Website Security
Guard

F

Fronami, Inc.

roompano.com

58

Score

roompano is a US-based company (Fronami, Inc.) specializing in AI-powered virtual home staging and 360 virtual tours tailored for real estate agents and brokers, primarily serving the French market. The platform enables users to transform phone photos into legally compliant staged images and immersive tours without requiring specialized equipment. The business model is subscription and credit-based, offering tiered plans with features such as 4K exports and multiple staging variants. The website demonstrates a high level of professionalism, with clear legal disclosures and AI markings embedded in all generated visuals to ensure compliance with French consumer law and the EU AI Act. Technically, the website is built on a modern React and Next.js stack, hosted on Cloudflare infrastructure, ensuring fast performance and mobile optimization. The site includes comprehensive structured data (JSON-LD) for SEO and business transparency. However, some security best practices such as DNSSEC and explicit security headers are not currently implemented. Privacy compliance is generally good, with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. Security posture is solid with HTTPS enforced and domain transfer protections in place, but the absence of published security policies and incident response contacts limits transparency. No vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and well-positioned in its niche, with room for improvement in security and privacy transparency. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing a security policy and incident response contacts, and adding a cookie consent mechanism to enhance privacy compliance and user trust.

A

AnswerDojo

answerdojo.com

62

Score

AnswerDojo is a technology startup launched in 2026 that provides an AI-powered mock interview coaching platform specifically designed for new graduates. The platform offers live voice mock interviews tailored to exact companies and roles, enabling users to practice and receive scores and feedback. The website is professionally designed, mobile-optimized, and uses modern web technologies such as React and Next.js, hosted and registered via Cloudflare. The business model includes a free tier with limited usage and a Pro subscription for unlimited practice. The platform integrates voice technology from ElevenLabs to enhance the interview experience. Security posture is good with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security policies are not publicly disclosed. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy, safe, and well-positioned in the niche market of AI-driven interview preparation for new grads.

F

Fronami, Inc.

unmei-tarot.com

70

Score

Unmei Tarot is a specialized AI-powered tarot reading platform offering free and paid tarot reading services with a focus on love, career, reconciliation, and daily guidance. The service is multilingual and provides a conversational AI tarot reader named Tsukishiro Nagi, delivering personalized readings using traditional tarot spreads. The platform is positioned as a niche player in the esoteric and personal guidance market, supported by its parent company Fronami, Inc. The website demonstrates professional design, excellent content quality, and strong user experience with clear navigation and mobile optimization. Technically, the site leverages modern web technologies including Next.js and React, ensuring fast performance and good SEO. It integrates Facebook Pixel for marketing and tracking purposes. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security headers and incident response policies are not clearly published. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust. Overall, the website is trustworthy and professionally maintained, though the lack of publicly available WHOIS registration data introduces some uncertainty about domain registration transparency. Strategic recommendations include enhancing security header implementation, publishing incident response contacts, and adding vulnerability disclosure policies to strengthen security posture and user confidence.

I

iSaveTik

isavetik.com

47

Score

iSaveTik is an online utility service specializing in downloading TikTok videos without watermarks, supporting multiple media formats including video, audio, covers, and slideshows. The service is free, browser-based, and does not require app installation or user accounts, targeting TikTok users who want a clean and simple download experience. The website also supports downloads from 41 other social media and video platforms, positioning itself as a versatile multimedia downloader. Technically, the site is built using modern web technologies including the Astro framework, is hosted via Alibaba Cloud, and uses Cloudflare DNS. It is optimized for mobile and desktop browsers with good SEO and accessibility features. Security-wise, the site enforces HTTPS and avoids intrusive ads or popups, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms, despite using Google Analytics for tracking. The domain WHOIS data is suspicious due to a future creation date, which reduces trust in the domain registration legitimacy. Overall, the site is professional and functional but should improve privacy disclosures and security practices to enhance trust and compliance.

A

AI Auto Cropper

aiautocropper.com

55

Score

AI Auto Cropper is a specialized online tool designed to automate the splitting and cropping of multiple photos from scanned album pages or flatbed scans. It targets individuals, families, archivists, and studios who need efficient digitization of photo collections. The service operates fully in-browser, ensuring user privacy by not uploading images to servers. The business currently offers a free preview with all features enabled and plans to introduce paid personal and commercial plans in the future. The website is professionally designed with comprehensive content, including FAQs, how-to guides, and structured data for SEO.

V

Virtual Staging

virtual-staging.app

55

Score

Virtual Staging is a specialized Japanese SaaS platform offering AI-powered virtual staging services for real estate rental listings. The platform enables users to upload empty room photos and automatically generate CG furniture placement, furniture removal, blue sky photo corrections, CG annotations, short vertical videos, and multilingual property descriptions. The service targets rental brokerage and property management companies in Japan, providing a comprehensive package to streamline property listing preparations. Technically, the website is built on a modern Next.js and React stack, hosted likely on Cloudflare infrastructure, optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS and security headers, though cookie consent and formal security policies are areas for improvement. Overall, the website is professional, trustworthy, and compliant with real estate advertising standards, with transparent WHOIS data confirming legitimacy.

T

TryStencil

trystencil.org

57

Score

TryStencil is a technology-driven platform specializing in AI-generated tattoo designs, allowing users to create custom tattoos, preview them on their own skin photos, and export real-size stencils for licensed tattoo artists. The service targets both tattoo enthusiasts and professional artists, offering a freemium business model with subscription plans and credit packs. The website is built on modern web technologies including React and Next.js, hosted with Cloudflare DNS and CDN services, and integrates Stripe for secure payment processing. The platform emphasizes privacy by re-encoding photos to remove metadata and prohibits generation of celebrity or copyrighted character likenesses. Security posture is good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, the website is professional, user-friendly, and trustworthy, with clear pricing and comprehensive content.

S

Study Guide Maker

studyguidemaker.net

55

Score

Study Guide Maker is a small educational technology company offering an AI-powered web application that transforms PDFs, slides, and notes into structured, printable study guides with citations. The platform targets students and teachers, providing freemium access with paid subscription tiers and one-time passes for enhanced features like Deep mode and Teacher mode. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization. Technically, it uses a modern React and Next.js stack, hosted likely behind Cloudflare, ensuring fast performance and good SEO. Security posture is strong with HTTPS and domain transfer protection, though DNSSEC is not enabled and no explicit security policy is published. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. The WHOIS data shows an unusual future domain creation date, which is inconsistent with the website's content timestamps, slightly reducing trustworthiness. Overall, the site is safe, professional, and trustworthy with minor areas for improvement in security transparency and privacy mechanisms.

S

SampLab Pro

samplab.pro

54

Score

SampLab Pro is an independent project offering a suite of six free browser-based audio and MIDI utilities designed for musicians, producers, and hobbyists. The tools run entirely client-side in the browser, ensuring user privacy and eliminating the need for accounts or subscriptions. The website positions itself as a practical and accessible resource for audio transcription, tempo detection, chord recognition, frequency band splitting, MIDI synthesis, and lead sheet generation. The market position is that of a niche, independent technology provider focused on audio tools with a privacy-first approach. Technically, the website is built using modern web technologies including Next.js and React, leveraging client-side processing and Web Audio APIs. The site is mobile optimized with good SEO and accessibility basics. Performance is moderate, with some initial model loading delays noted due to client-side processing. Analytics are implemented via Umami, a privacy-conscious analytics platform, indicating a focus on minimal user tracking. From a security perspective, the site enforces HTTPS and processes all audio locally to protect user data. However, it lacks several common security headers and does not implement cookie consent mechanisms, which could be improved. No forms or personal data collection points are present, reducing exposure to common web vulnerabilities. The WHOIS data is privacy protected, typical for small independent projects, and no suspicious domain registration patterns were found. Overall, SampLab Pro presents a trustworthy, privacy-focused tool suite with a solid technical foundation. Strategic recommendations include enhancing security headers, adding cookie consent, and publishing explicit security and incident response policies to further strengthen trust and compliance.

A

AI Photo Animator

aiphotoanimator.ai

66

Score

AI Photo Animator is a technology company specializing in AI-driven photo animation services that transform still images into short videos with natural motion and native sound. The platform leverages multiple leading AI video models such as Seedance, Kling, Wan, and Hailuo to provide users with a variety of animation styles and quality options. The business operates on a freemium model offering free credits on sign-up and paid subscription plans with monthly credit allowances and commercial licenses. The target audience includes content creators, marketers, and social media users seeking easy-to-use AI animation tools. The website is professionally designed, mobile-optimized, and provides clear navigation and pricing transparency.

Y

Yila AI

yila.ai

55

Score

Yila AI is a technology-driven research assistance platform that aggregates academic papers from multiple reputable sources and offers a suite of AI-powered tools to support researchers throughout the research lifecycle. The platform targets academic and scientific professionals, providing services such as literature search, data analysis, manuscript writing, and presentation generation. The website demonstrates a high level of digital maturity with a modern tech stack including Next.js, React, and Cloudflare DNS, and integrates analytics and user engagement tools like Microsoft Clarity and Crisp chat. Security posture is generally good with HTTPS enabled and domain transfer protections, but lacks DNSSEC and published security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies. The domain WHOIS data is privacy protected but shows an anomalous future creation date, which warrants caution. Overall, the website is professional, trustworthy, and well-designed, serving a niche academic market effectively.

W

WITHHELD FOR PRIVACY LLC

yeri.ai

62

Score

Yeri AI is a technology company offering an advanced AI-powered creative platform that enables users to generate images and videos from text or reference inputs. The platform provides a variety of AI models, photo effects, templates, and editing tools targeting creative professionals, digital artists, and content creators. The website demonstrates a modern and professional design with good performance and mobile optimization, leveraging technologies such as Next.js and Cloudflare DNS. However, the absence of explicit privacy, cookie, and terms of service policies, as well as contact information, indicates gaps in privacy compliance and user trust facilitation. The WHOIS data shows privacy protection but contains an anomalous future domain creation date, which slightly reduces trustworthiness. Overall, the platform appears functional and secure with room for improvement in transparency and security best practices.