Skip to main content

Security report for flashtalking.com

Innovid · Media · N/a

Medium risk. 7 critical or high findings in SSL/TLS, GDPR compliance and 1 other check.

Security score

67/100

Risk levelMedium

Scanned

NIS2 and GDPR posture

NIS2 posture
17/ 100 · Critical
GDPR posture
80/ 100 · Low
Checks completed
7of 7

Indicative only: based on publicly visible signals, not a certification or legal assessment. NIS2 signals relate to Article 21 of Directive (EU) 2022/2555; GDPR signals to Articles 7, 12, 13 and 32 of Regulation (EU) 2016/679 and Article 5(3) of the ePrivacy Directive.

Priority findings

7 findings rated critical or high. Fix these first.

  1. SSL/TLS

    TLS encrypts the connection and proves the site is really yours. Weak or expiring certificates trigger browser warnings and put traffic at risk.

    • High

      Weak Protocols Supported

      Server supports weak protocols: TLSv1.1

      What to do: Disable TLS 1.0, TLS 1.1, and all SSL versions

      • CWE-327
      • OWASP A04:2025
      • ASVS V12.1.1
    • High

      Weak SSL Key Length

      SSL certificate uses 256-bit key, which is considered weak

      What to do: Use at least 2048-bit RSA or 256-bit ECC key

      • CWE-326
      • OWASP A04:2025
      • Mozilla TLS: Mozilla Server Side TLS 6.0 intermediate: rsa_key_size 2048

  2. GDPR compliance

    These are the privacy signals visitors and data protection authorities look for under GDPR.

    • High

      No Cookie Policy found

      GDPR requires clear information about cookie usage

      What to do: Add a dedicated cookie policy explaining cookie usage and purposes

  3. NIS2 compliance

    NIS2 expects organisations in scope to show basic security hygiene. These public signals are what an auditor or customer sees first.

    • High

      No information security framework found

      NIS2 requires documented cybersecurity and information security measures

      What to do: Implement and document information security policies and procedures

      • NIS2 21(2)(a)
      • IR 2024/2690 1.1: Implementing Regulation (EU) 2024/2690, Annex point 1.1: Policy on the security of network and information systems
      • NIST PL-1: NIST SP 800-53 Rev. 5 PL-1: Policy and Procedures
    • High

      No security policy documentation found

      NIS2 requires documented cybersecurity governance and risk management

      What to do: Create and publish cybersecurity policy and framework documentation

      • NIS2 21(2)(a)
      • IR 2024/2690 1.1: Implementing Regulation (EU) 2024/2690, Annex point 1.1: Policy on the security of network and information systems
      • NIST PL-1: NIST SP 800-53 Rev. 5 PL-1: Policy and Procedures

Need hands-on remediation? Email guard@offseq.com

Keep watching flashtalking.com

This scan found 29 issues across 7 checks. Monitoring re-runs those checks daily, emails you when something material changes and records each fix, so you can show progress.

Daily monitoring

Recommended

€25per month

  • TLS certificates and expiry
  • DNS records
  • SPF, DKIM and DMARC
  • Security headers
  • GDPR and NIS2 posture
  • Exposed services
  • Third-party trackers
  • Risk score drift

Email alerts on material changes and an exportable JSON history of every change.

Billed monthly. Cancel anytime. The full timeline opens with your unlock code.

Full report

€39.90one-time

  • The complete analysis as a PDF you can cite
  • Email delivery with an unlock code
  • Lifetime access to this report

Prices incl. 21% VAT. Payments by EveryPay; sold by SEQ SIA, Latvia.

Results by check

Each check with its score, findings and the evidence it collected.

Technical appendix

Business context, site observations and technical notes gathered during the scan, and the standards behind each reference.

Business context

Business profile

Innovid operates in the advertising technology sector, targeting advertisers, publishers, and marketing professionals seeking omnichannel campaign solutions. Its business model revolves around providing a unified platform for ad creation, delivery, measurement, and optimization, leveraging AI and automation to improve speed and performance. The company maintains strong partnerships with industry leaders such as Adobe, Snowflake, Comcast, Nielsen, and others, reinforcing its ecosystem and competitive advantage. The presence of high-profile clients and partner logos indicates a robust market position and enterprise-scale operations. Innovid's strategic focus on CTV and interactive advertising aligns with current market trends, positioning it well for growth. The lack of publicly listed direct contact emails or phone numbers suggests a controlled communication approach, typical for enterprise B2B companies.

Security posture

Innovid's website enforces HTTPS, uses cookie consent banners, and integrates reputable analytics and marketing tools, indicating a mature security posture. However, the absence of visible security headers such as Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), and X-Frame-Options reduces the overall security hardening. No vulnerabilities or exposed sensitive data were detected in the HTML content. The lack of a published security policy, incident response contacts, or vulnerability disclosure program limits transparency and readiness indicators. WHOIS data is not publicly available, which is common for privacy-conscious enterprises but reduces domain registration transparency. Overall, the security posture is good but could be enhanced by implementing additional HTTP security headers and publishing formal security policies.

Recommendations

  1. Implement and publish HTTP security headers including CSP, HSTS, and X-Frame-Options to enhance protection against common web attacks.
  2. Publish a formal security policy and incident response contact information to improve transparency and trustworthiness.
  3. Establish a vulnerability disclosure program or security.txt file to encourage responsible reporting of security issues.
  4. Consider providing verified company contact emails and phone numbers for improved customer support and compliance.
  5. Regularly audit third-party scripts and libraries to ensure no vulnerable components are included.
Site observations

Automated reading of the public site. Ratings are indicative.

Business

Company
Innovid
Description
Innovid empowers advertisers and publishers to create, deliver, measure, and optimize their ad and social experiences that drive consumer connections and business growth.
Key services
Ad authoring, Interactive ads, Dynamic ads, Creative intelligence, Digital ad management, Social ad management, Reach & frequency measurement, Outcomes tracking, Verification, Frequency management
Content quality
excellent
Branding
consistent

Technology

Stack
Google Tag Manager, Marketo Munchkin, Vimeo video embed, Lottie animations, Webflow CMS, Google Fonts, Ahrefs analytics
Frameworks
Webflow
Platforms
Vimeo, Marketo
Performance
fast
Mobile
excellent
Accessibility
good
SEO
good

Security

Observed score
85/100
Good practices seen
  • HTTPS enforced
  • Cookie consent mechanism
  • No exposed sensitive data detected

Analytics and tracking

Services
Ahrefs Analytics, Google Tag Manager, Marketo Munchkin
Tracking level
moderate
Privacy compliance
good

Advertising

Tracking pixels
Marketo Munchkin, Ahrefs Analytics
Marketing tools
Marketo, Ahrefs
Transparency
good

Site quality

Design
excellent
User experience
excellent
Content relevance
excellent
Navigation
excellent
Professionalism
excellent
Trustworthiness
high

Key observations

  1. Website is fully accessible with rich content and multimedia
  2. Strong branding and consistent messaging about advertising technology
  3. Comprehensive privacy and cookie policies with consent mechanism
  4. No explicit contact emails or phone numbers publicly listed, only contact form
  5. Use of modern web technologies and analytics tools
  6. No visible security headers detected in HTML source
  7. WHOIS data unavailable, possibly due to privacy protection or registrar restrictions
Standards and sources

Reference chips under each finding point to the standard, regulation or specification the finding relates to. They are taken from the official datasets below and mapped conservatively: a finding with no defensible link shows none. NIS2 and GDPR references mark where a finding is relevant evidence, not a compliance verdict. Implementing Regulation (EU) 2024/2690 binds digital infrastructure and digital service providers; for other entities it is the most detailed public reading of the Article 21 measures.

Retrieved 2026-10-24

Reviews of this site

Share your experience with flashtalking.com. Every review is verified by email and published after moderation.

Overall rating
Select a rating
4000 characters remaining

We’ll email you to confirm your review and keep your details private.

Community rating

Loading reviews…

Feedback on this report

Rate this report, add an optional comment, and tell us if you want a security specialist to follow up.

Overall report quality
Select a rating
2000 characters remaining

We only use your feedback to improve Guard reports. Contact details are never shared.