Security Directory

F

FlyPrivate

flyprivate.com

0

The website’s current security posture exhibits significant vulnerabilities that expose the business to substantial risks, particularly due to the absence of HTTPS encryption which is flagged as critical across multiple compliance frameworks including GDPR, NIS2, and SSL/TLS standards. Key security controls such as Content-Security-Policy and X-Frame-Options headers are missing, increasing the risk of web-based attacks like clickjacking and cross-site scripting. Compliance with GDPR is severely lacking, with no cookie policy or consent mechanism in place, potentially exposing the business to regulatory fines and reputational damage. Additionally, the absence of documented security policies, incident response procedures, and vulnerability disclosure mechanisms under NIS2 requirements indicates immature information security governance. While email and network security are strong points, foundational gaps in encryption and security headers undermine overall defenses. The DNS configuration is moderately healthy but could be improved with DNSSEC and CAA records. Immediate remediation is needed to protect customer data, ensure regulatory compliance, and safeguard business continuity. Without prompt action, the business faces operational disruptions, legal penalties, and loss of customer trust.

N

New Jet

newjet.com

0

The website's overall security posture is concerning, with no critical issues but numerous high and medium severity vulnerabilities that expose the business to compliance risks, data breaches, and operational disruptions. Key security headers are missing, reducing protection against common web attacks and data leakage. GDPR compliance is severely lacking, with the absence of privacy and cookie policies and consent mechanisms, exposing the company to potential regulatory fines and reputational damage. The absence of an established information security framework, incident response procedures, and security policies indicates immature security governance, which could delay response to cyber incidents. Network security is weakened by the exposure of high-risk services such as FTP and SSH, increasing the attack surface. While email security, SSL/TLS, and DNS health scores are relatively better, there remain medium risks like expiring certificates and missing DNSSEC that should be addressed. Immediate remediation and governance improvements are critical to protect customer data, ensure regulatory compliance, and maintain business continuity.