Security Directory

G

Guam Power Authority

guampowerauthority.com

0

Guam Power Authority (GPA) is the primary public utility responsible for power generation and distribution in Guam. The website reflects a medium-sized government-related entity focused on providing reliable and sustainable energy solutions, including clean energy initiatives and customer service tools such as online payments and outage alerts. The site targets residents and businesses on Guam, emphasizing community engagement and energy conservation. Technically, the website is built using modern JavaScript frameworks (React) and is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled and domain registration protections, but lacks DNSSEC and formal published privacy and cookie policies. No incident response or vulnerability disclosure information is provided, indicating room for improvement in transparency and compliance. Overall, the website is professional, trustworthy, and content-rich, serving its public utility function effectively.

T

Th Inc

patamicronesia.org

0

PATA Micronesia Chapter is a regional non-profit organization dedicated to promoting tourism across Micronesia including Guam, Northern Mariana Islands, Palau, FSM, and Marshall Islands. The website serves as an official platform for membership, event announcements, and regional tourism information. Technically, the site is built on Drupal CMS with a legacy jQuery version and integrates Google Analytics and accessibility features. Security posture is generally good with HTTPS and domain transfer protections, though DNSSEC is not enabled and some libraries are outdated. Privacy compliance is basic with no visible cookie consent. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

G

Guam Waterworks Authority

paygwa.com

0

The Guam Waterworks Authority website serves as the official online portal for water utility services in Guam, providing customers with account management, billing, and payment functionalities. The site targets residents and businesses in Guam, positioning itself as the primary water utility provider in the region. Key services include online bill payment, water consumption tracking, and customer support messaging. The business model is a government utility service with a focus on secure and convenient digital access. Technically, the website is built using modern JavaScript libraries including React, with additional libraries for canvas manipulation and iconography. The site is moderately performant and optimized for mobile devices, though accessibility and SEO optimizations are basic. Hosting and domain registration are managed through GoDaddy, with no DNSSEC enabled and no visible advanced security headers. From a security perspective, the site uses HTTPS and secure login forms but lacks DNSSEC and security headers that could enhance protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and similar regulations. Contact information is clearly provided, but no incident response or vulnerability disclosure information is available. No advertising or tracking technologies are detected, contributing to minimal user tracking. Overall, the website is professional, trustworthy, and safe for general audiences. However, improvements in privacy compliance, security hardening, and transparency around data protection policies are recommended to enhance user trust and regulatory adherence.

GuamTax.com serves as the official online portal for the Guam Department of Revenue and Taxation, providing a comprehensive suite of tax-related services including business and individual e-filing, online payments, public notices, and regulatory information. The site targets residents and businesses in Guam, positioning itself as the authoritative government resource for tax compliance and revenue collection. Key services include business privilege tax returns, real property tax inquiries, vehicle registration, and passport office information. Technically, the website employs standard web technologies such as JavaScript, Google Tag Manager for analytics, and Google Fonts for typography. The site demonstrates moderate performance and basic mobile optimization, with a structured navigation system and consistent branding. However, there is room for improvement in accessibility and SEO optimization. The absence of a detected CMS or hosting provider details suggests a custom or government-managed infrastructure. From a security perspective, the site uses HTTPS and secure login forms but lacks visible security headers such as Content-Security-Policy or Strict-Transport-Security in the provided data. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR indicators. The WHOIS data is notably missing, raising concerns about domain registration legitimacy, although the official government branding and content strongly indicate authenticity. Overall, GuamTax.com is a functional and trustworthy government website with solid content and service offerings. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance trust and security posture, supporting the site's critical role in Guam's tax administration.

D

Data Management Resources, LLC

govguamdocs.com

0

GovGuamDocs.com is an informational website serving as a centralized resource for Government of Guam forms across multiple departments and agencies. It provides downloadable PDF forms and links to official government payment portals, targeting residents and businesses interacting with Guam government services. The site is operated by Data Management Resources, LLC, as indicated by the copyright notice. The website's market position is as a primary online resource for Guam government forms, with a straightforward business model focused on information dissemination. Technically, the website is built using basic HTML, CSS, and JavaScript without modern frameworks or CMS. The design is dated with fixed-width layouts and minimal mobile optimization. SEO and accessibility features are basic, and performance is moderate. The site uses Google Analytics for tracking but lacks modern privacy and cookie compliance mechanisms. From a security perspective, the site lacks HTTPS, security headers, and privacy policies, which significantly lowers its security posture. The WHOIS data for the domain is missing or unregistered, which raises concerns about domain legitimacy despite the presence of official government-related content. No incident response or vulnerability disclosure information is provided. Overall, the website is functional for its purpose but requires urgent improvements in security, privacy compliance, and domain registration legitimacy to enhance trust and protect users. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and resolving domain registration inconsistencies.

MyGuamTax.com serves as the official online portal for the Guam Department of Revenue and Taxation, providing essential tax filing, payment, vehicle registration, and passport-related services to residents and businesses in Guam. The website is positioned as the primary government platform for these services, offering a range of e-filing and payment options tailored to individuals and businesses. The portal integrates with related Guam government services and payment gateways, reinforcing its role as a centralized tax and revenue service hub. From a technical perspective, the website employs standard web technologies including JavaScript, CSS, and Google Tag Manager for analytics. While the site is functional and moderately optimized for mobile devices, there is room for improvement in accessibility and SEO. The absence of a CMS or advanced frameworks suggests a relatively straightforward technical infrastructure. Performance is moderate, with no critical errors detected. Security-wise, the site benefits from HTTPS encryption and secure login forms, but lacks visible security headers such as Content-Security-Policy and HSTS, which are recommended for enhanced protection. The absence of published security policies or incident response information indicates a gap in transparency and preparedness. Additionally, no cookie consent mechanism is present, which may impact privacy compliance. Overall, the website is trustworthy and professional, reflecting its government affiliation. However, the missing WHOIS data for the domain is a notable anomaly that reduces the trust score. Strategic improvements in security headers, privacy compliance, and technical modernization would strengthen the site's security posture and user trust.

G

Guam Economic Development Authority

investguam.com

0

The Guam Economic Development Authority (GEDA) operates as a government agency dedicated to fostering economic growth and investment in Guam. The website serves as a comprehensive portal for investors, small businesses, and the public, offering information on investment opportunities, financial assistance, public finance, and industry development programs. The site positions GEDA as a central authority in Guam's economic landscape, promoting sustainable growth and community benefits. Technically, the website is built on WordPress using the Elementor framework, incorporating modern web technologies such as jQuery and Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security measures include HTTPS enforcement and Google reCAPTCHA integration, though some security headers are not explicitly detected. From a security perspective, the site demonstrates a solid posture with encrypted connections and no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and detailed privacy compliance features suggests room for improvement in regulatory adherence. The lack of WHOIS data is a notable anomaly, potentially indicating privacy protection or recent domain registration, which slightly impacts trust. Overall, the website is a credible and professional representation of a government economic development entity, with recommendations to enhance privacy compliance and security header implementation to further strengthen its security and trustworthiness.

G

Guam Bar Association

guambar.org

0

The Guam Bar Association (GBA) is a legally established integrated bar association serving the legal community of Guam. It provides membership services, continuing legal education, ethics complaint handling, and public resources related to the legal profession. The website reflects a professional organization with a clear mission to improve justice and legal standards in Guam. The target audience includes attorneys, judges, law firms, government agencies, and the general public interested in legal matters. The association is well-positioned as the official bar association for Guam with a long history dating back to 1978. Technically, the website is built on Drupal 7 with modern front-end libraries such as jQuery and Bootstrap. It includes accessibility features and multi-language support via Google Translate. The site is moderately performant and mobile optimized. However, some security enhancements such as DNSSEC and security headers are missing. Privacy compliance is basic, with no cookie consent mechanism detected. Security posture is adequate with HTTPS enabled and secure login forms, but lacks advanced security headers and explicit incident response contacts. The domain registration is consistent with the organization's identity and location, with a long domain age supporting legitimacy. Overall, the website is a credible and professional platform for the Guam Bar Association but would benefit from improved security practices and enhanced privacy compliance to align with modern standards.

G

Government of Guam

guam.gov

0

The website www.guam.gov serves as the official government portal for the Island of Guam, providing comprehensive information and services to residents, visitors, businesses, and government employees. It offers access to government news, directories, transparency reports, emergency guides, and various resident and visitor services. The site positions itself as the authoritative source for all official Guam government information. Technically, the site is built on WordPress 6.0.9 using the Divi child theme and employs caching and performance optimization plugins. It uses modern web technologies including jQuery and Bootstrap for responsive design. The site is mobile optimized and accessibility tested, ensuring a good user experience across devices and for users with disabilities. From a security perspective, the site enforces HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The WHOIS data is incomplete, which is unusual for a government .gov domain, but the website content and domain usage strongly indicate legitimacy. Overall, the site is a well-maintained government portal with good content quality and user experience. Strategic improvements in security headers, privacy compliance, and transparency around incident response would further strengthen its security posture and trustworthiness.

GuamPayments is a Guam-based payment solutions provider specializing in credit card merchant accounts, online payments, and integrated billing systems tailored for Guam's market. Founded in 2020 and operated by the parent company 1-A GuamWEBZ, the company leverages global partnerships with major payment processors to deliver secure and convenient payment options for businesses, government entities, non-profits, and other sectors. The website presents a professional and user-friendly interface with clear contact channels and a focus on local support. Technically, the site uses modern front-end technologies including Bootstrap and jQuery, with Google Analytics for user tracking. Security posture is adequate with HTTPS enabled and clientTransferProhibited domain status, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and well-positioned in its niche but could improve security and compliance aspects.

T

Th Inc

govguam.tv

0

GovGuam.tv is an official government streaming platform providing live and recorded video broadcasts for various Government of Guam organizations. It serves as a transparency and communication tool for government meetings and public information dissemination. The platform targets government employees, residents, and stakeholders interested in Guam government activities. Technically, the site uses a combination of older JavaScript libraries including jQuery 1.7 and Bootstrap, with Google Analytics for tracking. While the site is functional and mobile-optimized, it lacks modern security headers and uses outdated libraries, which may pose security risks. No privacy or cookie policies are published, indicating a gap in compliance. The domain registration is consistent with a legitimate government service, registered in Guam with no privacy protection, and has a clientTransferProhibited status to prevent unauthorized transfers. Overall, the website is professional and trustworthy but would benefit from security and privacy improvements.

G

GuamWEBZ

opengovguam.com

0

Open GovGuam, powered by GuamWEBZ, is a specialized technology service provider delivering turnkey and custom digital solutions tailored for the Government of Guam. With over 21 years of experience, they offer a comprehensive suite of services including websites, mobile apps, cloud hosting, live streaming, and ongoing support. Their market position is strong locally, serving multiple government agencies with certified technology expertise and a centralized cloud platform. Technically, the website is built on Drupal CMS with modern frameworks and integrates Google Analytics and Tag Manager for user insights. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS and domain transfer protections, but lacks DNSSEC and some security headers. Privacy compliance is limited by absence of cookie consent and detailed privacy policies. Overall, the business credibility is high with transparent contact information and trust signals from client logos and certifications.

G

Guam Behavioral Health and Wellness Center

peaceguam.org

0

The Guam Behavioral Health and Wellness Center (GBHWC) operates the PEACE website as a government portal providing comprehensive behavioral health and substance abuse services to the residents of Guam. The site serves as an informational and service access point for various mental health programs, crisis counseling, and prevention initiatives. It holds a primary market position as the main behavioral health provider in the region, supported by government affiliation and CARF accreditation. The target audience includes adults and children on Guam seeking mental health and substance abuse assistance. Technically, the website is built on Drupal 7 CMS with a range of JavaScript libraries for enhanced user experience and analytics integration, including Google Analytics and Google Tag Manager. The site is moderately optimized for mobile and accessibility, offering features such as text resizing and high contrast modes. Performance is moderate, with room for modernization and improved SEO practices. From a security perspective, the site uses HTTPS with anonymized IP tracking for analytics, but lacks explicit security headers and a cookie consent mechanism. The use of an outdated CMS version (Drupal 7) poses potential security risks. No critical vulnerabilities or exposed sensitive data were detected. Incident response and security policies are not publicly documented, indicating areas for improvement. Overall, the website is functional and trustworthy as a government health service portal but would benefit from enhanced security practices, privacy compliance improvements, and technical modernization to strengthen its security posture and user trust.