Security Directory

Z

Zakaz.ua

zakaz.ua

0

Zakaz.ua is a leading Ukrainian e-commerce platform specializing in grocery delivery from multiple hypermarkets across the country. The company offers a comprehensive online catalog, competitive promotions, and convenient delivery options, targeting Ukrainian consumers seeking efficient and reliable online shopping experiences. The website demonstrates a mature technical infrastructure leveraging modern frameworks such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are absent. Overall, Zakaz.ua presents a trustworthy and professional digital presence with room for enhanced transparency in security and privacy disclosures.

H

Hosting Ukraine LLC

h2o.best

0

The website h2o.best represents a residential real estate project named ЖК H2O, developed by Stolitsa Group, a well-established real estate developer in Kyiv, Ukraine. The project emphasizes a unique location with extensive waterfront, modern amenities, and a secure, private living environment. The site targets homebuyers and investors interested in comfort-class housing with business-class features. Technically, the site uses a modern JavaScript stack including jQuery, Swiper, and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. Hosting is provided by Hosting Ukraine LLC, consistent with the business location. Security posture is adequate with HTTPS enabled and secure forms, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is transparent and consistent with the business claims, indicating legitimacy.

N

NOVUS

novus.ua

0

NOVUS is a large Ukrainian retail supermarket chain offering a wide assortment of fresh products, promotions, and online shopping services. The website is professionally designed using Magento platform, integrating modern marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is accessible, mobile-optimized, and provides customer engagement through contact forms and social media channels. Security posture is good with HTTPS, reCAPTCHA, and standard security headers, though explicit cookie consent and security policies are lacking. WHOIS data confirms legitimate registration consistent with the business claims. Overall, NOVUS demonstrates a mature digital presence suitable for its market position.

R

RETROVILLE

retroville.ua

0

RETROVILLE is a large lifestyle shopping and entertainment center located in Kyiv, Ukraine, offering a wide range of services including shopping, dining, entertainment, sports, and business center facilities. The website presents a modern, well-structured digital presence with good mobile optimization and user experience. It leverages popular analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, indicating a mature digital marketing strategy. Security posture is solid with HTTPS and CSRF protections, but lacks some advanced security headers and visible security policies. Privacy compliance is weak due to absence of privacy and cookie policies, which is a notable gap given the tracking technologies in use. WHOIS data confirms domain legitimacy and consistency with the business location and nature. Overall, the website is professional and credible but should improve privacy and security transparency to enhance trust and compliance.

S

Stolitsa Group

stolitsagroup.com

0

Stolitsa Group is a well-established Ukrainian real estate developer specializing in residential and commercial projects primarily in Kyiv. Founded in 2003, the company has built a strong market presence with over 136 buildings completed and a reputation for quality and reliability. Their business model focuses on property development and sales, targeting local buyers and investors. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website employs a modern tech stack including jQuery, Swiper, Google Maps API, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and SendPulse. Hosting and DNS are managed via Cloudflare, enhancing performance and security. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks visible security headers and does not provide explicit privacy or cookie policies, which are critical for GDPR compliance. There is no published incident response or vulnerability disclosure information. The use of multiple third-party tracking scripts indicates extensive user tracking, which may raise privacy concerns. Overall, Stolitsa Group's website is professional and credible but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

EVT is a Ukrainian private maritime terminal operator specializing in grain transshipment and storage, operating one of the most technologically advanced grain terminals in Mykolaiv. The company serves global commodity traders and Ukrainian agroholdings, facilitating export logistics with a capacity of up to 4 million tons annually. The website provides comprehensive business information, contact details, and news updates but lacks formal privacy, cookie, and security policies. Technically, the site uses common web libraries and a lightweight CMS, with moderate performance and good mobile optimization. Security posture is limited due to missing security headers and lack of HTTPS enforcement details. Overall, the site is professional and credible but requires improvements in privacy compliance and security best practices.

D

DEPS

deps.ua

0

DEPS is a Ukrainian system integrator and distributor specializing in telecommunications equipment, security systems, measurement instruments, wireless devices, and IoT solutions. The company serves a broad target audience including telecommunications providers, security installers, and energy sector businesses. Their website demonstrates a solid market position with extensive product catalogs and partnerships with multiple well-known brands. Technically, the site is built on Joomla CMS and leverages modern JavaScript libraries and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and includes CSRF tokens, but lacks visible security policies, vulnerability disclosures, or incident response information, which are areas for improvement. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security transparency.

M

Melior Games

meliorgames.com

0

Melior Games is a well-established game development outsourcing company founded in 2010 with offices in Ukraine and Lithuania. They specialize in full-cycle game development services including game design, art outsourcing, gambling game development, and blockchain integration, targeting international markets primarily in Europe, Asia, and the USA. The website reflects a professional and content-rich digital presence with a clear business focus and a portfolio of over 120 projects. Technically, the site is built on WordPress with modern plugins and scripts, including SEO and analytics tools, and is mobile optimized with good performance. Security posture is solid with HTTPS enabled and use of reCAPTCHA on forms, but lacks some security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

U

UKRSIBBANK BNP Paribas Group

ukrsibbank.com

0

UKRSIBBANK BNP Paribas Group is a major Ukrainian bank established in 1990 and part of the international BNP Paribas financial group since 2006. It offers a wide range of banking and financial services targeting private individuals, small and medium businesses, corporate and premium clients. The bank positions itself as a modern, innovative institution adapting to changing market realities and emphasizing sustainable development and social responsibility. The website reflects a professional and comprehensive digital presence with clear branding and extensive product information. Technically, the website is built on WordPress using modern JavaScript libraries such as jQuery and Swiper.js, with integration of Google Analytics, Microsoft Clarity, and Google reCAPTCHA v3 for security and analytics. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is strong with HTTPS enforced and anti-bot measures, but lacks some security headers and explicit cookie consent mechanisms. Overall, the bank demonstrates a mature digital infrastructure and a solid security baseline appropriate for a financial institution. The domain registration data aligns well with the bank's history and legitimacy, reinforcing trustworthiness. However, improvements in privacy compliance and security header implementation are recommended to enhance user trust and regulatory adherence. Strategic recommendations include implementing a cookie consent banner, publishing incident response and vulnerability disclosure policies, enhancing accessibility compliance, and regularly auditing third-party scripts for vulnerabilities.

I

ISD

isd.dp.ua

0

ISD is a Ukraine-based software development company specializing in Laboratory Information Systems and healthcare IT solutions. Founded in 1993, the company has established itself as a reputable provider with international certifications including ISO 9001, ISO 13485, and ISO 27001. Their software products are recognized as medical devices and are compliant with GDPR, serving a global client base including medical laboratories across the USA, Europe, Asia, and Oceania. The website reflects a mature digital presence with a modern WordPress CMS, integration of interactive technologies such as Leaflet maps and planetary globe visualizations, and a multilingual interface. Technically, the site uses a robust stack including WordPress 6.8.1, jQuery, Swiper.js for sliders, and various plugins for forms and multilingual support. Security posture is strong with HTTPS enforced and a Content Security Policy header present, alongside a comprehensive cookie consent mechanism. However, additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Overall, ISD demonstrates a solid security and compliance framework aligned with industry standards. The presence of detailed privacy and cookie policies, ISO certifications, and GDPR compliance indicates a mature approach to data protection. Contact information is clearly provided, supporting transparency and trust. The risk assessment is low with no blocking or suspicious indicators. Strategic recommendations include enhancing security headers, adding incident response contacts, and improving accessibility features to further strengthen compliance and user experience.

Т

ТОВ «Робота Інтернешнл»

robota.ua

0

Robota.ua is a leading Ukrainian online job search and recruitment platform operated by ТОВ «Робота Інтернешнл», part of the larger Grupa Pracuj group. The website offers job seekers and employers a comprehensive service including job listings, resume posting, and recruitment assistance. It targets the Ukrainian market with localized content and strong branding. Technically, the site is built as a modern Angular 13 single-page application, leveraging Cloudflare for DNS and likely CDN services. While the SSL certificate is valid, some security best practices such as HSTS and security headers are missing, and no cookie consent mechanism is present. Privacy and terms of service documents are available as PDFs, but GDPR compliance indicators are minimal. The site integrates common marketing and analytics tools like Google Tag Manager and Facebook Pixel, indicating moderate user tracking. Overall, the website is professional and trustworthy but could improve in security and privacy compliance to enhance user trust and regulatory adherence.

R

Readly

readly.com

0

Readly is a digital media company offering a subscription-based magazine app that provides unlimited access to thousands of magazines globally. The company has a strong market position with a broad international footprint, targeting consumers who prefer digital reading experiences with features like offline access and family sharing. Technically, the website is built on Ruby on Rails and leverages modern web technologies and cloud hosting via AWS, with moderate performance and good mobile optimization. Security-wise, Readly employs strong TLS configurations, SPF and DMARC email protections, but lacks some advanced security features such as HSTS and OCSP stapling. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear cookie consent mechanism. Overall, the company demonstrates a mature digital presence with room for security enhancements.

А

Аутсорсинговый контакт-центр eCall

ecall.ua

0

The website ecall.ua exhibits a critically weak security posture, primarily due to the absence of HTTPS encryption and several essential security headers, exposing the site to data interception, clickjacking, and content injection risks. Additionally, the lack of GDPR compliance and insufficient security policies significantly heighten legal, reputational, and operational risks for the business.

A

Aviasales.ru

aviasales.ua

0

The website aviasales.ua demonstrates a moderate overall security posture with strong network, email, SSL/TLS, and DNS configurations but significant gaps in security headers, GDPR compliance, and NIS2 cybersecurity framework implementation. These deficiencies expose the business to regulatory risks, potential data breaches, and diminished user trust, impacting its reputation and legal standing. Immediate remediation is recommended to align with industry best practices and legal requirements.

The website https://liqpay.ua demonstrates robust foundational security in areas such as SSL/TLS, email security, and network security, but significant gaps remain in compliance and operational security frameworks. Key deficiencies in GDPR adherence and NIS2 regulatory requirements pose material business risks including reputational damage, regulatory penalties, and exposure to incident impacts. Addressing these will improve trust, regulatory compliance, and incident readiness.