{"id":15337,"date":"2026-09-20T18:56:04","date_gmt":"2026-09-20T23:56:04","guid":{"rendered":"https:\/\/urbadigital.com\/?p=15337"},"modified":"2026-09-20T18:58:44","modified_gmt":"2026-09-20T23:58:44","slug":"justice-healthcare-and-a-score-of-27-what-we-found-scanning-ecuadors-most-sensitive-public-portals","status":"publish","type":"post","link":"https:\/\/urbadigital.com\/es\/blog\/justice-healthcare-and-a-score-of-27-what-we-found-scanning-ecuadors-most-sensitive-public-portals\/","title":{"rendered":"Justice, Healthcare, and a Score of 27: What We Found Scanning Ecuador&#8217;s Most Sensitive Public Portals"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"15337\" class=\"elementor elementor-15337\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1ca9df0 e-flex e-con-boxed e-con e-parent\" data-id=\"1ca9df0\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-677277a elementor-widget elementor-widget-html\" data-id=\"677277a\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"html.default\">\n\t\t\t\t\t<link rel=\"preconnect\" href=\"https:\/\/fonts.googleapis.com\">\r\n<link rel=\"preconnect\" href=\"https:\/\/fonts.gstatic.com\" crossorigin>\r\n<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Rubik:wght@300;400;500;600;700&family=Inter:wght@300;400;500;600;700&family=Nunito:wght@300;400;500;600;700&family=Raleway:wght@400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap\" rel=\"stylesheet\">\r\n<style>\r\n\r\n  .blog-portales-pub {\r\n    background: transparent;\r\n    color: #FFFFFF;\r\n    font-family: 'Nunito', -apple-system, sans-serif;\r\n    font-weight: 400;\r\n    line-height: 1.8;\r\n    -webkit-font-smoothing: antialiased;\r\n    overflow-x: hidden;\r\n  }\r\n\r\n  .blog-portales-pub {\r\n    --bg: #0F0F1E;\r\n    --bg-elev: #16162F;\r\n    --bg-card: #1D1D3E;\r\n    --border: rgba(255, 255, 255, 0.08);\r\n    --border-strong: rgba(255, 255, 255, 0.14);\r\n    --text: #FFFFFF;\r\n    --text-muted: #C0C0C0;\r\n    --text-dim: #858599;\r\n    --good: #4ADE80;\r\n    --good-bg: rgba(74, 222, 128, 0.12);\r\n    --warn: #FBB040;\r\n    --warn-bg: rgba(251, 176, 64, 0.12);\r\n    --bad: #F87171;\r\n    --bad-bg: rgba(248, 113, 113, 0.12);\r\n    --accent: #FBB040;\r\n    --accent-soft: rgba(251, 176, 64, 0.15);\r\n    --info: #60A5FA;\r\n  }\r\n\r\n  .blog-portales-pub *, .blog-portales-pub *::before, .blog-portales-pub *::after {\r\n    box-sizing: border-box;\r\n    margin: 0;\r\n    padding: 0;\r\n  }\r\n\r\n  .blog-portales-pub .wrap {\r\n    max-width: 800px;\r\n    margin: 0 auto;\r\n    padding: 0 24px;\r\n  }\r\n\r\n  \/* \u2500\u2500 NAV \u2500\u2500 *\/\r\n  .blog-portales-pub .nav {\r\n    position: sticky; top: 0; z-index: 100;\r\n    background: rgba(15, 15, 30, 0.85);\r\n    backdrop-filter: blur(20px);\r\n    -webkit-backdrop-filter: blur(20px);\r\n    border-bottom: 1px solid rgba(255, 255, 255, 0.08);\r\n  }\r\n  .blog-portales-pub .nav-inner {\r\n    display: flex; align-items: center; justify-content: space-between;\r\n    max-width: 800px; margin: 0 auto; padding: 18px 24px;\r\n  }\r\n  .blog-portales-pub .nav-brand {\r\n    font-family: 'Rubik', sans-serif;\r\n    font-size: 18px; font-weight: 500;\r\n    letter-spacing: -0.01em;\r\n    text-decoration: none;\r\n    color: #FFFFFF;\r\n  }\r\n  .blog-portales-pub .nav-brand span { color: #FBB040; }\r\n  .blog-portales-pub .nav-meta {\r\n    font-family: 'Inter', sans-serif;\r\n    font-size: 15px; font-weight: 400;\r\n    color: #ECECEC;\r\n    letter-spacing: 0.9px;\r\n    text-transform: uppercase;\r\n  }\r\n\r\n  \/* \u2500\u2500 HEADER \u2500\u2500 *\/\r\n  .blog-portales-pub .blog-header {\r\n    padding: 70px 0 45px;\r\n    border-bottom: 1px solid rgba(255, 255, 255, 0.08);\r\n  }\r\n  .blog-portales-pub .eyebrow {\r\n    font-family: 'Raleway', sans-serif;\r\n    font-size: 11px; font-weight: 700;\r\n    letter-spacing: 0.2em;\r\n    text-transform: uppercase;\r\n    color: #FBB040;\r\n    margin-bottom: 18px;\r\n    display: inline-block;\r\n  }\r\n  .blog-portales-pub .blog-title {\r\n    font-family: 'Rubik', sans-serif;\r\n    font-size: clamp(32px, 5.5vw, 46px);\r\n    font-weight: 500;\r\n    line-height: 1.25;\r\n    letter-spacing: -0.02em;\r\n    color: #FFFFFF;\r\n    margin-bottom: 24px;\r\n  }\r\n  .blog-portales-pub .blog-meta-bar {\r\n    display: flex; flex-wrap: wrap; gap: 16px;\r\n    font-family: 'Inter', sans-serif;\r\n    font-size: 13px; color: #858599;\r\n    align-items: center; margin-top: 24px;\r\n  }\r\n  .blog-portales-pub .blog-meta-bar span { display: inline-flex; align-items: center; gap: 6px; }\r\n  .blog-portales-pub .blog-meta-bar .author { color: #C0C0C0; font-weight: 500; }\r\n  .blog-portales-pub .blog-meta-bar .separator { color: rgba(255,255,255,0.14); }\r\n\r\n  \/* \u2500\u2500 SCORE BAND \u2500\u2500 *\/\r\n  .blog-portales-pub .score-band {\r\n    background: #16162F;\r\n    border-top: 1px solid rgba(255, 255, 255, 0.06);\r\n    border-bottom: 3px solid #FBB040;\r\n    margin-bottom: 0;\r\n  }\r\n  .blog-portales-pub .score-band-in {\r\n    max-width: 800px; margin: 0 auto;\r\n    padding: 28px 24px;\r\n    display: grid; grid-template-columns: repeat(4, 1fr);\r\n  }\r\n  .blog-portales-pub .sbi {\r\n    padding: 8px 16px;\r\n    border-right: 1px solid rgba(255, 255, 255, 0.07);\r\n    text-align: center;\r\n  }\r\n  .blog-portales-pub .sbi:last-child { border-right: none; }\r\n  .blog-portales-pub .sbi-n {\r\n    font-family: 'Rubik', sans-serif;\r\n    font-size: 2rem; color: #FBB040;\r\n    line-height: 1; margin-bottom: 6px;\r\n    font-weight: 500;\r\n  }\r\n  .blog-portales-pub .sbi-l {\r\n    font-size: 11px; color: rgba(255, 255, 255, 0.42);\r\n    line-height: 1.4;\r\n    font-family: 'Inter', sans-serif;\r\n  }\r\n\r\n  \/* \u2500\u2500 CONTENT \u2500\u2500 *\/\r\n  .blog-portales-pub .blog-content {\r\n    padding: 56px 0;\r\n    font-size: 18px;\r\n  }\r\n  .blog-portales-pub .blog-content p {\r\n    margin-bottom: 26px;\r\n    color: #C0C0C0;\r\n  }\r\n  .blog-portales-pub .blog-content strong { color: #FFFFFF; font-weight: 600; }\r\n  .blog-portales-pub .blog-content code {\r\n    font-family: 'JetBrains Mono', monospace;\r\n    background: rgba(255,255,255,0.06);\r\n    padding: 2px 7px; border-radius: 4px;\r\n    font-size: 0.85em; color: #FBB040;\r\n  }\r\n  .blog-portales-pub .blog-content h2 {\r\n    font-family: 'Rubik', sans-serif;\r\n    font-size: 30px; font-weight: 500;\r\n    margin: 52px 0 24px;\r\n    color: #FFFFFF;\r\n    letter-spacing: -0.018em; line-height: 1.3;\r\n  }\r\n  .blog-portales-pub .blog-content h2::after {\r\n    content: '';\r\n    display: block;\r\n    width: 45px; height: 3px;\r\n    background: #FBB040;\r\n    margin-top: 10px; border-radius: 2px;\r\n  }\r\n  .blog-portales-pub .blog-content h3 {\r\n    font-family: 'Rubik', sans-serif;\r\n    font-size: 22px; font-weight: 500;\r\n    margin: 36px 0 18px;\r\n    color: #FFFFFF;\r\n  }\r\n  .blog-portales-pub .blog-content ul {\r\n    list-style: none; margin-bottom: 32px; padding-left: 4px;\r\n  }\r\n  .blog-portales-pub .blog-content ul li {\r\n    position: relative; padding-left: 28px;\r\n    margin-bottom: 14px; color: #C0C0C0; font-size: 17px;\r\n  }\r\n  .blog-portales-pub .blog-content ul li::before {\r\n    content: '';\r\n    position: absolute; left: 6px; top: 10px;\r\n    width: 6px; height: 6px;\r\n    background: #FBB040; border-radius: 50%;\r\n  }\r\n  .blog-portales-pub .blog-content ol {\r\n    margin-bottom: 32px; padding-left: 20px; color: #C0C0C0;\r\n  }\r\n  .blog-portales-pub .blog-content ol li {\r\n    margin-bottom: 14px; padding-left: 8px; font-size: 17px;\r\n  }\r\n\r\n  \/* \u2500\u2500 NOTE BOX \u2500\u2500 *\/\r\n  .blog-portales-pub .note-box {\r\n    background: #16162F;\r\n    border: 1px solid rgba(255, 255, 255, 0.08);\r\n    border-left: 4px solid #60A5FA;\r\n    border-radius: 0 12px 12px 0;\r\n    padding: 22px 28px;\r\n    margin: 32px 0;\r\n    font-size: 15px; color: #C0C0C0; line-height: 1.65;\r\n  }\r\n  .blog-portales-pub .note-box strong { color: #FFFFFF; display: block; margin-bottom: 8px; }\r\n\r\n  \/* \u2500\u2500 RESULTS TABLE \u2500\u2500 *\/\r\n  .blog-portales-pub .tbl-wrap { margin: 28px 0; overflow-x: auto; }\r\n  .blog-portales-pub table { width: 100%; border-collapse: collapse; font-size: 14px; }\r\n  .blog-portales-pub th {\r\n    background: rgba(255,255,255,0.04);\r\n    color: rgba(255,255,255,0.5);\r\n    font-family: 'JetBrains Mono', monospace;\r\n    font-size: 11px; font-weight: 500;\r\n    letter-spacing: 0.06em;\r\n    padding: 10px 14px; text-align: left;\r\n    border-bottom: 1px solid rgba(255,255,255,0.08);\r\n  }\r\n  .blog-portales-pub td {\r\n    padding: 12px 14px;\r\n    border-bottom: 1px solid rgba(255,255,255,0.05);\r\n    color: #C0C0C0; vertical-align: middle;\r\n  }\r\n  .blog-portales-pub tr:last-child td { border-bottom: none; }\r\n  .blog-portales-pub tr:nth-child(even) td { background: rgba(255,255,255,0.015); }\r\n  .blog-portales-pub td strong { color: #FFFFFF; }\r\n  .blog-portales-pub .srv { font-size: 12px; color: #858599; font-family: 'JetBrains Mono', monospace; }\r\n  .blog-portales-pub .grade {\r\n    display: inline-flex; align-items: center; justify-content: center;\r\n    width: 30px; height: 30px; border-radius: 6px;\r\n    font-family: 'Rubik', sans-serif; font-weight: 700; font-size: 14px;\r\n  }\r\n  .blog-portales-pub .gF { background: rgba(248,113,113,0.15); color: #F87171; border: 1px solid rgba(248,113,113,0.3); }\r\n  .blog-portales-pub .gD { background: rgba(251,176,64,0.12); color: #FBB040; border: 1px solid rgba(251,176,64,0.3); }\r\n  .blog-portales-pub .gB { background: rgba(74,222,128,0.12); color: #4ADE80; border: 1px solid rgba(74,222,128,0.3); }\r\n  .blog-portales-pub .score { font-weight: 700; text-align: center; font-family: 'Rubik', sans-serif; }\r\n  .blog-portales-pub .sF { color: #F87171; }\r\n  .blog-portales-pub .sD { color: #FBB040; }\r\n  .blog-portales-pub .sB { color: #4ADE80; }\r\n  .blog-portales-pub .lbadge {\r\n    font-size: 11px;\r\n    background: rgba(248,113,113,0.1);\r\n    color: #F87171;\r\n    border: 1px solid rgba(248,113,113,0.25);\r\n    padding: 3px 9px; border-radius: 10px; white-space: nowrap;\r\n  }\r\n\r\n  \/* \u2500\u2500 CHART \u2500\u2500 *\/\r\n  .blog-portales-pub .chart-wrap {\r\n    background: #16162F;\r\n    border: 1px solid rgba(255,255,255,0.08);\r\n    border-radius: 16px;\r\n    padding: 30px; margin: 40px 0;\r\n  }\r\n  .blog-portales-pub .chart-title {\r\n    font-family: 'Rubik', sans-serif;\r\n    font-size: 17px; font-weight: 500;\r\n    color: #FFFFFF; margin-bottom: 6px;\r\n  }\r\n  .blog-portales-pub .chart-sub {\r\n    font-size: 12px; color: #858599;\r\n    font-family: 'Inter', sans-serif;\r\n    margin-bottom: 28px;\r\n  }\r\n  .blog-portales-pub .chart-body { display: flex; flex-direction: column; gap: 14px; position: relative; }\r\n  .blog-portales-pub .bar-entry { display: flex; align-items: center; gap: 14px; }\r\n  .blog-portales-pub .bar-meta { display: flex; align-items: center; gap: 10px; width: 220px; flex-shrink: 0; }\r\n  .blog-portales-pub .bar-name { font-size: 13px; color: #C0C0C0; line-height: 1.3; flex: 1; font-family: 'Inter', sans-serif; }\r\n  .blog-portales-pub .bar-track {\r\n    flex: 1; height: 28px;\r\n    background: rgba(255,255,255,0.03);\r\n    border-radius: 6px;\r\n    border: 1px solid rgba(255,255,255,0.06);\r\n    position: relative; overflow: visible;\r\n  }\r\n  .blog-portales-pub .bar-fill {\r\n    height: 100%; border-radius: 5px;\r\n    display: flex; align-items: center;\r\n    position: relative; min-width: 3px;\r\n  }\r\n  .blog-portales-pub .bf-F { background: linear-gradient(90deg, #EF4444, #F87171); }\r\n  .blog-portales-pub .bf-D { background: linear-gradient(90deg, #D97706, #FBB040); }\r\n  .blog-portales-pub .bf-B { background: linear-gradient(90deg, #16A34A, #4ADE80); }\r\n  .blog-portales-pub .bar-val {\r\n    position: absolute; right: -32px;\r\n    font-size: 12px; font-weight: 700;\r\n    font-family: 'JetBrains Mono', monospace;\r\n    white-space: nowrap;\r\n  }\r\n  .blog-portales-pub .bf-F .bar-val { color: #F87171; }\r\n  .blog-portales-pub .bf-D .bar-val { color: #FBB040; }\r\n  .blog-portales-pub .bf-B .bar-val { color: #4ADE80; }\r\n  .blog-portales-pub .bar-zero {\r\n    position: absolute; left: 8px; top: 50%;\r\n    transform: translateY(-50%);\r\n    font-size: 12px; font-weight: 700;\r\n    color: #F87171;\r\n    font-family: 'JetBrains Mono', monospace;\r\n  }\r\n  .blog-portales-pub .bar-pass-label {\r\n    position: absolute; right: -56px; top: 50%;\r\n    transform: translateY(-50%);\r\n    font-size: 11px; color: #4ADE80; font-weight: 500;\r\n    white-space: nowrap;\r\n  }\r\n  .blog-portales-pub .chart-legend {\r\n    display: flex; gap: 16px; flex-wrap: wrap;\r\n    margin-top: 20px; padding-top: 16px;\r\n    border-top: 1px solid rgba(255,255,255,0.06);\r\n    font-size: 12px; color: #858599;\r\n    font-family: 'Inter', sans-serif;\r\n  }\r\n  .blog-portales-pub .leg-item { display: flex; align-items: center; gap: 6px; }\r\n  .blog-portales-pub .leg-dot { width: 10px; height: 10px; border-radius: 2px; }\r\n  .blog-portales-pub .leg-dsh { width: 16px; height: 0; border-top: 2px dashed rgba(251,176,64,0.6); }\r\n\r\n  \/* \u2500\u2500 HEADERS GRID \u2500\u2500 *\/\r\n  .blog-portales-pub .hdr-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 12px; margin: 28px 0; }\r\n  .blog-portales-pub .hc {\r\n    background: #16162F;\r\n    border: 1px solid rgba(255,255,255,0.08);\r\n    border-radius: 12px;\r\n    padding: 20px 22px;\r\n  }\r\n  .blog-portales-pub .hc.c { border-color: rgba(248,113,113,0.3); background: rgba(248,113,113,0.06); }\r\n  .blog-portales-pub .hc.w { border-color: rgba(251,176,64,0.3); background: rgba(251,176,64,0.06); }\r\n  .blog-portales-pub .hc-name {\r\n    font-family: 'Inter', sans-serif;\r\n    font-size: 12px; font-weight: 600;\r\n    color: #FFFFFF; margin-bottom: 6px;\r\n  }\r\n  .blog-portales-pub .hc-n {\r\n    font-family: 'Rubik', sans-serif;\r\n    font-size: 1.6rem; font-weight: 600; line-height: 1;\r\n  }\r\n  .blog-portales-pub .hc.c .hc-n { color: #F87171; }\r\n  .blog-portales-pub .hc.w .hc-n { color: #FBB040; }\r\n  .blog-portales-pub .hc-d { font-size: 13px; color: #858599; margin-top: 8px; line-height: 1.5; }\r\n\r\n  \/* \u2500\u2500 PHP BOX \u2500\u2500 *\/\r\n  .blog-portales-pub .php-box {\r\n    background: rgba(251,176,64,0.06);\r\n    border: 1px solid rgba(251,176,64,0.25);\r\n    border-left: 4px solid #FBB040;\r\n    border-radius: 0 12px 12px 0;\r\n    padding: 22px 28px;\r\n    margin: 28px 0;\r\n    font-size: 15px; color: #C0C0C0; line-height: 1.65;\r\n  }\r\n  .blog-portales-pub .php-box strong {\r\n    display: block; margin-bottom: 8px;\r\n    font-family: 'JetBrains Mono', monospace;\r\n    font-size: 11px; letter-spacing: 0.1em;\r\n    text-transform: uppercase; color: #FBB040;\r\n  }\r\n\r\n  \/* \u2500\u2500 PULL QUOTE \u2500\u2500 *\/\r\n  .blog-portales-pub .pull {\r\n    background: rgba(251,176,64,0.05);\r\n    border-left: 4px solid #FBB040;\r\n    border-radius: 0 12px 12px 0;\r\n    padding: 20px 28px;\r\n    margin: 32px 0;\r\n  }\r\n  .blog-portales-pub .pull p {\r\n    margin: 0;\r\n    font-family: 'Rubik', sans-serif;\r\n    font-size: 20px; font-style: italic;\r\n    color: #FFFFFF; line-height: 1.5;\r\n  }\r\n\r\n  \/* \u2500\u2500 LOPDP BOX \u2500\u2500 *\/\r\n  .blog-portales-pub .legal-callout {\r\n    background: #16162F;\r\n    border-left: 4px solid #60A5FA;\r\n    border-radius: 0 12px 12px 0;\r\n    padding: 26px 30px;\r\n    margin: 36px 0;\r\n    border-top: 1px solid rgba(255,255,255,0.08);\r\n    border-right: 1px solid rgba(255,255,255,0.08);\r\n    border-bottom: 1px solid rgba(255,255,255,0.08);\r\n  }\r\n  .blog-portales-pub .legal-callout.warning { border-left-color: #FBB040; }\r\n  .blog-portales-pub .legal-callout.danger { border-left-color: #F87171; }\r\n  .blog-portales-pub .legal-callout-title {\r\n    font-family: 'JetBrains Mono', monospace;\r\n    font-size: 11px; font-weight: 500;\r\n    letter-spacing: 0.12em; text-transform: uppercase;\r\n    color: #60A5FA; margin-bottom: 10px;\r\n  }\r\n  .blog-portales-pub .legal-callout.warning .legal-callout-title { color: #FBB040; }\r\n  .blog-portales-pub .legal-callout.danger .legal-callout-title { color: #F87171; }\r\n  .blog-portales-pub .legal-callout h4 {\r\n    font-family: 'Rubik', sans-serif;\r\n    font-size: 18px; font-weight: 500;\r\n    margin-bottom: 10px; color: #FFFFFF;\r\n  }\r\n  .blog-portales-pub .legal-callout p {\r\n    margin-bottom: 12px; font-size: 15px; line-height: 1.65;\r\n  }\r\n  .blog-portales-pub .legal-callout p:last-child { margin-bottom: 0; }\r\n  .blog-portales-pub .legal-callout strong { color: #FFFFFF; }\r\n\r\n  \/* \u2500\u2500 PRECEDENT BOX \u2500\u2500 *\/\r\n  .blog-portales-pub .precedent-box {\r\n    background: linear-gradient(135deg, rgba(248,113,113,0.06), transparent);\r\n    border: 1px solid rgba(248,113,113,0.15);\r\n    border-left: 4px solid #F87171;\r\n    border-radius: 12px;\r\n    padding: 26px; margin: 36px 0;\r\n  }\r\n  .blog-portales-pub .precedent-box h4 {\r\n    font-family: 'Rubik', sans-serif;\r\n    font-size: 18px; font-weight: 500;\r\n    color: #F87171; margin-bottom: 10px;\r\n  }\r\n  .blog-portales-pub .precedent-box p {\r\n    margin-bottom: 0; font-size: 15px; line-height: 1.65;\r\n  }\r\n\r\n  \/* \u2500\u2500 METHOD BOX \u2500\u2500 *\/\r\n  .blog-portales-pub .method-box {\r\n    background: #16162F;\r\n    border: 1px solid rgba(255,255,255,0.08);\r\n    border-radius: 12px;\r\n    padding: 22px 28px; margin: 32px 0;\r\n    font-size: 14px; color: #858599; line-height: 1.7;\r\n    font-family: 'Inter', sans-serif;\r\n  }\r\n  .blog-portales-pub .method-box strong { color: #C0C0C0; }\r\n\r\n  \/* \u2500\u2500 DIVIDER \u2500\u2500 *\/\r\n  .blog-portales-pub hr {\r\n    border: none;\r\n    border-top: 1px solid rgba(255,255,255,0.07);\r\n    margin: 40px 0;\r\n  }\r\n\r\n  \/* \u2500\u2500 SPECIAL MENTION \/ CTA \u2500\u2500 *\/\r\n  .blog-portales-pub .special-mention-box {\r\n    background: linear-gradient(135deg, rgba(22,22,47,0.4), rgba(251,176,64,0.02));\r\n    border: 1px solid rgba(251,176,64,0.2);\r\n    border-radius: 12px;\r\n    padding: 28px 32px; margin: 48px 0 0;\r\n    transition: all 0.3s ease;\r\n    position: relative; overflow: hidden;\r\n  }\r\n  .blog-portales-pub .special-mention-box::before {\r\n    content: '';\r\n    position: absolute; top: 0; left: 0; right: 0; height: 3px;\r\n    background: #FBB040;\r\n  }\r\n  .blog-portales-pub .special-mention-box:hover {\r\n    border-color: rgba(251,176,64,0.4);\r\n    transform: translateY(-2px);\r\n    box-shadow: 0 12px 30px rgba(0,0,0,0.25);\r\n  }\r\n  .blog-portales-pub .special-mention-title {\r\n    font-family: 'Raleway', sans-serif;\r\n    font-size: 12px; font-weight: 700;\r\n    letter-spacing: 0.15em; text-transform: uppercase;\r\n    color: #FBB040; margin-bottom: 14px;\r\n  }\r\n  .blog-portales-pub .special-mention-box h2 {\r\n    font-family: 'Rubik', sans-serif;\r\n    font-size: 22px; font-weight: 500;\r\n    color: #FFFFFF; margin: 0 0 12px;\r\n  }\r\n  .blog-portales-pub .special-mention-box h2::after { display: none; }\r\n  .blog-portales-pub .special-mention-box p {\r\n    font-size: 15px; color: #C0C0C0; line-height: 1.7; margin-bottom: 16px;\r\n  }\r\n  .blog-portales-pub .special-mention-box p:last-child { margin-bottom: 0; }\r\n  .blog-portales-pub .special-mention-box a {\r\n    display: inline-block;\r\n    background: #FBB040; color: #0F0F1E;\r\n    font-family: 'Inter', sans-serif;\r\n    font-weight: 700; font-size: 14px;\r\n    padding: 10px 22px; border-radius: 8px;\r\n    text-decoration: none; transition: all 0.2s ease;\r\n  }\r\n  .blog-portales-pub .special-mention-box a:hover { background: #FFD080; }\r\n\r\n  \/* \u2500\u2500 FOOTER META \u2500\u2500 *\/\r\n  .blog-portales-pub .art-foot {\r\n    padding: 32px 0;\r\n    border-top: 1px solid rgba(255,255,255,0.07);\r\n    display: flex; align-items: flex-start; gap: 24px; flex-wrap: wrap;\r\n    margin-top: 16px;\r\n  }\r\n  .blog-portales-pub .af-author { flex: 1; min-width: 180px; }\r\n  .blog-portales-pub .af-name { font-weight: 600; font-size: 14px; color: #FFFFFF; }\r\n  .blog-portales-pub .af-role { font-size: 13px; color: #858599; }\r\n  .blog-portales-pub .af-tags { display: flex; gap: 6px; flex-wrap: wrap; padding-top: 4px; }\r\n  .blog-portales-pub .tag {\r\n    font-size: 12px;\r\n    border: 1px solid rgba(255,255,255,0.1);\r\n    color: #858599;\r\n    padding: 4px 12px; border-radius: 20px;\r\n    font-family: 'Inter', sans-serif;\r\n  }\r\n\r\n  @media (max-width: 640px) {\r\n    .blog-portales-pub .score-band-in { grid-template-columns: repeat(2, 1fr); }\r\n    .blog-portales-pub .sbi:nth-child(2) { border-right: none; }\r\n    .blog-portales-pub .hdr-grid { grid-template-columns: 1fr; }\r\n    .blog-portales-pub .blog-title { font-size: 28px; }\r\n    .blog-portales-pub .bar-meta { width: 130px; }\r\n    .blog-portales-pub .bar-name { font-size: 11px; }\r\n    .blog-portales-pub .bar-pass-label { display: none; }\r\n    .blog-portales-pub .special-mention-box { padding: 22px 20px; }\r\n  }\r\n\r\n<\/style>\r\n\r\n<div class=\"blog-portales-pub\">\r\n\r\n  <!-- HEADER -->\r\n  <header class=\"blog-header\">\r\n    <div class=\"wrap\">\r\n      <div class=\"eyebrow\">Web Security \/ Public Sector \u00b7 HTTP Observatory \u00b7 September 20, 2026<\/div>\r\n      <h1 class=\"blog-title\">Justice, Healthcare, and a Score of 27: What We Found Scanning Ecuador's Most Sensitive Public Portals<\/h1>\r\n      <div class=\"blog-meta-bar\">\r\n        <span class=\"author\">By URBADIGITAL SA<\/span>\r\n        <span class=\"separator\">\u00b7<\/span>\r\n        <span>Web Performance Report \u2014 Issue 3<\/span>\r\n        <span class=\"separator\">\u00b7<\/span>\r\n        <span>September 20, 2026<\/span>\r\n        <span class=\"separator\">\u00b7<\/span>\r\n        <span>5 min read<\/span>\r\n      <\/div>\r\n    <\/div>\r\n  <\/header>\r\n\r\n  <!-- SCORE BAND -->\r\n  <div class=\"score-band\">\r\n    <div class=\"score-band-in\">\r\n      <div class=\"sbi\"><div class=\"sbi-n\">27<\/div><div class=\"sbi-l\">Average score \/ 100<\/div><\/div>\r\n      <div class=\"sbi\"><div class=\"sbi-n\">3\/5<\/div><div class=\"sbi-l\">Services rated Grade F<\/div><\/div>\r\n      <div class=\"sbi\"><div class=\"sbi-n\">100%<\/div><div class=\"sbi-l\">Without a valid CSP header<\/div><\/div>\r\n      <div class=\"sbi\"><div class=\"sbi-n\">3<\/div><div class=\"sbi-l\">Process sensitive LOPDP data<\/div><\/div>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <!-- CONTENT -->\r\n  <article class=\"blog-content\">\r\n    <div class=\"wrap\">\r\n\r\n      <p>There is a distinct kind of digital trust that citizens extend without a second thought: when you look up a court case, book a medical appointment at a public hospital, or file a complaint through a State portal, you assume the platform on the other side is configured to safeguard what you send. This week, we put that assumption to the test.<\/p>\r\n\r\n      <p>On September 20, 2026, we ran Mozilla HTTP Observatory scans across five digital services of the Ecuadorian State \u2014 portals where citizens directly interact with the justice system, public healthcare services, and government contact channels. The results follow below.<\/p>\r\n\r\n      <div class=\"note-box\">\r\n        <strong>What does HTTP Observatory measure?<\/strong>\r\n        It evaluates the configuration of a site's HTTP security response headers and calculates a score from 0 to 100, mapped to a letter grade (A through F). It does not detect active intrusions \u2014 it measures how effectively a server is hardened to prevent them. The eight evaluated categories include: CSP, HSTS, cookie attributes, X-Frame-Options, SRI, CORS behavior, redirection handling, and Referrer Policy.\r\n      <\/div>\r\n\r\n      <h2>The Results<\/h2>\r\n\r\n      <p>Five services scanned on the same date. The highest score was 70. The lowest, 0.<\/p>\r\n\r\n      <div class=\"tbl-wrap\">\r\n        <table>\r\n          <thead>\r\n            <tr>\r\n              <th>Service<\/th>\r\n              <th>URL<\/th>\r\n              <th>Grade<\/th>\r\n              <th>Score<\/th>\r\n              <th>Failed \/ Passed<\/th>\r\n              <th>Citizen Data Processed<\/th>\r\n            <\/tr>\r\n          <\/thead>\r\n          <tbody>\r\n            <tr>\r\n              <td><strong>Attorney General's Office (Fiscal\u00eda) \u2014 Case Inquiry<\/strong><\/td>\r\n              <td class=\"srv\">fiscalia.gob.ec<\/td>\r\n              <td><span class=\"grade gF\">F<\/span><\/td>\r\n              <td class=\"score sF\">10<\/td>\r\n              <td class=\"score\" style=\"color:#858599\">5 \/ 5<\/td>\r\n              <td><span class=\"lbadge\">\ud83d\udd10 Judicial records<\/span><\/td>\r\n            <\/tr>\r\n            <tr>\r\n              <td><strong>Contacto Ciudadano<\/strong><\/td>\r\n              <td class=\"srv\">contactociudadano.gob.ec<\/td>\r\n              <td><span class=\"grade gF\">F<\/span><\/td>\r\n              <td class=\"score sF\">0<\/td>\r\n              <td class=\"score\" style=\"color:#858599\">4 \/ 6<\/td>\r\n              <td><span class=\"lbadge\">\ud83d\udd10 Complaints and requests<\/span><\/td>\r\n            <\/tr>\r\n            <tr>\r\n              <td><strong>IESS \u2014 Medical Appointment System<\/strong><\/td>\r\n              <td class=\"srv\">app.iess.gob.ec<\/td>\r\n              <td><span class=\"grade gF\">F<\/span><\/td>\r\n              <td class=\"score sF\">20<\/td>\r\n              <td class=\"score\" style=\"color:#858599\">4 \/ 6<\/td>\r\n              <td><span class=\"lbadge\">\ud83d\udd10 Health data<\/span><\/td>\r\n            <\/tr>\r\n            <tr>\r\n              <td><strong>ARCSA \u2014 Sanitary Regulation Apps<\/strong><\/td>\r\n              <td class=\"srv\">aplicaciones.controlsanitario.gob.ec<\/td>\r\n              <td><span class=\"grade gD\">D<\/span><\/td>\r\n              <td class=\"score sD\">35<\/td>\r\n              <td class=\"score\" style=\"color:#858599\">4 \/ 6<\/td>\r\n              <td style=\"font-size:12px;color:#858599\">Sanitary registrations<\/td>\r\n            <\/tr>\r\n            <tr>\r\n              <td><strong>Ministry of Public Health (MSP)<\/strong><\/td>\r\n              <td class=\"srv\">salud.gob.ec<\/td>\r\n              <td><span class=\"grade gB\">B<\/span><\/td>\r\n              <td class=\"score sB\">70<\/td>\r\n              <td class=\"score\" style=\"color:#858599\">2 \/ 8<\/td>\r\n              <td style=\"font-size:12px;color:#858599\">Public health information<\/td>\r\n            <\/tr>\r\n          <\/tbody>\r\n        <\/table>\r\n      <\/div>\r\n\r\n      <!-- CHART -->\r\n      <div class=\"chart-wrap\">\r\n        <div class=\"chart-title\">HTTP Observatory Score \u2014 September 20, 2026<\/div>\r\n        <div class=\"chart-sub\">Scale 0\u2013100 \u00b7 Passing threshold \u2265 70 (Grade B or above)<\/div>\r\n\r\n        <div class=\"chart-body\" id=\"ppub-chart-body\">\r\n\r\n          <div class=\"bar-entry\">\r\n            <div class=\"bar-meta\">\r\n              <span class=\"bar-name\">Contacto Ciudadano<\/span>\r\n              <span class=\"grade gF\" style=\"flex-shrink:0;width:26px;height:26px;font-size:12px\">F<\/span>\r\n            <\/div>\r\n            <div class=\"bar-track\" id=\"ppub-track0\">\r\n              <div class=\"bar-fill bf-F\" style=\"width:0%\"><\/div>\r\n              <span class=\"bar-zero\">0<\/span>\r\n            <\/div>\r\n          <\/div>\r\n\r\n          <div class=\"bar-entry\">\r\n            <div class=\"bar-meta\">\r\n              <span class=\"bar-name\">Fiscal\u00eda \u2014 Case inquiry<\/span>\r\n              <span class=\"grade gF\" style=\"flex-shrink:0;width:26px;height:26px;font-size:12px\">F<\/span>\r\n            <\/div>\r\n            <div class=\"bar-track\">\r\n              <div class=\"bar-fill bf-F\" style=\"width:10%\"><span class=\"bar-val\">10<\/span><\/div>\r\n            <\/div>\r\n          <\/div>\r\n\r\n          <div class=\"bar-entry\">\r\n            <div class=\"bar-meta\">\r\n              <span class=\"bar-name\">IESS \u2014 Online appointments<\/span>\r\n              <span class=\"grade gF\" style=\"flex-shrink:0;width:26px;height:26px;font-size:12px\">F<\/span>\r\n            <\/div>\r\n            <div class=\"bar-track\">\r\n              <div class=\"bar-fill bf-F\" style=\"width:20%\"><span class=\"bar-val\">20<\/span><\/div>\r\n            <\/div>\r\n          <\/div>\r\n\r\n          <div class=\"bar-entry\">\r\n            <div class=\"bar-meta\">\r\n              <span class=\"bar-name\">ARCSA \u2014 Sanitary regulation<\/span>\r\n              <span class=\"grade gD\" style=\"flex-shrink:0;width:26px;height:26px;font-size:12px\">D<\/span>\r\n            <\/div>\r\n            <div class=\"bar-track\">\r\n              <div class=\"bar-fill bf-D\" style=\"width:35%\"><span class=\"bar-val\">35<\/span><\/div>\r\n            <\/div>\r\n          <\/div>\r\n\r\n          <div class=\"bar-entry\">\r\n            <div class=\"bar-meta\">\r\n              <span class=\"bar-name\">Ministry of Public Health<\/span>\r\n              <span class=\"grade gB\" style=\"flex-shrink:0;width:26px;height:26px;font-size:12px\">B<\/span>\r\n            <\/div>\r\n            <div class=\"bar-track\">\r\n              <div class=\"bar-fill bf-B\" style=\"width:70%\">\r\n                <span class=\"bar-val\">70<\/span>\r\n              <\/div>\r\n              <span class=\"bar-pass-label\">\u2713 pass<\/span>\r\n            <\/div>\r\n          <\/div>\r\n\r\n          <!-- Reference lines -->\r\n          <div id=\"ppub-ref-lines\" aria-hidden=\"true\" style=\"position:absolute;top:0;bottom:0;left:234px;right:0;pointer-events:none\"><\/div>\r\n\r\n        <\/div>\r\n\r\n        <div class=\"chart-legend\">\r\n          <span class=\"leg-item\"><span class=\"leg-dot\" style=\"background:#EF4444\"><\/span>Grade F \u2014 Critical<\/span>\r\n          <span class=\"leg-item\"><span class=\"leg-dot\" style=\"background:#FBB040\"><\/span>Grade D \u2014 Poor<\/span>\r\n          <span class=\"leg-item\"><span class=\"leg-dot\" style=\"background:#4ADE80\"><\/span>Grade B \u2014 Passing<\/span>\r\n          <span class=\"leg-item\"><span class=\"leg-dsh\"><\/span>Cohort average (27)<\/span>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <script>\r\n      (function(){\r\n        var ref = document.getElementById('ppub-ref-lines');\r\n        if(!ref) return;\r\n        ref.innerHTML =\r\n          '<div style=\"position:absolute;top:0;bottom:0;left:70%;border-left:1.5px solid rgba(74,222,128,0.4);\">' +\r\n            '<span style=\"position:absolute;bottom:calc(100% + 5px);left:4px;font-size:10px;color:#4ADE80;font-weight:600;white-space:nowrap;font-family:JetBrains Mono,monospace\">Min. passing: 70<\/span>' +\r\n          '<\/div>' +\r\n          '<div style=\"position:absolute;top:0;bottom:0;left:27%;border-left:1.5px dashed rgba(251,176,64,0.55);\">' +\r\n            '<span style=\"position:absolute;bottom:calc(100% + 5px);left:4px;font-size:10px;color:#FBB040;font-weight:600;white-space:nowrap;font-family:JetBrains Mono,monospace\">Average: 27<\/span>' +\r\n          '<\/div>';\r\n      })();\r\n      <\/script>\r\n\r\n      <p>Three out of the five services received an F grade. The group average is 27 out of 100 \u2014 the exact same score we recorded two weeks ago when scanning 17 municipal portals across Ecuador. Two distinct sectors, the exact same number.<\/p>\r\n\r\n      <h2>What Failed \u2014 and Why It Matters<\/h2>\r\n\r\n      <p>HTTP Observatory audits eight header categories. These were the most consistent points of failure across all five services:<\/p>\r\n\r\n      <div class=\"hdr-grid\">\r\n        <div class=\"hc c\">\r\n          <div class=\"hc-name\">Content-Security-Policy (CSP)<\/div>\r\n          <div class=\"hc-n\">5 of 5<\/div>\r\n          <div class=\"hc-d\">Not a single site had a valid CSP. This header governs which scripts are permitted to execute on the page \u2014 its absence is the most common enabler of cross-site scripting (XSS) attacks.<\/div>\r\n        <\/div>\r\n        <div class=\"hc c\">\r\n          <div class=\"hc-name\">X-Frame-Options<\/div>\r\n          <div class=\"hc-n\">4 of 5<\/div>\r\n          <div class=\"hc-d\">Missing in 80% of sites. Without it, a page can be embedded inside a third-party iframe \u2014 a primary attack vector for clickjacking against citizens submitting forms.<\/div>\r\n        <\/div>\r\n        <div class=\"hc w\">\r\n          <div class=\"hc-name\">HSTS<\/div>\r\n          <div class=\"hc-n\">3 of 5<\/div>\r\n          <div class=\"hc-d\">Without HTTP Strict Transport Security, a session can be downgraded from HTTPS to plaintext HTTP and intercepted over shared or public networks.<\/div>\r\n        <\/div>\r\n        <div class=\"hc w\">\r\n          <div class=\"hc-name\">Cookies (Secure Attribute)<\/div>\r\n          <div class=\"hc-n\">2 of 5<\/div>\r\n          <div class=\"hc-d\">Session cookies delivered without the Secure flag can be intercepted over unencrypted channels \u2014 especially critical in authenticated systems like the IESS appointment manager.<\/div>\r\n        <\/div>\r\n      <\/div>\r\n\r\n      <p>The 100% failure rate for CSP across all tested services is not a coincidence \u2014 it is a structural pattern. We saw it across municipalities. We see it again here. It reflects default configurations that are simply not being enforced at the web server or reverse proxy layer across vast parts of Ecuador's public digital infrastructure.<\/p>\r\n\r\n      <h3>A Detail That Should Not Be Public<\/h3>\r\n\r\n      <div class=\"php-box\">\r\n        <strong>Software Versions Exposed in Response Headers<\/strong>\r\n        Contacto Ciudadano returns <code>X-Powered-By: PHP\/8.1.32<\/code> in its HTTP response. The institutional portal of the MSP returns <code>PHP\/8.4.4<\/code>. Disclosing exact runtime versions in production headers presents a fingerprinting risk: it gives any attacker scanning for known CVEs a precise starting point. Suppressing it requires a single line of server configuration.\r\n      <\/div>\r\n\r\n      <hr>\r\n\r\n      <h2>Three Services, Three Categories of Sensitive Data<\/h2>\r\n\r\n      <p>What sets this cohort apart from a generic government site audit is the nature of the data traversing these platforms.<\/p>\r\n\r\n      <p>The Fiscal\u00eda's case lookup portal (<em>Consulta de Noticias del Delito<\/em>) processes records directly tied to individuals' legal status. The IESS appointment system processes personal health data. Contacto Ciudadano handles citizen complaints \u2014 which frequently contain identifying details, personal statements, and sensitive narratives.<\/p>\r\n\r\n      <p>Under Ecuador's Organic Law on Personal Data Protection (LOPDP), this is not incidental. It meets the formal statutory definition of sensitive data.<\/p>\r\n\r\n      <div class=\"legal-callout danger\">\r\n        <div class=\"legal-callout-title\">\u2696\ufe0f LOPDP \u2014 What the Law Requires for These Portals<\/div>\r\n        <h4>Art. 6 \u2014 Special Categories of Sensitive Data<\/h4>\r\n        <p>Health data, genetic information, judicial and criminal records, and data relating to an individual's legal standing are classified as sensitive. Their processing demands reinforced technical and organizational safeguards.<\/p>\r\n        <h4 style=\"margin-top:16px\">Art. 37 \u2014 Data Security Obligations<\/h4>\r\n        <p>Data controllers must implement technical safeguards that ensure the confidentiality, integrity, and availability of personal data[cite: 1]. A missing HSTS header, cookies sent without the Secure flag, and the total lack of CSP are concrete technical deficiencies directly pertinent to this legal duty.<\/p>\r\n        <p>The LOPDP applies to public entities without exception. The <em>Superintendence of Personal Data Protection<\/em> has been active since 2023 and has initiated enforcement actions \u2014 including regulatory sanctions in 2025 against LigaPro (~$250K) and the Ecuadorian Football Federation (~$200K). <strong>Ecuador maintains some of the highest statutory penalties in the region for non-compliance: up to 2% of annual turnover for severe infractions.<\/strong><\/p>\r\n      <\/div>\r\n\r\n      <p>We do not state that these portals have experienced a breach or that data has been leaked. What these scan findings establish is that their present configuration fails to meet the technical baseline mandated by the LOPDP for the classifications of data they process[cite: 1]. The law does not wait for an incident to occur before imposing duties \u2014 it mandates preventive security controls in advance.<\/p>\r\n\r\n      <hr>\r\n\r\n      <h2>Why the MSP Portal Earns a B While Others Score F<\/h2>\r\n\r\n      <p>The institutional portal of the MSP (<code>salud.gob.ec<\/code>) passes eight of ten Observatory checks, earning a Grade B with 70 points. The IESS appointment system and the Fiscal\u00eda case lookup fail between four and five checks, earning an F.<\/p>\r\n\r\n      <div class=\"pull\">\r\n        <p>The difference between a B and an F in HTTP Observatory is rarely a matter of budget. It is almost always a matter of configuration.<\/p>\r\n      <\/div>\r\n\r\n      <p>The MSP portal runs on nginx with a deployment that enables multiple defensive headers by default. The two checks it fails \u2014 CSP and SRI \u2014 are widespread gaps, but the architectural baseline is solid. Portals receiving an F lack core fundamental headers that can be added directly at the web server or reverse proxy level without touching a single line of application source code.<\/p>\r\n\r\n      <p>This mirrors the findings we reported on the Municipality of Quevedo two weeks ago. Quevedo was the sole municipal portal to achieve a passing grade \u2014 not because of superior custom infrastructure, but because it routes traffic through Cloudflare, which injects protective headers by default. The MSP attains a comparable outcome through deliberate nginx hardening. The pattern indicates that the gap is not capital investment in technology \u2014 it is configuration hygiene.<\/p>\r\n\r\n      <hr>\r\n\r\n      <h2>Methodology<\/h2>\r\n\r\n      <div class=\"method-box\">\r\n        <strong>Tool:<\/strong> Mozilla HTTP Observatory (via webperformancereport.com) \u00b7\r\n        <strong>Date:<\/strong> September 20, 2026 \u00b7\r\n        <strong>Scan IDs:<\/strong> 260920_M238cw_T1J (Fiscal\u00eda), 260920_sIcntl_Hdt (Contacto Ciudadano), 260920_mnTiUH_s1e (IESS), 260920_2jfbZW_TSt (ARCSA), 260920_wqU9p4_mhK (MSP) \u00b7\r\n        <strong>Selection Criteria:<\/strong> Public digital services handling direct citizen interactions \u2014 case tracking, appointment scheduling, grievance filings \u2014 across the justice and healthcare sectors \u00b7\r\n        Scans are public and independently reproducible at <code>observatory.mozilla.org<\/code>.\r\n      <\/div>\r\n\r\n      <p>This report is the third release in UrbaDigital's September 2026 series. Earlier editions covered 17 municipal GAD portals (September 8) and 20 public university domains (September 15). A consolidated cross-sector report will be published on September 29.<\/p>\r\n\r\n      <div class=\"special-mention-box\">\r\n        <div class=\"special-mention-title\">Complimentary Web Security Diagnostic for Your Institution<\/div>\r\n        <h2>Is Your Portal Configured This Way Too?<\/h2>\r\n        <p>We run HTTP Observatory and benchmark your technical posture against the technical requirements of the LOPDP. You receive an actionable findings briefing and a prioritized remediation roadmap \u2014 at no cost.<\/p>\r\n        <a href=\"https:\/\/urbadigital.com\/contacto\">Request an Evaluation<\/a>\r\n      <\/div>\r\n\r\n      <hr>\r\n\r\n      <div class=\"art-foot\">\r\n        <div class=\"af-author\">\r\n          <div class=\"af-name\">UrbaDigital S.A.<\/div>\r\n          <div class=\"af-role\">Digital Transformation \u00b7 Quito, Ecuador<\/div>\r\n        <\/div>\r\n        <div class=\"af-tags\">\r\n          <span class=\"tag\">Web Security<\/span>\r\n          <span class=\"tag\">LOPDP<\/span>\r\n          <span class=\"tag\">HTTP Observatory<\/span>\r\n          <span class=\"tag\">Public Sector<\/span>\r\n          <span class=\"tag\">#UrbaInsights<\/span>\r\n          <span class=\"tag\">Digital Government<\/span>\r\n        <\/div>\r\n      <\/div>\r\n\r\n    <\/div>\r\n  <\/article>\r\n\r\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-6ff3131 e-con-full e-flex e-con e-child\" data-id=\"6ff3131\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1e4d8b30 ekit-equal-height-disable elementor-widget elementor-widget-elementskit-icon-box\" data-id=\"1e4d8b30\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"elementskit-icon-box.default\">\n\t\t\t\t\t<div class=\"ekit-wid-con\" >        <!-- link opening -->\n                <!-- end link opening -->\n\n        <div class=\"elementskit-infobox text-center text- icon-lef-right-aligin elementor-animation-   \">\n                        <div class=\"box-body\">\n                            <h3 class=\"elementskit-info-box-title\">\n                    Need Help?                <\/h3>\n                                            <\/div>\n        \n        \n                <\/div>\n        <\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-59b5df4b elementor-align-center elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"59b5df4b\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"mailto:info@urbadigital.com\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"20\" height=\"18\" viewBox=\"0 0 20 18\" fill=\"currentColor\"><path d=\"M18.5352 2.92871C18.5352 2.55396 18.2312 2.25 17.8564 2.25H2.14258C1.76781 2.25 1.46387 2.55395 1.46387 2.92871V15.0713C1.46387 15.4461 1.76782 15.75 2.14258 15.75H17.8564C18.2312 15.75 18.5352 15.4461 18.5352 15.0713V2.92871ZM20.0352 15.0713C20.0352 16.2745 19.0597 17.25 17.8564 17.25H2.14258C0.939373 17.25 -0.0361328 16.2745 -0.0361328 15.0713V2.92871C-0.0361328 1.72552 0.939387 0.75 2.14258 0.75H17.8564C19.0596 0.75 20.0352 1.7255 20.0352 2.92871V15.0713Z\"><\/path><path d=\"M18.7984 2.71521C19.1135 2.44643 19.5862 2.48413 19.8551 2.7992C20.1237 3.11419 20.0868 3.58696 19.7721 3.85584L11.4 10.9994L11.3932 11.0043C11.0018 11.3302 10.509 11.5091 9.9996 11.5092C9.4901 11.5092 8.9965 11.3303 8.60507 11.0043L8.59823 10.9994L0.227136 3.85584C-0.0879085 3.58703 -0.12555 3.1143 0.143152 2.7992C0.411962 2.48415 0.884692 2.44651 1.19979 2.71521L9.56503 9.85193L9.66171 9.91932C9.76386 9.97789 9.88051 10.0092 9.9996 10.0092C10.1581 10.0091 10.3114 9.95337 10.4332 9.85193L18.7984 2.71521Z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">info@urbadigital.com<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1996509d elementor-invisible elementor-widget elementor-widget-elementskit-creative-button\" data-id=\"1996509d\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;,&quot;_animation_delay&quot;:200,&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"elementskit-creative-button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"ekit-wid-con\" >\t\t<div class=\"ekit-btn-wraper\">\n\t\t\t\t\t\t\t\t<a href=\"\/contact-us\/\" class=\"ekit_creative_button ekit_position_aware\" id=\"\" data-text=\"\">\n\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"ekit_creative_button_text\">Contact Us<\/span>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10\" height=\"10\" viewBox=\"0 0 10 10\" fill=\"currentColor\"><path d=\"M8.33624 2.84003L1.17628 10L0 8.82373L7.15913 1.66376H0.849348V0H10V9.15065H8.33624V2.84003Z\"><\/path><\/svg>\n\t\t\t\t\t\t\t\t\t\t\t\t<span class='ekit_position_aware_bg'><\/span>\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/div>\n        <\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Web Security \/ Public Sector \u00b7 HTTP Observatory [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":15338,"comment_status":"closed","ping_status":"open","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"_angie_page":false,"_monsterinsights_skip_tracking":false,"page_builder":"","footnotes":""},"categories":[84,1,83],"tags":[],"class_list":["post-15337","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-article","category-blog","category-studies"],"aioseo_notices":[],"rttpg_featured_image_url":{"full":["https:\/\/urbadigital.com\/wp-content\/uploads\/2026\/09\/Gemini_Generated_Image_3s100t3s100t3s10-scaled.jpg",2560,1396,false],"landscape":["https:\/\/urbadigital.com\/wp-content\/uploads\/2026\/09\/Gemini_Generated_Image_3s100t3s100t3s10-scaled.jpg",2560,1396,false],"portraits":["https:\/\/urbadigital.com\/wp-content\/uploads\/2026\/09\/Gemini_Generated_Image_3s100t3s100t3s10-scaled.jpg",2560,1396,false],"thumbnail":["https:\/\/urbadigital.com\/wp-content\/uploads\/2026\/09\/Gemini_Generated_Image_3s100t3s100t3s10-150x150.jpg",150,150,true],"medium":["https:\/\/urbadigital.com\/wp-content\/uploads\/2026\/09\/Gemini_Generated_Image_3s100t3s100t3s10-300x164.jpg",300,164,true],"large":["https:\/\/urbadigital.com\/wp-content\/uploads\/2026\/09\/Gemini_Generated_Image_3s100t3s100t3s10-1024x559.jpg",800,437,true],"1536x1536":["https:\/\/urbadigital.com\/wp-content\/uploads\/2026\/09\/Gemini_Generated_Image_3s100t3s100t3s10-1536x838.jpg",1536,838,true],"2048x2048":["https:\/\/urbadigital.com\/wp-content\/uploads\/2026\/09\/Gemini_Generated_Image_3s100t3s100t3s10-2048x1117.jpg",2048,1117,true],"trp-custom-language-flag":["https:\/\/urbadigital.com\/wp-content\/uploads\/2026\/09\/Gemini_Generated_Image_3s100t3s100t3s10-18x10.jpg",18,10,true]},"rttpg_author":{"display_name":"urbasignature","author_link":"https:\/\/urbadigital.com\/es\/blog\/author\/urbasignature\/"},"rttpg_comment":0,"rttpg_category":"<a href=\"https:\/\/urbadigital.com\/es\/blog\/category\/article\/\" rel=\"category tag\">Article<\/a> <a href=\"https:\/\/urbadigital.com\/es\/blog\/category\/blog\/\" rel=\"category tag\">Blog<\/a> <a href=\"https:\/\/urbadigital.com\/es\/blog\/category\/studies\/\" rel=\"category tag\">Studies<\/a>","rttpg_excerpt":"Web Security \/ Public Sector \u00b7 HTTP Observatory [&hellip;]","_links":{"self":[{"href":"https:\/\/urbadigital.com\/es\/wp-json\/wp\/v2\/posts\/15337","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/urbadigital.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/urbadigital.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/urbadigital.com\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/urbadigital.com\/es\/wp-json\/wp\/v2\/comments?post=15337"}],"version-history":[{"count":4,"href":"https:\/\/urbadigital.com\/es\/wp-json\/wp\/v2\/posts\/15337\/revisions"}],"predecessor-version":[{"id":15343,"href":"https:\/\/urbadigital.com\/es\/wp-json\/wp\/v2\/posts\/15337\/revisions\/15343"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/urbadigital.com\/es\/wp-json\/wp\/v2\/media\/15338"}],"wp:attachment":[{"href":"https:\/\/urbadigital.com\/es\/wp-json\/wp\/v2\/media?parent=15337"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/urbadigital.com\/es\/wp-json\/wp\/v2\/categories?post=15337"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/urbadigital.com\/es\/wp-json\/wp\/v2\/tags?post=15337"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}