Security Directory

S

Scomedica

scomedica.ma

0

Scomedica is a Moroccan company specializing in the sale and servicing of scientific and laboratory equipment, with over 30 years of experience since 1994. The company targets businesses in pharmaceutical, education, agro-food, petrochemical, environmental, and other industrial sectors. Their offerings include sales, after-sales service, specialized training, maintenance, and technical support. The website is professionally designed using WordPress with WooCommerce and Elementor, reflecting a medium-sized business with a solid market presence in Morocco. Technically, the site uses modern technologies and is hosted under a Moroccan registrar, consistent with its business claims. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and safe for general audiences.

The website cadhoc.ma is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents access to any meaningful content or business information. The domain is registered since 2008 with GENIOUS COMMUNICATIONS and uses Cloudflare for DNS and security services. Due to the WAF block, no privacy, cookie, or terms of service policies are visible, nor any contact or business details. This limits the ability to assess the company's market position, services, or technical infrastructure beyond the use of Cloudflare. From a technical perspective, the site relies on Cloudflare's security mechanisms, but no further technology stack or CMS information is available. The lack of accessible content and metadata prevents evaluation of SEO, accessibility, or performance. Security posture cannot be fully assessed due to missing headers and SSL details. The security posture is currently unknown but the presence of a WAF block indicates active protection against attacks. However, the inability to access the site content severely limits trust and business credibility assessments. No vulnerabilities or compliance gaps can be identified from the blocked page. Overall, the site presents a high risk for users and analysts due to inaccessibility. Strategic recommendations include resolving the WAF blocking issues to allow legitimate access, publishing clear privacy and cookie policies, and providing transparent business and contact information to improve trust and compliance.

U

Up maroc: Cadhoc

up-maroc.ma

0

Up Maroc: Cadhoc is a Moroccan company specializing in providing payment and social benefit solutions to enterprises and employees. Their offerings include various voucher and card-based solutions such as Chèque Déjeuner, UpDéjeuner, and Cadhoc products, aimed at enhancing employee welfare and purchasing power. The company operates under the umbrella of the Upcoop Group, with a solid market presence in Morocco since 2007. The website reflects a professional and consistent brand image targeting businesses and individuals in Morocco.

T

TPF Pyramide Ingénierie

tpfpyramide.ma

0

TPF Pyramide Ingénierie is a Moroccan engineering company specializing in multi-disciplinary project management and technical consulting services, including structural engineering, fluids, electricity, project economics, and diagnostics. The company is ISO 9001 certified and operates as part of the larger TPF Group, positioning itself as a trusted local engineering firm. Their website reflects a professional image with clear service offerings and contact information, targeting construction and real estate sectors. Technically, the website employs a modern tech stack with Bootstrap and various JavaScript libraries to enhance user experience. Hosting is provided by Heberjahiz, and the domain registration is consistent and transparent. The site is mobile-optimized and offers good navigation, though SEO and accessibility could be improved. From a security perspective, the site lacks visible security headers and formal privacy or cookie policies, which are compliance gaps. The domain uses HTTPS, but SSL configuration details are unknown. No forms or analytics scripts were detected, indicating minimal data collection and tracking. Incident response and vulnerability disclosure information are absent. Overall, the website is safe and professional but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

H

Horizon Project Management

hpmgroupe.com

0

Horizon Project Management (HPM) is a Moroccan-based engineering and project management company specializing in construction project oversight, technical studies, and consultancy services. Established in 2010 and now part of the Ingérop group, HPM serves both private and public sector clients, focusing on real estate, hospitality, transportation, and industrial sectors. The company offers key services including project management assistance, delegated project management, and technical project execution. Their website reflects a professional presence with clear service offerings and client references, targeting construction developers and project owners primarily in Morocco and Africa. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, and Google Maps API, hosted by OVH sas. While the site is mobile-optimized and well-structured, some technical issues like a Google Maps loading error and lack of advanced security headers are noted. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business profile, indicating legitimacy and trustworthiness.

D

dacia

dacia.ma

0

The website www.dacia.ma serves as the official Moroccan portal for the Dacia automotive brand, part of the Renault Group. It provides comprehensive information on vehicle models, pricing, financing options, after-sales services, and dealer locations. The site targets consumers in Morocco interested in purchasing new or used Dacia vehicles, offering a user-friendly interface with vehicle configurators and test drive booking features. Technically, the site leverages modern web technologies including React, Google Tag Manager, and Google Analytics, ensuring a responsive and well-structured user experience. Security measures such as HTTPS and security headers are implemented, though explicit security policies and incident response contacts are not publicly disclosed. The absence of WHOIS data for the domain is a notable anomaly, reducing trust scores despite the professional presentation and strong brand alignment. Overall, the site is well-designed and functional, with room for improvement in transparency and direct contact information to enhance trust and compliance.

T

TIMAC AGRO Maroc

timacagro.ma

0

TIMAC AGRO Maroc is a well-established agricultural solutions provider specializing in innovative fertilization, plant nutrition, and animal production products tailored for the Moroccan market. With a claimed 25 years of local expertise, the company positions itself as a trusted partner offering sustainable and environmentally respectful agricultural performance improvements. The website reflects a professional digital presence with clear branding, product categorization, and local support emphasis. Technically, the site is built on WordPress with Elementor and WooCommerce, leveraging modern analytics tools like Google Tag Manager and Matomo, and is hosted behind Cloudflare DNS services. Security posture is solid with HTTPS enabled and cookie consent implemented, though explicit privacy and terms policies are missing. The WHOIS data shows some inconsistencies, notably a future domain creation date, which may indicate a staging domain or data error but does not detract significantly from the site's legitimacy. Overall, the site is safe, professional, and targeted at agricultural professionals in Morocco.

R

Renault

renew.ma

0

Renew Maroc operates as an official online platform for certified used Renault vehicles in Morocco, offering a comprehensive range of services including vehicle sales, financing, trade-in, assistance, and insurance. The website is professionally designed with clear navigation and targets Moroccan consumers interested in purchasing certified used Renault cars. Technically, the site leverages modern frameworks such as Vue.js and Nuxt.js, and integrates Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced and domain registration transparency, though improvements are recommended in security headers and privacy compliance mechanisms. Overall, the platform presents a trustworthy and professional presence in the Moroccan automotive market.

M

Mobilize Financial Services

mobilize-fs.ma

0

Mobilize Financial Services Maroc is a specialized financial services provider operating since 2005, focusing on automotive financing, insurance, and related services for Renault Group vehicles in Morocco. The company positions itself as a trusted partner offering innovative and comprehensive mobility solutions to both individual and professional customers. The website reflects a mature digital presence with professional branding, clear service offerings, and customer testimonials that reinforce trust. Technically, the website is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile optimized and includes SEO best practices, although performance is moderate. Security posture is good with HTTPS enforced and no obvious vulnerabilities, but could be improved by adding explicit security headers and formal incident response contacts. Overall, the site is accessible without WAF or blocking mechanisms, and privacy compliance is well addressed with clear policies and cookie consent. The lack of WHOIS data reduces domain trust slightly, but the strong brand association and content quality support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response information, and improving transparency on contact details.

R

renault

renault.ma

0

Renault Maroc operates a professional and comprehensive automotive website targeting the Moroccan market, offering new vehicles including electric, hybrid, and utility models. The site provides extensive information on financing, insurance, after-sales services, and vehicle accessories, positioning Renault as a major automotive brand in Morocco. Technically, the website is built on modern frameworks like React, uses optimized media formats, and implements cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are absent. The domain WHOIS data is unavailable, which slightly impacts trustworthiness, but the overall site professionalism and branding consistency support legitimacy. Strategic recommendations include publishing security policies and improving transparency on contact information to enhance trust and compliance.

S

Somfy

somfy.ma

0

Somfy Maroc is a regional branch of the global Somfy Group, specializing in home automation and connected home solutions. The website presents a comprehensive catalog of products including motors for shutters, alarms, cameras, heating, and lighting automation, targeting Moroccan consumers and homeowners. The company leverages its established brand reputation and offers extensive customer support and sales channels including showrooms and professional installers. Technically, the website uses modern web technologies, including JavaScript frameworks, tag management, and performance monitoring tools, hosted likely on Akamai infrastructure. The site is mobile optimized and SEO friendly, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some advanced security headers could be added. The absence of WHOIS data for the domain is a concern for domain legitimacy verification but does not detract from the strong brand presence and professional content. Overall, the website is well-structured, trustworthy, and compliant with privacy regulations.

The website amendisclient.ma is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. The domain is registered to ITISSALAT AL-MAGHRIB, a Moroccan company likely operating in the energy sector, with a domain age of approximately 7-8 years, indicating a stable registration history. Due to the lack of accessible content, no metadata, forms, or contact information could be extracted, limiting the ability to assess the website's business model, services, or compliance posture. Technically, the site does not reveal any information about its technology stack, security headers, or performance characteristics. The security posture cannot be fully evaluated, but the absence of accessible content and security policies suggests a low maturity level. Overall, the site appears to be either restricted intentionally or misconfigured, resulting in a poor user experience and low trustworthiness.

A

Amendis

amendis.ma

0

Amendis is a Moroccan utility company specializing in water and electricity distribution, wastewater treatment, and customer services. It operates under the Veolia group umbrella, indicating a strong market position in the energy sector. The website provides comprehensive information about its services, news, and career opportunities, targeting both residential and commercial customers. The digital infrastructure is built on Drupal CMS with modern privacy and cookie consent mechanisms, reflecting a mature digital presence. Security posture is good with HTTPS and security headers implemented, though there is room for improvement in publishing explicit security policies and incident response contacts. The absence of WHOIS registration data is a concern but does not negate the legitimacy suggested by the website content and corporate affiliation. Overall, the site is professional, secure, and compliant with GDPR, serving as a reliable digital front for Amendis.

V

Veolia Maroc

veolia.ma

0

Veolia Maroc operates as a leading environmental services company in Morocco, specializing in waste management, energy efficiency, and water treatment solutions. The company is part of the global Veolia group, which is well-established in ecological transition services. The website presents a professional and consistent brand image, targeting industrial and business clients seeking sustainable resource management solutions. Technically, the site is built on Drupal CMS, integrates modern consent management tools, and uses standard analytics and tracking services. Security posture is solid with HTTPS and security headers, though explicit privacy and terms policies are missing. WHOIS data is unavailable, which slightly impacts trust but is common for the .ma domain registry. Overall, the site is credible and well-maintained but could improve transparency and compliance documentation.

L

Lifull Connect

trovit.ma

0

Trovit.ma operates as a localized search engine for classified ads in Morocco, focusing on real estate, cars, and job listings. It is part of the Lifull Connect group, a recognized international player in the classified ads aggregation market. The website offers a user-friendly interface with clear navigation and consistent branding, targeting a general audience in Morocco. The business model revolves around aggregating listings from various sources to provide a comprehensive search experience. Technically, the site employs modern JavaScript frameworks, Google Tag Manager, Google Analytics, and Criteo for advertising and tracking, ensuring a moderate to good performance and mobile optimization. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, though lacks explicit security headers and detailed security policies. WHOIS data is privacy protected, which is common for this business type, and the domain appears legitimate based on branding and parent company association. Overall, the site demonstrates a mature digital presence with room for improvement in security headers and explicit incident response information.

A

Africa50 Infrastructure Investment Platform

africa50.com

0

Africa50 Infrastructure Investment Platform is a pan-African infrastructure investment and asset management entity focused on bridging Africa's infrastructure funding gap by developing bankable projects, mobilizing public and private sector capital, and investing in infrastructure projects across the continent. The platform has a significant footprint with investments in over 30 African countries and an aggregated project value exceeding USD 8 billion. Their key services include project development, funding mobilization, and equity investments alongside strategic partners, targeting sectors such as energy, transportation, real estate, and technology. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including service workers and Google Analytics for tracking. The site demonstrates good performance, mobile optimization, and accessibility, with a professional design and clear navigation. Privacy and cookie policies are present and indicate GDPR compliance. However, no explicit security policy or incident response information is published. From a security perspective, the site enforces HTTPS and uses secure forms, but lacks some security headers and a vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data is a concern but does not detract significantly from the overall trustworthiness given the professional presentation and social media presence. Overall, Africa50.com presents a credible and professional digital presence consistent with its business objectives. Strategic recommendations include publishing a security policy, adding security headers, and providing incident response contacts to enhance trust and compliance.

The website map.ma is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to any business or content information. The domain is registered to ITISSALAT AL-MAGHRIB, a Moroccan telecommunications operator, with a registration date in 2012 and an active status, indicating a legitimate and established entity. However, the website itself does not expose any privacy policies, cookie policies, terms of service, contact information, or business descriptions on the landing page due to the security challenge. The technical infrastructure relies heavily on Cloudflare services for security and performance, including the Turnstile CAPTCHA and Cloudflare Insights for minimal analytics. The security posture is strong in terms of protection via Cloudflare, but the lack of accessible content limits further security and compliance evaluation. Overall, the site is low in content quality and user experience due to the blocking mechanism, resulting in a low AI score and limited ability to assess business credibility or privacy compliance.

J

Jaguar Maroc

jaguar-maroc.com

0

Jaguar Maroc is a localized website representing the Jaguar automotive brand in Morocco, offering brand information and vehicle sales services. The site reflects the premium positioning of Jaguar within the automotive transportation sector and is part of the larger Jaguar Land Rover group. Technically, the website is built using modern JavaScript frameworks such as Nuxt.js, with assets served from Jaguar Land Rover's official CDN domains, indicating a mature digital infrastructure. However, the absence of WHOIS registration data and lack of visible privacy and cookie policies present compliance and trust concerns. Security posture is moderate but could be improved by implementing standard security headers and clearly publishing privacy and incident response information. Overall, the website is professional and safe for general audiences but requires enhancements in privacy compliance and domain registration transparency.

L

Land Rover Maroc

landrover-maroc.com

0

Land Rover Maroc operates as the official regional website for Land Rover luxury SUVs in Morocco, showcasing models such as Range Rover, Discovery, and Defender. The site targets affluent customers interested in premium 4x4 vehicles, providing detailed vehicle information and brand experience. Technically, the website is built on modern JavaScript frameworks (Nuxt.js/Vue.js) and integrates Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enforced but lacks visible security headers and formal privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS data raises concerns about domain registration transparency, although the website content and branding align with the official Land Rover identity. Overall, the site presents a professional and trustworthy front but should improve privacy disclosures and security practices to enhance compliance and user trust.

M

Molayli

molayli.com

0

Molayli.com is a personal portfolio website representing a self-taught web developer from northern Morocco specializing in PHP web application development, optimization, and security. The site serves as a professional showcase of skills and contact point for potential clients or collaborators. The business model is individual freelance or personal branding with a niche focus on web technologies. The website is modest in scale and content but consistent with the claimed experience and background. Technically, the site uses basic web technologies including PHP backend (implied), Google Fonts, and Cloudflare DNS services. The site is hosted with NameCheap as registrar and uses Cloudflare nameservers, indicating some level of infrastructure maturity. Performance and mobile optimization are basic but functional. SEO and accessibility are minimal but present. No CMS or advanced frameworks detected. Security posture is moderate with domain transfer protection enabled but lacks DNSSEC and security headers. No privacy or cookie policies are present, indicating compliance gaps. No forms or data collection mechanisms reduce attack surface but also limit engagement features. No vulnerability disclosure or incident response information is provided. Overall, the website is safe, professional, and moderately trustworthy but would benefit from enhanced security practices, privacy compliance, and richer content to improve credibility and user trust.

A

AO Kaspersky Lab

kaspersky.ma

0

Kaspersky is a globally recognized cybersecurity company founded in 1997, offering a wide range of security solutions for both individual consumers and enterprises. The website targets French-speaking users in Morocco, providing localized content and product offerings. The company maintains a strong market position with numerous awards and certifications, emphasizing its commitment to advanced threat protection and privacy. Technically, the website is built on modern frameworks like React and Next.js, with extensive use of analytics and marketing tools, ensuring a fast, responsive, and accessible user experience. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although some improvements in cookie consent and incident response transparency are recommended. Overall, the site reflects a mature digital presence aligned with industry best practices.

J

Junkers Bosch

junkers-bosch.ma

0

Junkers Bosch, represented by Robert Bosch Morocco SARL, operates a professional website focused on providing innovative heating and hot water solutions to residential customers in Morocco. The company leverages over 100 years of experience in the energy sector, offering a broad product range including gas and electric water heaters, solar water heaters, and air conditioning systems. The website reflects a strong market position with clear branding, comprehensive product information, and accessible customer support channels. Technically, the website employs modern web technologies such as ES modules, Google Tag Manager, and jQuery, ensuring a fast, mobile-optimized, and accessible user experience. SEO best practices are implemented with structured data and meta tags. Privacy compliance is robust, featuring detailed cookie and privacy policies with consent management mechanisms aligned with GDPR requirements. From a security perspective, the site uses HTTPS and secure form practices but lacks explicit security headers and published security policies or incident response information. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, although the website content and official Bosch branding mitigate this concern. Overall, the website presents a trustworthy and professional digital presence with minor areas for improvement in security transparency and domain registration verification.

R

Accueil

riad-instant-t.com

0

The website www.riad-instant-t.com represents a small hospitality business offering authentic riad accommodation in Marrakech, Morocco. It targets tourists seeking a traditional Moroccan experience with services including lodging, meals, transfers, and activity organization. The site is built on the Webflow platform using modern web technologies and provides a visually appealing and content-rich experience primarily in French. However, the absence of privacy and cookie policies, lack of explicit contact information, and missing WHOIS registration data reduce the overall trust and compliance posture. Security headers and incident response information are also absent, indicating room for improvement in security maturity. Overall, the site is functional and professional but requires enhancements in compliance, security, and transparency to improve risk posture and user trust.

Hilti.ma is the Moroccan localized website of Hilti, a globally recognized enterprise specializing in manufacturing and supplying professional construction tools, software, and services. The website targets construction professionals and businesses, offering product information, support, and digital services. The site is built on a modern technical infrastructure using Angular and Adobe Experience Manager, integrating advanced analytics and consent management tools to ensure GDPR compliance. Security posture is solid with HTTPS enforcement and privacy mechanisms, although explicit security policies and incident response information are not publicly available. The absence of WHOIS data reduces domain trust slightly but does not detract from the professional presentation and branding consistency. Overall, the site reflects a mature enterprise digital presence with room for improvement in transparency and contact accessibility.

R

Simple and inexpensive automation - Robotics Marketplace

rbtx.ma

0

The website rbtx.ma is a professional e-commerce and service platform specializing in robotics and automation components. It targets manufacturers and automation professionals seeking cost-effective and compatible robotics solutions. The platform offers a wide range of products, configurators, expert consultations, and feasibility testing services, positioning itself as a comprehensive marketplace in the manufacturing technology sector. Technically, the site is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, and integrates analytics via Piwik PRO. The design is responsive and user-friendly, with good SEO practices and moderate performance. Security-wise, the site uses HTTPS but lacks DNSSEC and visible security headers, and does not provide explicit privacy or cookie policies, which are areas for improvement. The domain is newly registered with privacy protection, consistent with a new business launch, and shows no suspicious patterns. Overall, the site is safe, professional, and credible but would benefit from enhanced privacy compliance and security hardening.

G

Gerflor

gerflor.ma

0

Gerflor is a well-established international manufacturer and distributor of innovative and eco-responsible flooring and wall covering solutions, targeting professional markets such as healthcare, education, sport, retail, industry, hospitality, offices, and transport. The website reflects a mature digital presence built on Drupal 10, with modern front-end technologies and integrated marketing and consent management tools. Security posture is adequate but could be improved by adding explicit security headers and incident response information. The absence of WHOIS registration data and domain status 'No Object Found' is a notable risk factor, though mitigated by the professional website and clear parent company affiliation. Overall, the site is trustworthy, well-designed, and compliant with privacy regulations, but domain legitimacy should be further verified.

W

Whirlpool Morocco

whirlpool.ma

0

Whirlpool Morocco operates as a regional website for the Whirlpool brand, offering a range of household appliances including washing machines, refrigerators, cookers, dishwashers, and air conditioners. The site targets Moroccan consumers and emphasizes product innovation and design. The website is professionally designed with consistent branding and provides a good user experience with clear navigation and mobile optimization. Technically, the site uses modern JavaScript libraries, Google Analytics, Google Tag Manager, and OneTrust for cookie consent management. However, the absence of explicit privacy policy and terms of service pages, as well as missing WHOIS registration data, slightly detracts from its overall trustworthiness. Security posture is adequate with HTTPS enforced but lacks visible security headers and detailed security policies.

M

Moroccan National Tourist Office (MNTO)

visitmorocco.com

0

The website www.visitmorocco.com is the official online presence of the Moroccan National Tourist Office (MNTO), dedicated to promoting tourism in Morocco. It offers comprehensive travel information, cultural insights, suggested tours, and practical advice for international tourists. The site targets a global audience interested in Moroccan heritage, nature, and leisure activities. The business model is government-driven tourism promotion, positioning itself as the authoritative source for Moroccan travel.

M

Maroc Telecom

carriere-iam.ma

0

The website www.carriere-iam.ma serves as a login portal for Maroc Telecom's career services, targeting job seekers and employees within the telecommunications sector in Morocco. The site features a professional design consistent with Maroc Telecom's branding and integrates modern authentication mechanisms including LinkedIn OAuth and Google reCAPTCHA v3 to enhance security. The technical infrastructure leverages contemporary web technologies such as Google Tag Manager, Google Analytics, and Trend Micro security scripts, hosted likely behind Cloudflare services, ensuring reliable performance and security. Security posture is strong with HTTPS enforced, CSRF protection, and secure password input fields, although explicit security headers are not detected. Privacy compliance is partial, with a functional cookie consent banner but no visible privacy policy or terms of service pages. WHOIS data is incomplete, lacking registrar and registrant details, which slightly impacts trust but does not outweigh the professional presentation and security features. Overall, the site is well-constructed for its purpose but would benefit from enhanced transparency and compliance documentation.

M

Maroc Telecom

iam.ma

0

Maroc Telecom is a leading telecommunications operator in Morocco, offering a wide range of services including mobile telephony, fixed line, internet (ADSL, fiber, 4G), and digital solutions for individuals, professionals, enterprises, and the public sector. The website serves as a comprehensive portal providing detailed information on products, services, offers, and corporate information. The company maintains a strong market position with a broad service portfolio and a focus on digital transformation and customer engagement. Technically, the website is built on Microsoft SharePoint with modern web technologies such as jQuery, Bootstrap, and Owl Carousel, ensuring a responsive and user-friendly experience across devices. The site demonstrates moderate performance and basic accessibility features, with good SEO practices implemented. From a security perspective, the site enforces HTTPS, includes essential security headers, and shows no signs of exposed sensitive data or vulnerable libraries. The presence of ISO 27001 and other certifications indicates a mature security posture. However, the absence of a cookie consent mechanism and explicit incident response contacts suggests areas for improvement in privacy compliance and security transparency. Overall, the website is professional, trustworthy, and well-aligned with the business objectives of Maroc Telecom. Strategic recommendations include enhancing privacy and cookie policies, improving accessibility, and providing clearer incident response information to strengthen user trust and compliance.

D

DEKRA

dekra-industrial.ma

0

DEKRA is a global leader in industrial inspection, safety, and compliance services with a strong presence in Morocco. The company offers a comprehensive range of services including industrial inspection, electrical inspection, non-destructive testing, fire protection, and environmental consulting. Their market position is reinforced by a long history since 1925 and a commitment to regulatory compliance and asset reliability. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on Azure, and employs a robust set of analytics and marketing tools. Security measures are well implemented with strong headers, valid SSL certificates, and no detected vulnerabilities, although enabling modern TLS versions is recommended. Overall, DEKRA demonstrates a mature digital presence with excellent content quality and user experience, supporting its role as a trusted partner in industrial safety and inspection.

DEKRA Services Morocco is a medium-sized subsidiary of the international German company DEKRA AG, specializing in temporary staffing and outsourcing personnel management solutions. The company targets both job candidates and enterprises seeking flexible workforce solutions. Their website provides job search functionality and corporate information primarily in French, reflecting their Moroccan market focus. Technically, the site is built on Joomla CMS with a variety of JavaScript libraries and CSS frameworks, delivering a good user experience with fast performance and mobile optimization. Security-wise, the site employs strong HTTP security headers and a valid SSL certificate but lacks support for modern TLS protocols, which is a notable gap. No explicit privacy, cookie, or terms of service policies are present, indicating compliance and transparency improvements are needed.

D

DEKRA

dekra.ma

0

DEKRA is a multinational leader in vehicle inspection and related services, operating in over 50 countries including Morocco. The company offers a broad range of services including vehicle technical inspections, automotive expertise, claims management, industrial inspections, and human resources services. Their market position is strong with a comprehensive service portfolio targeting both enterprises and individual customers. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, hosted on Azure, and integrates multiple analytics and marketing tools. Security posture is good with strong HTTP security headers and a valid SSL certificate, although TLS protocols are not enabled which is a notable gap. The site implements GDPR-compliant cookie consent mechanisms and maintains privacy and terms of service pages. Overall, DEKRA's digital presence reflects a mature, professional organization with a focus on trust and compliance.

S

Société Générale des Travaux du Maroc (SGTM)

sgtm-maroc.com

0

The website's overall security posture is critically weak, exposing the business to significant risks including data breaches, regulatory non-compliance, and service disruptions. The absence of HTTPS encryption across the site is a glaring critical vulnerability, undermining data confidentiality and trust. Key security headers are missing, increasing susceptibility to clickjacking, cross-site scripting, and content injection attacks. GDPR compliance is severely lacking, with no privacy or cookie policies and no consent mechanisms, risking heavy fines and reputational damage. Critical network services like MySQL and FTP are exposed without adequate protection, opening doors to unauthorized access and data exfiltration. The organization lacks foundational security policies, incident response plans, and vulnerability management, indicating poor security governance. DNS security is suboptimal, missing DNSSEC, which could allow domain spoofing or hijacking. While email security appears well-managed, other layers require urgent remediation to protect business continuity and customer trust.