Security Directory

S

Systems Limited

systemsltd.com

0

Systems Limited is a well-established IT services and digital transformation company founded in 1998, with a strong market presence primarily in Pakistan and global operations. The company offers a broad portfolio of services including digital consulting, cloud migration, data analytics, security, and business process outsourcing. Their partnerships with major technology providers such as Microsoft, IBM, AWS, SAP, Salesforce, and Temenos reinforce their market position and service capabilities. The website reflects a mature digital infrastructure with Drupal CMS, integrated marketing and analytics tools, and a comprehensive cookie consent mechanism, indicating a high level of digital maturity. From a security perspective, the website enforces HTTPS, employs standard security headers, and uses client-side consent management, contributing to a robust security posture. However, there is room for improvement by enabling DNSSEC and publishing explicit security policies and incident response contacts. No critical vulnerabilities or suspicious patterns were detected, and the domain registration data aligns well with the business claims, supporting the legitimacy of the entity. Overall, the website and business demonstrate a professional and trustworthy presence with good compliance to privacy regulations such as GDPR. The technical implementation supports good performance and accessibility, while the marketing and analytics integrations are extensive but managed with user consent. Strategic recommendations include enhancing DNS security, formalizing security policies, and continuous monitoring of third-party scripts to maintain security and compliance.

S

S.J. & G. Fazul Ellahie (Pvt) Limited

sjggroup.com

0

S.J. & G. Fazul Ellahie (Pvt) Limited, operating as SJG Group, is a well-established pharmaceutical manufacturer and distributor based in Pakistan with a legacy dating back to 1889. The company positions itself as a pioneer in the pharmaceutical industry, offering innovative healthcare solutions and maintaining a strong commitment to quality and sustainability. Their market presence extends internationally, supported by a robust logistics and supply chain infrastructure. The website reflects a professional digital presence built on WordPress with modern design elements and clear branding. Technically, the website leverages popular CMS and page builder technologies such as WordPress and Elementor, alongside Slider Revolution for dynamic content. The site is hosted with Cloudflare DNS services and uses HTTPS, ensuring secure communications. Performance and mobile optimization are adequate, though accessibility features are basic. SEO practices appear solid with proper meta tags and structured content. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks published privacy and cookie policies, incident response information, and vulnerability disclosure mechanisms, which are important for compliance and trust. Security headers could be enhanced to improve protection against common web threats. No WAF or blocking mechanisms interfere with content access. Overall, the website is credible and professional but would benefit from improved privacy compliance and security transparency to align with best practices and regulatory requirements.

S

SAARC Energy Centre (SEC)

saarcenergy.org

0

SAARC Energy Centre (SEC) is a regional organization established in 2005 under the SAARC framework to promote energy cooperation among South Asian countries. The website serves as an information and collaboration platform offering research publications, webinars, and resources focused on renewable energy, energy trade, and efficiency improvements. Technically, the site is built on WordPress with common plugins and moderate performance and mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and explicit privacy or security policies. WHOIS data is unavailable due to privacy or registry restrictions, slightly impacting trust. Overall, the site is professional and trustworthy with room for security and privacy improvements.

B

B. Braun Melsungen AG

bbraun.pk

0

B. Braun Pakistan is a regional presence of the multinational healthcare company B. Braun Melsungen AG, specializing in medical devices and healthcare solutions. The website serves multiple audiences including healthcare professionals, job applicants, and industry partners, offering detailed information on a broad range of therapies and products. The company holds a strong market position in the Asia Pacific region as a leading healthcare provider. Technically, the website is built on Adobe Experience Manager with modern JavaScript libraries, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

E

Engineering Development Board

engineeringpakistan.com

0

The Engineering Development Board (EDB) is a government entity under Pakistan's Ministry of Industries & Production, focused on strengthening the engineering sector and integrating it with global markets. The website serves as a portal for policies, industry sectors, publications, and official communications, targeting industry stakeholders and government officials. The site is built on WordPress with a modern tech stack including Bootstrap and various plugins, offering a good user experience and mobile optimization. Security posture is moderate with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information and social media links are clearly provided, enhancing trustworthiness. Overall, the site is a credible government resource with room for improvement in security and privacy compliance.

M

Mobilemall

mobilemall.pk

0

Mobilemall.pk is a Pakistani-focused online portal providing comprehensive mobile phone price listings, specifications, and comparison services. The website targets consumers in Pakistan seeking up-to-date information on mobile devices and accessories. It offers features such as search with autocomplete, product ratings, and e-commerce ordering capabilities. The site uses modern web technologies including jQuery, Bootstrap, and Owl Carousel to deliver a responsive and user-friendly experience. Google Analytics and Adsense are integrated for tracking and monetization purposes. Security posture is moderate with HTTPS enabled but lacks important security headers and privacy compliance mechanisms. No privacy policy, cookie consent, or contact information is readily available, which impacts trust and compliance. WHOIS data aligns with the business focus and location, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy practices.

Medtek.io is a healthcare information management system platform offering integrated solutions including hospital information management, financials, HR, and medical college management. The company, SIHS, targets healthcare institutions and medical colleges primarily in Pakistan, providing a comprehensive digital transformation toolset. The website is professionally designed with clear navigation and mobile optimization, leveraging modern JavaScript frameworks such as React and Vite for its frontend infrastructure. However, the domain WHOIS data shows an anomalous future creation date, which may indicate data entry error or placeholder information. Security posture is moderate with HTTPS implied but lacking explicit security headers and published policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact is only available via a web form with no direct emails or phone numbers listed.

C

CBS Pakistan

cbspakistan.com

0

CBS Pakistan is a medium-sized technology company founded in 2009, specializing in customized business software solutions including ERP systems for retail, manufacturing, and education sectors, as well as UI/UX design and website development services. The company positions itself as an experienced provider with over 16 years of continual excellence and more than 1000 projects delivered, targeting businesses seeking tailored technology solutions to optimize operations and growth. Technically, the website is built with standard web technologies (HTML5, CSS3, JavaScript) and uses Cloudflare for DNS and hosting services. Google Analytics is integrated for user tracking. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and functional but could improve in privacy and security transparency.

M

Mobylogix

mobylogix.com

0

Mobylogix is a technology company specializing in software engineering and marketing services, targeting entrepreneurs, startups, and enterprises. The company offers a broad range of services including mobile app development, SaaS/web development, ecommerce, AI/machine learning, blockchain, cloud services, virtual reality, MVP development, and custom enterprise software. Positioned as a trusted and top-rated software development company, Mobylogix has multiple certifications and awards, and serves clients globally with a focus on innovation and digital transformation. Technically, the website is built using modern JavaScript frameworks such as React, with integrations of popular libraries like Slick Carousel and Animate.css. The site is hosted with GoDaddy and uses HTTPS with valid SSL certificates. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed with proper meta tags and structured data. From a security perspective, the site uses HTTPS but lacks important security headers and explicit security policies. No incident response or vulnerability disclosure information is provided. Analytics and marketing tools like Google Analytics and Calendly are used without visible cookie consent mechanisms, indicating partial privacy compliance. Overall, the website presents a professional and credible business front with room for improvement in security best practices and privacy compliance. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, enabling DNSSEC, and establishing vulnerability disclosure processes.

U

Urban Estate and Builders

urbanestate.pk

0

Urban Estate and Builders is a small-sized real estate company based in Lahore, Pakistan, with over 15 years of experience. The company specializes in property sales, rentals, and investment guidance, targeting buyers, sellers, and investors in the Lahore region. Their website is professionally designed with good content quality, clear navigation, and mobile optimization, supporting their market position as a premier real estate service provider in the area. Technically, the website uses modern web technologies including Bootstrap, Google Tag Manager, and responsive design elements, though some performance and accessibility aspects are basic. Security-wise, the site uses HTTPS but lacks visible security headers and published security policies, indicating room for improvement in security posture and compliance. The WHOIS data aligns well with the business claims, supporting domain legitimacy. Overall, the website scores moderately well but should address privacy and security policy gaps to enhance trust and compliance.

F

Fortis Nova (Private) Limited

greenenergy.pk

0

Fortis Nova (Private) Limited is a specialized industrial solutions provider operating primarily in the energy, manufacturing, and textile sectors. As a subsidiary of Fortis Holdings LLC, it maintains a strong presence in Pakistan and China, offering a broad portfolio of services including steam boilers, thermal oil heaters, power generation, environmental solutions, and automation technologies. The company targets industrial clients seeking cutting-edge, sustainable solutions to optimize their operations. Technically, the website is built on a modern WordPress platform using Elementor and Slider Revolution, supported by a hosting provider HOSTINGER operations, UAB. The site demonstrates good mobile optimization, SEO practices, and moderate performance. The use of Google Tag Manager and CookieYes indicates a moderate level of digital maturity with privacy compliance mechanisms in place. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks advanced security headers and explicit incident response policies. No critical vulnerabilities or exposures were detected, but improvements in security headers and formal security policies are recommended to enhance the security posture. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives. The domain is recently registered but consistent with the company's branding and subsidiary status. Strategic recommendations include enhancing security policies, enabling DNSSEC, and expanding transparency around incident response and terms of service.

L

Lecole for Advanced Studies

lecole.edu.pk

0

Lecole for Advanced Studies is a well-established educational institution based in Karachi, Pakistan, offering a range of academic programs from preschool through undergraduate levels with affiliations to the University of Cambridge and University of London. The website reflects a medium-sized organization targeting students and parents seeking quality education with international standards. Technically, the site is built on WordPress with a modern plugin ecosystem including Yoast SEO and WPBakery Page Builder, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks some security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanism. Overall, the website is professional and trustworthy but could improve in privacy and security transparency.

I

Inbox Business Technologies Limited

inboxbiz.com

0

Inbox Business Technologies Limited is a well-established technology solutions provider with over 23 years of experience, specializing in digital transformation, modernization, resilience, and cybersecurity services. The company serves a broad range of enterprise clients, including government entities and major corporations primarily in Pakistan and Saudi Arabia. Their key offerings include data center infrastructure, enterprise solutions, carrier grade solutions, GRC consulting, data protection, cybersecurity, and network security. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to enterprise customers. Technically, the website employs modern web technologies such as Bootstrap, jQuery, OwlCarousel, and FontAwesome, ensuring a responsive and user-friendly experience. However, performance is moderate and accessibility features are basic. The absence of a CMS suggests a custom or static site approach. Security-wise, the site uses HTTPS and modern libraries but lacks visible security headers and formal security policies, indicating room for improvement in security posture. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the website demonstrates a solid business credibility with strong client and partner logos, comprehensive contact information, and a clear business model. Privacy and cookie policies are missing, which is a compliance gap. The WHOIS data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, adding privacy and cookie policies, and implementing vulnerability disclosure mechanisms to improve trust and compliance.

J

Jahangir Siddiqui & Co. Ltd. (JSCL)

js.com

0

Jahangir Siddiqui & Co. Ltd. (JSCL) is a well-established Pakistani investment company specializing in financial services including banking, brokerage, asset management, and insurance. The company has a strong market position as a premier investment firm with a history dating back to 1991 and a notable Wall Street pedigree. The website reflects a professional and consistent brand presence targeting investors and financial clients in Pakistan. Technically, the site is built on WordPress with common industry-standard plugins and libraries, offering moderate performance and good mobile optimization. Security measures include HTTPS and Google reCAPTCHA, but lack advanced security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security posture. Overall, the site is trustworthy and credible with clear contact information and business transparency.

Pakistan Telecommunication Authority (PTA) is the official government regulatory body overseeing the telecommunication sector in Pakistan. The website serves as a comprehensive portal offering licensing information, consumer protection services, cyber security strategies, and digital inclusion initiatives. It targets telecom industry stakeholders, consumers, and government entities within Pakistan. The site is professionally designed with good content quality, clear navigation, and accessibility features, reflecting a mature digital presence for a government entity. Technically, the site uses modern front-end frameworks such as Bootstrap and Foundation, along with jQuery and Font Awesome, but suffers from poor SSL/TLS implementation with no valid certificate and no enabled TLS protocols, which significantly impacts security posture. Security headers are well configured, but lack of HTTPS and modern TLS protocols is a critical weakness. Privacy compliance is basic with a privacy policy and terms of use present but no cookie consent mechanism or GDPR compliance indicators. Contact information including phone and physical address is clearly provided, along with official social media links. Overall, the site is trustworthy and authoritative but requires urgent improvements in SSL/TLS security to protect user data and enhance trust.

The website advancedpack.com.pk currently hosts minimal content, primarily a Microsoft Word generated HTML document with no meaningful business or security information. The domain is registered and DNS configured, but the site lacks a valid SSL certificate and does not support HTTPS, significantly impacting its security posture. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available, limiting user trust and engagement. Technically, the site shows poor performance and lacks modern web technologies or CMS usage. Security best practices are absent, with no security headers or vulnerability disclosures. Overall, the site presents a low trustworthiness profile and requires substantial improvements to meet basic security and compliance standards.

Z

Zong

zong.com.pk

0

Zong is a leading telecommunications provider in Pakistan, offering a wide range of prepaid, postpaid, business, and value-added services with a strong focus on 4G data coverage. The website reflects a mature digital presence with comprehensive service offerings and a consistent brand aligned with its parent company, China Mobile. Technically, the site uses modern JavaScript libraries and tracking technologies but suffers from critical security shortcomings due to the absence of a valid SSL certificate and HTTPS support. This exposes users to potential risks and undermines trust. Privacy compliance is minimal, with no cookie consent mechanisms or explicit GDPR indicators. Overall, while the business and content quality are strong, the security posture requires urgent improvement to protect users and enhance credibility.

L

Legal & Commercial Consultants International (LCCI)

legal-commercial.com

0

Legal & Commercial Consultants International (LCCI) is a medium-sized, diversified law firm based primarily in Pakistan with an international office in London. The firm offers a broad spectrum of legal services including intellectual property rights, litigation, corporate advisory, and multi-jurisdictional legal support. Their website presents a professional image with detailed service descriptions and clear contact information, targeting corporate clients locally and internationally. Technically, the site is built on WordPress with common plugins and a LiteSpeed server but lacks HTTPS, which is a critical security deficiency. The absence of SSL/TLS encryption exposes visitors to potential data interception risks. Security headers and modern TLS protocols are also missing, further weakening the security posture. Privacy and cookie policies are not present, indicating non-compliance with GDPR and related regulations. Overall, while the business credibility and content quality are good, the technical and security implementations require significant improvements to ensure user trust and regulatory compliance.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

C

CSG Pakistan

csgpakistan.com

0

CSG Pakistan is a medium-sized digital marketing and IT services company based in Lahore, Pakistan. They offer a wide range of services including digital marketing, software development, web development, SEO, business process outsourcing, and virtual assistant services. Positioned as a leading digital marketing agency in Pakistan, they emphasize tailored strategies, full-service offerings, and ROI-focused execution to help businesses grow locally and globally. Their website demonstrates good technical infrastructure with WordPress CMS, Breakdance theme, and modern web technologies, optimized for performance and mobile use. However, the site lacks a valid SSL certificate and essential security headers, which impacts trust and security posture. No privacy, cookie, or terms of service policies were found, indicating compliance gaps. The company actively uses marketing and analytics tools such as Google Tag Manager and Meta Pixel, but does not implement visible consent mechanisms. Overall, CSG Pakistan presents a professional and credible digital presence with room for improvement in security and compliance.

This website has 3 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

The website https://hostlico.com exhibits significant security weaknesses, particularly in foundational security controls and compliance areas, resulting in a high-risk posture. Critical exposure of services and missing essential security headers increase vulnerability to cyberattacks and regulatory non-compliance, which could lead to data breaches, reputational damage, and legal penalties.

The website exhibits significant security weaknesses, particularly in foundational web security controls, privacy compliance, and incident management frameworks, posing substantial risks to user trust and regulatory adherence. While network security and DNS health are relatively strong, critical gaps in email authentication, SSL/TLS configuration, and GDPR compliance demand immediate attention to protect the business and its customers.