcases a professional design with a rich portfolio and clear navigation, indicating a strong market position in the regional creative services sector. Technically, the website is built on WordPress using Elementor and LayerSlider, with additional plugins for SEO and cookie consent management. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which significantly impacts its security posture. Security headers are well implemented, but the absence of modern TLS protocols and strong cipher suites reduces overall security. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms in place. Contact information and social media presence are clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy but requires urgent improvements in SSL/TLS configuration to meet modern security standards.

E

eCube GmbH

ecube.de

40

eCube GmbH is a German-based software development and consulting company specializing in sustainable software ecosystems and e-commerce architecture. They serve businesses seeking innovative, scalable digital solutions with a focus on technical excellence and long-term planning. Their market position is that of a trusted specialist with strong partnerships and a portfolio of successful case studies. Technically, the website is built on WordPress with modern SEO and multilingual support, though performance optimization is needed due to slow load times. Security posture is strong with HTTPS, valid SPF and DMARC policies, and no critical vulnerabilities detected, but improvements like HSTS and DNSSEC are recommended. Privacy compliance is well addressed with comprehensive cookie consent and GDPR-aligned privacy policies. Overall, eCube demonstrates a professional and trustworthy online presence with clear business and technical maturity.

V

VersicherungsCheck24

versicherungscheck24.de

40

VersicherungsCheck24 is a German-based online insurance comparison portal offering a wide range of insurance products for both private and business customers. The platform provides professional and independent comparisons, helping users find the best insurance tariffs tailored to their needs. The website is built on WordPress using Elementor and integrates modern web technologies such as Alpine.js and Google Tag Manager for analytics and marketing. While the site offers comprehensive content and good user experience, its performance is somewhat slow due to a large page size and many resources. Security posture is adequate with HTTPS and SPF/DMARC configured, but lacks advanced security headers like HSTS and OCSP stapling. Privacy compliance is present with a detailed privacy policy, though no explicit cookie consent mechanism was detected. Overall, VersicherungsCheck24 demonstrates a solid market position in the German insurance comparison sector with a trustworthy and professional online presence.

T

TelemaxX Telekommunikation GmbH

telemaxx.de

40

TelemaxX Telekommunikation GmbH is a well-established provider of high-security data center services, managed IT services, colocation, and telecommunications based in Karlsruhe, Germany. Founded in 1999, the company operates multiple certified data centers and owns a substantial fiber optic network, positioning itself as a regional leader with a strong shareholder base. Their service portfolio includes cloud services, secure telecommunications, and comprehensive managed services tailored to business customers. Technically, the website is built on TYPO3 CMS with modern frameworks and integrates analytics and marketing tools such as Matomo and Google Tag Manager. However, the security posture is impacted by an invalid SSL certificate and lack of advanced security headers, which should be addressed to enhance trust and compliance. Overall, the site demonstrates excellent content quality, professional design, and strong business credibility, though improvements in security and privacy mechanisms are recommended.

C

CyberForum e.V.

cyberlab-karlsruhe.de

40

CyberLab Karlsruhe is a well-established startup accelerator and community hub operating under CyberForum e.V. It offers comprehensive services including founding consulting, accelerator programs, coworking spaces, mentoring, coaching, and investment facilitation. The website targets startups and entrepreneurs primarily in Germany, positioning itself as a key regional player with over 28 years of experience and a large active network. Technically, the site is built on TYPO3 CMS, uses modern TLS protocols, and integrates various frontend libraries and APIs, though performance is hindered by a high number of resources and slow load times. Security posture is adequate with HTTPS and SPF records but lacks advanced features such as HSTS, OCSP stapling, DMARC, DNSSEC, and certificate transparency compliance. Privacy compliance is good with a clear privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and content-rich, but could improve technical and security aspects to enhance user experience and protection.

Security assessment completed with an overall score of 50/100 (unknown risk). 1 critical issues require immediate attention. Total of 12 security findings identified across all modules.

C

Colina Tech

colinatech.com.br

45

Colina Tech is a Brazilian digital marketing agency specializing in SEO, paid traffic, website development, and inbound marketing services. The company serves over 100 active clients across Brazil and holds multiple industry certifications such as Google Partner and Meta Business Partner, positioning itself as a technically proficient and data-driven marketing partner. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern JavaScript libraries and performance optimizations, but lacks HTTPS, which is a critical security shortfall. Security posture is weak due to absence of SSL/TLS, HSTS, and modern TLS protocols, exposing the site to potential risks. Privacy compliance is basic, with no cookie consent mechanism despite use of tracking tools. Contact information is clearly provided, enhancing business credibility. Strategic recommendations include immediate SSL certificate installation, enabling security headers, and implementing privacy consent mechanisms to improve trust and compliance.

E

edu.za

edu.za

45

The edu.za domain is associated with the education sector in South Africa, likely serving as a domain registry or portal for educational institutions. However, the website is currently non-functional, displaying a database connection error that prevents access to any meaningful content or services. The technical infrastructure is minimal, running on Apache with PHP 7.4.33, but lacks modern security configurations such as a valid SSL certificate and TLS support. The absence of security headers, DNSSEC, and email authentication mechanisms further weakens the security posture. There are no visible privacy or cookie policies, contact information, or business details, indicating a lack of transparency and user engagement. Overall, the site exhibits poor performance, accessibility, and security maturity, posing risks to users and stakeholders.

S

SAE University College

sae.edu.au

48

SAE University College is a leading higher education provider specializing in creative media and technology courses across Australia and internationally. It offers a wide range of industry-led programs in Animation, Audio, Design, Film, Games, Music, and related fields. The institution is part of the Navitas Group and holds important accreditations such as TEQSA and CRICOS, positioning it as a reputable player in the education sector. Technically, the website is built on WordPress with modern technologies and integrates multiple marketing and analytics tools, reflecting a mature digital presence. Security-wise, the site supports modern TLS protocols and has some best practices in place but is vulnerable to subdomain takeover and lacks HSTS enforcement, indicating areas for improvement. Overall, SAE University College maintains a professional and trustworthy online presence with comprehensive content and good user experience, though it should enhance its security posture and privacy compliance mechanisms.

S

SoftBank Latin America Fund

latinamericafund.com

46

SoftBank Latin America Fund is a large investment fund established in 2019 by the SoftBank Group to partner with and support technology companies and entrepreneurs in Latin America. The fund focuses on providing capital and hands-on support including talent acquisition, product development, marketing, and governance to foster growth in the region. The website presents a professional and consistent brand image with clear business descriptions and physical office addresses in Miami, Mexico City, and São Paulo. Technically, the site is built on modern React and Gatsby frameworks, leveraging Google Tag Manager and Cookiebot for analytics and cookie consent management. However, the security posture is weak due to an invalid SSL certificate and lack of modern TLS protocols, which undermines trust and exposes visitors to risks. Security headers are partially implemented but critical improvements are needed to meet best practices. Overall, the site demonstrates good digital maturity but requires urgent remediation of SSL and security configurations to ensure safe user interactions and compliance with privacy regulations.

A

ABD – Associação Brasileira de Designers de Interiores

abd.org.br

46

ABD – Associação Brasileira de Designers de Interiores is a well-established Brazilian professional association serving over 15,000 members for more than 44 years. The organization focuses on supporting interior designers through professional development, consulting services, exclusive benefits, educational courses, and events. Their digital presence is built on WordPress with Elementor, providing a modern and user-friendly website experience. However, the site suffers from slow performance and lacks critical security configurations such as a valid SSL certificate and security headers. Analytics and marketing tools like Google Tag Manager and Facebook Pixel are actively used, indicating a moderate level of digital maturity. Despite a strong brand presence and social media engagement, the absence of privacy and cookie policies, as well as security policies, represents compliance and trust gaps.

P

Promob Softwares Solutions

promob.com

50

Promob Softwares Solutions is a leading software developer specializing in the furniture sector, recognized as the largest in the world for this industry. Their comprehensive suite of software solutions covers design, production, sales, and education, targeting a broad audience including carpentry shops, factories, furniture stores, designers, architects, and educational institutions. The company emphasizes innovation and integration across the furniture production and sales lifecycle. Technically, the website is built on a modern WordPress platform using Elementor, supported by a robust tech stack including jQuery, JetElements, and various marketing and analytics tools. The hosting infrastructure leverages Azure DNS services, and the site employs modern SSL protocols (TLS 1.3 and 1.2) with OCSP stapling, ensuring secure communications. Performance is moderate with good mobile optimization and accessibility. From a security perspective, the site implements SPF and DMARC (though with a 'none' policy), uses Cookiebot for GDPR-compliant cookie consent, and shows no major SSL vulnerabilities. However, improvements such as enabling HSTS, DNSSEC, and a stricter DMARC policy could enhance security. No explicit security or incident response policies were found. Overall, Promob demonstrates a mature digital presence with strong business positioning and technical infrastructure. The extensive use of third-party analytics and marketing tools indicates a sophisticated approach to user engagement and data-driven marketing, balanced with compliance mechanisms. Strategic recommendations include enhancing security headers, improving compliance policies, and establishing clear incident response protocols.

O

Outsite Media GmbH

outsite-media.de

50

Outsite Media GmbH is a medium-sized German company specializing in out-of-home (OOH) media advertising, offering services such as Riesenposter, Beamboards, Media walls, and Citybanner. Founded in 2007, the company positions itself strongly in the market with a focus on sustainability and green marketing solutions, catering to advertisers and property owners seeking impactful and environmentally conscious advertising options. The website reflects a professional and consistent brand image with good content quality and active social media engagement. Technically, the website is built on WordPress using the Divi theme and several plugins including Revolution Slider, Contact Form 7, and Usercentrics for cookie consent management. SEO is well addressed with Yoast SEO and structured data implementation. However, the site currently lacks a valid SSL certificate and does not support modern TLS protocols, which is a significant security concern. Performance is moderate with a page load time of about 5.5 seconds, and mobile optimization is good. From a security perspective, the absence of HTTPS and security headers, along with missing DMARC and CAA records, exposes the site to potential risks. The presence of a valid SPF record is a positive aspect for email security. Cookie consent is properly managed via Usercentrics, indicating GDPR compliance. No explicit security policies or incident response information are found on the site. Overall, while the business and technical infrastructure are solid for its market niche, urgent improvements in SSL/TLS configuration and security best practices are recommended to enhance trust and protect user data.

P

ProSiebenSat.1 Media SE

commerceandventures.com

48

Commerce & Ventures is the investment business of ProSiebenSat.1 Media SE, focusing on supporting consumer-oriented start-ups and growth companies through a combination of media-for-equity, media-for-revenue, minority, and majority investments. The company leverages the extensive media reach of the ProSiebenSat.1 Group to build brand awareness and accelerate growth for its portfolio companies. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS, and integrates marketing and tracking tools like Google Tag Manager. Security posture is adequate with support for TLS 1.2 and 1.3 and no major vulnerabilities detected, but lacks some best practices like HSTS and OCSP stapling. Overall, the site is professional, well-branded, and provides comprehensive information about its investment activities and portfolio. However, direct contact information and explicit security policies are not prominently available, which could be improved to enhance trust and compliance.

I

International Data Spaces Association (IDSA) / Associação Brasileira de Internet das Coisas (ABINC)

idsa-brasil.org

43

The IDSA Hub Brazil website represents a collaborative initiative between the International Data Spaces Association (IDSA) and the Associação Brasileira de Internet das Coisas (ABINC) to promote the future of the digital economy in Brazil through the creation and adoption of data spaces. The site serves as a knowledge transfer and community-building platform, targeting businesses and organizations interested in data sovereignty, IoT, and digital innovation. The business model is non-profit and partnership-driven, positioning itself as a key facilitator in the Brazilian technology ecosystem with global ties. Technically, the website is built on WordPress using Elementor and Astra theme, hosted by HostGator Brazil, with moderate performance and good mobile optimization. However, the security posture is weak due to the absence of a valid SSL certificate, lack of security headers, and missing DNS and email security records. No privacy or cookie policies are present, which may impact compliance and user trust. Overall, the site is professional and content-rich but requires significant improvements in security and compliance to enhance trust and protect user data.

M

Mondoni Press

mondonipress.com.br

48

Mondoni Press is a Brazilian PR and communication agency specializing in press advisory, institutional communication, digital marketing, and content creation. The company positions itself as a trusted partner for businesses seeking to enhance their credibility, media presence, and visibility. It has received recognition such as the PR Agency of the Year award in South America (Prestige Awards 2023/24) and serves a diverse client base across various sectors. Technically, the website is built on WordPress with a range of popular plugins and marketing tools, including Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital marketing infrastructure. However, the website suffers from a critical security issue: the SSL certificate is invalid or missing, which undermines user trust and data security. The cookie consent mechanism is implemented, but no explicit privacy policy or terms of service pages were found, which may pose compliance risks. Overall, the company demonstrates good branding and content quality but should urgently address security and compliance gaps to maintain trust and regulatory adherence.

I

Início | Streaming Academy Abotts

streamingladies.com.br

50

The website streamingladies.com.br currently presents an HTTP 429 error indicating that it is not accessible due to too many requests or rate limiting. The site lacks any metadata, structured data, or business information, and does not provide contact details, privacy policies, or terms of service. Technically, the site uses JavaScript with the LitElement framework and includes a Chrome Dino game clone script, but the SSL certificate is invalid and no modern TLS protocols are enabled, resulting in a poor security posture. There are no security headers or DNS security configurations in place. Performance is slow and content is minimal, leading to a poor user experience and low trustworthiness. Overall, the site appears to be down or blocked, providing no meaningful business or user information.

R

Resonanz Digital

resonanz-digital.at

48

Resonanz Digital is a well-established digital agency based in Austria, specializing in WordPress websites, online shops, eCommerce solutions, online marketing, SEO, and Google Ads. With over 20 years of experience and a Google Partner certification, the company targets small and medium enterprises, founders, and individual entrepreneurs. Their service portfolio includes web design, WordPress development, maintenance, plugin development, and marketing services, positioning them as a trusted partner for digital presence creation. The website demonstrates a strong brand consistency and excellent content quality, supported by positive customer reviews from ProvenExpert. Technically, the site runs on WordPress with the Enfold theme and uses various performance and multilingual plugins. Hosting is provided via Google Cloud infrastructure. Security-wise, the site supports modern TLS protocols and has valid SPF and DMARC records but lacks advanced security features like HSTS, DNSSEC, and OCSP stapling, which could be improved. The cookie consent mechanism is implemented with opt-in for marketing and statistics cookies, reflecting good privacy compliance. Overall, the website is professional, trustworthy, and well-optimized for SEO and user experience, though performance could be enhanced.

G

Greyd GmbH

greyd.de

47

Greyd GmbH operates the Greyd.Suite, an all-in-one WordPress platform designed to help freelancers, agencies, and enterprises scale their WordPress businesses efficiently. The company positions itself as a comprehensive solution provider with a unique block-based builder, centralized content and design management, and advanced features such as headless CMS capabilities and dynamic content management. Their market position is strengthened by a consistent brand presence, extensive feature set, and a focus on performance and accessibility. Technically, the website is built on WordPress 6.8.1 with a rich tech stack including custom plugins, Borlabs Cookie for GDPR-compliant consent management, and Chargebee for subscription billing. However, the security posture is weakened by an invalid SSL certificate and lack of modern TLS protocols, which poses risks to user data confidentiality and trust. The site demonstrates good SEO and accessibility practices, with comprehensive legal and privacy documentation. Overall, Greyd GmbH shows strong digital maturity but should urgently address SSL and TLS issues to improve security and user trust.

S

SCHUFA

schufa.de

48

SCHUFA is a major German credit bureau specializing in credit scoring and risk assessment services for consumers and businesses. The website is currently protected by a FriendlyCaptcha challenge, indicating active bot mitigation measures. However, the site lacks visible privacy, cookie, or terms of service policies on the captcha landing page, and no direct contact information is provided. The DNS configuration shows strong email authentication with SPF and DMARC policies, but the SSL/TLS configuration is critically lacking, with no valid certificate or secure protocols enabled. This presents a significant security risk for users and the business. The technical infrastructure relies on external captcha services and is hosted via United Domains nameservers. Performance is moderate but user experience and content quality are poor due to the captcha gate and lack of accessible content.

S

Saulės spektras, UAB

auto.lt

50

Auto.lt is a Lithuanian online business directory specializing in automotive-related companies and services. It offers comprehensive search capabilities, user reviews, expert advice, job listings, and map-based navigation to serve both businesses and consumers in Lithuania's automotive sector. The platform is operated by Saulės spektras, UAB, positioning itself as a key local player with a consistent brand and good content quality. Technically, the website uses modern JavaScript libraries, Google Analytics, and a custom CMS hosted by Hostex. While the site supports TLS 1.2 with strong cipher suites and has valid SPF and DMARC records, it lacks DNSSEC, HSTS, and OCSP stapling, which are recommended for enhanced security. The cookie and privacy policies are comprehensive and GDPR compliant, with active consent mechanisms. Performance is moderate to slow due to large page size and resource count, but mobile optimization and SEO are well addressed. Overall, the site demonstrates a solid digital presence with room for security and performance improvements.

S

Saulės spektras, UAB

turizmas.lt

44

Turizmas.lt is a Lithuanian tourism portal operated by Saulės spektras, UAB, providing a comprehensive directory of travel-related services including accommodation, rural tourism, travel agencies, and leisure activities. The platform targets both local and international tourists seeking detailed information and booking options within Lithuania. The website demonstrates a solid market position as a national tourism information hub with a medium-sized business model based on listings and advertising revenue. Technically, the site uses a modern but somewhat traditional tech stack including Google Analytics, Bootstrap, and CKEditor, hosted by Hostex.lt. Performance is moderate with good mobile optimization and SEO practices. Security-wise, the site employs a valid SSL certificate with strong cipher suites but lacks advanced DNS security features such as DNSSEC and CAA records. Cookie and privacy policies are comprehensive and GDPR compliant, with a consent mechanism implemented. However, there is no visible terms of service or incident response policy. Overall, the site is professional, trustworthy, and well-branded, but could improve security posture and transparency in some areas.

S

Saulės spektras, UAB

medicina.lt

43

Medicina.lt is a Lithuanian healthcare information portal operated by Saulės spektras, UAB, providing a comprehensive directory of medical institutions, pharmacies, medical equipment suppliers, and expert advice. The site targets Lithuanian healthcare consumers seeking medical services, products, and professional guidance. It holds a strong market position as a trusted source for healthcare-related information with multilingual support and user engagement features such as reviews and Q&A with experts. Technically, the site uses a custom CMS with JavaScript libraries, Google Analytics, and Google Maps API, hosted by Hostex. Performance is moderate with good mobile optimization and SEO practices. However, the security posture is weak due to an invalid SSL certificate and lack of HTTPS, no DNSSEC, and missing security headers, which poses risks to user data confidentiality and trust. Privacy and cookie policies are comprehensive and GDPR compliant, with explicit consent mechanisms implemented. Overall, Medicina.lt is a well-established healthcare portal with room for critical security improvements to protect users and enhance trust.

S

Saulės spektras, UAB

statyba.lt

48

Statyba.lt is a comprehensive Lithuanian online business directory specializing in the construction sector, offering company listings, expert advice, job postings, and industry articles. Operated by Saulės spektras, UAB, it serves as a key platform for connecting construction-related businesses and consumers in Lithuania. The website demonstrates a solid market position with a broad range of services and active content updates. Technically, the site uses modern JavaScript frameworks, Google Analytics, and Google Fonts, hosted by Hostex, but suffers from slow load times due to large page size and resource count. Security-wise, it employs TLS 1.2 with strong cipher suites but lacks TLS 1.3, HSTS, OCSP stapling, and DNSSEC, which are recommended for enhanced security. Privacy and cookie policies are comprehensive and GDPR compliant, with clear user consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for SEO and mobile use, though performance improvements are advisable.

O

Orchestra Brasil

orchestrabrasil.com.br

49

Orchestra Brasil is a Brazilian project focused on promoting and supporting the internationalization of suppliers in the furniture manufacturing industry. It acts as a bridge between Brazilian suppliers and global markets, facilitating export activities and participation in major international trade fairs. The project is well-established with over a decade of experience and supports nearly 100 qualified Brazilian companies exporting to more than 90 countries. The website serves importers, manufacturers, distributors, and retailers in the furniture sector, providing information and contact channels to engage with Brazilian suppliers. Technically, the website is built on WordPress and leverages common plugins such as Contact Form 7, Yoast SEO, and GDPR compliance tools. It uses Google Analytics and Facebook Pixel for tracking and marketing automation via Mautic. The hosting provider is KingHost, and the SSL certificate is valid but lacks advanced security configurations like HSTS and security headers. Performance is relatively slow due to a large page size and many resources, but mobile optimization and SEO are adequately addressed. From a security perspective, the site implements basic protections including SSL and invisible reCAPTCHA on forms, along with a cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit privacy policies, terms of service, security policies, and incident response information. No vulnerability disclosure or security.txt files were found. The overall security posture is moderate but could be improved with enhanced HTTP headers, DNSSEC, and published security documentation. Overall, Orchestra Brasil presents a professional and consistent online presence supporting Brazilian furniture industry exporters. Strategic improvements in security and compliance documentation would enhance trust and reduce risk exposure.

P

Prêmio Salão Design

salaodesign.com.br

44

Prêmio Salão Design operates a Brazilian-focused design award platform that integrates designers and industries through contests, virtual catalogs, and galleries. The website is built on WordPress with a mature technical stack including SEO optimization and multiple marketing and analytics tools. However, the site lacks a valid SSL certificate, which poses a significant security risk to users. While cookie consent mechanisms are implemented, no explicit privacy policy or terms of service pages were found, indicating compliance gaps. The site maintains partnerships with multiple industry organizations and sponsors, reflecting a solid market presence in the design sector.

R

RBA +

rba.com.br

47

Security assessment completed with an overall score of 50/100 (unknown risk). 12 high-priority issues should be addressed promptly. Total of 25 security findings identified across all modules.

A

AGIQON GmbH

agiqon-shopware.de

49

AGIQON GmbH is a specialized full-service Shopware agency based in Germany, focusing on B2B and medium-sized enterprises. They hold a strong market position as a Shopware Platinum Partner with extensive certifications and a portfolio of over 200 projects and 100 custom plugins. Their services encompass strategic consulting, technical implementation, and ongoing support for Shopware 6 e-commerce platforms. Technically, the website is built on HubSpot CMS with integrations for marketing and analytics tools such as Google Tag Manager and Facebook Pixel. However, the site currently suffers from critical security shortcomings including an invalid SSL certificate, lack of modern TLS protocols, and missing DNS security features like DNSSEC and DMARC. Despite these issues, the site demonstrates good privacy compliance with GDPR-aligned cookie consent mechanisms and a comprehensive privacy policy. The overall digital maturity is moderate with room for improvement in security and performance.

S

Ströer X GmbH

stroeer-x.de

50

Ströer X GmbH is a large German-based outsourcing partner specializing in dialog marketing, sales, and customer experience services. As part of the Ströer Group, it leverages the strength of a major corporation combined with the agility of a mid-sized service provider. The company offers a broad portfolio including customer service, digital transformation, social media management, and value-added services such as chat software and AI automation. Their market position is strong within media and related sectors, serving clients across multiple industries including e-commerce, energy, financial services, telecommunications, and tourism. Technically, the website is built on TYPO3 CMS and integrates modern marketing and analytics tools like Google Tag Manager, TikTok Pixel, and HubSpot forms, with GDPR-compliant cookie consent managed by Cookiebot. However, the site currently lacks a valid SSL certificate and modern TLS support, which is a critical security concern. Security policies such as SPF and DMARC are properly configured, but DNSSEC and other advanced DNS security measures are absent. Overall, the company demonstrates good digital maturity but needs to address fundamental security gaps to protect user data and maintain trust.

M

MMP Event GmbH

mmpevent.de

50

MMP Event GmbH is a medium-sized event agency operating as a 100% subsidiary of the Seven.One Entertainment Group in Germany. The company specializes in developing innovative event formats, managing event execution, marketing, and 360-degree communication, including TV event marketing and consulting in sports, media, and culture sectors. Their strong integration with the parent media group positions them uniquely to combine media and event marketing for maximum visibility and audience engagement. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, with standard SEO and marketing tools such as Yoast SEO, Google Tag Manager, and UserCentrics CMP for cookie consent. However, the site suffers from an invalid SSL certificate and lacks advanced security configurations, which poses risks to user trust and data security. The company maintains GDPR compliance with a comprehensive privacy policy and cookie consent mechanism but lacks visible incident response or security policy documentation. Overall, the business is professionally presented with good content quality and consistent branding, but technical and security improvements are necessary to enhance trust and protect user data.

A

Associação Brasileira de Internet das Coisas

abinc.org.br

47

Associação Brasileira de Internet das Coisas (ABINC) is a Brazilian technology association focused on the Internet of Things (IoT) sector. It provides membership services including access to digital materials, event participation, brand exposure, and committee involvement. The organization targets IoT industry stakeholders and professionals primarily in Brazil. The website is built on WordPress with Elementor and integrates event calendars and cookie consent mechanisms, reflecting a moderate level of digital maturity. However, the site suffers from critical security weaknesses, notably the absence of a valid SSL certificate and lack of modern TLS protocols, which exposes visitors to security risks. While cookie consent is implemented, no explicit privacy or security policies are published, indicating compliance gaps. Overall, ABINC maintains a good content quality and user experience but requires urgent improvements in security posture to protect its users and enhance trust.

J

Johann Oberauer GmbH

medien-camp.com

48

Medien Camp is a well-established event platform focused on careers in the media industry, primarily targeting young talents and aspiring media professionals. The company operates under Johann Oberauer GmbH and organizes sessions, workshops, AMAs, career forums, and media tours to connect attendees with media professionals and provide insights into media careers. The website demonstrates strong SEO and content quality, supported by a professional design and consistent branding. Technically, the site is built on WordPress with modern performance optimizations but has room for improvement in security configurations such as DNSSEC, HSTS, and DMARC. The security posture is moderate with no critical vulnerabilities detected but lacks explicit security policies or incident response information. Overall, the site is trustworthy and professionally managed, with good privacy and cookie compliance.

H

Hi, I'm Tobias. | rixx.de

rixx.de

47

The website rixx.de serves as a personal hub for Tobias, an open source software author, conference speaker, and community organizer primarily in the technology sector. The site highlights his projects, blog posts, and involvement in events such as Chaos Communication Congress and DjangoCon Europe. The business model centers on personal branding and community engagement rather than commercial transactions. Technically, the site is built with standard web technologies including HTML, CSS, and JavaScript, with hosting provided by INWX. Performance is moderate, and SEO is well addressed through metadata, but mobile optimization and accessibility are basic. Security posture is weak due to the absence of a valid SSL certificate, lack of TLS support, missing security headers, and no DNSSEC. SPF is configured correctly, but other email authentication and security mechanisms are minimal. No privacy, cookie, or terms policies are published, and no contact information is explicitly provided on the site. Overall, the site is trustworthy for its niche audience but requires significant security and compliance improvements to enhance user trust and data protection.