Skip to main content

Security report for rubans.lv

Jānis Rubans · Technology · Latvia

High risk. 12 critical or high findings in GDPR compliance, Security headers and 1 other check.

Security score

46/100

Risk levelHigh

The website rubans.lv serves as a personal portfolio for Jānis Rubans, a frontend developer based in Latvia. It primarily showcases the individual's professional identity and provides contact information for potential clients or employers. The site is minimalistic, focusing on essential information such as name, role, phone number, email, and LinkedIn profile, without additional business or corporate details. The target audience appears to be technology professionals or recruiters seeking frontend development expertise. From a technical perspective, the website uses standard web technologies including HTML5, CSS3, and JavaScript. The site is relatively simple with no detected CMS or advanced frameworks. Performance and mobile optimization are basic but adequate for the site's scope. SEO and accessibility features are minimal but present through meta tags and responsive viewport settings. Security posture is limited; no HTTPS confirmation was provided, and no security headers or policies are detected. The absence of privacy, cookie, or terms of service policies indicates low privacy compliance. No analytics or tracking scripts are present, which reduces privacy concerns but also limits marketing insights. The site does not appear to be behind any WAF or security challenge, and content is fully accessible. Overall, the website is a straightforward personal portfolio with moderate professionalism but lacks comprehensive security and privacy features. Strategic improvements in security headers, HTTPS enforcement, and privacy compliance would enhance trustworthiness and compliance.

Scanned

NIS2 and GDPR posture

NIS2 posture
2/ 100 · Critical
GDPR posture
10/ 100 · Critical
Checks completed
7of 7

Indicative only: based on publicly visible signals, not a certification or legal assessment. NIS2 signals relate to Article 21 of Directive (EU) 2022/2555; GDPR signals to Articles 7, 12, 13 and 32 of Regulation (EU) 2016/679 and Article 5(3) of the ePrivacy Directive.

Priority findings

12 findings rated critical or high. Fix these first.

  1. GDPR compliance

    These are the privacy signals visitors and data protection authorities look for under GDPR.

    • Critical

      EU business without adequate privacy measures

      EU businesses are subject to strict GDPR requirements

      What to do: Implement comprehensive GDPR compliance including privacy policy, cookie consent, and data protection measures

    • High

      No Privacy Policy found

      GDPR requires a clear and accessible privacy policy

      What to do: Add a comprehensive privacy policy page and link to it prominently

    • High

      No Cookie Policy found

      GDPR requires clear information about cookie usage

      What to do: Add a dedicated cookie policy explaining cookie usage and purposes

  2. Security headers

    Security headers are instructions your web server sends to every visitor’s browser. Missing ones leave visitors more exposed to attacks such as clickjacking and injected scripts.

    • High

      Missing X-Frame-Options header

      Prevents clickjacking attacks

      What to do: Add "X-Frame-Options: DENY" or "X-Frame-Options: SAMEORIGIN"

    • High

      Missing Content-Security-Policy header

      Controls resources the browser is allowed to load

      What to do: Implement a Content-Security-Policy appropriate for your application

      • ASVS V3.4.3
      • OWASP Secure Headers: OWASP Secure Headers Project recommends Content-Security-Policy: default-src 'self'; form-action 'self'; base-uri 'self'; object-src 'none';…

Need hands-on remediation? Email guard@offseq.com

Keep watching rubans.lv

This scan found 34 issues across 7 checks. Monitoring re-runs those checks daily, emails you when something material changes and records each fix, so you can show progress.

Daily monitoring

Recommended

€25per month

  • TLS certificates and expiry
  • DNS records
  • SPF, DKIM and DMARC
  • Security headers
  • GDPR and NIS2 posture
  • Exposed services
  • Third-party trackers
  • Risk score drift

Email alerts on material changes and an exportable JSON history of every change.

Billed monthly. Cancel anytime. The full timeline opens with your unlock code.

Full report

€39.90one-time

  • The complete analysis as a PDF you can cite
  • Email delivery with an unlock code
  • Lifetime access to this report

Prices incl. 21% VAT. Payments by EveryPay; sold by SEQ SIA, Latvia.

Results by check

Each check with its score, findings and the evidence it collected.

Technical appendix

Business context, site observations and technical notes gathered during the scan, and the standards behind each reference.

Business context

Business profile

The business represented is an individual professional service provider in the technology sector, specifically frontend development. The business model is personal branding and service promotion, targeting potential employers or freelance clients. The market position is that of a small-scale individual contributor rather than a corporate entity. Revenue streams likely derive from freelance contracts or employment opportunities. The website does not indicate partnerships, subsidiaries, or parent companies. The lack of detailed business information and certifications suggests a focus on personal reputation rather than corporate scale. Growth indicators or strategic partnerships are not evident from the website content.

Security posture

The security maturity level of the website is low. There is no evidence of HTTPS enforcement or security headers such as Content-Security-Policy or X-Frame-Options. No privacy or cookie policies are present, indicating potential GDPR compliance gaps. The absence of incident response contacts or vulnerability disclosure mechanisms further reduces security readiness. No forms or data collection points reduce attack surface but also limit user engagement. Overall, the site is low risk due to minimal data collection but would benefit from basic security hardening and privacy compliance measures.

Recommendations

  1. Implement HTTPS with a valid SSL/TLS certificate to secure all communications.
  2. Add standard security headers including Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options.
  3. Publish a privacy policy and cookie policy to improve GDPR compliance and user trust.
  4. Include a vulnerability disclosure policy or security contact email to enhance incident response readiness.
  5. Consider adding basic analytics with privacy-respecting configurations to understand visitor behavior and improve the site.
Site observations

Automated reading of the public site. Ratings are indicative.

Business

Company
Jānis Rubans
Description
Frontend developer
Key services
frontend development
Content quality
good
Branding
consistent

Technology

Stack
HTML5, CSS3, JavaScript
Performance
moderate
Mobile
basic
Accessibility
basic
SEO
basic

Security

Observed score
30/100

Analytics and tracking

Tracking level
minimal
Privacy compliance
poor

Advertising

Transparency
poor

Site quality

Design
good
User experience
good
Content relevance
good
Navigation
good
Professionalism
good
Trustworthiness
moderate

Key observations

  1. Website is a simple personal portfolio for a frontend developer.
  2. No privacy, cookie, or terms of service policies found.
  3. Contact information is clearly provided including phone, email, and LinkedIn.
  4. No forms or data collection mechanisms present.
  5. No security headers or advanced security features detected.
  6. No analytics or tracking scripts detected.
  7. No advertising or affiliate marketing detected.
  8. Content is safe and appropriate for general audiences.
  9. No evidence of WAF or blocking mechanisms.
  10. WHOIS data missing, limiting domain legitimacy assessment.
Technical notes

Notes

The website is built with basic web technologies: HTML5, CSS3, and JavaScript. It does not use any detectable CMS or advanced frameworks. The site includes meta tags for SEO and Open Graph for social sharing. The performance is moderate given the simple content and assets. Mobile optimization is basic but functional. Accessibility features are minimal but present. No external analytics or advertising scripts are detected, which simplifies privacy considerations. The site could benefit from modern frontend frameworks or CMS for scalability and maintainability but is sufficient for a personal portfolio.
Standards and sources

Reference chips under each finding point to the standard, regulation or specification the finding relates to. They are taken from the official datasets below and mapped conservatively: a finding with no defensible link shows none. NIS2 and GDPR references mark where a finding is relevant evidence, not a compliance verdict. Implementing Regulation (EU) 2024/2690 binds digital infrastructure and digital service providers; for other entities it is the most detailed public reading of the Article 21 measures.

Retrieved 2026-10-24

Reviews of this site

Share your experience with rubans.lv. Every review is verified by email and published after moderation.

Overall rating
Select a rating
4000 characters remaining

We’ll email you to confirm your review and keep your details private.

Community rating

Loading reviews…

Feedback on this report

Rate this report, add an optional comment, and tell us if you want a security specialist to follow up.

Overall report quality
Select a rating
2000 characters remaining

We only use your feedback to improve Guard reports. Contact details are never shared.