Security Directory

S

Sunshine Holdings PLC

sunshineholdings.lk

0

Sunshine Holdings PLC is a prominent Sri Lankan conglomerate engaged primarily in healthcare, consumer goods, and agribusiness sectors. The company holds a strong market position as a leading diversified holding company in Sri Lanka, targeting general consumers, investors, and business partners. Their website reflects a professional corporate identity with clear business descriptions and a focus on transparency and compliance. Technically, the website is built on WordPress using modern plugins such as Elementor and Slider Revolution, hosted on DigitalOcean infrastructure, and optimized with WP Rocket for performance. Mobile responsiveness and SEO practices are well implemented, contributing to a positive user experience. Security posture is solid with HTTPS enforced, appropriate security headers, and cookie consent mechanisms, although there is room for improvement in CSP policies and dedicated security documentation. Overall, the website demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

F

FanaticZine

fanaticzine.com

0

FanaticZine is a Sri Lanka-based digital agency specializing in web design, web development, mobile app development, and social media marketing. Established in 2008, the company emphasizes commitment and long-term client relationships, offering a range of services including software architecture, UI design, and full stack development. Their website reflects a professional and consistent brand image targeting businesses seeking digital transformation solutions. Technically, the site is built on WordPress with modern plugins and libraries, providing a moderate performance and good mobile optimization. Security measures include HTTPS and Google reCAPTCHA, but lack advanced DNS security and security headers. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

S

SAARC Cultural Centre

saarcculture.org

0

The SAARC Cultural Centre website serves as the official online presence of a regional governmental/non-profit organization dedicated to promoting cultural cooperation among SAARC member states. The site provides information on upcoming cultural events, announcements, publications, and resources, targeting cultural communities, researchers, and the general public interested in South Asian culture. The organization is positioned as a key regional cultural institution with a focus on heritage and artistic collaboration. Technically, the website is built on WordPress CMS using Bootstrap and jQuery frameworks, with integration of Google Fonts and Font Awesome for styling and icons. Hosting and domain registration are managed through GoDaddy.com, LLC, with DNS hosted on reseller infrastructure. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain status protections to prevent unauthorized changes. However, it lacks DNSSEC and explicit security headers such as Content-Security-Policy or HSTS. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Contact information is clearly provided, including email, phone, and physical address, along with official social media links. Overall, the website is trustworthy and professional, with a strong business credibility score. The main risks relate to privacy compliance and security best practices, which can be improved by adding policies and security headers. There is no indication of adult or questionable content, and no WAF or blocking mechanisms interfere with content access.

B

B. Braun Melsungen AG

bbraun.lk

0

B. Braun Sri Lanka is a regional website representing B. Braun Melsungen AG, a global healthcare company specializing in medical products and services such as anesthesia, infusion therapy, dialysis, and wound care. The website targets healthcare professionals, job applicants, the general public, and industry partners, positioning itself as a leading healthcare provider in the Asia Pacific region. The business model focuses on delivering healthcare solutions and standards through a constructive dialogue with customers and partners. The site is part of a larger corporate ecosystem with multiple regional domains and partner sites.

The website greatplacetowork.lk is currently inaccessible, presenting a 403 Forbidden error page with no accessible content or business information. The site lacks any metadata, contact details, privacy or cookie policies, and does not expose any scripts or analytics. This severely limits the ability to assess the business or technical maturity. The domain uses privacy protection in WHOIS, which restricts transparency about the registrant. Overall, the site appears inactive or restricted, which negatively impacts trust and credibility.

J

Jaguar Sri Lanka

jaguar.lk

0

Jaguar Sri Lanka operates as the official regional website for Jaguar luxury vehicles in Sri Lanka, offering a range of luxury saloon, compact SUVs, and sedan cars. The site targets affluent customers interested in premium automotive products and provides options such as test drive bookings. The business is positioned as a key player in the luxury automotive sector within the Sri Lankan market, supported by the global Jaguar Land Rover brand. Technically, the website is built on modern JavaScript frameworks, likely Nuxt.js, and integrates Google Tag Manager and Analytics for tracking and performance monitoring. The site is mobile-optimized and presents a professional design consistent with luxury branding. Security-wise, the site uses HTTPS and Google site verification but lacks explicit security headers and detailed privacy or cookie policies, which are critical for compliance and user trust. No incident response or vulnerability disclosure information is present, indicating room for improvement in security transparency. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

L

Land of Kings Cafe & Restaurant

landofkingscafe.com

0

Land of Kings Cafe & Restaurant is a niche hospitality business in Sri Lanka, uniquely themed around Game of Thrones. It offers both dine-in and online food delivery services, targeting general consumers interested in themed dining experiences. The website is built on WordPress with WooCommerce, leveraging popular plugins and modern web technologies to provide a functional and visually appealing user experience. The technical infrastructure is moderate in performance with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and secure forms, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The domain registration is transparent and consistent with the business history, supporting legitimacy. Overall, the website is professional and trustworthy with room for security and privacy improvements.

M

MAS Holdings

masholdings.com

0

MAS Holdings is a leading innovative clothing manufacturer specializing in high-quality garments including sportswear, lingerie, sleepwear, swimwear, and medical apparel. Established in 2000, the company operates at an enterprise scale and targets businesses and brands seeking garment manufacturing solutions. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on WordPress with modern technologies such as Bootstrap, jQuery, and Google reCAPTCHA, and employs SEO best practices via Yoast SEO Premium. Security posture is solid with HTTPS enabled and reCAPTCHA protecting forms, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service on the main site. Overall, the website is trustworthy and professionally maintained, with room for improvement in security headers and privacy documentation.

C

Colombo Stock Exchange

cse.lk

0

The Colombo Stock Exchange (CSE) is the primary stock exchange in Sri Lanka, serving as a critical financial market infrastructure provider. The website offers comprehensive information on equity and debt trading, market disclosures, financial reports, and investor education. It targets investors, listed companies, and financial professionals within Sri Lanka and the broader financial community interested in Sri Lankan markets. The CSE holds a significant market position as the national stock exchange, facilitating capital market activities and supporting economic growth.

I

Infomate

infomateworld.com

0

Infomate is a well-established Business Process Outsourcing (BPO) and Business Process Management (BPM) company based in Sri Lanka, with over two decades of experience serving global clients including Fortune 500 companies. The company offers a broad range of services such as Finance & Accounting, Back Office Services, Payroll and HR Outsourcing, Business Excellence, and Sales Support. It operates across multiple regions including the Nordic countries, Australia, the UK, and the USA, and is a subsidiary of the reputable John Keells Holdings PLC. The website reflects a mature digital presence with modern technologies, strong branding, and comprehensive content. Security posture is good with HTTPS, ISO 27001 certification, and GDPR compliance mechanisms in place, though some security headers could be enhanced. Overall, the site is professional, trustworthy, and well-optimized for both users and search engines.

R

Rotax Limited

rotaxltd.com

0

Rotax Limited is a well-established industrial electrical solutions provider based in Sri Lanka with over 60 years of experience. The company offers a broad range of services including automation, system integration, manufacturing, contracting, and supply of electrical products. It operates associate companies such as Rotax Global LTD in Canada and Roche Engineering Lanka, expanding its market reach internationally. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with WooCommerce and uses modern plugins such as Elementor and Yoast SEO, indicating a mature digital infrastructure. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and published security policies. The site lacks visible privacy and cookie policies, which is a compliance gap that should be addressed. Contact information is primarily via forms and social media links, with no direct emails or phone numbers explicitly labeled. Overall, the website is trustworthy and professional but could improve privacy compliance and security transparency. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, adding security headers, publishing incident response contacts, and enhancing accessibility and compliance features to strengthen trust and regulatory adherence.

The website eBuilder.com demonstrates a moderate to weak security posture with no critical vulnerabilities but multiple high and medium risk issues, particularly in compliance with GDPR and NIS2 regulations. Key deficiencies include lack of security policies, incident response plans, and outdated or weak cryptographic practices that may expose the business to regulatory penalties and cyber threats.