Security Directory

C

Commune de Comblain-au-pont

comblainaupont.be

0

The website's overall security posture is critically deficient, with multiple severe vulnerabilities exposing the business to legal, reputational, and operational risks. The absence of HTTPS encryption is a critical failure affecting data confidentiality and regulatory compliance, particularly under GDPR and NIS2 frameworks. Key security headers are missing, increasing the risk of cross-site scripting (XSS) and content injection attacks. The company currently lacks fundamental privacy policies, cookie consent mechanisms, and GDPR compliance, which could result in significant fines and loss of customer trust. Additionally, there is no formal information security framework, incident response plan, or business continuity planning, leaving the organization ill-prepared for cyber incidents. Email security and DNS configurations are relatively better but still require enhancements. Immediate remediation is essential to protect sensitive data, maintain regulatory compliance, and safeguard business continuity.

D

Deloitte

deloitte.be

0

The website exhibits significant security and compliance deficiencies that present substantial business risks. Critical issues such as lack of HTTPS encryption and inadequate privacy measures expose the organization to data breaches, regulatory penalties, and reputational damage, especially under GDPR and NIS2 regulations. The absence of a privacy policy, cookie consent mechanisms, and security framework further threatens legal compliance and customer trust. While network security and email configurations are relatively strong, key foundational controls like security headers and DNS protections need improvement. Overall, the current posture is high risk and requires immediate remediation to safeguard sensitive data, ensure regulatory compliance, and maintain business continuity. Addressing these issues promptly will protect the organization from financial losses and operational disruptions. Failure to act could result in severe fines, loss of customer confidence, and increased vulnerability to cyber attacks.

O

OptimaT

optimat.be

0

The website's security posture is currently at high risk, with multiple critical and high-severity issues that directly impact business operations and regulatory compliance. Notably, the absence of HTTPS encryption exposes sensitive data to interception, undermining user trust and violating legal requirements such as GDPR and NIS2. Missing key security headers (Strict-Transport-Security, X-Frame-Options, Content-Security-Policy) increases vulnerability to common web attacks. The lack of GDPR compliance elements, including privacy and cookie policies and consent mechanisms, poses significant legal and reputational risks, especially for EU customers. Additionally, the organization lacks foundational information security frameworks, incident response procedures, and business continuity plans, indicating immature security governance. Although email security and network security show moderate to good standing, critical gaps in SSL/TLS and GDPR compliance drastically overshadow these positives. Immediate remediation is essential to protect customer data, maintain regulatory compliance, and secure business operations. The overall security readiness score reflects urgent need for comprehensive security improvements and policy implementations.

T

TMC

tmc-employeneurship.com

0

The website's overall security posture is concerning, with multiple critical and high-severity issues that pose significant risks to both the business and its users. The absence of HTTPS encryption is a critical vulnerability, exposing all data transmissions to interception and undermining trust. Compliance-related deficiencies under GDPR, such as missing privacy policies and cookie consent mechanisms, expose the business to legal penalties and reputational damage. Furthermore, the lack of an information security framework, incident response procedures, and vulnerability disclosure policy signals immature cybersecurity governance. While network security and DNS health are relatively strong, essential email security protocols like DMARC enforcement and DKIM are insufficiently implemented, increasing the risk of phishing and spoofing. Overall, these gaps indicate urgent needs for foundational security controls, compliance adherence, and incident preparedness to protect business operations and customer trust. Immediate remediation efforts are critical to mitigating potential data breaches, regulatory fines, and reputational harm.

This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

E

Emancipe

ecoledesparents.be

0

The website ecoledesparents.be currently exhibits a severely deficient security posture, primarily due to the absence of HTTPS encryption and critical security headers, exposing the business to data breaches, regulatory non-compliance, and reputational damage. Additionally, the lack of privacy policies and incident response frameworks significantly increases legal and operational risks, especially under EU regulations.

Esteelauder.be currently exhibits significant security and compliance gaps, particularly concerning GDPR adherence and NIS2 regulatory requirements, which pose serious legal and reputational risks for the business. While network and email security show strengths, critical deficiencies in privacy policies, incident response, and web security headers undermine overall trust and operational resilience.

Prezly.com demonstrates a generally strong network and email security posture but exhibits notable weaknesses in GDPR compliance, incident response readiness, and cryptographic practices. These gaps pose significant regulatory, operational, and reputational risks that should be addressed promptly to safeguard customer trust and business continuity.

The website demonstrates a strong technical security foundation in network, email, and SSL/TLS configurations but exhibits significant gaps in critical security headers, privacy compliance, and organizational security policies. The absence of GDPR-related documentation and NIS2 security framework elements exposes the business to regulatory risks and potential reputational damage. Immediate attention to privacy policies, incident response, and security governance is essential to align with legal requirements and enhance overall risk management.