Skip to main content

E-commerce security reports

Browse 3,261 Guard analyses across this slice of the directory — NIS2 / GDPR readiness, SSL/TLS, DNS hygiene and email authentication.

Live Guard activity

Security teams are checking their sites with Guard right now

Run your domain before the queue fills up

157364
Websites
130
Industries
113
Countries
52
Avg Score
Page 18 of 66|Showing 851-900 of 3261
deliverygateway.io favicon

Delivery Gateway

deliverygateway.io

62
E-commerceHungarysmallMEDIUM

Delivery Gateway is a SaaS platform specializing in integrating multiple parcel delivery and carrier services into e-commerce webshops, primarily targeting Shopify and custom online stores. The platform offers features such as label generation, package tracking, and a map-based pickup point selector to enhance the checkout experience. Positioned as a member of the BIG FISH Group, Delivery Gateway aims to streamline logistics operations for small to medium-sized e-commerce businesses, providing a centralized admin interface and flexible API-driven integrations. Technically, the website is built on Webflow CMS with modern JavaScript libraries, Google Tag Manager for analytics, and uses AWS Cloudfront CDN for hosting. The site is mobile-optimized, fast-loading, and employs HTTPS with strong SSL configuration. The presence of a pricing calculator and demo videos indicates a mature digital presence with customer engagement tools like Intercom chat. From a security perspective, the site enforces HTTPS and shows no signs of exposed sensitive data or vulnerable libraries. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident, and no dedicated security or incident response pages are found. Privacy compliance is partially addressed with a privacy policy and terms of service, but no cookie consent mechanism or GDPR-specific disclosures are visible. Overall, the website presents a professional and trustworthy front with clear business information and transparent pricing. The lack of public WHOIS data due to privacy protection is common in the industry and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and implementing cookie consent to improve privacy compliance and security posture.

30
35
2
100
62
85
100
ecommercelogisticsparceldeliveryshippingintegrationsaas+2 more
Webflow CMSGoogle Tag ManagerjQuery 3.5.1Google Fonts (Inter, Poppins)+2

Partner Domains:

bigfish.hu
parent
2025-10-14T13:44:32.780Z
M

MatchaTea.fi

matchatea.fi

48
E-commerceFinlandsmallHIGH

MatchaTea.fi appears to be a small Finnish e-commerce business specializing in matcha tea products or related services. The analyzed page is a protected access login page, indicating restricted content or administrative access rather than public-facing content. The website uses the MyShoptet platform and CDN for hosting and asset delivery, reflecting a moderate level of technical infrastructure. However, the page lacks visible privacy, cookie, or terms of service policies, and no contact information is provided, which limits transparency and user trust. From a security perspective, the site employs a password-protected form with autocomplete disabled on the login field, but lacks essential security headers, CSRF tokens, and bot protection mechanisms. No WAF or blocking mechanisms are detected, and SSL configuration details are not provided, suggesting potential areas for security enhancement. The absence of analytics and advertising scripts indicates minimal user tracking, which is positive for privacy but also limits business intelligence. Overall, the website's security posture is basic, with significant room for improvement in security best practices and privacy compliance. The domain registration data is consistent with the website's Finnish origin and business context, supporting legitimacy. The content is safe for general audiences, with no adult or explicit material detected. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers and form protections, adding contact information for transparency, and improving SEO and content richness to better serve users and build trust.

40
25
2
85
-
85
100
protectedaccessloginmatchae-commercemyshoptet
HTML5CSS3MyShoptet platform
2025-10-14T12:20:11.980Z
matchatea.at favicon

MatchaTea.at

matchatea.at

60
E-commerceAustriasmallMEDIUM

MatchaTea.at operates as a specialized e-commerce platform focused on authentic Japanese Matcha tea products, offering a range of organic and certified items. The company targets health-conscious consumers in Austria and German-speaking regions, positioning itself as a niche leader with a strong emphasis on product quality and authenticity. The website is professionally designed with clear navigation and multiple trust indicators including certifications and active social media presence. Technically, the site leverages the Shoptet e-commerce platform with integrations of popular analytics and marketing tools such as Google Analytics GA4, Facebook Pixel, Hotjar, and Plausible. The site uses HTTPS and CSRF protections but could improve security headers and update legacy libraries like jQuery. Mobile optimization and SEO are well addressed, contributing to a positive user experience. From a security perspective, the site demonstrates good practices with encrypted connections and consent-based tracking. However, the absence of detailed WHOIS data and minimal security headers slightly reduce trustworthiness. No critical vulnerabilities or blocking mechanisms were detected, and privacy compliance appears adequate with GDPR-aligned policies. Overall, MatchaTea.at presents a credible and professional online presence with moderate technical maturity and a solid security baseline. Strategic improvements in security headers, library updates, and enhanced transparency on incident response would further strengthen its posture.

40
43
2
85
42
85
100
matchateaorganice-commercejapan+2 more
jQuery 1.11.3Google Tag ManagerGoogle Analytics GA4Facebook Pixel+2

Partner Domains:

www.originalmatcha.de
partner
www.matchatea.bio
partner

+3 more partners

2025-10-14T12:19:46.910Z
onvoard.com favicon

OnVoard

onvoard.com

63
E-commerceN/asmallMEDIUM

OnVoard is a specialized ecommerce marketing platform offering a suite of integrated marketing applications designed to help online merchants increase revenue with minimal effort. The platform targets ecommerce businesses and integrates with major platforms such as Shopify, BigCommerce, EasyStore, and Wix. The website presents a professional and consistent brand image with clear descriptions of its key services including email marketing, progress bars to increase average order value, back-in-stock notifications, reviews management, loyalty programs, product recommendations, and popup marketing tools. Technically, the site is built on Webflow CMS, leveraging modern web technologies and Google services for analytics and user interaction tracking. Security posture is generally good with HTTPS enforced and use of Google reCAPTCHA, but lacks some security headers and explicit incident response contacts. Privacy compliance is addressed with a comprehensive privacy policy and GDPR hosting claims, though cookie consent mechanisms are absent. The WHOIS data is missing, which raises concerns about domain registration legitimacy, but the website content and business presence appear credible. Overall, the site scores well in business credibility and technical implementation but could improve in security and privacy compliance.

30
65
2
85
75
70
100
ecommercemarketingsaasemailmarketingwebflow+6 more
Google AnalyticsGoogle Tag ManagerGoogle reCAPTCHAWebflow CMS+2
2025-10-14T03:29:23.419Z
onlineshop.ws favicon

Waldhart Software

onlineshop.ws

45
E-commerceAustriasmallHIGH

Waldhart Software operates the onlineshop.ws domain, providing specialized e-commerce solutions primarily for ski schools, snow sports schools, and related outdoor sports businesses. The website serves as a reference portal showcasing over 300 live client online shops, indicating a focused B2B business model targeting the winter and summer sports education sector. The company appears to be a small-sized entity founded in 2018, with a consistent brand presence and a clear market niche in Austria and neighboring countries. Technically, the website leverages modern web technologies including the Quasar Framework and Google Maps API, delivering a responsive and user-friendly experience. Hosting is likely provided by profiwebspace.at, with domain registration managed by InterNetX GmbH. The site uses HTTPS, but lacks DNSSEC and security headers, which are areas for improvement. No analytics or advertising scripts were detected, suggesting a privacy-conscious or minimalistic approach. From a security perspective, the site has a moderate posture with HTTPS enabled but missing important security headers and DNSSEC. There are no visible vulnerabilities or exposed sensitive data in the provided content. However, the absence of privacy and cookie policies, as well as terms of service, indicates compliance gaps with GDPR and general privacy best practices. Overall, the website is professional and trustworthy within its niche but would benefit from enhanced privacy compliance and improved security configurations to strengthen user trust and regulatory adherence.

15
53
17
55
62
65
20
onlineshopreferenzenskischulesnowboardschuleskifahren+2 more
Google Maps APIQuasar Framework (q-btn, q-layout, q-page etc.)JavaScriptCSS+1
2025-10-14T00:45:47.596Z
apek.cz favicon

Asociace pro elektronickou komerci - APEK

apek.cz

51
E-commerceCzech RepublicmediumMEDIUM

APEK (Asociace pro elektronickou komerci) is a Czech association representing e-commerce companies and entrepreneurs. It provides its members with support through certification (APEK Trustmark), educational workshops, legal assistance, and specialized studies. The association positions itself as a leading entity in the Czech e-commerce sector, helping members stay competitive and informed. The website is professionally designed, content-rich, and targets Czech e-commerce businesses and entrepreneurs. Technically, the website uses a custom CMS with common web technologies including jQuery, Google Maps API, Google Analytics, and Google Tag Manager. It is served over HTTPS with good SSL configuration, though some modern security headers are missing. The site is mobile optimized and has good SEO practices but could improve accessibility features. From a security perspective, the site shows a solid posture with HTTPS and no visible vulnerabilities or exposed sensitive data. However, it lacks visible privacy and cookie policies, security.txt, and vulnerability disclosure mechanisms. The WHOIS data is missing, which reduces domain registration trust but does not necessarily indicate malicious intent given the professional nature of the site. Overall, the site is trustworthy and professional but would benefit from enhanced transparency on privacy and security policies and improved WHOIS data availability.

35
10
17
70
77
85
40
e-commerceassociationtrustmarkworkshopswebinars+2 more
jQuery 1.11.3Google Maps APIGoogle Tag ManagerGoogle Analytics+1
2025-10-13T17:44:11.583Z
searchready.cz favicon

Search Ready

searchready.cz

65
E-commerceCzech RepublicsmallMEDIUM

Search Ready is a specialized SaaS provider offering intelligent search solutions tailored for e-commerce websites and online shops, primarily targeting the Czech Republic and Central European markets. Their platform enhances user experience and conversion rates through advanced features such as faceted filtering, real-time search, and intelligent language processing. The company is positioned as a niche player with a strong focus on delivering relevant and fast search results, supported by client testimonials and case studies from reputable brands like KIA and Kärcher-Satter. The business operates under the MEDIA FACTORY GROUP umbrella, indicating a stable corporate backing. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for consent management, with Cloudflare providing security and performance enhancements. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a smooth user experience. Security measures include HTTPS enforcement, CAPTCHA protection on forms, and cookie consent mechanisms, although some security headers could be more explicitly implemented. From a security perspective, the site maintains a good posture with no visible vulnerabilities or exposed sensitive data. However, it lacks a formal security policy or incident response contact, which could be improved to enhance trust and compliance. The WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for this business type. Overall, the site is professional, trustworthy, and compliant with GDPR requirements. Strategically, Search Ready should focus on publishing explicit security policies, enhancing security header implementation, and considering a vulnerability disclosure program to further strengthen its security culture and customer trust. Continuous monitoring of third-party scripts and maintaining GDPR compliance will be essential as the business scales.

60
25
17
77
72
85
100
e-commercesearchsaasczechrepublicwebflow+4 more
Webflow CMSGoogle Tag ManagerGoogle Analytics (GA4)Cookiebot (consent management)+4

Partner Domains:

www.mfgroup.cz
parent
www.shoptet.cz
partner

+1 more partners

2025-10-13T17:43:56.466Z
webczech.cz favicon

GlobeWeb Czech s. r. o.

webczech.cz

47
E-commerceCzech RepublicsmallHIGH

GlobeWeb Czech s. r. o. operates the Webczech.cz website, providing a comprehensive e-commerce platform tailored primarily for Czech and Slovak markets. Their business model centers on subscription-based e-shop solutions with additional services such as domain registration, web hosting, email, and technical support. The company positions itself as a leading e-shop provider in the Czech Republic, supported by positive customer testimonials and independent user ratings. Technically, the website employs a traditional web stack including jQuery, Bootstrap, Google Analytics, and Facebook Pixel, with good mobile optimization and moderate performance. While HTTPS is enforced, the absence of security headers and use of an outdated jQuery version present potential security risks. Privacy compliance is partially addressed with a privacy policy and GDPR readiness, but lacks a cookie consent mechanism. Security posture is moderate with secure forms and no visible vulnerabilities, but improvements are recommended in security headers and updated libraries. The lack of WHOIS data reduces domain trustworthiness, though the website content and business information appear professional and credible. Overall, the website is functional, professional, and trustworthy from a business perspective but would benefit from enhanced security practices and improved privacy compliance to strengthen its risk profile.

35
10
2
85
72
75
20
e-shopecommercewebhostingczechrepublicbusiness+3 more
jQuery 1.10.2Bootstrap CSSGoogle FontsGoogle Analytics+6
2025-10-13T16:40:27.839Z
galandr.com favicon

GALANDR COMMUNICATION s.r.o.

galandr.com

56
E-commerceCzech RepublicsmallMEDIUM

GALANDR COMMUNICATION s.r.o. is a Czech-based digital marketing agency specializing in comprehensive online marketing services for websites and e-commerce platforms. Positioned among the top 5% of Google’s highest performing agencies and recognized as a Meta Business Partner and Heureka Partner, the company offers services including PPC advertising, SEO optimization, email marketing, social media marketing, web analytics, and e-shop/web development. Their target audience primarily consists of online businesses and e-commerce operators seeking to enhance their digital presence and conversion rates. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies such as Google Tag Manager, Google Analytics, and Cookiebot for tracking and compliance. The site demonstrates excellent design quality, mobile optimization, and fast performance, with a clear navigation structure and professional content presentation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers like Content-Security-Policy are not evident. No vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain introduces some uncertainty regarding domain legitimacy, despite strong business indicators on the site. Overall, GALANDR.COM presents a professional and trustworthy digital marketing agency with solid technical infrastructure and compliance awareness. The main risk lies in the incomplete WHOIS data, which should be monitored. Strategic recommendations include enhancing security headers, publishing a terms of service page, and adding a security.txt file to improve transparency and incident response readiness.

30
35
17
70
52
60
100
onlinemarketingdigitalagencye-commerceppcseo+5 more
Google Tag ManagerGoogle AnalyticsCookiebotGoogle Adsense+2

Partner Domains:

ellity.eu
partner
conversionflow.co
partner
2025-10-13T16:37:22.250Z
ticketportal.cz favicon

Ticketportal

ticketportal.cz

56
E-commerceCzech RepubliclargeMEDIUM

Ticketportal.cz is a prominent Czech ticketing platform specializing in the sale of tickets for a wide range of cultural and sporting events including theater, music concerts, festivals, musicals, and sports. The website targets the general public in the Czech Republic and Slovakia, offering both direct ticket sales and verified resale options. The platform is well-established in its market segment, providing electronic ticketing and mobile app support to enhance user convenience. From a technical perspective, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, Facebook SDK, and various analytics and marketing tools such as Gemius and Piano (Tinypass). Hosting is supported by Azure CDN, ensuring reasonable performance and availability. The site is mobile-optimized and incorporates GDPR-compliant cookie consent mechanisms, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses security headers, and integrates bot protection via Google reCAPTCHA. However, it lacks a publicly available security policy and incident response contact information, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data slightly reduces domain trustworthiness but does not significantly impact the overall legitimacy given the professional presentation and operational indicators. Overall, Ticketportal.cz presents a secure, user-friendly, and professionally managed e-commerce platform with good privacy compliance and marketing transparency. Strategic enhancements in security documentation and direct contact information would further strengthen its trust profile.

15
40
17
55
62
80
100
ticketingeventsecommerceculturesports+3 more
jQuery 3.6.3Google Tag ManagerFacebook SDKGoogle reCAPTCHA+5
2025-10-13T13:08:53.199Z
base.com favicon

BaseLinker Sp. z o.o.

base.com

69
E-commercePolandmediumMEDIUM

Base.com, operated by BaseLinker Sp. z o.o., is a mature and established e-commerce integration platform founded in 1994 and headquartered in Wrocław, Poland. The company offers a SaaS solution that enables businesses to manage sales across multiple marketplaces such as Amazon, eBay, Etsy, and Shopify, with over 1700 integrations. The platform targets e-commerce sellers seeking streamlined order processing and bulk listing capabilities. The website reflects a professional and consistent brand image with good content quality and clear business focus. Technically, the site employs modern tracking and consent management tools including Google Tag Manager, Hotjar, and Cookiebot, and is hosted with Cloudflare DNS services, ensuring reliable performance and security. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers and explicit security policies are not evident. Privacy compliance is strong, supported by a comprehensive privacy policy and cookie consent mechanism. Overall, the website and domain registration data align well, indicating high legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen security and compliance.

60
95
2
70
65
80
100
e-commercesalesmanagementintegrationamazonebay+3 more
JavaScriptGoogle Tag ManagerCookiebotHotjar+1
2025-10-13T06:28:43.639Z