Security Directory

S

SPIRIT CORPORATION LIMITED

videomost.com

0

VideoMost is an enterprise-grade software provider specializing in video conferencing servers and SDKs designed for mobile service providers and enterprises. The company positions itself as a cost-effective alternative to major players like Zoom, offering self-hosted solutions with extensive interoperability and collaboration tools. Their target audience includes government agencies, education, telemedicine, finance, and telecom sectors. The website demonstrates a mature digital presence with modern technologies and responsive design, supported by a strong portfolio of reputable customers and industry awards. However, the absence of explicit privacy and cookie policies indicates room for improvement in compliance transparency. Security posture is solid with HTTPS and some security headers, but lacks formal incident response and vulnerability disclosure policies.

G

Greatrvtrip

xlpromotions.nl

0

Greatrvtrip is a Russian-based company specializing in the rental of motorhomes (RVs) worldwide, offering services across Russia, the USA, Europe, and other countries. The company provides a comprehensive range of services including RV rentals, booking of campgrounds, personalized travel routes, and full travel support. Their market position is that of a reliable and customer-focused service provider, emphasizing comfort and assistance throughout the travel experience. Technically, the website is built on the Tilda CMS platform, utilizing modern web technologies and integrated with multiple analytics and marketing tools such as Google Tag Manager, Yandex Metrika, Facebook Pixel, and VK Retargeting. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS, employs standard security headers, and uses secure forms with validation, though it lacks a dedicated security policy or incident response information. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the website is trustworthy and professionally managed, with strong business credibility and a solid technical foundation.

P

PJSC LUKOIL

lukoil.com

0

PJSC LUKOIL is a major global vertically integrated oil and gas company with a significant presence in upstream and downstream sectors. The website reflects a mature corporate entity with comprehensive investor relations, sustainability initiatives, and product offerings. Technically, the site uses modern JavaScript libraries and APIs, including Yandex Maps and Yandex Metrika for analytics, and is well-structured with responsive design. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are not published. Privacy compliance is partial due to the absence of a cookie consent mechanism. Overall, the site is professional, trustworthy, and aligned with the company's business stature.

Sakhalin Energy operates as a major energy company focused on oil and gas production projects in Russia, notably the Sakhalin-2 project. The website serves as an informational portal presenting company details, safety and environmental policies, social programs, media releases, tenders, and career opportunities. The business model centers on resource development under a production sharing agreement, targeting industry stakeholders, contractors, and the public. Technically, the website is built on the Bitrix CMS platform and employs legacy technologies such as jQuery 1.8.2, along with modern tools like Google reCAPTCHA and FontAwesome. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. The content is currently limited due to the site being under reconstruction. From a security perspective, the site uses HTTPS and includes reCAPTCHA for form protection but lacks visible security headers and uses outdated JavaScript libraries, which may expose it to vulnerabilities. Privacy compliance is minimal, with a basic privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information and security policies are not clearly provided. Overall, the website presents a moderate risk profile with room for improvement in security practices, privacy compliance, and technical modernization. Strategic enhancements in these areas would strengthen trust and operational resilience.

I

ITA Labs

ita-labs.com

0

ITA Labs is a specialized custom software development company focusing on high-load distributed client-server systems primarily using .NET technologies. They serve a diverse international clientele including government agencies and corporations across Russia, USA, Europe, and Africa. Their key services include application servers, IoT services, smart bots, management portals, SDKs, and software protection solutions. Technically, the website is built on Bitrix CMS with custom JavaScript and integrates Google Analytics for tracking. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security deficiency. The security posture is weak with minimal security headers and no modern TLS protocols enabled. Privacy compliance is basic with a cookie consent banner and privacy policy present but no GDPR-specific indicators or terms of service. Business credibility is supported by consistent WHOIS data, clear contact information, and multiple trust badges from industry platforms. Overall, the website is functional and professional but requires urgent improvements in security and privacy compliance to meet modern standards.

H

HelpDeskEddy

helpdeskeddy.com

0

HelpDeskEddy is a Russian-based technology company providing a comprehensive HelpDesk and ServiceDesk platform designed to centralize customer support interactions across multiple channels. The platform offers omnichannel integration, automation workflows, analytics, and API access, targeting businesses seeking to improve their customer service efficiency. The website demonstrates a solid market presence with over 1200 companies using their services, including notable brands, and offers both SaaS and boxed deployment models. Technically, the site uses modern web technologies such as Bootstrap, Video.js, and integrates analytics tools like Yandex Metrika and Google Tag Manager. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall, exposing users to potential risks. Privacy policies and cookie consent mechanisms are implemented, though GDPR compliance is not clearly indicated. Overall, the website is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

U

Unisender

unisender.com

0

Unisender is a well-established Russian email marketing service founded in 2009, serving over 870,000 companies primarily in Russia and Belarus. The platform offers a comprehensive suite of marketing tools including email campaigns, chat-bots, SMS messaging, landing page creation, and automation features. The website is professionally designed, content-rich, and targets businesses and marketers seeking efficient communication solutions. Technically, the site is hosted on Yandex Cloud and built on WordPress, utilizing common JavaScript libraries and marketing SDKs. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, which significantly impacts the site's security posture. Privacy and cookie policies are present and indicate GDPR compliance, though user tracking is extensive. Overall, the business demonstrates strong credibility and market presence but must urgently address security vulnerabilities to protect user data and maintain trust.

G

G-Engine

g-engine.net

0

G-Engine is a newly established B2B service platform focused on automating digital goods marketplace transactions, primarily targeting the CIS region. The company offers automated Steam replenishment services with plans to expand to other digital gift cards and platforms. The website is built on the Tilda CMS platform and integrates with partner marketplaces such as GGSel. Technical infrastructure includes modern TLS protocols and Cloudflare DNS, but lacks advanced security features like HSTS and DNSSEC. Analytics are handled via Yandex Metrika, indicating regional focus. Security posture is basic with no critical vulnerabilities detected but room for improvement in headers and certificate transparency. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site presents a professional and consistent brand image with moderate trustworthiness but would benefit from enhanced privacy and security practices.

О

ООО “Ай Ти Инвест”

ggsel.net

0

GGSEL is a well-established digital marketplace specializing in the sale of digital goods such as game keys, software licenses, gift cards, and subscription services. It serves a large user base primarily in Russia and CIS countries, offering a broad catalog of products with secure and fast delivery. The platform leverages modern web technologies including Next.js and Material-UI, ensuring a responsive and user-friendly experience. Security measures include TLS 1.2/1.3 encryption and SPF/DMARC email protections, though improvements like DNSSEC and HSTS could enhance security further. Privacy and terms policies are comprehensive and GDPR compliant, supporting trust and regulatory adherence. Overall, GGSEL presents a credible and professional e-commerce platform with a strong market position and growth potential.

О

ООО "Айкюсофт"

iqsoft.company

0

ООО "Айкюсофт" is a Russian technology company specializing in software development and integration, primarily serving financial institutions and businesses requiring advanced IT solutions. Their product portfolio includes modules for the National Payment Card System, Escrow services, and AML monitoring systems, positioning them as a niche player in fintech. The company maintains partnerships with notable payment processors and financial service providers, enhancing its market credibility. Technically, the website is built with standard web technologies including HTML5, CSS3, and JavaScript, with moderate performance and good mobile optimization. However, the absence of HTTPS and security headers significantly undermines the site's security posture. No advanced frameworks or CMS platforms are detected, indicating a relatively simple but functional technical infrastructure. Security evaluation reveals critical vulnerabilities due to lack of SSL/TLS encryption, missing security headers, and absence of domain-level protections such as DNSSEC and DMARC. While the company holds PCI DSS certifications, the website itself does not reflect strong security practices, posing risks to user data confidentiality and trust. Overall, the business appears legitimate and established with consistent WHOIS data and clear contact information. Strategic improvements in website security and privacy compliance are essential to enhance trust and protect business operations.

О

ООО “Ай Ти Инвест”

ggsel.com

0

GGSEL is a large-scale e-commerce marketplace specializing in digital goods such as games, software licenses, gift cards, and subscription services. The platform offers a wide variety of products with a focus on fast delivery and secure transactions, targeting gamers and digital consumers primarily in Russia and CIS countries. The business model includes direct sales, partner programs, and API access for professional sellers, positioning GGSEL as a competitive player in the digital goods market. Technically, the website leverages modern web technologies including React, Next.js, and Material-UI, supported by Cloudflare DNS and multiple third-party marketing and analytics tools. However, the absence of a valid SSL certificate and HTTPS support is a critical security flaw that undermines user trust and data protection. Additionally, SPF misconfigurations and lack of cookie consent mechanisms indicate gaps in security and privacy compliance. Overall, GGSEL demonstrates strong business credibility and content quality but requires urgent improvements in security posture to safeguard customer data and comply with industry standards.

О

ООО «Айкюсофт»

guarantee.money

0

The website guarantee.money operates as an escrow service platform primarily targeting Russian-speaking users. It facilitates secure transactions between buyers and sellers by acting as a trusted third party holding funds in escrow until transaction conditions are met. The business is positioned as a medium-sized technology and finance service founded in 2017, with a focus on online marketplaces, arbitration, and payment link generation. The company behind the service is ООО «Айкюсофт», based in Russia. Technically, the site is built on a modern React and Next.js stack with Material-UI for UI components, indicating a contemporary digital infrastructure. However, the site suffers from a critical security shortcoming: the absence of a valid SSL certificate and proper HTTPS support, which undermines user trust and data security. While HSTS headers are configured, they are ineffective without valid SSL. Privacy and terms of service pages exist but cookie consent mechanisms are missing, indicating partial privacy compliance. Contact information is limited to an email address at iqsoft.company, with no phone or physical address provided. Overall, the site is functional and content-rich but requires urgent security improvements to meet industry standards and user expectations.

This website has 4 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

Q

QIWI

qiwi.com

0

The website qiwi.com exhibits significant security and compliance gaps despite having a strong network and email security posture. Key deficiencies in security headers, GDPR compliance, and NIS2 regulatory requirements expose the business to data breaches, regulatory fines, and reputational damage. Immediate remediation is essential to safeguard customer trust and meet legal obligations.

P

Payture

payture.com

0

Payture.com demonstrates significant security and compliance gaps, particularly in web security headers, GDPR adherence, and NIS2 regulatory requirements, posing potential risks to customer data and business operations. While network security and email security are relatively strong, the lack of foundational security controls and policies exposes the site to avoidable vulnerabilities and regulatory non-compliance.