Skip to main content

Security Directory

Explore comprehensive security analyses from websites around the world. Filter by industry, location, risk level, and more.

Live Guard activity

Security teams are checking their sites with Guard right now

Run your domain before the queue fills up

0
Websites
0
Industries
0
Countries
0
Avg Score
Page 571 of 579|Showing 28501-28550 of 28909
brokenrul.es favicon

Broken Rules

brokenrul.es

0
TechnologyN/asmallHIGH

Broken Rules is an independent game development studio established in 2009, specializing in designing, developing, and publishing original digital games. The website showcases multiple award-winning titles, targeting gamers and digital entertainment audiences. The business model focuses on creative game production and distribution across multiple platforms including Apple Arcade, Nintendo Switch, Steam, and itch.io. The company maintains a consistent and professional brand presence with high-quality content and clear navigation. Technically, the website is hosted on an Apache server with basic HTML5 and CSS3 technologies. However, it lacks modern security implementations such as HTTPS, HSTS, and security headers, which significantly impacts its security posture. Performance data is unavailable, but the site appears to have basic mobile optimization and accessibility features. SEO is reasonably well implemented with proper meta tags and Open Graph data. From a security perspective, the absence of SSL/TLS encryption is a critical vulnerability, exposing users to potential data interception risks. No security policies, incident response contacts, or vulnerability disclosure mechanisms are publicly available, indicating a low maturity in security governance. The DNS configuration lacks DNSSEC and CAA records, further reducing domain security assurance. Overall, the website is functional and professional in content and design but requires urgent security improvements to protect users and enhance trust. Strategic recommendations include enabling HTTPS, implementing security headers, and establishing clear privacy and incident response policies.

15
-
5
50
-
85
100
gamedevelopmentdigitalgamesindiegamescreativestudioaward-winninggames
ApacheHTML5CSS3Web
2025-06-15T21:47:19.743Z
duffeypetrosky.com favicon

DP+ (now part of Fusion92)

duffeypetrosky.com

0
MediaN/amediumHIGH

DP+ is a marketing and innovation company recently acquired by Fusion92, positioning itself as a Midwest marketing innovation powerhouse. The website serves primarily as a landing page to announce this acquisition and redirect visitors to Fusion92's main site for further information. The business targets organizations seeking marketing and brand innovation services, operating within the media sector. The site branding is consistent and professional, reflecting the parent company's identity. Technically, the website is built using modern frameworks such as Next.js and React, hosted on Vercel, indicating a contemporary digital infrastructure. However, performance data is missing, and the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security shortfall. Mobile optimization is good, but accessibility and SEO optimizations are basic. From a security perspective, the absence of a valid SSL certificate and TLS protocols severely impacts the security posture. While some security headers are present, critical best practices like OCSP stapling, session resumption, and comprehensive HSTS policies are missing. No privacy or cookie policies are actively presented on the landing page, and no contact or incident response information is available, limiting compliance and user trust. Overall, the website presents moderate business credibility but suffers from critical security issues that must be addressed urgently. Strategic improvements in SSL deployment, privacy compliance, and contact transparency are recommended to enhance trust and security.

30
18
5
50
-
85
20
marketingacquisitionfusion92dpplusmedia+1 more
Next.jsReactVercel
2025-06-15T21:47:18.457Z
agi-world.com favicon

Spark

agi-world.com

0
MediaN/amediumHIGH

The website agi-world.com serves as a minimal landing page for the company now branded as Spark, which has a long history of over 50 years in marketing transformation and creative production services. The business is positioned as a trusted partner delivering localized marketing solutions. The site itself is minimalistic, with no forms, contact details, or privacy policies, and primarily directs visitors to the main corporate site sparkbrighterthinking.com. From a technical perspective, the site is hosted on Amazon S3 with CloudFront CDN, uses basic HTML5 and CSS3 technologies, and includes a video background and SVG logo for branding. Mobile optimization is basic but functional. However, the site lacks HTTPS support, security headers, and any analytics or tracking technologies, indicating a low level of digital maturity. Security posture is weak due to the absence of SSL/TLS encryption, no HSTS, and no security headers. There are no detected vulnerabilities such as subdomain takeover or SSL vulnerabilities, but the lack of HTTPS is a critical issue. Privacy compliance is poor, with no privacy or cookie policies present, and no GDPR compliance indicators. Business credibility is moderate based on the company's history and branding but is weakened by the lack of contact information and policies on this domain. Overall, the site presents a basic online presence with significant room for improvement in security, privacy compliance, and content richness. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, enhancing security headers, and providing clear contact information to improve trust and compliance.

15
15
5
50
-
85
100
marketingcreativeproductionbrandingmediabusinessservices
HTML5CSS3SVGVideo (HTML5 video tag)
2025-06-15T21:47:08.728Z
hoerbiger.com favicon

HOERBIGER

hoerbiger.com

0
EnergyN/alargeHIGH

HOERBIGER is a large industrial company specializing in emissions solutions and performance-defining components across sectors such as energy, automotive, and hydrogen industries. The company holds a strong market position as a world leader in compression and rotary unions, providing innovative products and services aimed at increasing efficiency, safety, and sustainability. The website reflects a professional and well-branded digital presence, leveraging modern technologies such as Neos CMS and Flow Framework, with multimedia content and clear navigation tailored for industrial clients and partners. Technically, the website employs advanced content security policies, privacy compliance tools like Cookiebot, and analytics via Matomo, indicating a mature digital infrastructure. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, resulting in no HTTPS support, which severely impacts the site's security posture and user trust. Other security headers are well implemented, but the lack of encryption exposes users to potential risks. Overall, the security posture is weak due to missing HTTPS, but privacy compliance and business credibility are strong. The site is accessible without WAF or blocking mechanisms, allowing full content analysis. Strategic improvements in SSL deployment and enhanced security practices are essential to elevate the site's trustworthiness and compliance. The risk assessment highlights the urgent need for SSL certificate installation and enabling HTTPS to protect data integrity and confidentiality. The company should also consider publishing vulnerability disclosure policies and incident response contacts to further strengthen security culture and transparency.

95
-
5
50
-
85
100
industrialenergyautomotivehydrogensustainability+1 more
PHP (Flow Framework)Neos CMSMatomo AnalyticsCookiebot+3
2025-06-15T21:47:06.454Z
vizrt.com favicon

Vizrt

vizrt.com

0
MediaN/alargeHIGH

Vizrt is a leading media technology company specializing in live broadcast and video storytelling solutions. Their website showcases a comprehensive portfolio of products and services designed to empower content creators across various sectors including broadcasting, sports, corporate, government, education, and house of worship. The company positions itself as a pioneer in real-time graphics, virtual sets, production automation, and cloud-based production workflows, reaching a global audience of over 4.5 billion people daily. Technically, the website is built on WordPress with modern frameworks and technologies such as Kadence Blocks, Gravity Forms, and Slider Revolution. It leverages Cloudflare for CDN and security, integrates Vimeo for video content, and uses advanced analytics and marketing tools like Google Tag Manager and Facebook Pixel. The site is well-optimized for SEO, accessibility, and mobile responsiveness, providing a professional and engaging user experience. From a security perspective, the site implements several important HTTP security headers and restricts permissions for sensitive APIs. However, the SSL certificate is currently invalid or missing, and TLS 1.2 or higher is not enabled, which are critical issues that reduce the overall security posture. Privacy compliance is strong with clear privacy and cookie policies, including consent mechanisms, aligning with GDPR requirements. Overall, Vizrt's website reflects a mature and professional digital presence with strong business credibility and technical implementation. Addressing the SSL and TLS issues would significantly enhance their security posture and trustworthiness. Strategic recommendations include updating SSL certificates, increasing HSTS duration, enabling modern TLS protocols, and maintaining rigorous security best practices.

-
-
-
50
-
85
100
mediatechnologybroadcastliveproductiongraphics+5 more
WordPress 6.8.1Kadence BlocksGravity FormsSlider Revolution+8

Partner Domains:

flowics.com
partnerpending
ndi.video
partnerpending

+1 more partners

2025-06-15T21:47:06.326Z
cirse.org favicon

Cardiovascular and Interventional Radiological Society of Europe

cirse.org

0
HealthcareN/alargeHIGH

The Cardiovascular and Interventional Radiological Society of Europe (CIRSE) operates a comprehensive and professionally designed website serving as the primary digital presence for the world's largest community of healthcare professionals specializing in minimally invasive image-guided procedures. The site offers extensive educational resources, certification programs, research initiatives, and event information, positioning CIRSE as a leading authority in interventional radiology. The target audience includes healthcare professionals, trainees, medical students, and patients seeking information about interventional radiology. CIRSE's business model focuses on membership services, educational offerings, research collaborations, and publication dissemination within the healthcare sector. Technically, the website is built on a modern WordPress CMS platform with a robust technology stack including PHP 8.2, WooCommerce for e-commerce functionalities, and various plugins such as WPBakery Page Builder and Modern Events Calendar. Hosting and content delivery are managed via Cloudflare, enhancing availability and performance. Despite a rich content base and good mobile optimization, the site suffers from slow performance and lacks a valid SSL certificate, which critically impacts its security posture. From a security perspective, the absence of a valid SSL certificate and disabled TLS protocols represent significant vulnerabilities, exposing users to potential risks during data transmission. However, the site employs several security headers and Cloudflare protection, and no critical vulnerabilities or malware indicators were detected. Privacy compliance is strong, with clear privacy and cookie policies, GDPR adherence, and active consent mechanisms. The site also integrates analytics tools like Matomo and Facebook Pixel with moderate user tracking. Overall, CIRSE's website demonstrates high business credibility and content quality but requires urgent security improvements to ensure safe user interactions. Strategic recommendations include immediate SSL certificate installation, enabling modern TLS protocols, and enhancing security headers. These steps will strengthen trust, compliance, and user confidence, supporting CIRSE's mission and digital maturity.

40
-
-
50
-
85
100
healthcareeducationresearchinterventionalradiologyprofessionalsociety
PHP 8.2.25WordPress CMSWooCommerceWPBakery Page Builder+5

Partner Domains:

nextresearch.org
partnerpending
iasios.org
partnerpending
2025-06-15T21:47:06.321Z
boyden.com favicon

Boyden

boyden.com

0
OtherN/alargeHIGH

Boyden is a globally recognized leadership and talent advisory firm specializing in executive search, interim management, and leadership consulting services. The company operates through a broad international network with over 75 offices in more than 45 countries, serving a diverse range of industries and markets. Their website reflects a professional and comprehensive presentation of their services, targeting corporate clients seeking high-level talent solutions worldwide. Technically, the website employs standard web technologies including HTML5, CSS3, and jQuery. While the site is well-structured with good SEO and mobile optimization basics, performance data is unavailable. The absence of a valid SSL certificate and lack of modern TLS protocols represent significant technical and security shortcomings. Despite strong security headers and cookie consent mechanisms, the invalid SSL undermines overall security posture. From a security perspective, the site demonstrates awareness of best practices through implemented headers and cookie policies but critically fails in SSL deployment, exposing users to potential risks. No incident response or vulnerability disclosure information is provided, indicating gaps in security transparency and readiness. The WHOIS data supports the legitimacy of the domain and business identity, with no suspicious patterns detected. Overall, Boyden's website is professionally designed and content-rich, supporting its market position as a leading talent advisory firm. However, urgent remediation of SSL/TLS issues is necessary to ensure secure user interactions and maintain trust. Enhancements in security transparency and incident response communication would further strengthen their security posture and compliance.

85
18
5
50
-
90
40
executivesearchinterimmanagementleadershipconsultingprofessionalservicesglobal+1 more
jQuery 3.7.1HTML5CSS3
2025-06-15T21:47:05.975Z
dialog-semiconductor.com favicon

Renesas Electronics Corporation

dialog-semiconductor.com

0
TechnologyN/aenterpriseHIGH

Renesas Electronics Corporation is a global leader in microcontrollers, analog, power, and SoC products, delivering embedded design innovation for a wide range of industries. The company targets embedded systems developers and technology companies with a comprehensive portfolio of semiconductor products and design resources. The website reflects a mature, enterprise-level business with a strong market position and extensive product offerings. Technically, the website is built on Drupal 10, hosted behind Cloudflare, and utilizes modern web technologies including Google Tag Manager and New Relic for monitoring. The site is well-structured, mobile-optimized, and SEO-friendly, providing a professional user experience. However, the absence of a valid SSL certificate and incomplete security configurations represent significant security concerns. From a security perspective, while several security headers are implemented, the lack of HTTPS and TLS support critically undermines the site's security posture. No explicit incident response or security policy pages were found, and cookie consent mechanisms are absent despite GDPR compliance indications. The domain is mature and registered with a reputable registrar, consistent with the company's profile. Overall, the site is professionally maintained with strong business credibility but requires urgent improvements in SSL/TLS deployment and privacy compliance mechanisms to enhance security and user trust.

70
18
5
50
-
70
100
technologysemiconductormicrocontrollersembeddedelectronics+1 more
Drupal 10Cloudflare CDNGoogle Tag ManagerNew Relic monitoring+4
2025-06-15T21:47:05.622Z