Security Directory

C

Cleartrip

cleartrip.ae

0

The website demonstrates a moderate security posture with no critical vulnerabilities but multiple high and medium risks predominantly related to policy, compliance, and configuration gaps. Key deficiencies exist in compliance with GDPR and NIS2 regulations, including the absence of privacy and cookie policies, consent mechanisms, and formal security frameworks or incident response procedures. Missing security headers such as Content-Security-Policy and X-Content-Type-Options increase the risk of client-side attacks like XSS and MIME sniffing. While the network security and SSL/TLS configurations are generally strong, several foundational controls including email authentication (DKIM), DNSSEC, and security documentation are lacking or insufficient. These gaps expose the business to regulatory fines, reputational damage, and potential operational disruption. Immediate remediation will improve legal compliance, reduce attack surface, and build stakeholder trust. Establishing formal security governance and transparency will be crucial for long-term resilience and regulatory adherence. Overall, the organization should prioritize closing compliance and configuration deficiencies to strengthen its cybersecurity maturity and protect customer data effectively.

M

Momondo

momondo.com

0

Momondo.com currently exhibits significant security and compliance gaps, particularly in web security headers, GDPR compliance, and organizational security policies, resulting in an overall unknown risk score. While network and email security are strong, the absence of critical security controls and documentation exposes the business to data breaches, regulatory penalties, and operational risks. Immediate remediation is necessary to protect customer data, ensure regulatory compliance, and maintain brand trust.

K

KAYAK

cheapflights.com

0

Cheapflights.com exhibits significant security gaps, particularly in foundational web security headers, data privacy compliance, and organizational security policies, which collectively expose the business to legal, reputational, and operational risks. While network and DNS security appear solid, the absence of critical protections and policies undermines overall trust and resilience against cyber threats.

A

Aviasales.ru

aviasales.ua

0

The website aviasales.ua demonstrates a moderate overall security posture with strong network, email, SSL/TLS, and DNS configurations but significant gaps in security headers, GDPR compliance, and NIS2 cybersecurity framework implementation. These deficiencies expose the business to regulatory risks, potential data breaches, and diminished user trust, impacting its reputation and legal standing. Immediate remediation is recommended to align with industry best practices and legal requirements.

A

Aviasales.ru

aviasales.com

0

Aviasales.com currently exhibits significant security and compliance gaps, particularly in web security headers, GDPR compliance, and NIS2 regulatory adherence, which could expose the business to data breaches, regulatory fines, and reputational damage. While network and email security are strong, critical controls like security policies, incident response, and user privacy mechanisms need urgent attention to safeguard customer trust and ensure legal compliance.

A

Aviasales.ru

aviasales.by

0

Aviasales.by demonstrates a strong network and email security posture but exhibits significant gaps in web security headers, privacy compliance, and incident management frameworks, resulting in elevated business risk. Critical deficiencies in GDPR compliance and absence of security policies expose the site to regulatory penalties and potential data breaches. Addressing these foundational security and compliance issues will substantially enhance trust and resilience.