Security Directory

L

Løgmansskrivstovan

logir.fo

0

The website logir.fo is the official Faroese legal database managed by Lógartænastan within the Ministry of Justice (Løgmálaráðið). It serves as an authoritative source for Faroese laws, regulations, and legal documents, updated regularly following official publications. The target audience includes legal professionals, government officials, and the general public seeking access to Faroese legislation. The business model is government-operated, providing free access to legal information with a focus on transparency and public service. Technically, the website employs a modern but straightforward tech stack including Bootstrap, jQuery, Font Awesome, and other JavaScript libraries to provide a responsive and user-friendly interface. The site is mobile-optimized and offers structured search capabilities for legal documents. Performance is moderate, with room for improvement in SEO and accessibility features. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and explicit security headers, which are recommended to enhance security posture. Privacy compliance is weak due to the absence of privacy and cookie policies, and no incident response or vulnerability disclosure information is provided. Google Analytics is used for user tracking without visible consent mechanisms. Overall, the website is trustworthy and professionally maintained, reflecting its government affiliation. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies, and providing incident response contact details to improve compliance and security maturity.

S

Spf QODIO

kodio.fo

0

Kodio is a Faroese-based creative technology company specializing in digital solutions such as websites, intranets, branding, and email services. With over 10 years of experience and a client base exceeding 900 customers worldwide, Kodio positions itself as a trusted partner for businesses ranging from small private companies to public institutions. Their service model focuses on delivering tailored, high-quality digital communication and branding solutions that strengthen client identity and internal collaboration. Technically, the website is built on modern frameworks like Next.js and React, hosted on Vercel, ensuring fast performance and excellent mobile optimization. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and formal privacy and cookie policies. Overall, Kodio demonstrates a professional and trustworthy online presence with room for improvement in privacy compliance and security best practices.

Cookies.fo is a specialized service provider offering cookie consent management solutions tailored to comply with Faroese data protection laws, GDPR, ePR, and CCPA. Founded in 2020 and operated by Spf QODIO, the company targets website owners needing to ensure legal compliance with cookie usage regulations. The website presents a clear business model based on subscription services with a free trial and standard paid plans. The market position is niche and local, focusing on the Faroe Islands and GDPR-regulated regions. Key services include a customizable cookie consent banner, centralized legal updates, and integration with Google Tag Manager.

S

Sendistovan

fmx.fo

0

FMX (Faroe Music Export) is a small Faroese organization dedicated to promoting the music industry of the Faroe Islands internationally. The website serves as a hub for news, events, and resources related to Faroese music export. The organization appears to be a niche cultural export entity with a clear target audience of music professionals and enthusiasts interested in Faroese music. The website is built on the Ease CMS platform and uses a variety of modern web technologies including jQuery, Lightbox2, and Google reCAPTCHA to enhance user experience and security. Cookie consent is managed via Cookies.fo, and mailing list subscriptions are handled through Mailchimp. The website is well-branded and consistent with its cultural mission, featuring social media integration and clear contact information.

F

Faroe Ship

faroeship.com

0

Faroe Ship is a well-established shipping and logistics company based in the Faroe Islands, with a history dating back to 1919. The company serves as a key regional transport hub in the North Atlantic, offering a comprehensive range of services including liner shipping, terminal operations, warehousing, cold storage, trucking, and special transports. Their website reflects a mature digital presence with clear service descriptions, customer portals, and updated news sections, positioning them as a leading logistics provider in their region. Technically, the website employs modern web technologies such as htmx and hyperscript for interactivity, integrates Google Tag Manager for analytics, and uses CookieHub for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, indicating a strong digital maturity. The domain is secured with HTTPS, and domain registration details align with the company’s claims, enhancing trustworthiness. From a security perspective, the site demonstrates good practices including HTTPS enforcement, domain status protections, and cookie consent mechanisms. However, there is room for improvement by enabling DNSSEC, publishing explicit security policies, and adding a security.txt file to facilitate vulnerability disclosures. No critical vulnerabilities or exposed sensitive data were detected. Overall, Faroe Ship’s website presents a professional, secure, and compliant digital front that supports their business operations effectively. The risk level is low, with recommendations focused on enhancing DNS security and formalizing security policies to further strengthen their security posture.

R

Ráðið fyri nevtralt mál

fornovn.fo

0

fornøvn.fo is a community-driven, open-source platform dedicated to providing resources and information about non-binary and gender-neutral pronouns and language, primarily targeting the Faroese-speaking community. The project is managed by the collective 'Ráðið fyri nevtralt mál' and offers multilingual support through related domains. It serves as an educational and advocacy tool promoting freedom, respect, and inclusion in language use. The website features personal pronoun cards, a gender-neutral dictionary, cultural text sources, and community engagement tools.

Heilsufrøðiliga starvsstovan operates as the official government health and food safety authority in the Faroe Islands, providing regulatory oversight and public information on food production, animal health, aquaculture, and research. The website serves residents and businesses with relevant advisories, licensing information, and laboratory services. Technically, the site is built on Oracle WebCenter with Oracle ADF framework, delivering a moderate performance and basic mobile and accessibility support. Security posture is adequate with HTTPS and domain transfer protections but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration and business information are consistent and trustworthy, reflecting a legitimate government entity.

V

Vága Floghavn

floghavn.fo

0

Vága Floghavn operates the main airport in the Faroe Islands, providing essential airport services including flight schedules, parking, duty-free shopping, and passenger amenities. The website targets travelers, airlines, and visitors, offering clear and relevant information about airport operations and services. The business is positioned as the primary transportation hub in the region with a small organizational size and focused service offerings. Technically, the website uses legacy JavaScript frameworks such as AngularJS 1.5.7 and jQuery 1.11.3, indicating a need for modernization to improve security and performance. The site is moderately optimized for mobile devices and SEO, with good navigation and content quality. However, no advanced CMS or hosting details are evident. From a security perspective, the site uses HTTPS but lacks visible security headers and employs outdated libraries that may expose vulnerabilities. There is no explicit security or incident response policy published, and no dedicated security contact channels are provided. Privacy compliance is basic, with a privacy policy and cookie policy present but no active consent mechanism. Overall, the website is functional and professional but would benefit from technical and security upgrades to enhance trust and compliance. Strategic improvements in security posture and privacy mechanisms are recommended to align with best practices and regulatory requirements.