Is solarisbank.com a Scam? Security Check Results - Solarisbank AG

AI Summary

Solarisbank AG operates as a leading embedded finance platform in Europe, offering a comprehensive Banking-as-a-Service solution that enables businesses to integrate digital banking, payment, lending, and identification services via advanced RESTful APIs. The company holds a full German banking license, allowing it to operate seamlessly across EU countries. Solarisbank targets businesses seeking to embed financial services into their products, positioning itself as a neutral B2B2X partner with a strong market presence and trusted by major innovators such as Samsung and American Express. Technically, Solarisbank's website is built on modern frameworks including React and Gatsby, hosted on Netlify, and leverages Contentful as a CMS. The platform demonstrates excellent performance, mobile optimization, and accessibility, with a well-structured navigation and high-quality content. Analytics are implemented via piwik.pro, reflecting a moderate level of user tracking with good privacy compliance. From a security perspective, Solarisbank employs robust HTTP security headers including HSTS with preload, X-Frame-Options, and Content-Security-Policy, although the absence of enabled TLS protocols is a notable gap. The site lacks a cookie consent mechanism and a public vulnerability disclosure page, but provides clear contact channels for incident reporting and names key compliance officers, including a Money Laundering Reporting Officer. Overall, Solarisbank presents a high level of professionalism, trustworthiness, and technical maturity. Strategic recommendations include enabling modern TLS protocols, refining CSP policies, implementing cookie consent, and publishing a vulnerability disclosure policy to further enhance security posture and regulatory compliance.