What is the security score of grawe.rs?

grawe.rs scored 40 out of 100 in Guard's security assessment. This indicates an elevated risk level with significant security gaps that should be addressed.

What does GRAWE osiguranje a.d.o. do?

GRAWE osiguranje a.d.o. operates in the Finance sector based in Serbia. The website is built using TYPO3 CMS, Google Tag Manager, Google Analytics. Guard's scan analyzes the website's security infrastructure and compliance posture.

Guard's security scan evaluates grawe.rs across multiple security dimensions including SSL certificate validity, security headers, DNS configuration, email authentication (SPF, DKIM, DMARC), and regulatory compliance (GDPR, NIS2). With a score of 40/100 classified as "Elevated Risk", review the detailed findings above to make an informed assessment about the website's trustworthiness.

Is grawe.rs Safe? Score 40/100 | Guard

Q: Is grawe.rs safe to use?

Based on Guard's automated security analysis, grawe.rs received a security score of 40/100 and is classified as "Elevated Risk". GRAWE Srbija is a well-established insurance company operating in Serbia, offering a broad range of life and non-life insurance products including vehicle, property, and health-related insurance. The company is part of the larger GRAWE Group, which has a long tradition in the insurance sector. The w

Is grawe.rs Safe? Security Analysis for GRAWE osiguranje a.d.o.

http://grawe.rs

Check if grawe.rs is a scam or legitimate. Free security scan and reviews.

FinanceSerbiamedium

TYPO3 CMSGoogle Tag ManagerGoogle AnalyticsCloudfront CDNYouTube embeds

Analyzed 6/15/2025Completed 11:47:47 PM9mo ago

Security Score

HIGH RISK

Below Finance avg (78)

10,000+

Domains scanned

500+

Security teams trust us

EveryPay

Secure checkout

Instant

Reports delivered

Professional PDF & Marketing Data

Get the professional PDF report for grawe.rs

Export this security analysis as a professional PDF document, receive it via email, and access marketing intelligence data including contact emails and phone numbers. One-time purchase for lifetime access.

PDF Report & Export

PDF download, email delivery, unlock code

39.90 €one-time • Incl. 21% VAT

Marketing Intelligence

Contact emails, phone numbers & warm leads

49.90 €one-time • Incl. 21% VAT

Plan Comparison

Feature	PDF Report	Marketing+
Full security analysis
Professional PDF export
Email delivery
Lifetime access + unlock code
Contact emails & phones	—
Marketing outreach data	—

Delivery email

Already purchased?

Order summary

Domaingrawe.rs

Access tierFull report or marketing add-on

I have read and agree to the Terms & Conditions and Privacy Policy.I acknowledge the Returns & Refunds policy and understand the digital delivery terms.

Digital reports are delivered immediately after payment. By continuing you acknowledge the withdrawal waiver described in our Returns & Refunds policy.

Secure payments processed via EveryPay. Prices in EUR; Incl. 21% VAT.

SEQ SIA

Lastadijas 12 k-3, Riga, Latvia, LV-1050

Reg. No. 40203410806 • VAT LV40203410806

Support: guard@offseq.com • +371 2256 5353

AI Summary

GRAWE Srbija is a well-established insurance company operating in Serbia, offering a broad range of life and non-life insurance products including vehicle, property, and health-related insurance. The company is part of the larger GRAWE Group, which has a long tradition in the insurance sector. The website is professionally designed using TYPO3 CMS and integrates modern technologies such as Google Tag Manager and Cloudfront CDN. It provides clear navigation, comprehensive product information, and multiple contact channels including phone, email, and social media. Privacy and cookie policies are present and include consent mechanisms, indicating good compliance with GDPR requirements. However, the website suffers from a critical security issue: the SSL certificate is invalid or missing, resulting in HTTPS not being properly enabled. This significantly impacts the security posture and user trust. Security headers are well configured, but the lack of valid SSL and modern TLS protocols is a major vulnerability. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. Overall, the website is functional and credible but requires urgent remediation of SSL/TLS issues to improve security and trust.

Detected Technologies

TYPO3 CMSGoogle Tag ManagerGoogle AnalyticsCloudfront CDNYouTube embeds

11 urgent findings need attention

3 critical · 8 high

+ 3 more findings in the full report below

Continuous monitoring

Keep grawe.rs under constant watch

Guard tracks your live infrastructure daily: certificate expiry, DNS & mail authentication drift, uptime changes, subdomain inventory, and unexpected tracker or content shifts. A full timeline captures every diff so you can prove remediation and spot regressions instantly.

Security drift alerts

Risk score drops, new high-severity issues, and header hardening gaps

Compliance watch

GDPR / NIS2 posture changes with governance evidence snapshots

Infrastructure surface

Unexpected open services, SSL expiry, DNS & email authentication changes

Content & tracker intelligence

Marketing tech shifts, analytics drift, and AI recommendation updates

25 €

per month · billed securely via EveryPay

Less than 1 € / day — cheaper than a single incident response hour

Cancel anytime. Alerts sent to the contacts you choose. Unlock the full report to view historical timelines and alerts.

Purchase to access the monitoring timeline, JSON diffs, alert history, and PDF export for grawe.rs.

Security Headers

2 findings

90/100

GDPR Compliance

6 findings

0/100

NIS2 Compliance

8 findings

5/100

Email Security

1 finding

50/100

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

The company targets individual and business customers in Serbia, providing a variety of insurance products tailored to local needs. Its business model focuses on direct insurance sales and servicing through online channels and exclusive agents. The presence of multiple product lines such as GRAWE Smart, GRAWE Dom, and vehicle insurance indicates a diversified portfolio. The company leverages its parent company’s reputation and resources, enhancing market position. The website’s integration with social media platforms and use of marketing tools like Google Tag Manager suggest active digital marketing efforts. The company has a stable market presence with over 25 years in Serbia and benefits from the heritage of the GRAWE Group. There is no evidence of aggressive affiliate or retargeting programs, indicating a focus on brand integrity and customer trust.

Extracted Contact Information

Marketing Intelligence Data

Physical Addresses (1)

Bulevar Mihajla Pupina 115D, 11070 Novi Beograd, Serbia

Security Posture Analysis

Comprehensive Security Assessment

The security posture is moderate but compromised by the lack of a valid SSL certificate and absence of TLS protocol support, which are critical for secure communications. The site implements several security headers such as Content Security Policy, X-Frame-Options, and X-XSS-Protection, which help mitigate common web attacks. The cookie consent mechanism and privacy policy indicate awareness of data protection requirements. However, the missing valid HTTPS undermines user data confidentiality and integrity. No incident response or vulnerability disclosure policies are published, which could hinder timely handling of security incidents. The site does not use OCSP stapling or session resumption, which could improve security and performance. Overall, the site needs immediate SSL/TLS remediation and should consider publishing security policies to enhance trust and compliance.

Strategic Recommendations

Priority Actions for Security Improvement

Obtain and deploy a valid SSL/TLS certificate to enable HTTPS and protect user data.

Get this report delivered to your inbox

Receive a summary of the grawe.rs security findings by email. Quick and easy to share with decision makers.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

90/100

Score

Weak Referrer-Policy configuration

LOW

Current value: "same-origin"

Sensitive data may be cached

LOW

Cache-Control header should include "no-store" for sensitive pages

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

5/100

Score

No HTTPS encryption

CRITICAL

NIS2 requires appropriate technical measures including encryption

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

Need this report as a PDF?

Download the complete grawe.rs security analysis as a professional PDF. Share it with your team, clients, or stakeholders.

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

50/100

Score

Email Security Check Incomplete

MEDIUM

Some email security checks timed out

SPF

Sender Policy Framework

DKIM

DomainKeys Identified Mail

DMARC

Domain-based Message Authentication

MX Records

Mail Exchange Records

BIMI

Brand Indicators

MTA-STS

Mail Transfer Agent Security

TLS-RPT

TLS Reporting

DNSSEC

DNS Security

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

0/100

Score

No HTTPS Encryption

CRITICAL

Website does not use HTTPS encryption, making all data transmission vulnerable to interception

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

50/100

Score

DNS Health Check Incomplete

MEDIUM

Some DNS health checks timed out

DNSSEC Status

DNSSEC Not Enabled

⚡Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100

Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

How does grawe.rs compare?

grawe.rs scores below average. Browse similar domains to see how competitors handle security.

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on TYPO3 CMS, a mature and flexible content management system. It uses Amazon Cloudfront as a CDN to deliver static assets efficiently. Google Tag Manager and Google Analytics are integrated for marketing and analytics purposes. The site is mobile optimized with responsive design and accessibility features such as skip links and ARIA labels. SEO is supported by proper meta tags and Open Graph data. However, the invalid SSL certificate and lack of TLS support represent significant technical debt and risk. Performance data is not available, but the use of CDN and modern JS/CSS bundling suggests moderate to good performance. The site could benefit from performance monitoring and optimization. Overall, the technical infrastructure is solid but requires urgent security upgrades.

Professional PDF & Marketing Data