Skip to main content

Security report for aem.org

Association of Equipment Manufacturers · Manufacturing · United States

Partial score · DNS & email only

75/100

0–100, higher is better. How it is calculated

The Association of Equipment Manufacturers (AEM) is a well-established industry association founded in 1997, serving the construction and agriculture equipment manufacturing sectors primarily in North America. The organization provides advocacy, market data, business intelligence, safety leadership, and organizes trade shows and events to connect members with customers and policymakers. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and consistent branding. It targets equipment manufacturers and industry professionals, offering a broad range of member services and industry insights. Technically, the website is built on the Kentico CMS platform and leverages modern web technologies including Google Tag Manager, reCAPTCHA v3, and multiple marketing and analytics tools such as Facebook Pixel, LinkedIn Insight Tag, Hotjar, and Bing Ads. The site is mobile-optimized, accessible, and SEO-friendly, with good performance characteristics. Security practices include HTTPS enforcement, clientTransferProhibited domain status, and secure form handling with reCAPTCHA, although DNSSEC is not enabled and some security headers like Content-Security-Policy are missing. The security posture is solid with no critical vulnerabilities detected, but there is room for improvement in DNS security and header configurations. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. The website does not expose sensitive data and uses secure marketing and tracking technologies responsibly. Overall, the website and domain demonstrate high legitimacy and trustworthiness, supported by consistent WHOIS data and a long domain age. The digital infrastructure supports the organization's mission effectively, though enhancements in security headers and DNSSEC would further strengthen the security posture.

Scanned

3 of 7 checks could not complete. The site may be unreachable or blocking automated scans, so the results below cover only what could be checked. Try a rescan later.

NIS2 and GDPR posture

NIS2 outside view
Not assessed
GDPR outside view
Not assessed

Both readouts depend on the site's pages, which could not be loaded in this scan.

Priority findings

1 finding rated critical or high. Fix these first.

  1. SSL/TLS

    TLS encrypts the connection and proves the site is really yours. Weak or expiring certificates trigger browser warnings and put traffic at risk.

    • High

      Weak Protocols Supported

      Server supports weak protocols: TLSv1.1

      What to do: Disable TLS 1.0, TLS 1.1, and all SSL versions

      • CWE-327
      • OWASP A04:2025
      • ASVS V12.1.1

Need hands-on remediation? Email guard@offseq.com

Keep watching aem.org

This scan found 11 issues across 4 checks. Monitoring re-runs those checks daily, emails you when something material changes and records each fix, so you can show progress.

Daily monitoring

Recommended

€25per month

  • TLS certificates and expiry
  • DNS records
  • SPF, DKIM and DMARC
  • Security headers
  • GDPR and NIS2 posture
  • Exposed services
  • Third-party trackers
  • Security score drift

Email alerts on material changes and an exportable JSON history of every change.

Billed monthly to your card. Cancel anytime. The full timeline opens with your unlock code.

Full report

€39.90one-time

  • The complete analysis as a PDF you can cite
  • Email delivery with an unlock code
  • Lifetime access to this report

Prices incl. 21% VAT. Secure checkout by Mollie; sold by SEQ SIA, Latvia.

Results by check

Each check with its score, findings and the evidence it collected.

How this score is calculated

The security score runs 0–100, higher is better. It is the plain average of the security checks that completed in this scan, each counted equally. A check that could not run is left out: it counts neither as a pass nor as a fail.

Counted in this score

SSL/TLS
82
Email security
80
DNS health
80
Network security
100
Average
86
After the cap
75

Not counted

  • Security headers: did not complete in this scan.
  • GDPR outside view: did not complete in this scan.
  • NIS2 outside view: Re-weights evidence from the TLS, email, DNS, network and hygiene checks, so counting it would count that evidence twice. Shown on its own.
  • OffSeq Observations: An AI reading of the site, useful context but not reproducible evidence. Shown on its own.

Findings that cap the score at 49

Each of these is serious on its own, so while any is present the site cannot rate better than high risk, however good the other checks are.

  • The certificate is not trusted by browsers
  • The website is not served over HTTPS
  • A database, remote desktop, file-sharing or Telnet service is reachable from the internet
  • The page loads a script from a compromised source
  • The domain registration has expired
  • SPF authorises every server to send mail as the domain

Partial scans

When the site blocks Guard or most checks cannot run, the score covers only the checks that ran (usually DNS and email), is capped at 75 and is shown as partial, without a risk level.

Risk levels

  • Critical0–25
  • High26–49
  • Medium50–75
  • Low76–100

Technical appendix

Business context, site observations and technical notes gathered during the scan, and the standards behind each reference.

Business context

Business profile

AEM holds a leading position as a North American trade association for equipment manufacturers in construction and agriculture sectors. Its business model centers on membership services, advocacy, market intelligence, and event organization. Revenue streams likely include membership fees, event sponsorships, market data sales, and educational offerings. The target customers are OEMs and industry stakeholders seeking policy advocacy, market insights, and networking opportunities. The association maintains a robust partnership ecosystem with dedicated domains for member directories, trade shows, and newsrooms, enhancing its service delivery. Growth indicators include a large and growing membership base (1000+ members, 200+ product lines) and a comprehensive event calendar. Strategic observations highlight a focus on workforce solutions, safety leadership, and sustainability, positioning AEM as a catalyst for industry innovation and collaboration.

Security posture

The website exhibits a mature security posture with HTTPS enforced and secure domain registration status (clientTransferProhibited). Use of reCAPTCHA v3 on forms mitigates automated abuse risks. Multiple security and marketing scripts are loaded asynchronously, reducing performance impact. However, the absence of DNSSEC and Content-Security-Policy headers represents potential attack vectors that could be exploited. No exposed credentials or sensitive data were found in the HTML content. The domain's long history and consistent registration details add to trustworthiness. Incident response and security policy documents are not publicly found, which could be improved to demonstrate transparency and readiness. Overall, the site balances usability and security well but should enhance DNS and header security to align with best practices.

Recommendations

  1. Enable DNSSEC on the domain to protect against DNS spoofing and improve domain security.
  2. Implement a robust Content-Security-Policy header to mitigate cross-site scripting and related attacks.
  3. Publish a clear security policy and incident response plan accessible on the website to improve transparency.
  4. Regularly audit and update third-party scripts and tracking technologies to minimize vulnerabilities.
  5. Enhance privacy disclosures regarding data retention and processing to strengthen GDPR compliance.

Contact details published on the site

Addresses
Legal name
Association of Equipment Manufacturers
Site observations

Automated reading of the public site. Ratings are indicative.

Business

Company
Association of Equipment Manufacturers
Description
Advancing Equipment Manufacturers in the Global Marketplace. Advocacy, Safety, Trade Shows and Events and Market Data.
Key services
Advocacy, Business Intelligence, Education & Events, Market Share Statistics, Safety & Product Leadership, Trade Shows+, Workforce Solutions, Member Services
Content quality
excellent
Branding
consistent

Technology

Stack
Google Tag Manager, Google Analytics, Facebook Pixel, Hotjar, Bing Ads, LinkedIn Insight Tag, Kentico CMS, Font Awesome, reCAPTCHA v3, YouTube API, Act-On Marketing Automation, OMappAPI
Frameworks
Bootstrap (implied by classes), Kentico CMS
Platforms
Web
Performance
moderate
Mobile
good
Accessibility
good
SEO
good

Security

Observed score
75/100
Good practices seen
  • HTTPS enforced
  • ClientTransferProhibited domain status
  • Use of reCAPTCHA v3 on forms
  • No exposed sensitive data in HTML
  • Secure form submission endpoints

Analytics and tracking

Services
Google Analytics, Hotjar, Facebook Pixel, LinkedIn Insight Tag, Bing Ads
Tracking level
extensive
Privacy practices
good

Advertising

Ad networks
Bing Ads
Tracking pixels
Facebook Pixel, LinkedIn Insight Tag, Hotjar
Marketing tools
Act-On Marketing Automation, OMappAPI
Transparency
good

Site quality

Design
excellent
User experience
excellent
Content relevance
excellent
Navigation
excellent
Professionalism
excellent
Trustworthiness
high

Key observations

  1. Website is fully accessible with no blocking or WAF challenges
  2. Content is rich, professional, and well-structured
  3. Strong presence of industry-related services and events
  4. Multiple Google Tag Manager containers used for different purposes
  5. Use of modern marketing and analytics tools
  6. Secure forms with reCAPTCHA v3 implemented
  7. No exposed sensitive data or security misconfigurations detected
  8. DNSSEC not enabled, which is a minor security gap
  9. No explicit terms of service page found
  10. Social media presence on Facebook, LinkedIn, YouTube, Twitter
Technical notes

Notes

The website is built on the Kentico CMS platform, utilizing modern front-end frameworks such as Bootstrap and Font Awesome for responsive design and iconography. It integrates multiple analytics and marketing tools including Google Tag Manager, Google Analytics, Facebook Pixel, LinkedIn Insight Tag, Hotjar, Bing Ads, and Act-On Marketing Automation. The site uses asynchronous loading for scripts to optimize performance. Forms are protected with Google reCAPTCHA v3 to prevent spam. The domain is registered with Network Solutions, LLC since 1997, indicating a stable infrastructure. Performance is moderate with good mobile optimization and accessibility features. Technical debt appears low, but security header implementation and DNS security could be improved. Overall, the technical infrastructure supports a professional and scalable web presence.
Standards and sources

Reference chips under each finding point to the standard, regulation or specification the finding relates to. They are taken from the official datasets below and mapped conservatively: a finding with no defensible link shows none. NIS2 and GDPR references mark where a finding is relevant evidence, not a compliance verdict. Implementing Regulation (EU) 2024/2690 binds digital infrastructure and digital service providers; for other entities it is the most detailed public reading of the Article 21 measures. WCAG, EN 301 549, European Accessibility Act and Web Accessibility Directive references name the requirement an automated accessibility rule relates to; they are not a conformance verdict.

Retrieved 2026-10-25

Reviews of this site

Share your experience with aem.org. Every review is verified by email and published after moderation.

Overall rating
Select a rating
4000 characters remaining

We’ll email you to confirm your review and keep your details private.

Community rating

No published reviews yet. Be the first to review aem.org.

Feedback on this report

Rate this report, add an optional comment, and tell us if you want a security specialist to follow up.

Overall report quality
Select a rating
2000 characters remaining

We only use your feedback to improve Guard reports. Contact details are never shared.