Security Directory

A

A1 Group

a1.group

0

A1 Group is a major telecommunications provider operating primarily in Central and Eastern Europe, serving approximately 30 million customers across seven core markets. The company offers a broad portfolio of services including voice telephony, broadband internet, mobile and home entertainment, smart home solutions, data and IT services, wholesale, payment solutions, and digital services. The website reflects a strong corporate identity with a focus on sustainability and ESG commitments, supported by detailed investor relations content and sustainability reports. Technically, the website is built on WordPress with multilingual support and integrates modern marketing and analytics tools such as Google Analytics, Microsoft Clarity, and Bugsnag. However, the security posture is weakened by the absence of a valid SSL certificate and disabled TLS protocols, which is a critical vulnerability that must be addressed promptly. Privacy compliance is well managed with a comprehensive cookie consent mechanism and clear privacy policy. Overall, the site demonstrates professionalism and trustworthiness but requires urgent improvements in SSL/TLS security to protect user data and maintain credibility.

F

freenet Internet

freenet-internet.de

0

freenet Internet is a German telecommunications provider specializing in flexible internet tariffs that can be managed entirely via a mobile app. Their offerings include DSL and 5G internet services with monthly cancellable contracts, targeting customers who value freedom and simplicity. The website is built on modern JavaScript frameworks (Nuxt.js and Vue.js) and hosted on Amazon Web Services infrastructure, leveraging CloudFront CDN for content delivery. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a significant security concern. The presence of SPF and DMARC records indicates some email security awareness, but no advanced security headers or mechanisms are implemented. Privacy and terms of service documents are present and appear comprehensive, but no cookie consent mechanism is detected. Overall, the site provides good content quality and user experience but requires urgent improvements in security posture to protect users and enhance trust.

A

A1

a1partnering.com

0

A1 Partnering is a strategic business unit of A1, Austria's leading telecommunications provider with over 7.1 million customers. The website promotes business partnerships and investment opportunities for B2C companies aiming to enter the Austrian and Central European markets. The company leverages its strong market position, customer base, and marketing expertise to facilitate market entry and growth for partners. Technically, the website uses modern frontend technologies such as Tailwind CSS and Alpine.js, and integrates OneTrust for cookie consent management. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security deficiency. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site presents professional content and branding but requires urgent security improvements.

A

A1 Telekom Austria Group

a1blog.net

0

A1 Telekom Austria Group operates the website a1blog.net as a content platform focused on internet, smartphones, digital life, and related telecommunications services primarily targeting Austrian consumers. The site serves as a marketing and informational blog, showcasing product news, tips, and corporate social responsibility initiatives. Technically, the site is built on the Liferay CMS platform, leveraging modern JavaScript frameworks including React and Alloy UI, and integrates Google Tag Manager and OneTrust for analytics and cookie consent management. Despite rich content and professional design, the site suffers from a critical security shortfall due to an invalid SSL certificate and lack of HTTPS enforcement, which significantly impacts its security posture. Privacy compliance is well addressed with comprehensive cookie consent and privacy policies in German, aligned with GDPR requirements. Overall, the site demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and enhance trust.

A

A1 Telekom Austria AG

a1click.at

0

A1click.at is an online marketplace operated under the A1 Telekom Austria AG brand, offering a curated selection of digital, entertainment, energy, finance, and insurance products. The platform leverages trusted partnerships and the A1 Trusted Brands certification to provide exclusive deals and services to Austrian consumers. The website features a modern frontend technology stack including Alpine.js and Tailwind CSS, integrated with multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Hotjar. Despite a professional design and good content quality, the site suffers from critical security shortcomings, notably the absence of a valid SSL certificate and missing security headers, which significantly impact its security posture. Privacy compliance is well addressed with a comprehensive cookie consent mechanism powered by OneTrust and a clear privacy policy in German. Contact information is limited to an email address and a newsletter subscription form, with no phone numbers or physical addresses disclosed. Overall, the website presents a solid business presence with room for improvement in technical security and performance optimization.

F

freenet DLS GmbH

mobilcom-debitel.de

0

Freenet DLS GmbH operates mobilcom-debitel.de, a major German telecommunications retail website offering mobile tariffs, devices, and related services. The company targets German consumers seeking mobile phone plans and devices, positioning itself as a comprehensive provider with a broad product portfolio. The website demonstrates a mature digital infrastructure leveraging Cloudflare CDN, modern JavaScript libraries, and personalization tools like Kameleoon. Security posture is strong with HTTPS, valid SSL certificates, SPF and DMARC email protections, and secure cookie settings, though some improvements are recommended such as enabling HSTS in SSL config and adding CSP headers. Privacy compliance is moderate due to the absence of explicit privacy and cookie policies or consent mechanisms. Overall, the site is professional, well-branded, and trustworthy with good SEO and user experience.

T

TelemaxX Telekommunikation GmbH

telemaxx.de

0

TelemaxX Telekommunikation GmbH is a well-established provider of high-security data center services, managed IT services, colocation, and telecommunications based in Karlsruhe, Germany. Founded in 1999, the company operates multiple certified data centers and owns a substantial fiber optic network, positioning itself as a regional leader with a strong shareholder base. Their service portfolio includes cloud services, secure telecommunications, and comprehensive managed services tailored to business customers. Technically, the website is built on TYPO3 CMS with modern frameworks and integrates analytics and marketing tools such as Matomo and Google Tag Manager. However, the security posture is impacted by an invalid SSL certificate and lack of advanced security headers, which should be addressed to enhance trust and compliance. Overall, the site demonstrates excellent content quality, professional design, and strong business credibility, though improvements in security and privacy mechanisms are recommended.

A

AXESS Networks

axessnet.com

0

AXESS Networks is a specialized provider of satellite connectivity and telecommunications solutions targeting enterprise customers across multiple sectors including energy, telecommunications, maritime, government, and humanitarian services. The company operates a global infrastructure with teleports in Germany, Mexico, Colombia, UAE, and Peru, and is part of the Hispasat group, enhancing its market position and credibility. The website demonstrates a mature digital presence with multilingual support, comprehensive service offerings, and clear navigation. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS, TLS 1.3 support, OCSP stapling, and appropriate security headers, though improvements like HSTS and DNSSEC could be implemented. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site reflects a professional and trustworthy business with a solid technical foundation.

H

Hispasat

hispasatwave.com

0

Hispasat Wave is a specialized managed services platform focusing on satellite connectivity solutions for ISPs, telecommunications providers, media companies, and government entities. The company leverages a global satellite fleet combined with local partnerships to deliver broadband, video distribution, and OTT streaming services, primarily targeting Latin America and other global markets. The website reflects a mature digital presence with professional content, clear navigation, and multilingual support. Technically, the site is built using modern frameworks like Astro, hosted on Netlify, and employs best practices in performance and mobile optimization. Security posture is solid with HTTPS enforced, strong cipher suites, and standard security headers, though improvements such as enabling DNSSEC, DMARC, and enhanced HSTS policies are recommended. Privacy compliance is addressed with clear cookie and privacy policies and a consent mechanism, but GDPR compliance indicators could be strengthened. Contact is primarily via a web form, with no direct emails or phone numbers published. Overall, the site demonstrates a high level of professionalism and trustworthiness, suitable for its B2B audience.

M

Mpirical Limited

mpirical.com

0

Mpirical Limited is a UK-based telecommunications training provider specializing in 5G, 4G LTE, and wireless network technologies. With over two decades of experience, the company offers certified and accredited training courses delivered online, live onsite, and on demand. Their market position is strong, supported by industry certifications such as ITP, CPD, and ISO standards, and a broad portfolio of learning aids including the proprietary NetX tool. The company targets individuals, teams, and enterprises seeking up-to-date telecoms knowledge and certification. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Hotjar, Zoho SalesIQ, and Vimeo integration. Performance is moderate to slow, with good mobile optimization and SEO practices. Security posture is good with valid SSL, SPF, and DMARC policies, but could be improved by enabling HSTS, DNSSEC, and OCSP stapling. No explicit security policy or incident response contacts were found. Overall, Mpirical demonstrates a mature digital presence with strong trust indicators and compliance with privacy regulations.

H

Hispasat

hispasat.com

0

Hispasat is a leading satellite telecommunications operator specializing in the distribution of audiovisual content in Spanish and Portuguese across Europe and Latin America. As a large enterprise and a subsidiary of Redeia, Hispasat offers a broad portfolio of satellite and data services including internet access, cellular backhaul, tele-education, and satellite programs. The website reflects a mature digital presence with multilingual support, modern UI frameworks, and a comprehensive content structure targeting telecommunications customers and partners. Technically, the infrastructure leverages Microsoft Azure hosting and AWS Route53 DNS, with a tech stack including jQuery, Bootstrap, and Google Tag Manager. Security posture is moderate with valid SSL certificates and SPF records but lacks advanced protections such as HSTS, DMARC, DNSSEC, and OCSP stapling. The site employs cookie consent mechanisms and analytics tools, indicating awareness of privacy compliance, though no explicit security or incident response policies are published. Overall, Hispasat demonstrates a professional and trustworthy online presence aligned with its market position.

1

1&1 Telecommunication SE

1und1.com

0

1&1 Telecommunication SE is a major German telecommunications provider offering a wide range of services including internet (DSL and fiber), mobile phone services, TV, and device sales. As a subsidiary of United Internet AG, it holds a strong market position with comprehensive offerings for both private and business customers. The company integrates advanced digital technologies and maintains a modern, responsive website with extensive content and user-friendly navigation. However, the current SSL configuration is invalid, which poses a security risk. The company employs multiple analytics and marketing tools, ensuring data-driven business operations while maintaining GDPR compliance through detailed privacy and cookie policies. Overall, 1&1 demonstrates a high level of digital maturity and customer trust but should address its SSL and security header deficiencies promptly.

Serveris.lv, operated by SIA Datateks, is a Latvian hosting service provider established in 2002, offering web hosting, virtual servers, SSL certificates, and server rental services. The company targets Latvian businesses and individuals requiring reliable and professional hosting solutions with 24/7 technical support. Their market position is solid within the local telecommunications sector, supported by long-term customer relationships and positive testimonials. Technically, the website runs on Apache with PHP 5.6.40, uses common JavaScript libraries like jQuery, and integrates marketing and analytics tools such as Google Analytics, Facebook Pixel, and Cookiebot for cookie consent. The SSL certificate is valid but lacks modern TLS protocol support, and security headers are minimal. No explicit privacy or security policies are published, though cookie consent is implemented. Contact information is clearly provided, including phone, email, WhatsApp, and Skype.

T

Telia Cygate Oy

teliacygate.fi

0

Telia Cygate Oy is a leading Finnish ICT service provider specializing in secure and scalable ICT solutions for businesses, public sector, finance, and industrial sectors. As part of Telia Finland Oyj's B2B division, it offers a comprehensive portfolio of ICT services including cloud, network, data center, and security services supported by a high degree of automation and 24/7 operations. The company emphasizes strong security and compliance, demonstrated by multiple ISO certifications and a robust security posture. The website reflects a mature digital infrastructure with modern analytics and consent management tools, though there is room for improvement in SSL protocol support and DNS security. Overall, Telia Cygate maintains a strong market position with trusted partnerships and a clear focus on customer service and operational continuity.

T

Telia Company

inmicsnebula.fi

0

Telia Company operates the inmicsnebula.fi website as a leading telecommunications and ICT service provider in Finland, targeting business customers with a broad portfolio of connectivity, devices, IT, security, cloud, and IoT services. The website reflects a mature digital presence with excellent content quality, consistent branding, and a comprehensive service offering. Technically, the site uses Magnolia CMS, integrates advanced analytics and marketing tools such as Datadog RUM, Google Tag Manager, and Optimizely, and employs strong security headers and cookie consent mechanisms. However, the SSL configuration lacks support for modern TLS protocols, which is a notable security gap. No direct contact emails or phone numbers are exposed; contact is primarily via web forms. Privacy and cookie policies are well documented and GDPR compliant.

N

NIFTY Corporation

nifty.com

0

NIFTY Corporation operates as a major Japanese internet service provider offering a wide range of broadband, mobile SIM, security, and media services primarily targeting Japanese consumers. The company maintains a strong market position with a comprehensive portfolio including @nifty光 broadband, NifMo mobile SIM, and various security and lifestyle services. Their digital presence is built on modern web technologies such as Next.js and is hosted via Amazon CloudFront, ensuring fast content delivery and good mobile optimization. However, the website currently lacks a valid SSL certificate, which is a critical security concern that undermines user trust and data protection. Security headers are partially implemented, but the absence of DNSSEC, CAA records, and HSTS reduces domain and transport security. The site uses multiple advertising and tracking services, with moderate user tracking and basic privacy compliance. Contact information is limited to a phone number with no visible email addresses or contact forms on the main page. Overall, the website is professionally designed with good content relevance and navigation clarity but requires urgent security improvements to protect users and enhance trust.

Telia.fi is the corporate website for Telia Company’s business segment in Finland, offering a broad range of telecommunications and ICT services tailored for enterprises and public sector customers. The site highlights key offerings such as mobile subscriptions, devices, IT services, network solutions, security, cloud, IoT, and consulting services, positioning Telia as a leading and comprehensive ICT partner in the Finnish market. The website is professionally designed with consistent branding and good content quality, targeting Finnish-speaking business customers with language options for English and Swedish. Technically, the site uses Magnolia CMS, is hosted on Sonera/Telia infrastructure, and employs modern analytics and marketing tools including Datadog RUM, Google Tag Manager, OneTrust for cookie consent, and AddSearch for search functionality. Security headers are implemented, but TLS protocols are outdated and HSTS is not fully enabled, indicating room for improvement in transport security. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms in place. Contact information is primarily via web forms, with no direct emails or phone numbers visible on the main page. Overall, the site demonstrates a mature digital presence with strong business focus but could enhance security posture and incident response transparency.

S

SES

ses.com

0

SES is a leading global satellite communications service provider operating a unique multi-orbit satellite fleet with over 70 GEO and MEO satellites. The company offers a broad range of services including video broadcast, data connectivity, and cloud integration solutions targeting industries such as commercial aviation, media, government, energy, and telecommunications. SES positions itself as a key player in satellite connectivity with a strong market presence and enterprise scale. Technically, the website is built on Drupal 11, leveraging Cloudflare CDN and Varnish caching for performance and reliability. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by structured data and comprehensive content. Security-wise, SES employs HTTPS with a valid certificate but currently lacks support for modern TLS protocols, reducing SSL effectiveness. Security headers are partially implemented, but there is no HSTS or vulnerability disclosure mechanism. Privacy policies are comprehensive and GDPR compliant, though cookie consent mechanisms are absent. Overall, SES maintains a professional and trustworthy digital presence with room for security enhancements.

The website demonstrates a generally strong security posture with no critical or high-level vulnerabilities detected, and excellent scores in SSL/TLS and network security. However, several medium-level issues indicate gaps in compliance and protective measures, particularly regarding security headers, GDPR compliance, NIS2 readiness, email authentication, and DNS security. These weaknesses could expose the business to data privacy risks, regulatory non-compliance penalties, and increased susceptibility to phishing or DNS-related attacks. While low-level issues such as missing CAA records are less urgent, addressing them will further strengthen the security framework. Prioritizing remediation of medium-risk findings will enhance overall resilience and maintain customer trust. Proactive improvements will also help ensure alignment with evolving regulatory and security standards.

V

Virgin Media O2

virginmediao2.co.uk

0

The website demonstrates a moderate security posture with no critical vulnerabilities but several high and medium severity issues that pose significant business risks. Key concerns include missing essential security headers, lack of GDPR compliance mechanisms such as cookie policies and consent banners, and absence of foundational NIS2 security governance like incident response and security policy documentation. These gaps increase exposure to web-based attacks, regulatory fines, and operational disruptions. While network security and SSL/TLS configurations are strong, DNS and email security require improvements to prevent spoofing and phishing risks. The low scores in GDPR and NIS2 compliance highlight urgent needs to align with legal and regulatory frameworks to avoid penalties and reputational damage. Addressing these issues promptly will strengthen trust, reduce liability, and protect business continuity.

T

Telefonica UK Limited

o2.com

0

The website's overall security posture shows no critical issues but reveals significant gaps in key areas such as security headers, GDPR compliance, and NIS2 regulatory adherence. High severity issues include missing essential HTTP headers that protect against common web attacks, absence of a cookie consent banner, and a lack of fundamental information security and incident response policies. While email security, SSL/TLS, DNS health, and network security are relatively strong, the deficiencies in governance and compliance expose the business to legal risks, regulatory penalties, and increased vulnerability to cyber threats. The low security header score (35/100) and poor NIS2 compliance (25/100) highlight urgent needs for improvement. Addressing these gaps will not only enhance protection against exploitation but also strengthen customer trust and regulatory standing. Prioritizing policy documentation and technical controls will reduce risk exposure and support business continuity. Overall, the assessment indicates a pressing requirement to integrate security best practices with compliance frameworks to safeguard business operations effectively.

T

Telefónica Deutschland

telefonica.de

0

The website's overall security posture demonstrates strong technical controls in network security, SSL/TLS configuration, and DNS health, with scores above 85 in these areas. However, significant compliance and governance issues are present, particularly concerning GDPR and NIS2 requirements, resulting in low scores of 18 and 25 respectively. The critical GDPR finding highlights the absence of adequate privacy measures for an EU business, posing substantial legal and financial risks. High-priority gaps include missing cookie consent mechanisms, lack of documented security and incident response policies, and absence of a formal information security framework. Email security is moderate but requires improvements to prevent spoofing and phishing attacks. While low-severity issues exist, they are overshadowed by critical compliance deficiencies that could lead to regulatory penalties and reputational damage. Immediate remediation focusing on privacy compliance and governance frameworks is essential to mitigate legal exposure and strengthen customer trust.

O

o2

o2.de

0

This website has 9 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

The website's overall security posture shows serious vulnerabilities primarily in its DNS infrastructure and compliance frameworks. While email security and SSL/TLS configurations are robust, critical DNS issues such as resolution failures and domain registration problems pose immediate operational and reputational risks. The failure to implement essential security headers and compliance with GDPR and NIS2 regulations exposes the business to potential data breaches and regulatory penalties. Medium-level concerns in network security and missing DNS security extensions further increase the attack surface. Addressing these issues promptly is vital to ensure business continuity, protect customer data, and maintain regulatory compliance. Without remediation, the organization risks service outages, data compromise, and loss of customer trust. Prioritizing DNS health and compliance will substantially improve the overall security posture. A holistic security strategy integrating technical fixes and compliance measures is recommended.

This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

This website has 3 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

This website has 4 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

M

Meridian4G

meridian4g.com

0

The website's overall security posture is significantly compromised, primarily due to the absence of HTTPS encryption, which is a critical vulnerability exposing user data to interception and undermining trust. Compliance with GDPR and NIS2 regulations is severely lacking, risking legal penalties and damage to brand reputation. While email security and network security modules score well, major gaps exist in policy documentation, incident response planning, and user privacy protections. The presence of exposed services like SSH and missing security headers further increase the attack surface. DNS security is moderate but can be improved to prevent DNS spoofing attacks. Immediate remediation is essential to safeguard customer data, ensure regulatory compliance, and maintain business continuity. Addressing these critical issues will also boost customer confidence and reduce the risk of costly breaches.

S

Sonema

sonema.com

0

The website's overall security posture is critically weak, primarily due to the complete lack of HTTPS encryption, which exposes all data transmissions to interception and undermines trust and compliance. Multiple critical and high-risk issues span security headers, GDPR compliance, and NIS2 regulatory requirements, indicating significant gaps in both technical controls and governance documentation. The absence of essential headers like Strict-Transport-Security and Content-Security-Policy increases vulnerability to common web attacks such as man-in-the-middle and cross-site scripting. Non-compliance with GDPR and NIS2, including missing privacy policies, cookie consent mechanisms, and incident response procedures, exposes the business to legal risks and potential fines. While network security and DNS health show relatively stronger scores, these cannot compensate for foundational security failures. Immediate remediation is necessary to protect sensitive data, maintain regulatory compliance, and preserve customer trust. Without urgent action, the business faces increased risk of data breaches, legal penalties, and reputational damage. Overall, the current state demands prioritized investment in encryption, policy development, and security hardening.

This website has 1 critical security issue(s) requiring immediate attention. Overall security score: 50/100 (unknown risk level). A comprehensive security review is recommended.

M

Monaco Telecom

monaco-telecom.mc

0

The website monaco-telecom.mc currently exhibits a critically weak security posture, primarily due to the absence of HTTPS encryption and essential security headers, exposing it to significant data interception, legal, and reputational risks. Additionally, non-compliance with GDPR and NIS2 regulations, alongside exposed critical services, further elevates the risk of data breaches and operational disruption.

C

Cox Communications, Inc.

coxcommunications.com

0

The website's overall security posture is undermined by critical email authentication failures and medium-level compliance issues, despite strong SSL/TLS and network security. These vulnerabilities expose the business to email spoofing, phishing, and potential regulatory non-compliance, impacting customer trust and operational integrity.

M

ManaBite

manabite.lv

0

The website https://manabite.lv exhibits significant security and compliance deficiencies, particularly related to GDPR and NIS2 regulatory requirements, putting the business at high risk of legal penalties and reputational damage. While network security appears robust, critical gaps in privacy policies, security frameworks, and email authentication protocols need immediate attention to safeguard customer data and ensure regulatory compliance.

B

Bite

bite.lv

0

The website https://www.bite.lv/ exhibits significant security and compliance gaps, particularly around GDPR compliance and foundational security controls such as headers and incident response procedures. These deficiencies expose the business to regulatory risks, reputational damage, and potential cyber threats, undermining customer trust and operational resilience.

Z

Zelta Zivtiņa

zeltazivtina.lv

0

The website https://zeltazivtina.lv exhibits significant security and compliance deficiencies, particularly in GDPR and NIS2 regulatory adherence, posing substantial legal and operational risks. While network and email security are relatively strong, critical gaps in privacy policies, incident response, and encryption standards undermine overall trustworthiness and expose the business to potential data breaches and regulatory penalties.

The website labas.lt currently presents a significant security risk, primarily due to critical GDPR compliance failures and weak information security governance under NIS2 requirements. While network security and email security show relative strengths, key vulnerabilities in privacy policies, SSL configuration, and incident response severely undermine its overall security posture and expose the business to legal and reputational risks.

The website bite.lt exhibits significant security and compliance gaps, particularly in privacy and regulatory adherence, posing substantial business and legal risks. While network and email security are relatively strong, critical deficiencies in GDPR compliance, NIS2 frameworks, and security headers undermine overall trust and expose the business to potential data breaches and regulatory penalties.

The website bitegroup.net demonstrates a generally stable network and email security posture but exhibits significant deficiencies in regulatory compliance, information security governance, and user privacy protections. Critical gaps in GDPR adherence and NIS2 framework implementation expose the business to legal, reputational, and operational risks. Addressing these compliance and policy shortcomings is essential to safeguard customer trust and ensure business continuity.

The website teliatowers.com exhibits a solid technical security foundation with strong SSL/TLS, network security, and DNS health. However, significant gaps exist in compliance-related areas such as GDPR and NIS2 frameworks, including missing privacy policies, security policies, and incident response procedures, exposing the business to legal, reputational, and operational risks.

The website https://telia.digital exhibits significant security vulnerabilities with critical gaps in security headers, GDPR compliance, and NIS2 framework adherence. Although no critical vulnerabilities were found, multiple high-risk issues such as missing security policies, exposed high-risk services, and lack of privacy and cookie policies place the business at risk of data breaches, regulatory non-compliance, and reputational damage.

The website https://teliatv.ee exhibits a concerning security posture with critical gaps in its security headers, GDPR compliance, and adherence to NIS2 framework requirements. These deficiencies expose the business to regulatory penalties, increased risk of cyberattacks, and potential damage to customer trust. Immediate remediation is essential to mitigate legal and operational risks.

The website https://telia.lv currently exhibits significant security and compliance deficiencies, particularly in GDPR adherence and SSL/TLS certificate validity, which pose substantial legal and operational risks. While network security measures appear robust, critical gaps in privacy policies, incident response readiness, and encryption undermine overall trust and expose the business to regulatory penalties and cyber threats.

The website https://telia.lt exhibits significant security and compliance gaps, particularly in privacy policy adherence and core security controls, placing the business at high regulatory and cyber risk. While network and email security are relatively strong, critical vulnerabilities in GDPR compliance, security headers, and incident response frameworks threaten customer trust and operational resilience.

The website alcom.ax demonstrates a moderate security posture with strong network and email security but significant gaps in compliance, policy documentation, and security header configurations. Critical business risks stem from non-compliance with GDPR and NIS2 requirements, exposing the organization to regulatory penalties and reputational damage. Immediate attention is needed to establish privacy policies, incident response plans, and enhance security headers to reduce vulnerability exposure.

The website https://elisa.com currently exhibits significant security gaps, particularly in web security headers, GDPR compliance, and adherence to NIS2 cybersecurity framework requirements, resulting in a high overall risk profile despite a clean critical issue count. While foundational network and email security measures are strong, the absence of key security policies and protections exposes the business to regulatory, reputational, and operational risks. Immediate remediation is necessary to safeguard customer data, ensure compliance, and maintain stakeholder trust.

The website dna.fi exhibits significant security and compliance deficiencies, particularly concerning critical HTTP security headers and GDPR compliance, exposing the business to data breaches, regulatory fines, and reputational damage. While network and TLS configurations are relatively strong, the lack of fundamental security policies and privacy controls presents urgent business risks that must be addressed promptly.