Skip to main content

Security report for oce.com

Canon Production Printing · Technology · N/a

Partial score · DNS & email only

56/100

0–100, higher is better. How it is calculated

Canon Production Printing operates as a global leader in the production printing industry, specializing in continuous-feed, cut-sheet, and large-format printers for high-volume and specialized printing applications. The company targets business and professional customers in printing, publishing, and display graphics sectors, leveraging a B2B manufacturing and technology solutions business model. The website reflects a strong market position with comprehensive product and corporate information, supported by active social media channels and a clear corporate identity. Technically, the website is built on WordPress with a modern theme and SEO tools, indicating a mature digital infrastructure. However, performance metrics are lacking, and the site shows moderate mobile optimization and basic accessibility features. Hosting is via Microsoft Azure DNS, and the site uses common JavaScript libraries and plugins. From a security perspective, the absence of a valid SSL certificate and HTTPS is a critical vulnerability, severely impacting the site's security posture. Additional security features such as HSTS, DMARC, DNSSEC, and advanced security headers are missing, exposing the site to potential risks. The site does implement cookie consent mechanisms and has a vulnerability disclosure policy, indicating some security awareness. Overall, while the business and content quality are excellent, the security shortcomings present significant risks. Strategic improvements in SSL/TLS deployment and security hardening are essential to protect the brand and user trust.

Scanned

3 of 7 checks could not complete. The site may be unreachable or blocking automated scans, so the results below cover only what could be checked. Try a rescan later.

NIS2 and GDPR posture

NIS2 outside view
Not assessed
GDPR outside view
Not assessed

Both readouts depend on the site's pages, which could not be loaded in this scan.

Priority findings

1 finding rated critical or high. Fix these first.

  1. SSL/TLS

    TLS encrypts the connection and proves the site is really yours. Weak or expiring certificates trigger browser warnings and put traffic at risk.

    • Critical

      No HTTPS Encryption

      Website does not use HTTPS encryption, making all data transmission vulnerable to interception

      What to do: Implement SSL/TLS certificate and redirect all HTTP traffic to HTTPS

Need hands-on remediation? Email guard@offseq.com

Keep watching oce.com

This scan found 6 issues across 4 checks. Monitoring re-runs those checks daily, emails you when something material changes and records each fix, so you can show progress.

Daily monitoring

Recommended

€25per month

  • TLS certificates and expiry
  • DNS records
  • SPF, DKIM and DMARC
  • Security headers
  • GDPR and NIS2 posture
  • Exposed services
  • Third-party trackers
  • Security score drift

Email alerts on material changes and an exportable JSON history of every change.

Billed monthly to your card. Cancel anytime. See sample alerts.

Full report

€39.90one-time

  • The complete analysis as a PDF you can cite
  • Email delivery with an unlock code
  • Lifetime access to this report

Prices incl. 21% VAT. Secure checkout by Mollie; sold by SEQ SIA, Latvia.

Results by check

Each check with its score, findings and the evidence it collected.

How this score is calculated

The security score runs 0–100, higher is better. It is the plain average of the security checks that completed in this scan, each counted equally. A check that could not run is left out: it counts neither as a pass nor as a fail.

Counted in this score

SSL/TLS
0
Email security
50
DNS health
75
Network security
100
Average
56

Not counted

  • Security headers: did not complete in this scan.
  • GDPR outside view: did not complete in this scan.
  • NIS2 outside view: Re-weights evidence from the TLS, email, DNS, network and hygiene checks, so counting it would count that evidence twice. Shown on its own.
  • OffSeq Observations: An AI reading of the site, useful context but not reproducible evidence. Shown on its own.

Findings that cap the score at 49

Each of these is serious on its own, so while any is present the site cannot rate better than high risk, however good the other checks are.

  • The certificate is not trusted by browsers
  • The website is not served over HTTPS
  • A database, remote desktop, file-sharing or Telnet service is reachable from the internet
  • The page loads a script from a compromised source
  • The domain registration has expired
  • SPF authorises every server to send mail as the domain

Partial scans

When the site blocks Guard or most checks cannot run, the score covers only the checks that ran (usually DNS and email), is capped at 75 and is shown as partial, without a risk level.

Risk levels

  • Critical0–25
  • High26–49
  • Medium50–75
  • Low76–100

Technical appendix

Business context, site observations and technical notes gathered during the scan, and the standards behind each reference.

Business context

Business profile

Canon Production Printing's market positioning as a global leader in production printing is supported by a comprehensive product portfolio and corporate transparency. The business model focuses on B2B manufacturing and technology solutions, targeting professional printing and publishing markets. The company benefits from a strong parent company, Canon Inc., and maintains a consistent brand presence. The website content and social media integration suggest active engagement with customers and stakeholders. Growth indicators include recent news on product enhancements and R&D investments. The partnership ecosystem includes integration with major email and marketing platforms as indicated by SPF records. Overall, the company demonstrates a stable and mature business operation with a focus on innovation and corporate responsibility.

Security posture

The website's security posture is currently weak due to the lack of HTTPS and valid SSL certificates, which is a critical issue. No modern TLS protocols are enabled, and essential security headers and DNS security mechanisms are absent. While there are no detected vulnerabilities such as Heartbleed or POODLE, the missing encryption exposes users to data interception risks. The presence of a vulnerability disclosure policy is a positive indicator of security culture. Cookie consent and privacy policies are implemented, supporting compliance efforts. Incident response contact channels are not explicitly listed, which could hinder timely security incident management. Overall, the site requires urgent security upgrades to meet industry standards and protect user data.

Recommendations

  1. Install and maintain a valid SSL/TLS certificate to enable HTTPS across the entire site.
  2. Enable modern TLS protocols (TLS 1.2 and TLS 1.3) and disable deprecated protocols.
  3. Implement HTTP Strict Transport Security (HSTS) with includeSubDomains and preload options.
  4. Configure DNS security features including DMARC, DNSSEC, and CAA records to protect domain integrity.
  5. Enhance security headers such as Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options.
  6. Publish clear incident response contact information to improve security communication.
  7. Regularly audit and update third-party libraries and plugins to avoid vulnerabilities.
  8. Improve accessibility features to meet WCAG standards for broader user inclusivity.
  9. Optimize website performance metrics and monitor load times for better user experience.
  10. Maintain transparency in privacy and cookie policies with clear data retention disclosures.
Technical notes

Notes

The website is built on WordPress 6.8.1 using the Enfold theme and several plugins including Yoast SEO Premium and Content Views. It uses jQuery 3.7.1 and various JavaScript libraries for UI components and analytics. Hosting DNS is managed via Microsoft Azure DNS servers. Performance data is missing, indicating a need for monitoring and optimization. Mobile optimization is good, but accessibility is basic. SEO is well implemented with proper meta tags and structured data (JSON-LD). The lack of HTTPS and modern TLS protocols is a major technical risk. The site uses cookie consent scripts and Google Analytics for tracking. Overall, the technical stack is modern but requires security hardening and performance tuning.
Standards and sources

Reference chips under each finding point to the standard, regulation or specification the finding relates to. They are taken from the official datasets below and mapped conservatively: a finding with no defensible link shows none. NIS2 and GDPR references mark where a finding is relevant evidence, not a compliance verdict. Implementing Regulation (EU) 2024/2690 binds digital infrastructure and digital service providers; for other entities it is the most detailed public reading of the Article 21 measures. WCAG, EN 301 549, European Accessibility Act and Web Accessibility Directive references name the requirement an automated accessibility rule relates to; they are not a conformance verdict.

Retrieved 2026-10-25

Reviews of this site

Share your experience with oce.com. Every review is verified by email and published after moderation.

Overall rating
Select a rating
4000 characters remaining

We’ll email you to confirm your review and keep your details private.

Community rating

No published reviews yet. Be the first to review oce.com.

Feedback on this report

Rate this report, add an optional comment, and tell us if you want a security specialist to follow up.

Overall report quality
Select a rating
2000 characters remaining

We only use your feedback to improve Guard reports. Contact details are never shared.