Security Directory

T

Truck1 Sp.z.o.o.

truck1.ke

0

Truck1 Kenya operates as a specialized online marketplace for commercial vehicles including trucks, heavy machinery, and passenger transport vehicles. It is part of the larger Truck1 brand with a strong European presence, offering over 200,000 classified ads. The platform targets businesses and individuals in Kenya and internationally, providing a comprehensive catalog and dealer services. Technically, the website employs modern tracking and advertising technologies such as Google Analytics, Facebook Pixel, TikTok Analytics, and Criteo, indicating a mature digital marketing infrastructure. The site is well designed, mobile optimized, and provides a good user experience with clear navigation and extensive content. Security-wise, the site uses HTTPS and includes multiple security headers, but lacks explicit privacy and cookie policies, which is a compliance gap. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website content and structured data suggest a legitimate business. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and domain registration clarity.

F

FW Africa

afripackexpo.com

0

Africa Packaging Expos, operated by FW Africa, is a leading organizer of international trade shows focused on packaging materials, processing, and packaging technologies for various manufacturing and retail sectors across Africa. The company targets high-level professionals including investors and C-suite executives in industries such as food and beverage, agriculture, pharmaceuticals, and hospitality. The website demonstrates a professional digital presence built on WordPress with the Divi theme, incorporating modern web technologies and Google services for analytics and advertising. Security posture is generally good with HTTPS enforced, though some security headers are missing and no explicit vulnerability disclosure or security policy is found. The absence of WHOIS data for the domain raises concerns about domain registration transparency, which impacts trustworthiness. Overall, the website is functional, well-structured, and serves its business purpose effectively, but improvements in privacy compliance and domain transparency are recommended.

F

FW Africa

africadairysummit.com

0

The Africa Dairy Innovations Summit is a newly established event organized by FW Africa, positioned as the leading dairy industry event in Africa. It targets dairy industry investors, managers, professionals, and stakeholders, focusing on innovation and sustainability within the dairy sector. The business model revolves around event hosting, networking, and industry knowledge sharing, with additional revenue from sponsorship and exhibition opportunities. The website reflects a professional and consistent brand image, with clear event details and contact information, supporting its market positioning as a key industry summit in Kenya and the broader African region. Technically, the website is built on WordPress using the Divi theme, integrating Google Analytics and Matomo for visitor tracking. Hosting is via a provider associated with the domain's nameservers, likely a commercial hosting service. The site demonstrates good mobile optimization and SEO practices but lacks advanced security headers and DNSSEC, which are recommended for enhanced security. Performance is moderate, with no blocking or WAF detected, allowing full content access. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain transfer protection. However, it lacks explicit security policies, privacy and cookie notices, and GDPR compliance indicators, which are critical for user trust and regulatory adherence. No incident response or vulnerability disclosure mechanisms are present. The WHOIS data is consistent with the business claims, showing a recent domain registration aligned with the event's founding year, and no privacy protection, indicating transparency. Overall, the website presents a moderate risk profile with good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, enabling DNSSEC, adding security headers, and publishing security and incident response policies.

A

Africa Food Manufacturing (AFMASS) Expos

afmass.com

0

Africa Food Manufacturing (AFMASS) Expos operates as a leading organizer of international food and beverage manufacturing and milling industry trade shows across Africa, targeting key markets such as Kenya, Nigeria, Uganda, Zambia, and Tanzania. The company positions itself as the premier platform showcasing the latest technologies in grain storage, milling, processing, packaging, ingredients, laboratory technologies, and supply chain solutions for the food, beverage, milling, and hospitality sectors. The website reflects a professional digital presence built on WordPress with the Divi theme, integrating standard analytics and advertising tools such as Google Analytics and AdSense. However, the absence of WHOIS registration details raises questions about domain registration transparency.

F

FW Africa

foodbusinessafrica.com

0

Food Business Middle East & Africa, operated by FW Africa, is a leading media publication and event organizer focused on the food and beverage industry across Africa and the Middle East. The website serves as a comprehensive platform providing industry news, insights, and advertising opportunities targeting business owners, CEOs, and professionals in the sector. It holds a strong market position as the No.1 food and beverage industry magazine and website in the region, supported by a consistent brand presence and professional content quality. Technically, the website is built on WordPress using the Pressbox theme and Divi Builder framework, integrating modern technologies such as Google Tag Manager, Google Analytics, Matomo Analytics, and advanced advertising plugins. The site demonstrates good performance, mobile optimization, and SEO practices, ensuring a positive user experience and accessibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the website presents a low-risk profile with a mature digital presence, though the lack of WHOIS data and some security policy disclosures slightly reduce trustworthiness. Strategic recommendations include publishing security and incident response policies, adding vulnerability disclosure information, and enhancing transparency around data protection officers to strengthen compliance and trust.

A

ActionAid International Kenya

actionaid-kenya.org

0

ActionAid International Kenya is a medium-sized non-profit organization established in 2022, focused on social justice and community empowerment in Kenya. The website serves as a platform for advocacy, fundraising, and information dissemination, leveraging WordPress with plugins such as GiveWP and WooCommerce for donation management. The technical infrastructure is modern and includes integrations with JamboPay for payment processing and Google Analytics for visitor tracking. Security posture is adequate with HTTPS enforced and domain registration protections in place, though improvements such as enabling DNSSEC and publishing security policies are recommended. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service policies found. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security documentation.

K

Kenya Diaspora Alliance

kenyadiasporaalliance.org

0

Kenya Diaspora Alliance (KDA) is a registered trust and federation representing over sixty diaspora organizations with a combined membership of approximately 300,000 Kenyans worldwide. The organization focuses on advocacy, investment facilitation, and community networking for the Kenyan diaspora. Their website reflects a mature and established entity with a clear mission and active partnerships. Technically, the site is built on WordPress using Elementor and integrates anti-spam and multimedia features, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS and anti-spam measures, though lacking some security headers and GDPR cookie consent mechanisms. WHOIS data confirms domain legitimacy and appropriate age, supporting the organization's credibility. Overall, the site is professional, trustworthy, and serves its target audience effectively.

A

Amref Health Africa

amref.org

0

Amref Health Africa is a well-established non-governmental organization focused on health development and healthcare improvement across Africa. The organization holds a strong market position as the largest health development NGO based in Africa, providing key services such as health programs, research, training, and capacity building. Their digital presence is supported by a professionally designed WordPress website with modern SEO and analytics tools, reflecting a mature technical infrastructure. The website is mobile-optimized and provides clear navigation and relevant content for its target audience, including donors, partners, and health sector stakeholders. From a security perspective, the website enforces HTTPS and employs standard security practices such as clientTransferProhibited domain status and cookie consent mechanisms. However, there are areas for improvement including enabling DNSSEC, implementing additional security headers like Content-Security-Policy, and publishing a formal security or vulnerability disclosure policy. No critical vulnerabilities or suspicious activities were detected, indicating a generally good security posture. Overall, the website demonstrates a high level of business credibility and trustworthiness, supported by consistent branding, verified social media presence, and a long-standing domain registration. The organization’s compliance with privacy regulations such as GDPR is evident through comprehensive privacy and cookie policies. Strategic recommendations include enhancing DNS security, expanding security headers, and formalizing incident response disclosures to further strengthen the security posture and stakeholder trust.

U

United Nations Environment Programme

unep.org

0

The United Nations Environment Programme (UNEP) is a globally recognized authority on environmental issues, operating as a key program under the United Nations. The website reflects UNEP's mission to address climate change, biodiversity, pollution, and sustainable development through comprehensive programs and advocacy. It targets a broad audience including governments, NGOs, and the general public worldwide. The site is well-branded, professionally designed, and offers multilingual support, enhancing its global reach. Technically, the website is built on Drupal 10, leveraging modern web technologies such as asynchronous script loading, Google Tag Manager, and Facebook SDK for enhanced user engagement and analytics. The site demonstrates good performance, mobile optimization, and accessibility features, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses reputable third-party scripts responsibly. However, it lacks explicit security headers and a public security policy or vulnerability disclosure page, which are recommended for further strengthening its security posture. The WHOIS data is incomplete, which slightly reduces confidence in domain registration transparency but does not detract from the site's legitimacy given its strong UN affiliation and trust signals. Overall, UNEP's website is a high-quality, trustworthy platform that effectively supports its mission. Strategic improvements in security transparency and WHOIS data completeness would further enhance its credibility and resilience.

U

United Nations Environment Programme

unenvironment.org

0

The United Nations Environment Programme (UNEP) is a globally recognized authority on environmental issues, operating under the United Nations umbrella. The website serves as a comprehensive platform for environmental programs focusing on climate action, nature conservation, pollution control, and sustainable development. It targets a broad audience including governments, NGOs, civil society, and the general public. UNEP holds a strong market position as a leading international environmental organization with extensive partnerships and a clear mission. Technically, the website is built on Drupal 10, leveraging modern web technologies such as jQuery, Font Awesome, Google Tag Manager, and Facebook SDK. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The infrastructure reflects a mature digital presence suitable for a large international organization. From a security perspective, the site enforces HTTPS and uses modern libraries without exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response information, which are recommended for enhanced security posture. Privacy and cookie policies are present and comprehensive, indicating good compliance with GDPR and related regulations. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for improvement in security transparency and technical optimization. The incomplete WHOIS data does not detract significantly from the site's legitimacy given its strong UN affiliation and consistent branding.

J

Jaguar Kenya

jaguar-kenya.com

0

Jaguar Kenya operates as the official regional website for Jaguar vehicles in Kenya, showcasing luxury saloons, performance SUVs, and sports cars. The site serves as a digital showroom and brand information portal targeting luxury vehicle buyers within Kenya. It is part of the broader Jaguar Land Rover brand ecosystem, reflecting a medium-sized regional presence with consistent branding and professional content. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, leveraging asynchronous loading of analytics and advertising scripts to optimize performance. The site is mobile-optimized and includes SEO best practices such as hreflang tags for international targeting. Security-wise, the website enforces HTTPS and uses standard tracking technologies but lacks explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

K

Kenya Airways

kenya-airways.com

0

Kenya Airways is a leading African airline and a member of the Sky Team Alliance, operating flights to over 40 destinations worldwide. The company holds a strong market position in the African transportation sector, recognized by multiple prestigious awards such as Africa's Leading Airline in 2024. The website reflects a mature digital presence with multi-language support and modern web technologies including Vue.js and Microsoft Application Insights for analytics. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although public security policies and vulnerability disclosures are absent. Overall, the site demonstrates professionalism and trustworthiness, supporting Kenya Airways' brand as a major airline in Africa.

O

Octavia Carbon

octaviacarbon.com

0

Octavia Carbon is a pioneering company specializing in Direct Air Capture (DAC) technology to remove carbon dioxide from the atmosphere, focusing on climate restoration in Kenya. It holds a unique market position as the Global South's first DAC company and operates the world's second DAC plus geological storage plant, leveraging Kenya's renewable energy and geology. The company targets climate-conscious stakeholders and aims to scale DAC technology affordably and effectively. Technically, the website is built on modern frameworks like React and Next.js, integrated with Prismic CMS, offering excellent performance and mobile optimization. Security posture is strong with HTTPS and security headers, though some improvements in privacy compliance and incident response transparency are recommended. The domain WHOIS data is unavailable, which slightly reduces trust from a registration perspective, but the company's strong media presence and partnerships support its legitimacy. Overall, the website is professional, secure, and well-positioned in the energy sector with a focus on climate justice and innovation.

B

B Lab Africa

b-labafrica.net

0

B Lab Africa is a nonprofit organization dedicated to transforming the business landscape in Africa through sustainability and certification as B Corporations. The organization offers key services including B Corp certification, impact measurement tools like the B Impact Assessment and SDG Action Manager, and runs programs such as the Resilient Sustainable Business Program. Positioned as a leader in sustainability certification across Africa, B Lab Africa targets SMEs and businesses committed to balancing profit with purpose. The website reflects a professional and consistent brand image with clear navigation and rich content including testimonials and multimedia. Technically, the website is built on WordPress using modern plugins such as Elementor, WooCommerce, and TutorLMS, with integrations for Google Tag Manager and YouTube. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is good with HTTPS enabled and domain transfer protection, but could be enhanced by enabling DNSSEC and adding security headers like Content-Security-Policy. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the security posture is solid for a nonprofit, with no critical vulnerabilities detected. The domain registration is transparent and consistent with the organization's founding date, enhancing trustworthiness. Strategic recommendations include improving DNS security, publishing a security policy, and implementing cookie consent to enhance privacy compliance.

S

SHOFCO

shofco.org

0

SHOFCO is a prominent non-profit organization dedicated to empowering urban slum communities in Kenya through a holistic approach addressing physical, social, and economic needs. The organization mobilizes a large network of social groups to deliver services in community organizing, gender equality, health, education, financial services, and sustainable livelihoods. SHOFCO holds a strong market position as a leading community-based movement with recognized leadership and global accolades such as the UN Nelson Mandela Prize and TIME100 recognition. Technically, the website is built on WordPress with modern plugins and tracking tools, offering good performance and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. Privacy compliance is well addressed with clear policies and GDPR consent. Overall, SHOFCO's digital presence reflects a professional, trustworthy, and impactful organization with room for technical and security improvements.

O

Oxfam International

oxfam.org

0

Oxfam International is a globally recognized non-profit confederation of 21 NGOs working in over 90 countries to combat poverty and inequality. The organization operates through a network of affiliates, each rooted in local contexts, delivering humanitarian aid, policy advocacy, and community development. Their website reflects a mature digital presence with comprehensive content, multilingual support, and clear calls to action for donations and volunteering. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrations such as Google Analytics, Google Tag Manager, FundraiseUp for fundraising, and Stripe for secure payments. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and integrates trusted third-party services. While explicit security headers are not fully visible in the HTML, the overall posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy policies and terms of service are clearly presented, supporting GDPR compliance. Overall, the website demonstrates high legitimacy and trustworthiness consistent with a large international NGO. The lack of WHOIS data is typical for such organizations and does not detract from their credibility. Strategic recommendations include enhancing explicit security headers and continuous monitoring of third-party scripts to maintain security integrity.

E

Exotic Kenya

exotickenya.com

0

Exotic Kenya operates as an online escort directory and booking platform specializing in adult companionship services across multiple cities in Kenya. The website offers listings of verified Kenyan escorts, including female, male, shemale, and LGBT categories, with detailed profiles, contact phone numbers, and video content. The platform targets adult users seeking sensual massage, escort services, and adult entertainment. Technically, the website is built on WordPress with common SEO and advertising plugins, including Yoast SEO Premium and Advanced Ads, and integrates Google Tag Manager for analytics and tracking. The site is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic, with no detected security headers and unclear SSL configuration. Privacy and cookie policies are absent, indicating poor privacy compliance. WHOIS data is unavailable, raising concerns about domain legitimacy and ownership transparency. Overall, the site presents moderate business credibility but requires improvements in security and privacy compliance.

P

Puratos

puratos.ke

0

Puratos is a global manufacturing company specializing in bakery, patisserie, and chocolate ingredients and products. The website targets professional bakers, patissiers, and chocolatiers, offering product information, recipes, and consumer insights. The site is well-structured, localized for Kenya, and uses modern web technologies including Adobe Experience Manager CMS and Google Tag Manager for analytics. The website is secured with HTTPS and shows good technical implementation and user experience. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy. Additionally, the lack of visible privacy, cookie, and contact information policies indicates gaps in compliance and user trust facilitation.

T

The Catholic University of Eastern Africa

cuea.edu

0

The Catholic University of Eastern Africa (CUEA) is a well-established private international university based in Kenya, offering a wide range of academic programs including certificates, diplomas, undergraduate, postgraduate, and professional certifications. The institution positions itself as a premier university focused on producing morally upright and transformative leaders for the Church and society. The website reflects a mature digital presence with comprehensive academic and administrative content targeting prospective and current students, alumni, and researchers. Technically, the website is built on a modern WordPress platform utilizing popular plugins such as LearnPress for LMS functionality, Elementor for page building, and LayerSlider for rich content presentation. The site uses HTTPS with good SSL configuration and integrates Google Analytics for visitor tracking. The design is responsive and user-friendly, with clear navigation and structured data enhancing SEO. From a security perspective, the site employs HTTPS and some security best practices but lacks explicit security headers and visible privacy or cookie policies, indicating room for improvement in compliance and security posture. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the institution's claims. Overall, the website is professional and credible but should enhance privacy compliance and security headers to improve trust and regulatory adherence.

D

Dignified Children International

dignifiedchildreninternational.org

0

Dignified Children International is a non-profit organization focused on child development and protection in Kenya, serving vulnerable children. The website is built on the Wix platform and uses standard Wix technologies along with Google Analytics and Google Tag Manager for visitor tracking. The site is accessible over HTTPS with a valid SSL certificate, indicating a secure connection. However, the absence of visible privacy and cookie policies, as well as missing contact information, limits the site's privacy compliance and user trust. The WHOIS data is unavailable due to a malformed request, which reduces transparency about domain ownership. Overall, the website presents a professional appearance but would benefit from enhanced privacy disclosures and security headers to improve compliance and trustworthiness.

K

Kareco Holdings Limited

odibets.com

0

Odibets is a Kenyan online sports betting and casino platform operated by Kareco Holdings Limited. Established in 2018, it offers a variety of betting services including sports betting, live betting, casino games, jackpots, and fantasy sports under the OdiLeague brand. The platform targets sports bettors primarily in Kenya but also covers international soccer and other sports. The website promotes a lightweight 2MB mobile app and provides multiple betting options with a focus on soccer and basketball. The business is licensed and regulated by the Betting Control and Licensing Board of Kenya, indicating compliance with local gambling regulations. Technically, the website uses modern JavaScript frameworks such as Vue.js and integrates multiple third-party services including Google Analytics, Microsoft Clarity, Sportradar widgets, and OneSignal for push notifications. The site is mobile optimized and has good SEO practices with comprehensive meta tags and Open Graph data. Hosting details are not explicit but DNS is managed via Cloudflare, and the domain is registered with GoDaddy with a long-term expiry. From a security perspective, the site enforces HTTPS and has domain status protections to prevent unauthorized changes. However, it lacks DNSSEC, explicit security headers, and published security or incident response policies. There is no visible cookie consent mechanism, which may impact privacy compliance. The site uses extensive tracking and advertising scripts, indicating a moderate to extensive user tracking level. Overall, Odibets presents as a legitimate, professional online betting platform with a solid business foundation and good technical implementation. Security posture is adequate but could be improved by adding DNSSEC, security headers, and formal security policies. Privacy compliance should be enhanced by implementing cookie consent and clearer data protection disclosures.

H

HM Viloo Ltd

kenyacompanies.com

0

KenyaCompanies.com operates as a leading online business directory focused on Kenyan businesses, providing a platform for verified business listings, enhancing brand visibility, and facilitating business connections. The website targets businesses and customers within Kenya, offering services such as business listings, company registration assistance, event listings, and promotional offers. The platform is positioned as a trusted and human-edited directory, managed by HM Viloo Ltd, with a medium-sized operational scale and consistent branding. Technically, the website is built on Joomla CMS and leverages a modern technology stack including React, jQuery, Google Analytics, and various UI libraries. The site demonstrates moderate performance and good mobile optimization, with a structured navigation and SEO-friendly meta tags. However, accessibility features are basic and could be improved. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but lacks explicit security headers and published security policies. No incident response or vulnerability disclosure information is available, and cookie consent mechanisms are absent. Advertising is managed through Google Adsense, with tracking via Google Analytics and Tag Manager, indicating moderate user tracking. Overall, the website presents a moderate risk profile with good business credibility but room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing security headers, publishing privacy and security policies, and adding cookie consent mechanisms to enhance trust and compliance.