Security report for infracert.no

KraftCERT AS is a specialized non-profit cybersecurity organization focused on securing process control systems within the Norwegian energy sector, including power, petroleum, and related industries. It operates as an Information Sharing and Analysis Center (ISAC) and Incident Response Team (IRT), providing members with vulnerability monitoring, threat intelligence, incident handling, advisory services, exercises, and training. The organization is recognized nationally and internationally, holding certifications such as Trusted Introducer and membership in FIRST. The website reflects a professional and focused approach, targeting companies in critical infrastructure sectors with clear contact channels and published PGP keys for secure communication. Technically, the website employs modern frameworks like Bootstrap 5, ensuring mobile responsiveness and a good user experience. However, it lacks explicit privacy and cookie policies, and no analytics or tracking scripts are detected, indicating a privacy-conscious design. The absence of WHOIS data limits domain trust verification, but the website content and contact information appear legitimate and consistent with the organization's mission. From a security perspective, the site demonstrates good practices such as HTTPS usage and incident response contact availability. The publication of PGP keys enhances secure communication. Nonetheless, the lack of security headers and formal privacy compliance documents represents areas for improvement. Overall, the site is trustworthy and professional but could enhance compliance and security posture with additional policies and technical headers. The overall risk assessment is moderate with recommendations to improve privacy compliance, implement security headers, and publish vulnerability disclosure policies. These steps would strengthen trust and align the organization with best practices in cybersecurity governance.