Binary Security looks like a legitimate and technically proficient Norwegian security consultancy. The main gap is the missing privacy policy and the relative newness of the domain, but nothing about the site suggests a scam. If you're considering their services, the lack of a legal page is a minor point to ask about, but their technical setup and transparency are strong.
Cross-referenced 45 live signals from Google Safe Browsing, VirusTotal, WHOIS and more on Oct 30, 2026.How we score →
Where the score comes from
We look at six areas. Here's how binarysecurity.no did in each.
92
Security
Excellent security posture: valid certificate from a major issuer, enforced modern encryption, and active browser protections. No threats from Google's Safe Browsing, and the domain has a published vulnerability disclosure policy, which is a strong plus for a security firm.
60
Identity
The site clearly presents as Binary Security AS with a Norwegian organization number, but the domain is only 2 years old and the ownership details are not publicly visible, which is typical since GDPR. The domain is registered through a trusted Norwegian registrar, and the company's details appear in their homepage and address, so this is a moderate result.
88
Reputation
The site has no blacklist or malware flags, but its traffic is too low to measure, which is not unusual for a niche consultancy. It has been archived on the Wayback Machine since 2019, suggesting the domain has a history, and it has earned positive attention on Hacker News with multiple stories, including a popular technical post. This is a solid reputation for a small business.
85
Transparency
The site is commendably transparent: it has a detailed About page, a physical address in Oslo, an organization number, contact email, and social media links. It names its services and team implicitly. This level of openness is appropriate for a professional services firm.
58
Compliance
A privacy policy and terms of service are not found. For a Norwegian B2B security consultancy, GDPR compliance is a real expectation, and the lack of a privacy policy is a moderate gap, even if the site does not currently collect personal data through forms. The site does identify its legal entity, which is a plus.
90
Infrastructure
The infrastructure is solid: DNS is securely configured with DNSSEC, email authentication is set to reject forged mail, and the site runs on Google's fast and reliable infrastructure. No technical weaknesses are apparent.
What we checked
The 45 signals behind this report.
Security & Transport
Certificate Issuer: Neutral
Google Trust Services
Certificate issued by Google Trust Services
Clickjacking Protection: Good
Present
X-Frame-Options: DENY
Content Security Policy: Good
Present
Site has Content Security Policy configured
Google Web Risk: Good
Clean
No threats detected by Google Web Risk
HSTS Header: Good
Present
Site enforces HTTPS via HSTS
Legacy TLS: Neutral
Accepted
Server still accepts TLS 1.0/1.1 from clients that ask for them, which CDNs such as Cloudflare allow by default. Browsers stopped offering these versions in 2020, so visitors connect with TLS 1.2 or later
Protective DNS: Neutral
Not blocked
Cloudflare's malware-blocking resolver (1.1.1.2) answered normally for this domain. These resolvers refuse domains their threat intelligence lists for malware or phishing, and a scam only days old often isn't listed yet. Quad9 gave no usable answer.
SSL Certificate: Good
Valid
Valid certificate, expires in 35 days
Search Cloaking: Neutral
Not detected
Neither a visitor arriving from a Google search nor Google's crawler was sent elsewhere or shown spam that a direct visit wasn't. Cloaking that checks the visitor's network address can't be seen from our server.
Site publishes a security.txt vulnerability-disclosure policy (RFC 9116) — contact: mailto:[email protected]
Identity & WHOIS
About Page: Good
Found
Site publishes an About / Team / Company page — a transparency signal that the operator is willing to describe who runs the business.
Branding: Good
Complete
Site has custom branding and social media metadata
Business Disclosure: Neutral
Not found
No dedicated legal-entity disclosure page detected — common and expected outside the EU, but required for commercial sites in Germany, France, Spain, Italy, and other EU jurisdictions.
Contact Info: Good
Found
Homepage has an email address on the site's own domain
Domain Age: Good
2 years
Domain created 2024-10-18 (2 years ago)
Legal Pages: Warning
Missing
No privacy policy or terms of service found — expected for commercial sites, normal for personal blogs and hobby projects
Registrant: Neutral
Not published
The registration record we could read names no owner. Many registrars publish no owner details at all since GDPR (2018), so this hides nothing unusual.
Registrar: Neutral
Domeneshop AS
Registered through Domeneshop AS
Infrastructure & DNS
DMARC Record: Good
p=reject
Domain enforces strict DMARC — unauthenticated mail is rejected
DNS Blacklists: Neutral
Clean
Not listed by SpamCop, Barracuda and URIBL, the blacklists that answered
DNS Resolution: Good
8 IP(s)
Resolves to: 2001:4860:4802:32::15, 2001:4860:4802:34::15, 2001:4860:4802:36::15, 2001:4860:4802:38::15, 216.239.32.21, 216.239.34.21, 216.239.36.21, 216.239.38.21
DNSSEC: Good
Enabled
Domain is signed and validated by DNSSEC
DNSSEC: Good
signedDelegation
DNSSEC status from WHOIS
Email (MX Records): Good
5 record(s)
Mail servers: aspmx.l.google.com., alt2.aspmx.l.google.com., alt1.aspmx.l.google.com., alt4.aspmx.l.google.com., alt3.aspmx.l.google.com.
Hosting Network (ASN): Neutral
AS15169 GOOGLE
Hosted on: AS15169 GOOGLE (US)
Name Servers: Neutral
4 server(s)
DNS providers: ns-cloud-a1.googledomains.com., ns-cloud-a2.googledomains.com., ns-cloud-a3.googledomains.com., ns-cloud-a4.googledomains.com.
Page Load Time: Neutral
111ms
Fast page load, timed once from our server in Europe including the DNS lookup, connection setup and any redirects
SPF Record: Good
Present
Domain has SPF email authentication configured
Reputation & Reach
Hacker News: Good
6 stories since 2025
Hacker News readers upvoted links to this site in 2 different years between 2025 and 2026. The most upvoted, "Azure's Weakest Link – Five Full Cross-Tenant Compromises" (2026), got 165 points.
Open Graph Type: Neutral
website
og:type declared as website
Page Description: Neutral
Binary Security is a Norwegian information security consultancy company. We are specialists at application security, pen...
Binary Security is a Norwegian information security consultancy company. We are specialists at application security, penetration testing and secure code reviews.
Page Title: Neutral
Binary Security | Home
Real Visitor Traffic: Neutral
Too few to measure
Google's Chrome UX Report has no data for this site: fewer distinct real Chrome users visited over the last 28 days than it needs before publishing. That is normal for small, new or niche sites.
Schema Description: Neutral
Binary Security is a Norwegian information security consultancy company. We are specialists at application security, pen...
Binary Security is a Norwegian information security consultancy company. We are specialists at application security, penetration testing and secure code reviews.
Schema Name: Neutral
Binary Security AS
Sitemap: Good
26 pages
Site maintains a proper sitemap with 26 indexed pages
Social Media Presence: Good
2 platforms
Homepage links to profiles on X, LinkedIn
Structured Data: Good
Found
Site uses structured data identifying itself as: WebSite
Tranco Rank: Neutral
Not ranked
This site is not in the top 1 million most visited websites — this is normal for small or new businesses
Web Archive History: Good
7 years
Earliest archive snapshot from 20190809
Website Status: Good
Online
Website is live and responding
robots.txt: Good
Present
robots.txt has 3 directives and references a sitemap
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Binary Security presents itself as a Norwegian information security consultancy, offering penetration testing and application security. Our check found a technically strong site with solid encryption, clean web safety records, and a history of technical posts well-regarded on Hacker News. The company clearly identifies itself with a physical address and organization number, which is a good sign for a business where trust is essential.
However, the domain itself is only two years old, which is worth noting for a firm that seems to have been around longer. More importantly for a privacy-conscious audience, the site lacks a dedicated privacy policy and terms of service. For a B2B consultancy that likely handles sensitive data, that's a gap that would make us ask questions about their legal compliance before engaging.
Our verdict: mostly safe. The signals point to a real, capable team rather than a fake operation. The missing legal pages are the main reason we don't give it a full 'trusted' rating. Before signing a contract, you might want to request their GDPR documentation directly. As always, look for independent reviews and case studies beyond the site itself.