Skip to main content

Security report for taiflex.com.tw

台虹科技股份有限公司 · Technology · Taiwan

Medium risk. 4 critical or high findings in DNS health, GDPR outside view and 1 other check.

Security score

65/100

Risk levelMedium

0–100, higher is better. How it is calculated

台虹科技股份有限公司是一家專注於軟性印刷電路板材料的領先製造商，提供軟板材料、硬板材料及先進封裝材料等產品，並積極推動綠色永續與ESG發展。公司在全球多地設有生產基地，包含中國大陸及泰國，致力於提升產品品質與服務，服務半導體及汽車產業等關鍵市場。網站內容豐富，涵蓋最新企業新聞、產品服務及人才招募，展現其市場活躍度與企業形象。 技術基礎方面，網站採用現代前端技術如jQuery、Bootstrap及Swiper.js，具備良好的響應式設計與用戶體驗。網站安全性良好，使用HTTPS，並有Cookie同意機制，但缺少部分安全標頭及明確的事件響應聯絡資訊。網站SEO及無障礙功能基本，仍有提升空間。 安全評估顯示網站無明顯漏洞或敏感資料外洩，且無WAF阻擋，內容完整可訪問。WHOIS資料與網站內容一致，顯示為合法且成熟的企業網站。整體風險較低，建議加強安全標頭及公開漏洞通報機制以提升安全成熟度。

Scanned

NIS2 and GDPR posture

GDPR outside view
65/ 100 · Medium
Checks completed
7of 7

NIS2 Art. 21(2)

  1. (a) Risk analysis and security policies: Not visible from outside
  2. (b) Incident handling: One indicator
  3. (c) Business continuity, backups and crisis management: Not visible from outside
  4. (d) Supply chain security: Not visible from outside
  5. (e) Secure acquisition, development and maintenance, including vulnerability handling: Partly checked
  6. (f) Assessing the effectiveness of security measures: Not visible from outside
  7. (g) Cyber hygiene and security training: Not visible from outside
  8. (h) Cryptography and encryption: Partly checked
  9. (i) HR security, access control and asset management: One indicator
  10. (j) Multi-factor authentication and secured communications: Not visible from outside

This scan rated NIS2 with an earlier keyword method that is no longer shown; rescan for the per-article view. Risk management, continuity, supply chain, training, MFA, management oversight (Art. 20) and incident reporting (Art. 23) need internal evidence, and Guard cannot tell whether NIS2 applies to this organisation.

GDPR is indicative only, based on publicly visible signals: Articles 7, 12, 13 and 32 of Regulation (EU) 2016/679 and Article 5(3) of the ePrivacy Directive. Not a certification or legal assessment.

Priority findings

4 findings rated critical or high. Fix these first.

  1. DNS health

    DNS sends visitors and email to the right servers. Misconfigured records can cause outages or let someone redirect your traffic.

    • Critical

      DNS Resolution Failed

      Unable to resolve domain A records

      What to do: Verify domain is properly configured and not expired

  2. GDPR outside view

    These are the privacy signals visitors and data protection authorities look for under GDPR.

    • High

      No Privacy Policy found

      GDPR requires a clear and accessible privacy policy

      What to do: Add a comprehensive privacy policy page and link to it prominently

    • High

      No Cookie Consent Banner found

      GDPR requires explicit consent for non-essential cookies

      What to do: Implement a cookie consent banner that appears on first visit

  3. SSL/TLS

    TLS encrypts the connection and proves the site is really yours. Weak or expiring certificates trigger browser warnings and put traffic at risk.

    • High

      Weak Protocols Supported

      Server supports weak protocols: TLSv1.1

      What to do: Disable TLS 1.0, TLS 1.1, and all SSL versions

      • CWE-327
      • OWASP A04:2025
      • ASVS V12.1.1

Need hands-on remediation? Email guard@offseq.com

Keep watching taiflex.com.tw

This scan found 23 issues across 6 checks. Monitoring re-runs those checks daily, emails you when something material changes and records each fix, so you can show progress.

Daily monitoring

Recommended

€25per month

  • TLS certificates and expiry
  • DNS records
  • SPF, DKIM and DMARC
  • Security headers
  • GDPR and NIS2 posture
  • Exposed services
  • Third-party trackers
  • Security score drift

Email alerts on material changes and an exportable JSON history of every change.

Billed monthly to your card. Cancel anytime. The full timeline opens with your unlock code.

Full report

€39.90one-time

  • The complete analysis as a PDF you can cite
  • Email delivery with an unlock code
  • Lifetime access to this report

Prices incl. 21% VAT. Secure checkout by Mollie; sold by SEQ SIA, Latvia.

Results by check

Each check with its score, findings and the evidence it collected.

How this score is calculated

The security score runs 0–100, higher is better. It is the plain average of the security checks that completed in this scan, each counted equally. A check that could not run is left out: it counts neither as a pass nor as a fail.

Counted in this score

SSL/TLS
67
Security headers
70
Email security
55
DNS health
35
Network security
100
GDPR outside view
65
Average
65

Not counted

  • NIS2 outside view: Re-weights evidence from the TLS, email, DNS, network and hygiene checks, so counting it would count that evidence twice. Shown on its own.
  • OffSeq Observations: An AI reading of the site, useful context but not reproducible evidence. Shown on its own.

Findings that cap the score at 49

Each of these is serious on its own, so while any is present the site cannot rate better than high risk, however good the other checks are.

  • The certificate is not trusted by browsers
  • The website is not served over HTTPS
  • A database, remote desktop, file-sharing or Telnet service is reachable from the internet
  • The page loads a script from a compromised source
  • The domain registration has expired
  • SPF authorises every server to send mail as the domain

Partial scans

When the site blocks Guard or most checks cannot run, the score covers only the checks that ran (usually DNS and email), is capped at 75 and is shown as partial, without a risk level.

Risk levels

  • Critical0–25
  • High26–49
  • Medium50–75
  • Low76–100

Technical appendix

Business context, site observations and technical notes gathered during the scan, and the standards behind each reference.

Business context

Business profile

台虹科技在全球軟性印刷電路板材料市場中佔有領先地位，透過多元產品線及全球生產基地強化供應鏈韌性。公司積極投入ESG及綠色能源，並獲得多項國家及地方獎項，提升品牌信譽。其業務模式結合製造與研發，服務半導體及汽車產業，目標客戶為企業及投資者。公司持續擴展東南亞市場，特別是泰國廠的設立，顯示其全球佈局策略。合作夥伴包括政府機構及產業聯盟，顯示良好的產業生態系統。

Security posture

網站安全措施包括HTTPS加密及Cookie同意機制，無明顯敏感資料暴露。缺少部分安全標頭如CSP、HSTS等，建議補強以防範XSS及點擊劫持攻擊。網站無公開漏洞通報或安全事件響應聯絡資訊，降低事件處理效率。第三方腳本使用Google CSE及廣告，需定期檢查以防止供應鏈攻擊。整體安全成熟度中等偏上，適合企業級網站，但仍有提升空間以符合更嚴格的合規要求。

Recommendations

  1. 部署並強制使用安全HTTP標頭（如Content-Security-Policy, Strict-Transport-Security, X-Frame-Options）
  2. 建立並公開漏洞披露政策及安全事件聯絡窗口
  3. 加強網站無障礙設計以符合WCAG標準
  4. 定期審核第三方腳本及廣告服務的安全性
  5. 持續更新並優化隱私政策以符合GDPR及其他國際法規

Contact details published on the site

Addresses
Legal name
台虹科技股份有限公司
Site observations

Automated reading of the public site. Ratings are indicative.

Business

Company
台虹科技股份有限公司
Description
台虹科技股份有限公司為全球領先的軟性印刷電路板材料供應商，專注於軟板材料、硬板材料及先進封裝材料的研發與製造，致力於創新軟板實力與綠色永續發展。公司積極推動ESG永續發展，並在全球多地設有生產基地，包括中國大陸如東富展科技及泰國廠。台虹科技提供高品質材料及創新應用整合服務，服務半導體及汽車等產業，並持續擴大全球佈局。
Key services
軟性銅箔材料, 覆蓋膜, 純膠, 複合材料, 先進封裝材料
Content quality
good
Branding
consistent

Technology

Stack
jQuery, Bootstrap, Swiper.js, Google Custom Search Engine, Layui
Frameworks
Bootstrap
Performance
moderate
Mobile
good
Accessibility
basic
SEO
basic

Security

Observed score
80/100
Good practices seen
  • HTTPS enforced
  • Cookie consent banner
  • No exposed sensitive data in HTML
  • Use of security policies linked in company governance

Analytics and tracking

Tracking level
minimal
Privacy practices
basic

Advertising

Ad networks
Google Adsense
Tracking pixels
Google Custom Search Engine
Marketing tools
Google CSE
Transparency
basic

Site quality

Design
good
User experience
good
Content relevance
good
Navigation
good
Professionalism
good
Trustworthiness
high

Key observations

  1. Website is fully accessible with rich content in Chinese
  2. Strong corporate branding and consistent navigation
  3. Multiple news updates and corporate announcements indicate active maintenance
  4. Use of modern front-end libraries and responsive design
  5. Clear focus on ESG and sustainability initiatives
  6. No signs of phishing or malware
  7. No exposed sensitive data or insecure forms detected
Technical notes

Notes

網站採用Bootstrap框架與jQuery庫，結合Swiper.js實現豐富的互動式輪播效果。使用Google自訂搜尋引擎提升搜尋功能。網站響應式設計良好，適合多種裝置瀏覽。無明顯性能瓶頸，但可透過優化圖片及減少外部請求提升載入速度。缺少明確CMS標識，可能為自建系統。建議加強SEO標籤及結構化數據以提升搜尋引擎排名。整體技術架構穩健，適合企業展示與資訊發布。
Standards and sources

Reference chips under each finding point to the standard, regulation or specification the finding relates to. They are taken from the official datasets below and mapped conservatively: a finding with no defensible link shows none. NIS2 and GDPR references mark where a finding is relevant evidence, not a compliance verdict. Implementing Regulation (EU) 2024/2690 binds digital infrastructure and digital service providers; for other entities it is the most detailed public reading of the Article 21 measures. WCAG, EN 301 549, European Accessibility Act and Web Accessibility Directive references name the requirement an automated accessibility rule relates to; they are not a conformance verdict.

Retrieved 2026-10-25

Reviews of this site

Share your experience with taiflex.com.tw. Every review is verified by email and published after moderation.

Overall rating
Select a rating
4000 characters remaining

We’ll email you to confirm your review and keep your details private.

Community rating

No published reviews yet. Be the first to review taiflex.com.tw.

Feedback on this report

Rate this report, add an optional comment, and tell us if you want a security specialist to follow up.

Overall report quality
Select a rating
2000 characters remaining

We only use your feedback to improve Guard reports. Contact details are never shared.