Security Directory

Naalakkersuisut.gl is the official government website of Greenland, serving as the primary portal for government news, departmental information, and public resources. The site targets Greenlandic citizens, government officials, and media, providing authoritative and up-to-date information about governmental activities and services. The business model is public service oriented, with a focus on transparency and communication. Technically, the website employs standard web technologies including JavaScript and CSS, and uses Matomo for analytics. The site is moderately performant and mobile-optimized, but lacks modern security implementations such as HTTPS and security headers, which significantly impacts its security posture. From a security perspective, the absence of a valid SSL certificate and HTTPS support is a critical vulnerability, exposing users to potential data interception risks. No privacy or cookie policies were found, indicating gaps in compliance with GDPR and other privacy regulations. The site does not display any incident response or security policies, which could affect trust and readiness for security events. Overall, while the website fulfills its role as a government information portal with good content quality and user experience, the lack of fundamental security measures and privacy compliance lowers its trustworthiness and exposes it to risks. Strategic improvements in security infrastructure and privacy transparency are recommended to enhance user trust and regulatory compliance.

O

Oqaasileriffik

kukkuniiaat.gl

0

Oqaasileriffik operates the website kukkuniiaat.gl, providing the Greenlandic spell checker tool Kukkuniiaat. This service supports multiple office platforms including Google Docs, Microsoft Office, Adobe InDesign, LibreOffice, and Apache OpenOffice, targeting Greenlandic language users and institutions. The organization is a government language secretariat, positioning itself as the official provider of Greenlandic language technology and resources. The website content is well-structured, multilingual, and professionally presented, supporting accessibility and user engagement. Technically, the website employs modern front-end technologies such as Bootstrap 5 and jQuery, hosted by Hosting.gl ApS. It integrates Matomo and Google Analytics for user tracking and performance monitoring. However, the site lacks a valid SSL/TLS certificate, resulting in no HTTPS support, which is a critical security deficiency. Performance is moderate with a page load time of approximately 4.5 seconds and a moderate number of resources. From a security perspective, the absence of HTTPS and modern TLS protocols significantly undermines user data protection and trust. While SPF and DMARC records are correctly configured for email security, the lack of security headers, HSTS, and OCSP stapling further weakens the security posture. Privacy compliance is basic with a privacy policy present but lacking explicit GDPR compliance statements or cookie consent mechanisms. Overall, the website is functional and credible but requires urgent security improvements, especially SSL/TLS deployment, to protect users and enhance trust. Strategic recommendations include obtaining a valid SSL certificate, enabling HTTPS, implementing security headers, and enhancing privacy compliance to meet regulatory standards.

O

Oqaasileriffik

nutserut.gl

0

Nutserut is a specialized online platform operated by Oqaasileriffik, the Language Secretariat of Greenland, providing machine translation and language learning tools focused on the Greenlandic language. The website offers multiple AI-based translation methods and educational annotation tools aimed at language learners, translators, and researchers interested in Greenlandic. The service is positioned as a niche governmental resource with a clear public service mission. Technically, the website employs modern frontend technologies including Bootstrap 5.3, jQuery, and Matomo analytics. However, the site suffers from slow load times and lacks HTTPS support due to an invalid or missing SSL certificate, which significantly impacts security and user trust. The site is hosted via Hosting.gl ApS with DNS managed through Google Domains, reflecting a stable infrastructure. From a security perspective, the absence of HTTPS and security headers presents a critical vulnerability, exposing users to potential data interception risks. No privacy or cookie policies are present, indicating poor privacy compliance. Analytics tools are used without visible privacy disclosures, and no incident response or security policy information is provided. The domain registration is mature and consistent with the governmental nature of the site, supporting legitimacy. Overall, while the website provides valuable language services with good content and business credibility, its security posture is weak and privacy compliance is lacking. Strategic improvements in SSL deployment, security headers, and privacy policies are essential to enhance trust and protect users.

O

Oqaasileriffik

ordbog.gl

0

Oqaasileriffik operates as the official Language Secretariat of Greenland, providing comprehensive Greenlandic dictionaries and language resources online. The website serves a niche audience including Greenlandic speakers, researchers, and students, offering multiple historical and modern dictionaries in Greenlandic, Danish, and English. The business model is non-commercial and government-supported, positioning it as a key language resource provider in Greenland. Technically, the site employs modern frontend technologies such as Bootstrap, jQuery, and SQL.js, and supports a Progressive Web App for offline access. However, performance is slow with a high page load time and large page size. Security posture is weak due to the absence of a valid SSL certificate, lack of HTTPS, and missing security headers, which significantly impacts user trust and data protection. Privacy compliance is minimal, with no privacy or cookie policies present, and moderate user tracking via Matomo and Google Tag Manager. Overall, the site is legitimate and consistent with its stated purpose but requires urgent improvements in security and privacy to enhance trust and compliance.

The website lovgivning.gl serves as an official Greenland government portal providing access to Greenlandic legislation and administrative regulations. It targets residents and legal professionals in Greenland, primarily Danish-speaking users, offering a searchable legal database and updates on recent laws. The site is operated under the Greenland Self-Government authority, with hosting and domain registration managed by Modulo ApS, a Danish registrar. The content is professionally presented with consistent branding and clear navigation, supporting a medium-sized government service model founded in 2008. Technically, the site uses modern frontend technologies including Vue.js and JavaScript, with a moderate performance profile and good mobile optimization. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall. The site lacks security headers, HSTS, and DNSSEC, which exposes it to potential risks. No analytics or tracking tools are detected, indicating minimal user tracking and a privacy-respecting approach, though no formal privacy or cookie policies are published. From a security perspective, the site’s lack of HTTPS and security best practices significantly lowers its security posture score. The domain is mature and consistent with official government use, enhancing trustworthiness. However, the absence of incident response contacts, security policies, and vulnerability disclosures suggests room for improvement in security governance. Overall, the site is functional and credible as a government resource but requires urgent security enhancements to protect user data and ensure trust. Strategic recommendations include immediate implementation of HTTPS with a valid SSL certificate, enabling security headers and DNSSEC, publishing privacy and cookie policies to comply with GDPR, and establishing clear incident response channels. These steps will improve security, compliance, and user trust, aligning the site with best practices for government digital services.

N

Namminersorlutik Oqartussat

nalunaarutit.gl

0

The website 'nalunaarutit.gl' serves as the official Greenland government portal for legislative announcements and legal notifications. It provides access to government-issued legal documents and updates primarily targeted at Greenlandic citizens, legal professionals, and government officials. The site offers search functionality to locate specific legislative texts and maintains a consistent government branding with official logos and domain usage. Technically, the site is built using Vue.js and custom CSS, delivering a moderate performance experience with a load time of approximately 4.5 seconds. Mobile optimization is good, and the site supports Greenlandic and Danish languages. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts its security posture. No advanced security headers or privacy policies are present, and no analytics or advertising tools are detected, indicating minimal user tracking. Contact information is clearly provided with an official government email and physical address. Overall, the site is credible as an official government resource but requires urgent security improvements to protect user data and enhance trust.

Oqaasileriffik is the official Greenlandic Language Secretariat, providing authoritative language resources, terminology, and policy information primarily for the Greenlandic language. The website serves as a central hub for language tools, dictionaries, news, and educational materials targeting Greenlandic speakers, researchers, and government stakeholders. The organization operates as a governmental or non-profit entity focused on language preservation and development. Technically, the website is built on WordPress with Elementor and several plugins, including multilingual support via WPML. The infrastructure uses Apache on Ubuntu, but suffers from critical SSL issues with an invalid certificate and no modern TLS protocols enabled, which undermines secure communications. Performance data is limited, but the site appears content-rich and mobile-optimized with basic accessibility features. Security posture is weak due to the invalid SSL certificate, lack of HSTS, missing security headers, and absence of vulnerability disclosure or security policies. Privacy compliance is minimal, with no visible privacy or cookie policies. Contact information is clearly provided, including email, phone, and physical address, along with active social media channels. Overall, the site is functional and content-rich but requires urgent improvements in SSL configuration, security best practices, and privacy compliance to enhance trust and protect users. Strategic recommendations include obtaining a valid SSL certificate, enabling modern TLS, publishing privacy and cookie policies, and implementing security headers and vulnerability disclosure mechanisms.

Sullissivik.gl is the official government portal for public services in Greenland, targeting both citizens and businesses. It provides a centralized platform for accessing self-service forms, information on cultural, housing, equality, and transport topics, and digital communication channels. The site is primarily in Greenlandic with options for Danish and English, reflecting its public service nature. The portal is positioned as a key digital interface for government-citizen interaction in Greenland. Technically, the site uses modern JavaScript libraries, SVG icons, and integrates Matomo analytics for user tracking. However, the site suffers from a critical lack of a valid SSL certificate and HTTPS enforcement, which severely impacts its security posture. No advanced security headers or policies are detected, and privacy compliance is basic with only a cookie policy present. Overall, the site is functional and content-rich but requires urgent security improvements to protect user data and build trust.