Is dataverse.nl Safe? Security Analysis for Data Archiving and Networked Services (DANS)
Check if dataverse.nl is a scam or legitimate. Free security scan and reviews.
AI Summary
DataverseNL is a well-established Dutch research data repository platform managed by Data Archiving and Networked Services (DANS) and supported by multiple academic institutions. It provides researchers with tools to store, share, and publish research data in compliance with FAIR principles, offering persistent identifiers and long-term preservation. The platform leverages institutional authentication via SURFconext and supports institutional dataverses aligned with research data management policies. Technically, the website is built on Jakarta Faces with PrimeFaces, jQuery, and Bootstrap, hosted on Dutch infrastructure with DNSSEC enabled. The platform shows moderate performance and good mobile optimization, though some accessibility and SEO improvements are possible. Analytics are implemented via internal DANS statistics and a Freshworks widget for support. Security posture is solid with HTTPS and DNSSEC, but session management via URL parameters and lack of advanced security headers like CSP are areas for improvement. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though no cookie consent mechanism was detected. The business credibility is high, supported by institutional backing, CoreTrustSeal certification, and clear contact mechanisms. Overall, DataverseNL presents a trustworthy, professional service with minor technical and security enhancements recommended to further strengthen its posture and user trust.
Detected Technologies
🧠AI Business Intelligence
Technology stack, business insights, and market analysis powered by AI.
Business Intelligence
Market & Strategic Analysis
DataverseNL occupies a strong position in the Dutch academic research data management ecosystem, serving as a shared service platform for multiple institutions. Its competitive advantage lies in institutional partnerships, integration with SURFconext for authentication, and compliance with FAIR data principles. The business model is non-profit and service-oriented, focusing on long-term preservation and accessibility of research data. Revenue streams likely come from institutional contributions and government funding. The platform targets researchers and academic institutions, with growth potential tied to increasing data management requirements and open science mandates. Partnerships with DANS, KNAW, and NWO reinforce its strategic position and credibility.
Security Posture Analysis
Comprehensive Security Assessment
The security maturity of DataverseNL is moderate to good. HTTPS and DNSSEC provide foundational protections, and the platform includes CAPTCHA-like validation on contact forms to prevent abuse. However, session IDs in URLs present a potential session fixation risk, and the absence of modern security headers such as Content Security Policy reduces defense-in-depth. There is no publicly visible vulnerability disclosure or incident response policy, which could hinder rapid response to security events. Privacy policies are comprehensive and GDPR compliant, indicating a strong data protection culture. Overall, the platform is secure for its purpose but would benefit from enhanced session management, security headers, and formalized incident response documentation.
Strategic Recommendations
Priority Actions for Security Improvement
Implement Content Security Policy (CSP) and other security headers (X-Frame-Options, X-XSS-Protection) to enhance browser security.
✨Observations
AI-powered comprehensive website and business analysis.
AI-Enhanced Website Analysis
Business Insights
Data Archiving and Networked Services (DANS)
DataverseNL is an online platform for storage, sharing, and publishing of research data, provided as a shared service by participating institutes and DANS. It facilitates FAIR data principles and supports institutional dataverses with persistent identifiers and long-term preservation.
good
consistent
Technical Stack
moderate
good
basic
basic
Security Assessment
- HTTPS enforced (implied by domain and scripts)
- DNSSEC enabled
- Use of session IDs in URLs (jsessionid) - potential risk
- No exposed sensitive data detected
- Contact form includes CAPTCHA-like human validation
Analytics & Tracking
Advertising & Marketing
Website Quality Assessment
Key Observations
Website is a professionally maintained research data repository platform.
🛡️Security Headers
HTTP security headers analysis and recommendations.
Security Headers
HTTP security headers analysis
Missing X-Frame-Options header
HIGHPrevents clickjacking attacks
Weak Referrer-Policy configuration
LOWCurrent value: "same-origin"
👤GDPR Compliance
Privacy and data protection assessment under GDPR regulations.
GDPR Compliance
Privacy and data protection assessment
No Cookie Policy found
HIGHGDPR requires clear information about cookie usage
No Cookie Consent Banner found
HIGHGDPR requires explicit consent for non-essential cookies
No Data Protection Officer mentioned
LOWLarge organizations may need to designate a DPO under GDPR
Privacy policy may not be GDPR compliant
MEDIUMPrivacy policy lacks explicit GDPR compliance elements
EU business without adequate privacy measures
CRITICALEU businesses are subject to strict GDPR requirements
GDPR Compliance Analysis
🛡️NIS2 Compliance
Network & Information Security Directive compliance assessment.
NIS2 Compliance
Network & Information Security Directive
No information security framework found
HIGHNIS2 requires documented cybersecurity and information security measures
No vulnerability disclosure policy
MEDIUMNIS2 encourages coordinated vulnerability disclosure
No security policy documentation found
HIGHNIS2 requires documented cybersecurity governance and risk management
No incident response procedures found
HIGHNIS2 requires documented incident response and business continuity plans
No security contact information
HIGHNIS2 requires clear incident reporting channels
No vulnerability reporting mechanism
MEDIUMClear vulnerability reporting supports coordinated disclosure
No NIS2 reference found
LOWConsider explicitly mentioning NIS2 compliance efforts
📧Email Security
SPF, DKIM, and DMARC validation and email security assessment.
Email Security
SPF, DKIM, and DMARC validation
No BIMI Record
LOWBIMI displays brand logos in email clients
No MTA-STS Policy
MEDIUMMTA-STS enforces TLS for email delivery
No TLS-RPT Record
LOWTLS-RPT provides reporting for email TLS issues
SPF Details
DKIM Selectors Found
DMARC Details
🏆SSL/TLS Security
Certificate validity and encryption analysis.
SSL/TLS Security
Certificate validity and encryption analysis
Weak Protocols Supported
HIGHServer supports weak protocols: TLSv1.1
OCSP Stapling Not Enabled
LOWOCSP stapling improves performance and privacy
Certificate Transparency Not Implemented
LOWCertificate is not logged in Certificate Transparency logs
Mixed Content Detected
MEDIUM1 resources loaded over insecure HTTP
Partial SSL/TLS Assessment
LOWCompleted 3 of 4 security checks due to time constraints
Protocol Support
OCSP Status
📊DNS Health
DNS configuration and security assessment.
DNS Health
DNS configuration and security assessment
DNSSEC Not Enabled
MEDIUMDNSSEC is not configured for this domain
Domain Transfer Lock Not Enabled
MEDIUMDomain can be transferred without authorization
Domain Delete Lock Not Enabled
LOWDomain can be deleted without additional verification
Domain Registration Details
- •No domain protection locks enabled
DNS Records
DNSSEC Status
DNS Performance
SPF Analysis
⚡Network Security
Port scanning and network exposure analysis.
Network Security
Port scanning and network exposure analysis
Good Network Security Posture
LOWNo unnecessary services detected on common risky ports
🔧Technical Analysis
Detailed technical findings and analysis from AI assessment.
Technical Analysis
Comprehensive security assessment findings