Security Directory

R

RuPay

rupay.co.in

0

The website demonstrates a moderate overall security posture with no critical vulnerabilities but several high and medium-risk issues that pose significant compliance and operational risks. Key gaps are evident in GDPR compliance, including the absence of privacy and cookie policies, consent mechanisms, and third-party privacy assurances, exposing the business to legal and reputational risks. Additionally, the lack of a formal information security framework and incident response procedures indicates immature organizational security governance, increasing the risk of ineffective breach management. Weaknesses in SSL/TLS configuration and missing critical security headers reduce the site’s defense against common web-based attacks. While network security and email authentication score well, DNS and header configurations require improvement to prevent data interception and spoofing. Addressing these issues will strengthen trust with customers, ensure regulatory compliance, and reduce exposure to cyber threats. Immediate focus on compliance and security policy documentation is essential to safeguard business continuity and avoid penalties.

E

Edmond de Rothschild

edmond-de-rothschild.fr

0

The website's overall security posture is critically deficient, primarily due to the complete lack of HTTPS encryption, which exposes all data transmissions to interception and undermines user trust. Compliance with GDPR is severely lacking, with missing privacy and cookie policies, absence of a consent banner, and inadequate privacy measures for EU users, creating significant legal and reputational risks. The NIS2 compliance score is extremely low, indicating insufficient organizational security frameworks, policies, and incident response readiness, which heightens vulnerability to cyber incidents and regulatory penalties. While network security and DNS health show relatively strong results, essential protections like DNSSEC are not fully implemented. Security headers are mostly present but missing critical components such as the X-XSS-Protection header. Email security has gaps with missing DKIM records, potentially impacting email deliverability and phishing protections. Immediate remediation is needed to address encryption, privacy compliance, and governance frameworks to safeguard user data, maintain regulatory compliance, and protect business continuity. Without urgent action, the organization risks data breaches, regulatory fines, and loss of customer trust.

B

BoursoBank

boursobank-group.com

0

The website boursobank-group.com exhibits significant security and compliance weaknesses, particularly in privacy governance, security policies, and DNS configurations, resulting in an overall unknown risk score. While network security and SSL/TLS implementations are strong, critical gaps in GDPR compliance and incident response capabilities expose the business to legal, reputational, and operational risks.