Security Directory

A

Akzo Nobel N.V.

akzonobel.com

0

Akzo Nobel N.V. is a global leader in the manufacturing and distribution of paints and coatings, with a rich history dating back to 1792. The company operates in over 150 countries and manages a portfolio of well-known brands such as Dulux, International, Sikkens, and Interpon. Their business model focuses on providing innovative and sustainable surface solutions to a wide range of industries including manufacturing, energy, and transportation. The website reflects a mature digital presence with comprehensive content aimed at customers, investors, and partners worldwide. Technically, the website is built on Adobe Experience Manager (AEM) and leverages modern web technologies including HTML5, CSS3, JavaScript, and various marketing and analytics tools such as Google Tag Manager and Adobe DTM. Hosting is provided via Amazon AWS infrastructure. While the site is mobile-optimized and accessible, performance is somewhat slow with a load time exceeding 8 seconds, indicating room for optimization. From a security perspective, the site employs HTTPS with a valid SSL certificate, SPF and DMARC email authentication records, and no detected vulnerabilities or subdomain takeover risks. However, security headers like HSTS and OCSP stapling are not enabled, and TLS 1.3 is not supported, suggesting moderate security posture. Privacy compliance is strong with clear privacy and cookie policies and an active consent mechanism, aligning with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility. The main risks relate to technical performance and some security hardening opportunities. Strategic recommendations include enhancing SSL configurations, enabling advanced security headers, improving page load times, and maintaining rigorous privacy compliance to sustain trust and regulatory adherence.

I

Incepa

banheirosincepa.com.br

0

Incepa is a Brazilian manufacturing company specializing in bathroom and kitchen sanitary products, including ceramic sanitary ware, accessories, and complementary items. The company has recently integrated with the Roca brand, enhancing its market position. The website serves as a product catalog and brand promotion platform targeting residential customers, hotels, construction companies, and public environments. Technically, the site uses an Apache server with PHP 7.3.33 and integrates multiple marketing and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, and OneTrust for cookie consent. However, the site lacks a valid SSL certificate, serving content over HTTP only, which significantly impacts its security posture. The website content is well-structured and professionally designed, but privacy and security policies are missing or not clearly presented. Overall, the site demonstrates moderate digital maturity but requires urgent improvements in security and privacy compliance.

I

Incepa

incepa.com.br

0

Incepa is a well-established Brazilian manufacturer specializing in porcelain tiles and ceramic coatings, serving a broad audience including architects, designers, and commercial clients. The company maintains a professional online presence with multilingual support, product catalogs, technical assistance, and showroom information. Technically, the website is built on WordPress with modern front-end frameworks and plugins, providing good user experience and SEO optimization. However, the absence of a valid SSL certificate and HTTPS severely impacts the security posture, exposing users to risks and reducing trust. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is functional and professional but requires urgent security improvements to meet modern standards.

D

Deutsche Gesellschaft für Zerstörungsfreie Prüfung e.V.

dgzfp.de

0

The Deutsche Gesellschaft für Zerstörungsfreie Prüfung e.V. (DGZfP) is a German professional association specializing in non-destructive testing (ZfP). The organization provides extensive training, certification, networking opportunities, and research support to professionals and industries such as automotive, construction, railway, and aviation. The website reflects a mature digital presence with rich content, event listings, and comprehensive privacy and cookie policies compliant with GDPR. Technically, the site is built on WordPress with modern plugins for SEO and cookie management, but suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS support. This significantly impacts the security posture and user trust. The site is well-branded, professionally designed, and targets industry professionals and organizations in Germany.

D

Diondo GmbH

diondo.com

0

Diondo GmbH is a German-based manufacturer and service provider specializing in industrial computed tomography (CT) and X-ray inspection systems. The company offers a comprehensive portfolio of products including compact CT systems for battery module inspection, flexible CT systems with advanced manipulation capabilities, and user-friendly CT software solutions. Diondo positions itself as a market leader in industrial CT solutions, targeting industrial clients in research, development, production, and quality assurance sectors. The website content is professionally presented, with clear navigation and detailed product descriptions, supported by certifications such as ISO 9001 and ISO 14001. Technically, the site is built on Joomla CMS with modern frameworks and includes user consent mechanisms for privacy compliance. However, the absence of a valid SSL certificate and HTTPS significantly weakens the security posture, exposing users to potential risks. The site uses Google Analytics for tracking and integrates social media channels for broader engagement. Overall, Diondo demonstrates a solid business presence with room for improvement in security infrastructure to enhance trust and compliance.

V

VisiConsult X-ray Systems & Solutions GmbH

vc-xray.com

0

VCxray, a business unit of VisiConsult, is a globally recognized leader in industrial X-ray inspection systems and non-destructive testing (NDT) solutions. The company serves diverse sectors including automotive, aerospace, defense, energy, and manufacturing, offering tailored X-ray and computed tomography (CT) systems alongside inspection services and technical support. Their market position is strengthened by over 25 years of expertise, ISO certifications, and a comprehensive product portfolio. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and integrates advanced consent management via Cookiebot, Google Analytics, and Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS and modern TLS protocols, though improvements are recommended in email authentication (DMARC), HSTS enforcement, and DNS security (DNSSEC). Overall, the site demonstrates excellent content quality, user experience, and business credibility, with moderate performance and good privacy compliance. Strategic recommendations include enhancing email security, enabling HSTS, and improving SSL certificate transparency compliance to further strengthen security and trust.

V

VisiConsult

visiconsult.de

0

VisiConsult is a family-owned German company recognized as a global market leader in customized and standardized X-ray inspection solutions for non-destructive testing (NDT), quality assurance, and process optimization. The company operates multiple business divisions and subsidiaries, including VCxray, VCbattery, VCcount, and VC Inspection Services, as well as diondo X-ray Systems and Services. Their solutions serve diverse industries such as aerospace, automotive, defense, energy, and manufacturing. Technically, the website is built on WordPress with the Avada theme and uses modern web technologies including TLS 1.3 for secure communications. The site is well-optimized for SEO and mobile devices, with good accessibility features. Security posture is solid with no critical vulnerabilities detected, although improvements like enabling HSTS and OCSP stapling are recommended. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, the website reflects a professional, trustworthy, and technically mature organization.

R

Rohmann GmbH

rohmann.de

0

Rohmann GmbH is a leading German manufacturer specializing in eddy current testing devices and systems for non-destructive testing (NDT). The company serves key industrial sectors including automotive, aerospace, energy, and steel manufacturing, offering a broad product portfolio ranging from handheld devices to inline systems and software solutions. Their market position is reinforced by strong partnerships and customer testimonials from globally recognized companies such as Siemens and Lufthansa Technik. Technically, the website is built on WordPress with WooCommerce and Gravity Forms, leveraging modern JavaScript libraries and frameworks. However, the site suffers from a critical security shortfall due to the absence of a valid SSL certificate and HTTPS configuration, which significantly impacts its security posture. Privacy compliance is well addressed with comprehensive policies and a consent mechanism. Overall, the site demonstrates good content quality and business credibility but requires urgent security improvements to protect user data and enhance trust.

K

KARL DEUTSCH Prüf- und Messgerätebau GmbH + Co KG

karldeutsch.de

0

KARL DEUTSCH Prüf- und Messgerätebau GmbH + Co KG is a medium-sized German manufacturing company specializing in nondestructive testing equipment, including ultrasonic, magnetic particle, and penetrant testing devices. Founded in 1949, the company has established a strong international market presence with a broad product portfolio and recognized brands. The website is built on WordPress with a professional design and clear navigation, supporting multilingual content in German and English. However, the site currently lacks a valid SSL certificate, exposing it to security risks and impacting trustworthiness. While cookie consent mechanisms and privacy policies are well implemented, the absence of HTTPS and security headers are critical vulnerabilities that need urgent attention. Contact information and social media presence are comprehensive, supporting business credibility.

R

Roca Brasil Cerámica - Porcelanatos e Revestimentos Cerâmicos

rocaceramica.com.br

0

Roca Brasil Cerámica is a large Brazilian manufacturer and retailer specializing in porcelain and ceramic tiles, targeting architects, designers, engineers, and commercial clients. The company emphasizes sustainability and offers a comprehensive product catalog with technical support and showroom experiences. The website is built on WordPress with modern front-end frameworks and integrates multiple marketing and analytics tools. However, the site lacks a valid SSL certificate, which severely impacts its security posture. While privacy and cookie policies are well implemented with consent mechanisms, no explicit security or incident response policies are found. The overall digital maturity is moderate, with good content quality and user experience but technical and security improvements are needed.

C

Cyncly

rfms.com

0

Cyncly operates a specialized ERP software platform, RFMS ERP, tailored for the flooring industry. The company offers a comprehensive suite of business management tools including accounting, inventory, order entry, sales reporting, and mobile applications. Positioned as an industry-focused ERP provider, Cyncly targets flooring businesses, builders, and retailers with flexible subscription models and hosted solutions. The website demonstrates a professional and consistent brand presence with good content quality and clear navigation. Technically, the site leverages modern JavaScript frameworks and integrates multiple marketing and analytics tools, hosted behind Cloudflare DNS services. Security posture is adequate with valid SSL and SPF records, but improvements are recommended such as enabling HSTS, DNSSEC, and stricter DMARC policies. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanism. Overall, the website is well-structured and trustworthy, supporting extensive user tracking for marketing and analytics purposes.

C

Cyncly

mozaiksoftware.com

0

Mozaik Software, operated by Cyncly, provides specialized CNC software solutions tailored for the bespoke cabinet manufacturing industry. Their product suite includes Mozaik Manufacturing™, Mozaik CNC™, and Mozaik Enterprise™, each targeting different levels of manufacturing complexity and CNC integration. The company positions itself as a flexible, subscription-based software provider with strong industry knowledge and local support. Their website reflects a professional and consistent brand image with clear product offerings and pricing. Technically, the site leverages modern JavaScript frameworks and integrates multiple analytics and marketing tools, hosted primarily via Cloudflare with monitoring through Microsoft Azure. Security posture is adequate with valid SSL and SPF records but lacks advanced HTTP security headers and DMARC, which are recommended for enhanced protection. Privacy compliance is well addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website is content-rich and trustworthy but could improve performance and security hardening.

F

FoccoERP - Sistema de Gestão

foccoerp.com.br

0

FoccoERP is a Brazilian ERP software provider specializing in management systems for manufacturing and distribution companies. The company offers integrated solutions that enhance operational efficiency, reduce costs, and support business growth with AI-driven planning tools. Their market position is strong with over 1000 clients and 20,000 active users, supported by a professional website and active social media presence. Technically, the website is built on WordPress with Elementor and hosted on Hostinger with Cloudflare DNS, but lacks a valid SSL certificate, which is a critical security gap. Security posture is basic with SPF and DMARC configured but no HTTPS or modern TLS protocols enabled. Privacy compliance is partial with a privacy policy and terms of service present but no cookie consent mechanism despite tracking pixels. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and enhance trust.

M

Movelsul Brasil

movelsul.com

0

Movelsul Brasil operates the largest furniture fair in Latin America, targeting retailers, importers, architects, and designers in the furniture manufacturing and retail sectors. Established in 1977 and organized by Sindmóveis Bento Gonçalves, it holds a strong market position as a key event for business networking and industry innovation. The website supports multilingual access and provides comprehensive event information, exhibitor services, and visitor resources. Technically, the site is built on WordPress with a variety of plugins for SEO, analytics, and user engagement, hosted by KingHost. While the SSL certificate is valid, some security enhancements are recommended, including enabling HSTS and DMARC records. The site employs extensive tracking and advertising tools, including Google and Facebook pixels, with GDPR cookie consent mechanisms in place but lacks a dedicated privacy policy page. Overall, the digital presence is professional and trustworthy but could improve in performance and security posture.

R

Renna

renna.com.br

0

Renna is a Brazilian manufacturing company specializing in furniture components with over 20 years of market presence. The company offers a wide range of products including telescopic rails, pistons, power towers, LEDs, handles, and furniture feet, targeting furniture manufacturers and retailers. Their website reflects a medium-sized business with consistent branding and a good content quality level. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Owl Carousel, hosted on Microsoft Azure DNS infrastructure. However, the website suffers from slow performance and lacks a valid SSL certificate, which impacts security and user trust. The presence of multiple marketing and analytics tools indicates moderate digital maturity but also raises privacy considerations. Security posture is weak due to invalid SSL, lack of modern TLS protocols, and misconfigured SPF records. No explicit privacy, cookie, or terms of service policies were found, though LGPD consent checkboxes are present in forms, showing some compliance awareness. Overall, Renna's digital presence supports its business operations but requires significant security and compliance improvements to enhance trust and protect user data.

A

Akeo

akeo.com.br

0

Akeo is a Brazilian manufacturing company specializing in furniture accessories and edge banding tapes, with over 40 years of market experience. The company offers a diverse product portfolio including aluminum and plastic handles, profiles, feet for counters, appliques, and organizers, alongside customized solutions emphasizing innovation and sustainability. Their target market includes furniture manufacturers and designers seeking quality and differentiated products. Technically, the website employs modern front-end technologies such as Bootstrap, jQuery, and animation libraries, with hosting infrastructure linked to Google Cloud DNS services. However, the site lacks a valid SSL certificate and modern TLS support, exposing it to security risks. The presence of SPF and DMARC records indicates some email security awareness, but DNSSEC and other security headers are missing. Privacy and cookie policies are present with consent mechanisms, but terms of service and incident response information are absent. Overall, the digital maturity is moderate with room for security and compliance improvements.

C

CNI - Confederação Nacional da Indústria

sistemaindustria.com.br

0

The website sistemaindustria.com.br serves as the official portal for the CNI - Confederação Nacional da Indústria, the primary representative body for the Brazilian industrial sector. It provides comprehensive information, news, publications, and services related to industry advocacy, education, innovation, and statistics. The portal targets industry stakeholders, policymakers, and the general public interested in Brazil's manufacturing and industrial landscape. The business model is non-profit and focused on promoting industrial growth and competitiveness in Brazil. The site maintains a strong market position as the leading industry confederation in the country, supported by a large organizational size and extensive content offerings.

C

Cyncly

cyncly.com

0

Cyncly is a large, England-based software company specializing in end-to-end design software solutions for the spaces-for-living industries such as kitchen, bathroom, furniture, flooring, windows & doors, and manufacturing. The company offers a comprehensive integrated platform that connects designers, retailers, and manufacturers to a vast product content repository, enabling streamlined design, sales, manufacturing, and installation processes. With a strong market presence supporting 70,000 customers globally, Cyncly positions itself as a leader in transforming industry workflows and accelerating business operations. Technically, the website leverages modern web technologies including Alpine.js, Tailwind CSS, and integrates multiple marketing and analytics tools such as Google Tag Manager, Microsoft Application Insights, Marketo, Optimizely, and Cookiebot. The site is hosted behind Cloudflare, providing DNS and CDN services. However, a critical security gap is the absence of a valid SSL certificate and lack of HTTPS support, which undermines secure communications and user trust. From a security perspective, the domain has well-configured SPF and DMARC records to protect email integrity, but lacks advanced DNS security features like DNSSEC and CAA. The website employs a robust cookie consent mechanism compliant with GDPR, but no explicit security or incident response policies are publicly available. The extensive use of third-party tracking and marketing tools indicates a high level of user data collection and tracking. Overall, while Cyncly demonstrates strong business and technical maturity with excellent content quality and user experience, the lack of HTTPS and valid SSL certificate represents a significant security risk. Strategic improvements in web security infrastructure and transparency around security policies are recommended to enhance trust and compliance.

P

Promob Softwares Solutions

promob.com

0

Promob Softwares Solutions is a leading software developer specializing in the furniture sector, recognized as the largest in the world for this industry. Their comprehensive suite of software solutions covers design, production, sales, and education, targeting a broad audience including carpentry shops, factories, furniture stores, designers, architects, and educational institutions. The company emphasizes innovation and integration across the furniture production and sales lifecycle. Technically, the website is built on a modern WordPress platform using Elementor, supported by a robust tech stack including jQuery, JetElements, and various marketing and analytics tools. The hosting infrastructure leverages Azure DNS services, and the site employs modern SSL protocols (TLS 1.3 and 1.2) with OCSP stapling, ensuring secure communications. Performance is moderate with good mobile optimization and accessibility. From a security perspective, the site implements SPF and DMARC (though with a 'none' policy), uses Cookiebot for GDPR-compliant cookie consent, and shows no major SSL vulnerabilities. However, improvements such as enabling HSTS, DNSSEC, and a stricter DMARC policy could enhance security. No explicit security or incident response policies were found. Overall, Promob demonstrates a mature digital presence with strong business positioning and technical infrastructure. The extensive use of third-party analytics and marketing tools indicates a sophisticated approach to user engagement and data-driven marketing, balanced with compliance mechanisms. Strategic recommendations include enhancing security headers, improving compliance policies, and establishing clear incident response protocols.

A

ABIMÓVEL

brazilianfurniture.org.br

0

Brazilian Furniture is a project supported by ABIMÓVEL and Apex-Brasil focused on promoting the Brazilian furniture manufacturing sector and design industry. The website serves as a platform for industry news, events, and export promotion, targeting furniture professionals, designers, and international buyers. The site demonstrates a moderate level of digital maturity with use of common web technologies and marketing tools but suffers from significant security shortcomings, including an invalid SSL certificate and lack of security headers. The absence of privacy and cookie policies indicates compliance gaps. Overall, the business is well positioned within its sector but should improve its digital security and compliance posture to enhance trust and protect user data.

O

Orchestra Brasil

orchestrabrasil.com.br

0

Orchestra Brasil is a Brazilian project focused on promoting and supporting the internationalization of suppliers in the furniture manufacturing industry. It acts as a bridge between Brazilian suppliers and global markets, facilitating export activities and participation in major international trade fairs. The project is well-established with over a decade of experience and supports nearly 100 qualified Brazilian companies exporting to more than 90 countries. The website serves importers, manufacturers, distributors, and retailers in the furniture sector, providing information and contact channels to engage with Brazilian suppliers. Technically, the website is built on WordPress and leverages common plugins such as Contact Form 7, Yoast SEO, and GDPR compliance tools. It uses Google Analytics and Facebook Pixel for tracking and marketing automation via Mautic. The hosting provider is KingHost, and the SSL certificate is valid but lacks advanced security configurations like HSTS and security headers. Performance is relatively slow due to a large page size and many resources, but mobile optimization and SEO are adequately addressed. From a security perspective, the site implements basic protections including SSL and invisible reCAPTCHA on forms, along with a cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit privacy policies, terms of service, security policies, and incident response information. No vulnerability disclosure or security.txt files were found. The overall security posture is moderate but could be improved with enhanced HTTP headers, DNSSEC, and published security documentation. Overall, Orchestra Brasil presents a professional and consistent online presence supporting Brazilian furniture industry exporters. Strategic improvements in security and compliance documentation would enhance trust and reduce risk exposure.

C

Confederação Nacional da Indústria (CNI)

portaldaindustria.com.br

0

The Portal da Indústria website serves as a comprehensive digital platform representing the Confederação Nacional da Indústria (CNI) and its associated institutions SESI, SENAI, and IEL. It provides industry news, educational resources, statistical data, and compliance information targeted primarily at the Brazilian industrial sector and related stakeholders. The site demonstrates consistent branding and a broad content offering that supports its position as a leading industry portal in Brazil. Technically, the site leverages modern JavaScript libraries and is hosted on Microsoft Azure, but suffers from critical security shortcomings including an invalid SSL certificate and lack of HTTPS enforcement. The presence of cookie consent mechanisms and privacy policy pages indicates some compliance awareness, though GDPR compliance is uncertain. Overall, the site offers good user experience and content relevance but requires urgent security improvements to protect user data and enhance trust.

A

ABIMÓVEL - Associação Brasileira das Indústrias do Mobiliário

abimovel.com

0

ABIMÓVEL is a Brazilian industry association focused on representing and supporting the furniture manufacturing sector. The organization promotes export initiatives, sustainability programs, design integration, and regulatory compliance education to enhance the competitiveness of its members. The website serves as a portal for industry news, projects, and resources, targeting furniture manufacturers, designers, and exporters primarily in Brazil but with international outreach. Technically, the website is built on WordPress with Elementor and various Jet plugins, hosted on Locaweb infrastructure. However, the site lacks a valid SSL certificate and modern TLS support, which undermines its security posture. There are no visible privacy or cookie policies, and no formal security or incident response policies are published. Social media presence and contact forms indicate active engagement and data collection, but privacy compliance appears minimal. Overall, the site is professionally designed but requires significant security and compliance improvements to meet modern standards.

M

MOVERGS - Associação das Indústrias de Móveis do Estado do RS

movergs.com.br

0

MOVERGS is a regional industry association focused on supporting and strengthening the furniture manufacturing sector in Rio Grande do Sul, Brazil. The organization provides member benefits, industry representation, event coordination, and sector data to its target audience of furniture manufacturers and related stakeholders. The website reflects a medium-sized organization with a solid regional presence and partnerships with recognized industry and governmental entities. Technically, the website uses a legacy technology stack including jQuery 1.7.2 and several JavaScript libraries for UI and media handling. It relies on Cloudflare for DNS but lacks a valid SSL certificate, resulting in no HTTPS support and poor security posture. Performance is slow with a large page size and many resources. SEO and accessibility are basic but functional. From a security perspective, the site has SPF and DMARC configured for email security but lacks critical HTTPS implementation, security headers, and DNSSEC. No incident response or vulnerability disclosure policies are found. Cookie consent is implemented, but GDPR compliance is uncertain. The overall security score is low, exposing the site and users to risks. Strategically, the site should prioritize obtaining a valid SSL certificate and enabling HTTPS, improve security headers and DNS configurations, and publish clear security and privacy policies. Enhancing technical modernization and performance will also improve user trust and engagement.

O

Obispa Metalúrgica Ltda

obispadesign.com.br

0

Obispa Metalúrgica Ltda is a Brazilian manufacturing company specializing in the design and production of metal accessories with a focus on beauty, sophistication, and quality. With over 35 years of experience, the company offers multiple product collections and targets customers seeking high-quality metal accessory products. The website reflects a medium-sized enterprise with consistent branding and a good level of content quality. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Slick Carousel, FancyApps UI, and Livewire, hosted on Locaweb infrastructure. However, the website suffers from a lack of a valid SSL certificate and modern security configurations, which impacts its security posture negatively. The presence of Google Analytics and Tag Manager indicates moderate user tracking and marketing efforts. Overall, the company maintains a moderate trust level with clear contact information and privacy policies but requires significant improvements in security and compliance.

C

Cinex

cinex.com.br

0

Cinex is a Brazilian manufacturing company with Italian roots specializing in innovative glass and aluminum products for architectural and furniture applications. The company has a strong market presence with over two decades of experience, offering a diverse product portfolio including doors, frames, coatings, and partitions. Their business model focuses on combining technology, design, and sustainability to serve architects, designers, engineers, and end consumers. Technically, the website infrastructure leverages common web technologies such as jQuery, Glider.js, and Typekit fonts, hosted behind Cloudflare DNS services. However, the website suffers from critical security shortcomings, notably the absence of a valid SSL certificate and lack of modern TLS protocols, which exposes users to significant risks. The company has implemented SPF and DMARC DNS records, indicating some email security awareness. Overall, the digital maturity is moderate with room for improvement in performance, security, and privacy compliance.

S

Sayerlack

sayerlack.com.br

0

Sayerlack is a leading Brazilian multinational specializing in the manufacturing and distribution of wood paints, varnishes, and stains, serving Latin America and over 90 countries globally. The company targets professionals such as architects, decorators, interior designers, carpenters, painters, and hobbyists, offering tailored solutions and extensive product lines. Their digital presence includes multilingual support, educational content, and interactive tools like digital color charts. Technically, the website employs modern front-end technologies including jQuery, Slick Carousel, FontAwesome, and Tailwind CSS, hosted on Microsoft Online infrastructure. However, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and lack of modern TLS protocols, which undermines user trust and data protection. From a security perspective, while basic email protection via SPF is configured and CSRF tokens are implemented in forms, the lack of HTTPS, HSTS, DMARC, and other security headers exposes the site to potential risks. Privacy and cookie policies are present with a consent mechanism, but GDPR compliance is not fully addressed. No explicit security or incident response policies are found. Overall, Sayerlack's website reflects a mature business with strong market positioning but requires urgent security enhancements to protect user data and maintain trust. Strategic improvements in SSL deployment, security headers, and compliance frameworks are recommended to align with best practices and regulatory requirements.

S

Sindmóveis Bento Gonçalves

sindmoveis.com.br

0

Sindmóveis Bento Gonçalves is a well-established industry union representing the furniture manufacturing sector in Bento Gonçalves, Brazil, since 1977. The organization plays a pivotal role in fostering development within the local and national furniture industry by providing a range of services including labor area support, digital certification, training, sector data, international committees, projects, and trade fairs. Their market position is significant within the manufacturing sector, supported by partnerships with key industry players and active engagement in events and communications. The website reflects a medium-sized entity with consistent branding and good content quality aimed at industry stakeholders and associated members. Technically, the website is built on WordPress with a custom theme and employs various modern web technologies such as lazy loading, Google Analytics, Google Tag Manager, Facebook Pixel, and reCAPTCHA for security. Hosting is provided by KingHost, and the site uses a valid SSL certificate, although some SSL metadata appears unusual. Performance is currently slow due to large page size and load times, but mobile optimization and SEO are handled well. Security practices include spam protection and SPF records for email, but lack advanced HTTP security headers and DNSSEC. From a security perspective, the site demonstrates basic to moderate maturity with valid SSL, anti-spam measures, and GDPR cookie consent mechanisms. However, it lacks explicit privacy and terms of service pages, security policies, incident response contacts, and vulnerability disclosure information. There is room for improvement in security headers, HSTS enforcement, and DNS security. Overall, the site is trustworthy and professional but would benefit from enhanced security and compliance documentation. Strategically, Sindmóveis should focus on improving website performance, implementing comprehensive security headers, publishing clear privacy and terms policies, and enhancing incident response readiness to strengthen trust and compliance with evolving data protection regulations.

M

Movelsul Brasil

movelsul.com.br

0

Movelsul Brasil operates the largest furniture fair in Latin America, targeting retailers, importers, and industry professionals. The company organizes a major event that attracts hundreds of exhibitors and thousands of visitors, positioning itself as a key marketplace in the furniture manufacturing and retail sectors. The website is built on WordPress and integrates multiple marketing and analytics tools, including Google Tag Manager, Facebook Pixel, and RD Station, indicating a moderate level of digital maturity. However, the site lacks a valid SSL certificate, which undermines secure communications and user trust. The absence of explicit privacy and terms of service policies, combined with limited security headers and no DNSSEC, suggests gaps in compliance and security posture. Overall, Movelsul Brasil demonstrates a solid business presence with room for improvement in technical and security domains.

N

NEKEN

nk-neken.com

0

NEKEN is a French manufacturer specializing in high-quality handlebars, triple clamps, and air clamps for off-road motorcycles, serving both professional and amateur riders. The company has a solid market position supported by endorsements from top motocross riders and a focus on product durability and rider comfort. Their business model centers on manufacturing and aftermarket sales with a medium-sized operation founded in 1990. Technically, the website is built on Drupal 7 with a variety of JavaScript libraries and integrates Google Analytics and reCAPTCHA for user interaction and security. Hosting is provided by OVH, a reputable provider. Security posture is generally good with strong HTTP security headers and a valid SSL certificate, though the lack of modern TLS protocols and some CSP weaknesses suggest room for improvement. The site includes cookie consent mechanisms but lacks explicit privacy and terms of service policies, which are critical for compliance and user trust. Overall, the website is professional and well-branded but could enhance its security and compliance maturity.

V

Ventura Foods Mexico

venturafoods.mx

0

Ventura Foods Mexico is a large-scale food solutions provider specializing in innovative food products, culinary inspiration, and risk management services. The company operates a well-branded, multi-language website built on WordPress and WooCommerce, targeting food industry professionals and retail customers. Their market position is strong with a broad portfolio of products and services, supported by a consistent and professional digital presence. Technically, the website leverages modern web technologies and CDN services for fast performance and good mobile optimization. Security posture is adequate with valid SSL and security headers, but lacks modern TLS protocols and advanced DNS security features. Privacy compliance is well addressed with GDPR and cookie consent mechanisms in place. Overall, the site demonstrates a mature digital infrastructure with room for security enhancements.

D

DYMA Brands

dymabrands.com

0

DYMA Brands is a medium-sized US-based manufacturing company specializing in customized flavor solutions for the foodservice industry. As a subsidiary of Ventura Foods, it holds a strong market position with a diverse portfolio including liquid portion control, dry condiments, and dry-blended mixes. The company targets various foodservice sectors such as convenience, education, healthcare, military, office coffee services, and restaurants. Their business model focuses on B2B manufacturing and distribution, supported by in-house R&D and graphic design capabilities. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress with Elementor, hosted on Cloudways, and employs Google Tag Manager for analytics. Performance and mobile optimization are good, though accessibility is basic.

V

Ventura Foods

venturafoods.com

0

Ventura Foods is a large, established food solutions company specializing in manufacturing and culinary innovation. They offer a broad portfolio of products and services including food innovation, culinary solutions, strategic insights, product development, category management, risk management, and digital eCommerce. The company targets foodservice, retail, and international markets with multiple well-known brands and subsidiaries. Technically, the website is built on WordPress with WooCommerce, leveraging modern web technologies and optimized for performance, mobile, accessibility, and SEO. Security posture is moderate with valid SSL and security headers but lacks modern TLS support and advanced security policies. Privacy compliance is good with GDPR and cookie consent mechanisms in place. Overall, Ventura Foods presents a professional, trustworthy digital presence with room for security enhancements.

D

DEKRA

dekra.fi

0

DEKRA is a globally recognized expert organization specializing in testing, inspection, and certification services, with a strong presence in Finland and operations in 60 countries. Their website showcases a comprehensive portfolio of services including industrial inspections, non-destructive testing, product certification, vehicle inspections, and advisory and training services. The company positions itself as a trusted partner in safety and sustainability across multiple industrial sectors. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on Azure, and employs advanced security headers and SSL configurations, although TLS 1.2+ is not currently enabled. The site integrates multiple analytics and marketing tools, indicating a mature digital marketing strategy. Security posture is strong with no detected vulnerabilities, but some improvements are recommended, such as enabling modern TLS protocols and enhancing XSS protection. Overall, DEKRA's digital presence reflects a professional, secure, and user-friendly platform aligned with its market leadership in industrial safety and certification.

D

DEKRA North America, Inc.

dekra.us

0

DEKRA North America, Inc. is a leading global provider of safety solutions, offering comprehensive testing, inspection, certification, and consulting services across multiple industries including automotive, manufacturing, energy, and healthcare. With over 47,000 employees and significant global revenues, DEKRA holds a strong market position as a trusted partner for safety and compliance. The website demonstrates a mature digital infrastructure utilizing modern frameworks such as Nuxt.js and Vue.js, hosted on Azure, with a well-structured content management system (e-Spirit). Security measures are robust, including strong SSL configurations and comprehensive security headers, although enabling modern TLS protocols and enhancing CSP could further improve security. The site integrates extensive analytics and marketing tools, balanced with clear privacy and cookie policies, reflecting a commitment to user privacy and regulatory compliance. Overall, the website presents a professional, trustworthy, and user-friendly experience aligned with DEKRA's business objectives.

PID Polyester Innovation Développement is a French manufacturer specializing in monobloc polyester swimming pools with nearly 40 years of experience. The company emphasizes quality, customization, and customer service, targeting residential customers in France. Their market position is strengthened by patented technology and compliance with French safety standards. Technically, the website is built on WordPress with the Divi theme, integrating modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Brevo email marketing. The site is performant and mobile-optimized but lacks some advanced security configurations such as modern TLS protocols and security headers. The security posture is moderate with valid SSL but no DNSSEC or HSTS enabled. Privacy compliance is good with GDPR-aligned cookie consent mechanisms. Overall, the company presents a professional and trustworthy online presence with clear contact information and active social media engagement.

P

Piscines Provence Polyester

piscines-ppp.com

0

Piscines Provence Polyester is a French manufacturer and installer of polyester shell swimming pools, established in 1972 and part of the TEAM HORNER group since 2020. The company offers a wide range of pool models and installation services, targeting residential customers in France. Their market position is strong with over 50 years of experience and trust signals such as AXA insurance guarantees and membership in the Federation of Pool and Spa Professionals. Technically, the website is built on WordPress with Elementor and several premium plugins, hosted on Hostinger with LiteSpeed server technology. The site supports multilingual content (French and German) and complies with GDPR through a cookie consent mechanism. Security posture is moderate with a valid SSL certificate but lacks modern TLS protocols and advanced security headers. No explicit security policy or incident response information is published. Overall, the business demonstrates good digital maturity and professionalism but could improve security configurations and transparency.

H

HornerXpress® Worldwide

hxworldwide.com

0

HornerXpress® Worldwide is a well-established global distributor specializing in pool and spa equipment since 1969. The company holds a leading market position with a broad portfolio of product lines and a global customer base spanning over 100 countries. Their business model focuses on B2B distribution, supported by value-added services such as logistics and marketing support. The website reflects a professional and consistent brand image with clear communication of their services and partnerships. Technically, the website is built on WordPress using Elementor and WooCommerce, hosted on WP Engine, indicating a modern and scalable infrastructure. Performance is inferred to be fast with good mobile optimization and SEO practices. However, accessibility is basic and could be improved. From a security perspective, the site has a valid SSL certificate but lacks modern TLS protocol support and important security headers. There is no visible cookie consent mechanism or detailed privacy compliance beyond a basic privacy policy. Incident response and vulnerability disclosure information are absent, indicating room for maturity in security governance. Overall, the website and business demonstrate strong market presence and technical foundation but would benefit from enhanced security practices and compliance transparency to reduce risk and build greater trust with customers and partners.

H

HornerXpress, Inc

hornerxpress.com

0

HornerXpress, Inc is a well-established wholesale distributor specializing in swimming pool and spa supplies, operating since 1969 with a large footprint of over 20 locations in the USA and global distribution to over 100 countries. The company offers proprietary brands, extensive inventory, and comprehensive marketing and training support to its dealer and vendor network. Technically, the website is built on WordPress hosted on WP Engine with a modern theme and multiple plugins supporting e-commerce, events, and forms. The security posture is moderate with a valid SSL certificate but lacks modern TLS protocol support and HSTS enforcement. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. Overall, the company demonstrates strong market positioning and digital maturity but could improve security configurations and incident response transparency.

L

Lo-Chlor Specialty Chemicals

lo-chlor.com

0

Lo-Chlor Specialty Chemicals is a well-established manufacturer and distributor of pool and spa chemical products with over 40 years of industry experience. The company operates primarily in the manufacturing and retail sectors, targeting pool stores, authorized dealers, pool professionals, and homeowners. Their product line includes enzyme-based pool treatments and other water treatment chemicals, supported by educational content and dealer resources. The company is affiliated with the Team Horner Group and emphasizes products made in the USA. Technically, the website is built on WordPress with WooCommerce and uses several plugins for SEO, translation, and user engagement. Hosting is provided by WP Engine on Google Cloud infrastructure. Security posture is moderate but impacted by an invalid or missing SSL certificate and lack of advanced security headers or DNSSEC. The site implements GDPR-compliant cookie consent and privacy policy but lacks a visible terms of service and vulnerability disclosure policy. Overall, the website presents a professional and trustworthy image with good SEO and user experience but requires improvements in security configuration to enhance trust and compliance.

T

Team Horner

teamhorner.com

0

Team Horner is a well-established company founded in 1969, operating as an integrated manufacturer, wholesale distributor, and global exporter in the swimming pool and spa industry. They hold a strong market position with leading brands such as AquaCal and AutoPilot, serving a global audience of pool businesses and distributors. The website reflects a mature digital presence built on WordPress with multiple plugins supporting marketing, events, and e-commerce functionalities. However, the technical infrastructure shows weaknesses, notably an invalid SSL certificate and lack of modern TLS protocols, which pose security risks to users. The company demonstrates compliance efforts with a privacy policy and GDPR consent mechanisms but lacks visible terms of service and security policies. Overall, the security posture is basic with room for significant improvement in SSL configuration and incident response readiness.

A

AutoPilot Website

autopilot.com

0

AutoPilot Website represents a well-established manufacturer specializing in salt chlorine generators and pool maintenance technology, operating since 1976 and positioned as a technological leader in the chlorine generation industry. The company serves both residential and commercial pool markets, supported by a network of dealers and service centers, and is affiliated with the Team Horner Group. Their product portfolio includes salt chlorine generators, water chemistry controllers, pool automation systems, and replacement parts, supported by educational resources and warranty services. Technically, the website is built on WordPress with WooCommerce, enhanced by popular plugins such as Yoast SEO and Revolution Slider, hosted on Google Cloud infrastructure. The site demonstrates good performance, mobile optimization, and SEO practices but has basic accessibility and lacks advanced cookie consent mechanisms. Security posture is moderate with a valid SSL certificate but missing modern TLS protocol support and HSTS headers, indicating room for improvement in secure communications and compliance. Overall, the website is professional, trustworthy, and well-branded, with clear contact information and active social media presence.

The website demonstrates a strong overall security posture with no critical or high-level issues detected. Key areas like email security, SSL/TLS configuration, and network security are fully optimized, reflecting robust defenses against common attack vectors. However, medium-level concerns around security headers, GDPR compliance, NIS2 alignment, and DNSSEC implementation indicate gaps that could expose the business to regulatory risks and certain types of cyber threats. Low-level issues such as missing CAA DNS records suggest opportunities for improving certificate management. Addressing these medium and low-level findings will enhance compliance, reduce attack surface, and strengthen trust with customers and regulators. Prioritizing improvements in security headers and DNSSEC will yield significant security benefits. Overall, the website is well-protected but needs targeted remediation to meet evolving security and compliance standards fully.

The website demonstrates a strong overall security posture with no critical or high-level issues detected, reflecting robust SSL/TLS implementation, excellent email security, and solid network security measures. However, medium-level deficiencies in security headers, GDPR compliance, NIS2 alignment, and DNS configuration present moderate risks that could affect regulatory compliance, data protection, and trustworthiness. The absence of DNSSEC and missing CAA records slightly weaken domain security, potentially exposing the site to DNS spoofing or unauthorized certificate issuance. Addressing these gaps will enhance data integrity, regulatory adherence, and overall resilience against common web threats. Proactive remediation of these medium and low-level issues is recommended to maintain customer trust and avoid potential compliance penalties. Continuous monitoring and periodic reassessments should be implemented to sustain and improve security posture over time.

This website has 7 security issue(s) identified for improvement. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

This website has 8 security issue(s) identified for improvement. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

This website has 2 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

The website demonstrates a concerning overall security posture, with no critical issues but multiple high and medium severity gaps primarily related to security headers, GDPR compliance, and NIS2 regulatory readiness. Key security controls such as Strict-Transport-Security, Content-Security-Policy, and X-Frame-Options headers are missing, increasing exposure to common web-based attacks. Significant GDPR compliance failures, including absence of a Privacy Policy, Cookie Policy, and consent banner, present legal and reputational risks. The lack of documented information security frameworks, policies, and incident response procedures indicates insufficient organizational security maturity and readiness to handle cyber incidents. While email security and network security aspects score relatively well, foundational security hygiene and regulatory compliance require urgent attention. Failure to address these issues may result in data breaches, regulatory penalties, and loss of customer trust. Immediate remediation will enhance both security posture and business credibility.

The website demonstrates a generally strong technical security posture with robust SSL/TLS implementation and good network security. However, significant gaps exist in the organizational security framework, particularly related to compliance with the NIS2 Directive, which impacts regulatory adherence and risk management. The absence of documented security policies, incident response procedures, and vulnerability disclosure mechanisms exposes the business to potential operational disruptions and reputational damage in the event of a security incident. Additionally, failure to implement key security headers and GDPR compliance measures further increases exposure to data breaches and legal penalties. Email security is mostly sound but lacks DKIM records, which could affect email authenticity and increase phishing risks. DNS health is adequate but could be improved by enabling DNSSEC and configuring CAA records to prevent certificate misuse. Overall, the website requires urgent governance and policy enhancements to complement its technical defenses and align with regulatory requirements, ensuring business resilience and trustworthiness.