Security Directory

A

AFS Intercultural Programs, INC.

afsecuador.org

0

AFS Ecuador is a non-profit organization focused on intercultural learning through student exchange, hosting, and volunteer programs. The website targets students, host families, and volunteers in Ecuador, offering educational and cultural exchange opportunities. The organization is part of the global AFS network, promoting global citizenship and cultural understanding. The website is well-branded, consistent, and provides clear information about its services and mission. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Google reCAPTCHA Enterprise for security. It uses CDN hosting via Cloudfront for performance and includes responsive design for mobile users. SEO and accessibility are adequately addressed, though some accessibility features could be improved. Security posture is good with HTTPS enforced and anti-bot measures in place. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected, which could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and serves its educational mission well. The main risk is the lack of WHOIS data, which slightly reduces domain trustworthiness but does not detract from the site's legitimacy based on content and social presence.

1

1-700 Digital S.A.

1700digital.com

0

1-700 Digital S.A. operates an established e-commerce and physical retail business in Ecuador specializing in computer hardware, laptops, PC parts, peripherals, and electronics. Founded in 2006, the company serves both individual consumers and businesses, positioning itself as a recognized local distributor of major technology brands. The website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and a CDN for performance. While the site is well-structured and mobile-optimized, it lacks some privacy compliance features such as cookie consent banners and explicit GDPR indicators. Security posture is moderate with HTTPS enabled and domain transfer protection, but missing DNSSEC and some security headers. Marketing relies on Facebook Pixel tracking. Overall, the domain registration and website content are consistent and trustworthy, supporting a credible business presence in Ecuador.

.

.EC DOMINIOS ECUADOR S.A.S

dominiosecuador.ec

0

The website dominiosecuador.ec represents .EC DOMINIOS ECUADOR S.A.S, a small Ecuadorian company specializing in domain registration, hosting, email, SSL certificates, and web design services. The site targets Ecuadorian businesses and entrepreneurs seeking digital presence solutions. The company positions itself as a local provider with a focus on .EC domains and related services. Technically, the website is built on the WHMCS platform using the Lagom template, incorporating modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel. The site is mobile optimized and provides a user-friendly experience with clear navigation and active customer support chat integration. Security posture is adequate with HTTPS enforced and CSRF tokens in forms, but lacks explicit security headers and published security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy page, though GDPR compliance is not clearly demonstrated. WHOIS data confirms the legitimacy of the domain registration, matching the business claims and showing no suspicious patterns. Overall, the website is professional, trustworthy, and suitable for its business purpose, though improvements in security policies and technical SEO could enhance its posture.

DIGITALECUADOR CIA LTDA is a small Ecuadorian technology company specializing in domain registration, web hosting, DNS server management, and web design services. The website targets individuals and businesses within Ecuador, offering localized services primarily through a WHMCS-powered platform. The business model focuses on providing essential internet infrastructure and web presence solutions to its regional market. The website content is primarily in Spanish with options for English and Portuguese, indicating a regional multilingual approach. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, Bootstrap framework, FontAwesome icons, and Google Fonts. The use of WHMCS indicates a mature client management and e-commerce platform. The site shows moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security measures include CSRF tokens and Google reCAPTCHA integration, but no advanced security headers or explicit SSL/TLS configuration details were found in the provided content. From a security perspective, the site demonstrates basic protections but lacks published privacy, cookie, or terms of service policies, which impacts compliance posture. No incident response or vulnerability disclosure information is available. WHOIS data aligns well with the website's business identity, supporting legitimacy. No suspicious or malicious indicators were detected. Overall, the security posture is moderate but could be improved with enhanced policies, security headers, and transparency. The overall risk assessment suggests a functional and legitimate business website with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing security headers, enhancing contact transparency, and establishing vulnerability disclosure mechanisms to strengthen trust and compliance.

The website revistaidentidad.ec is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page that blocks direct content access. This prevents extraction of any meaningful business, contact, or policy information. The site appears to be protected by a JavaScript challenge typical of Cloudflare, indicating a security posture that prioritizes bot mitigation but limits external analysis. Without access to actual site content, no metadata, forms, or external links can be analyzed. The lack of visible security headers or SSL configuration data further limits security assessment. Overall, the site’s digital maturity and compliance posture cannot be evaluated accurately under these conditions.

NIC.ec, operated by ECUADORDOMAIN S.A., is the official registry and registrar for Ecuador's .ec country code top-level domain. The website provides domain search, registration, and management services targeting individuals, businesses, and government entities within Ecuador. It holds multiple official accreditations such as ICANN, IANA, LACNIC, and LACTLD, reinforcing its authoritative position in the domain registration market. The site also promotes partnerships with registrar agents and offers specialized services for government and military domains. Technically, the website employs a modern tech stack including jQuery, Bootstrap, FontAwesome, Google Tag Manager, Google Analytics, Yandex Metrika, and Chatwoot for live chat support. It uses HTTPS with good SSL configuration and implements cookie consent mechanisms. The site is mobile optimized and features good navigation and content quality. However, no explicit CMS or hosting provider information is detected, suggesting a custom-built platform. From a security perspective, the site follows best practices such as HTTPS enforcement, CSRF tokens, and reCAPTCHA integration. While security headers are not explicitly visible in the HTML, the site does not expose sensitive data or show signs of vulnerabilities. The absence of a published security policy or incident response contact is noted. Extensive tracking and marketing tools are used, indicating a moderate to extensive user tracking level, with basic privacy compliance. Overall, NIC.ec presents a trustworthy and professional online presence consistent with its role as Ecuador's official domain registry. Recommendations include enhancing security header implementation, publishing a security policy and incident response contacts, and improving accessibility features to further strengthen compliance and user trust.

S

Securitas Ecuador

securitasecuador.com

0

Securitas Ecuador is a well-established security services provider offering a broad range of intelligent protection solutions including specialized security, mobile patrols, remote monitoring, electronic security, fire protection, and corporate risk management. The company leverages over 90 years of experience and is part of the global Securitas Group, targeting businesses and organizations in Ecuador. Their website reflects a professional and consistent brand presence with comprehensive service descriptions and multiple language options, indicating a mature digital presence. Technically, the website is built on the EPiServer CMS platform, hosted likely on Microsoft Azure, and uses modern analytics and consent management tools such as Google Tag Manager, Microsoft Application Insights, and FriendlyCaptcha. The site is mobile-optimized, accessible, and SEO-friendly, though some security headers are missing which could be improved. Forms are protected with CAPTCHA and privacy policies are clearly presented, demonstrating good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities in the HTML content. However, the absence of WHOIS registration data for the domain is a concern, as it is inconsistent with the active and professional website. This discrepancy slightly lowers the trust score but does not negate the overall legitimacy given the strong brand and content quality. Overall, the website is a reliable and professional digital asset for Securitas Ecuador, with recommendations to enhance security headers, publish explicit security policies, and clarify domain registration details to improve trust and compliance further.

E

ENAE RENT A CAR

alamo.ec

0

Alamo Ecuador is a car rental service provider operating in Ecuador, offering a variety of vehicles for rent and emphasizing customer service and vehicle quality. The website is professionally designed using WordPress with modern plugins for booking and GDPR compliance, targeting tourists and local customers. The company demonstrates trustworthiness through clear contact information, social media presence, and an Enterprise Standard of Care certification. Technically, the site uses a solid tech stack including WPBakery, jQuery, and Google Tag Manager, with moderate performance and good mobile optimization. Security posture is good with HTTPS and no exposed sensitive data, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the site is reliable and professional with no blocking or suspicious activity detected.