Technology security reports
23,995 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
1,751–1,800 of 23,995
BlueNet.czbluenet.cz
Technology · Czech Republic
45High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
BlueNet.cz is a Czech technology company specializing in the development of web and hybrid applications, with over ten years of experience serving a broad user base worldwide. Their business model combines free access to many of their applications with bespoke development and related services such as application analysis, design, and advertising. The company maintains a professional web presence with clear branding and a focus on quality content and user experience. Technically, the website leverages modern JavaScript frameworks including Symfony Stimulus and Hotwired Turbo, hosted likely via Active24, a known Czech hosting provider. Performance and mobile optimization are good, though accessibility could be improved. Security posture is moderate with HTTPS usage and CSRF protections in place, but lacks explicit security headers and published incident response policies. Privacy compliance is basic with privacy and cookie policies present but no active cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
- 881 alarm s.r.o.
81alarm.cz
Technology · Czech Republic
65Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
81 alarm s.r.o. operates a professional website focused on providing comprehensive security solutions using the AJAX alarm system. The company targets residential and commercial customers in the Czech Republic, offering sales, installation, and ongoing support services. The website reflects a strong market position with clear service offerings and regional contact points. Technically, the site employs modern web technologies including Cloudflare DNS and Google Tag Manager, with responsive design and good SEO practices. Security posture is adequate with HTTPS enabled, though lacking some advanced security headers and explicit incident response policies. Privacy compliance is partially addressed with a GDPR policy but lacks cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained, supporting the company's business credibility.
Pure Silver Creativeclienttasks.com
Technology
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
CIARA is a technology portal system used by Pure Silver Creative, providing a login interface for clients or users to access various internal modules and services. The website is built on WordPress with a modern tech stack including Vue.js and several JavaScript libraries, indicating a moderate level of digital maturity. The portal focuses on user authentication and access management, with no public-facing business content or marketing information on the login page. Security posture is adequate with HTTPS enforced and secure form handling, but lacks visible security headers and privacy compliance documentation. Overall, the site appears functional for its intended purpose but would benefit from enhanced security headers and privacy policies to improve trust and compliance.
Plesk Obsidian 18.0.73eliteinsights.net
Technology
70Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
The website eliteinsights.net/login_up.php serves as a login portal for Plesk Obsidian 18.0.73, a widely used web hosting control panel software. It targets web hosting providers, server administrators, and developers who manage hosting environments. The site primarily facilitates access to server management tools rather than providing extensive business or marketing content. The domain registration is consistent and stable, supporting the legitimacy of the service. Technically, the site uses modern JavaScript libraries including Prototype.js and RequireJS, and is built on the Plesk UI framework. It is hosted behind Cloudflare DNS, indicating some level of infrastructure robustness. The site shows basic mobile optimization and accessibility features but lacks advanced SEO and comprehensive content quality. Performance is moderate with no evident blocking or WAF interference. From a security perspective, the site implements a cookie consent mechanism aligned with GDPR requirements but lacks visible HTTP security headers such as CSP or HSTS. SSL configuration details are not available from the provided data, and no explicit anti-CSRF tokens are visible in forms, though a meta forgery protection token exists. The absence of a privacy policy and contact information reduces transparency and compliance confidence. Overall, the site is functional and legitimate for its purpose but would benefit from enhanced security headers, explicit privacy documentation, and improved transparency to increase trust and compliance. The AI overall score reflects a basic but operational site with room for security and privacy improvements.
BlueGhost.cz s.r.o.blueghost.cz
Technology · Czech Republic
67Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
BlueGhost.cz s.r.o. is a Czech-based software development company specializing in end-to-end digital services including web applications, e-commerce platforms, corporate websites, and digital strategy consulting. With over 21 years of experience and a team of 30+ specialists, they serve ambitious companies, startups, and public organizations. The company holds a Google Partner certification and showcases a strong portfolio of clients and awards, positioning itself as a reputable player in the Central European technology market. Technically, the website employs a modern technology stack including React, PHP frameworks (Symfony, Laravel), Kubernetes, and cloud platforms such as AWS, Azure, and Google Cloud. The site is well-optimized for mobile and accessibility, with good SEO practices and performance. Security posture is strong with HTTPS enforcement, security headers, and a detailed cookie consent mechanism, although explicit privacy policy and terms of service documents are not found, which is a compliance gap. WHOIS data is unavailable, limiting domain legitimacy verification, but the overall business credibility and digital maturity are high. Recommendations include publishing clear privacy and security policies and improving transparency around incident response.
AnalytikaWebu.czanalytikawebu.cz
Technology · Czech Republic
51Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
AnalytikaWebu.cz is a Czech-based privacy-focused web analytics platform founded in 2021. It offers realtime visitor tracking without storing IP addresses, sessions, or cookies, ensuring compliance with GDPR, CCPA, and PECR regulations. The service targets website owners seeking privacy-compliant analytics solutions and positions itself as a privacy-first alternative to traditional analytics providers. The platform provides features such as behavior analysis, acquisition channel tracking, geographic insights, custom event tracking, and data export capabilities. Technically, the website is built with modern web technologies including JavaScript, Google Tag Manager, and likely Laravel backend, hosted on Czech infrastructure with WEDOS as registrar and exon.io nameservers. The site is fast, mobile-optimized, and accessible with good SEO practices. Security posture is strong with HTTPS enforced and CSRF protection, though formal security policies and incident response information are absent. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and privacy compliance, making it a credible service in the web analytics market.
- Cyberhouse GmbH
cyber.house
Technology · Austria
73Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Cyberhouse GmbH is a well-established digital agency based in Austria, specializing in creating digital experiences through websites, web portals, and online shops. The company leverages leading CMS technologies such as TYPO3 and Storyblok to deliver tailored, high-quality web solutions. With multiple nominations and awards in the TYPO3 community and certifications as a Storyblok partner, Cyberhouse holds a strong market position as a trusted expert in the digital agency sector. Their services encompass UI/UX design, consulting, web development, project management, SEO, and ongoing support, targeting businesses seeking professional digital transformation and online presence enhancement. Technically, the website demonstrates a modern and performant infrastructure using ES modules, GSAP for animations, Swiper for carousels, and integrates CAPTCHA for form security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Privacy compliance is robust, with GDPR-aligned cookie consent mechanisms and a comprehensive privacy policy. Contact information is clearly presented, enhancing business credibility. From a security perspective, the site enforces HTTPS and employs CAPTCHA to mitigate automated abuse. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of a security.txt or incident response contact is noted as an area for improvement. WHOIS data is unavailable due to privacy protection, which is common and justified for this business type. Overall, Cyberhouse GmbH presents a professional, trustworthy, and technically sound digital agency profile with strong compliance and security practices, suitable for clients seeking reliable web development and digital strategy services.
RNDr. Rostislav Nétek, Ph.D.rostanetek.cz
Technology · Czech Republic
43High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
RNDr. Rostislav Nétek, Ph.D. operates a specialized technology service business focused on web development, e-commerce solutions, GIS applications, and consulting primarily for clients in the Czech Republic. The website reflects a mature, professional individual expert with over a decade of experience, academic credentials, and a strong local reputation. The business model centers on custom project work and mentoring, targeting organizations and individuals requiring tailored digital solutions. The site demonstrates a consistent brand and clear communication of services and expertise. Technically, the website is built on WordPress with modern themes and plugins, including GDPR-compliant cookie management and Google Analytics integration. Hosting is provided by a reputable Czech registrar and hosting provider, REG-WEDOS. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear cookie consent and policy documentation. Overall, the site is trustworthy, professional, and well-maintained.
Writesonicwritesonic.com
Technology
74Medium
NIS2 22 · GDPR 70
NIS2 22 · GDPR 70
Writesonic is a technology company founded in 2021 that offers an AI-powered SaaS platform focused on enhancing brand visibility across AI platforms such as ChatGPT and Claude. The platform provides comprehensive tools for AI visibility tracking, content creation, SEO optimization, and actionable insights to improve search rankings and content performance. Positioned competitively in the AI SEO and content optimization market, Writesonic targets businesses and marketers seeking advanced AI-driven solutions. The website demonstrates a high level of digital maturity, leveraging modern web technologies including Webflow CMS, Cloudflare DNS, and multiple analytics and marketing integrations such as Google Analytics, TikTok Pixel, and Mixpanel. Security posture is strong with HTTPS enforcement, security headers, and bot protection via hCaptcha, although DNSSEC is not enabled and explicit security policies are not published. Overall, the site is professional, well-branded, and optimized for performance and mobile use, with extensive tracking and marketing tools indicating a mature digital marketing strategy. The domain registration is consistent with the company profile, showing no suspicious patterns and appropriate domain age. Recommendations include enabling DNSSEC, publishing security and incident response policies, and providing direct security contact information to enhance trust and compliance.
eTailoretailor.ie
Technology · Ireland
47High
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
eTailor is a small Irish technology service provider specializing in website creation, SEO promotion, and maintenance services for businesses ranging from sole traders to multinational companies. Established in 2006, the company positions itself as an experienced and reliable partner for Irish companies seeking tailored internet solutions. The website is built on WordPress using the Divi theme, incorporating modern SEO tools such as Yoast SEO and tracking via Google Analytics and Google Tag Manager. The site is professionally designed with good mobile optimization and clear navigation, reflecting a solid digital maturity level. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though security headers and explicit privacy policies are missing, indicating room for improvement in compliance and security best practices. Overall, the website presents a trustworthy and professional image but would benefit from enhanced transparency in privacy and WHOIS data to strengthen business credibility and compliance.
Technology · Austria
48High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
DATEA Services GmbH is a small Austrian technology company specializing in digital transformation consulting, software development, and managed IT services. Their website presents a professional image with clear service offerings under the themes discover, create, and operate. The company targets businesses seeking to leverage digital opportunities and make strategic decisions to advance their operations. The website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, indicating a mature digital infrastructure. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS enforced but lacks explicit security headers and published security policies. Privacy compliance is good with a privacy policy and cookie policy present, though no cookie consent mechanism is implemented due to the absence of cookies. WHOIS data confirms the legitimacy and consistency of the domain registration, matching the business claims and founding date. Overall, the website is trustworthy and professional, with room for improvement in security best practices and incident response transparency.
Limeleaf Worker Collective, LLCblueskydirectory.com
Technology
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Bluesky Directory is a niche online platform providing a curated directory of tools, applications, and resources related to the Bluesky social media platform. Operated by Limeleaf Worker Collective, LLC, the website targets Bluesky users and developers seeking to discover and explore ecosystem offerings. The business model centers on content curation and community engagement through featured listings, profiles, and news aggregation. Technically, the site employs modern web technologies including Laravel Livewire, Alpine.js, and Cloudflare hosting, delivering a fast and mobile-optimized user experience. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.
Thanxthanx.com
Technology
70Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Thanx operates as a technology company specializing in loyalty, CRM, and guest engagement platforms primarily targeting restaurants, retailers, and malls. Positioned as a leader in restaurant loyalty solutions, Thanx offers a comprehensive suite of services including marketing automation, offer management, and open APIs to enhance customer lifetime value through data-driven digital experiences. The website reflects a mature and professional business with strong branding and customer trust signals such as testimonials and case studies. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Analytics, Crazy Egg, LinkedIn Insight Tag, and Google Optimize. The site is mobile-optimized, SEO-friendly, and employs cookie consent mechanisms aligned with GDPR compliance. Performance is moderate with good accessibility and user experience. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration trust analysis, but the website's professional presentation and business consistency mitigate some concerns. Overall, Thanx presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would enhance trust and compliance posture.
- AAdmiral
singroot.com
Technology
62Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website singroot.com currently serves a 404 Not Found error page with minimal content describing the domain's role as a service hosted by Admiral for digital publishers. The service focuses on copyright access control, privacy consent including GDPR compliance, and supporting subscriptions and donations. The technical infrastructure is based on Google Cloud Platform with DNS hosted on AWS name servers. The site uses industry-standard encryption and certificate rotation but lacks DNSSEC and security headers. No contact information, social media links, or business details are provided, limiting the ability to assess business credibility. The site is not optimized for SEO or mobile devices and contains no tracking or advertising scripts. Security posture is moderate with good SSL but missing some best practices. Overall, the site is safe with no adult or explicit content but is functionally a placeholder error page.
m|eventsconference2web.com
Technology
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
m|events is a specialized provider of advanced digital meeting services worldwide, focusing on onsite and online medical conference technology. The company offers unique tools and features designed to elevate event experiences, targeting event organizers and medical conference planners. Their business model is B2B, leveraging digital platforms to deliver comprehensive event solutions. The website is professionally designed, consistent in branding, and demonstrates good content quality and user experience. Technically, the site is built on the HubSpot CMS platform, utilizing modern web technologies and marketing automation tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with cookie consent mechanisms and GDPR-aligned policies. However, WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the website is trustworthy and professional, but domain registration details should be verified for full legitimacy assurance.
E-GO, s.r.o.webhouse.sk
Technology · Slovakia
62Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
WebHouse, operated by E-GO, s.r.o., is a Slovakian-based technology company specializing in domain registration, web hosting, and server services. The company positions itself as a reliable hosting provider managing over 56,000 domains with a strong emphasis on uptime and customer satisfaction. Their website offers multiple hosting packages tailored to different customer needs, supported by a professional and consistent brand presentation. Technically, the website employs modern frameworks such as Bootstrap and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. Cookie consent is managed comprehensively through Cookiebot, ensuring GDPR compliance. Security-wise, the site uses HTTPS with valid SSL certificates and implements reCAPTCHA on forms, though some security headers could be improved. Overall, the website is well-structured, user-friendly, and trustworthy, with clear contact channels and transparent business information.
- WAME s.r.o
wame.sk
Technology · Slovakia
43High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
WAME s.r.o is a Slovak technology company specializing in ecommerce solutions, mobile and web application development, and information systems. Established in 2013, the company leverages leading platforms such as Magento 2, Prestashop, Laravel Nova, and Vue.js to deliver tailored B2B services to businesses and organizations. Their market position is solidified by a decade of experience and a focus on modern ecommerce and SaaS services. Technically, the website is built on WordPress with Elementor, integrating multiple modern marketing and analytics tools while maintaining GDPR compliance and cookie consent mechanisms. Security posture is strong with HTTPS, DNSSEC, and appropriate consent management, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website is professional, trustworthy, and well-optimized for performance and SEO, reflecting a mature digital presence.
- Sticky Studio
sticky.studio
Technology
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Sticky Studio is a small SaaS company offering a collaborative brainstorming and planning tool designed to help teams and individuals untangle complexity through a shared canvas. The product emphasizes simplicity and real-time collaboration features such as sticky notes, voting, comments, and voice huddles. The business operates a freemium model with a free tier and a $5/month subscription offering enhanced features. The website is professionally designed with consistent branding and clear calls to action, targeting teams seeking lightweight collaboration solutions. Technically, the site uses modern JavaScript modules, Google Fonts, Stripe for payments, and Fathom Analytics for privacy-focused tracking. The site is mobile-optimized and performs moderately well, though accessibility and SEO could be improved. Security posture is adequate with HTTPS implied but lacks visible security headers and published security policies. WHOIS data is limited due to privacy protections and TLD restrictions, but no suspicious indicators are present. Overall, the site is trustworthy and functional with room for security and privacy enhancements.
WiseOxwiseox.ai
Technology · Iceland
71Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
WiseOx is a technology startup founded in 2023, offering AI-powered personalized assistants called "mascots" to automate tasks and improve information access for businesses. The website serves primarily as a login portal for existing users and provides a signup call to action for new users. The business model appears to be SaaS-based, targeting companies seeking AI automation solutions. The market position is emerging with a focus on AI assistant technology. Technically, the website uses modern JavaScript modules and CSS for its frontend but lacks advanced SEO metadata and accessibility features. The site is moderately optimized for mobile and performance but does not implement common security headers or DNSSEC, which are areas for improvement. Hosting and domain registration are managed via NameCheap with privacy protection enabled. From a security perspective, the site uses HTTPS (implied by domain and modern web standards) but lacks visible security headers and privacy/cookie policies, which reduces compliance and trustworthiness. No contact or incident response information is provided, limiting transparency. The domain is new but consistent with a startup profile, and privacy protection is justified. No WAF or blocking mechanisms were detected, allowing full content access. Overall, WiseOx presents a basic but functional online presence for a new AI SaaS business. Strategic improvements in security policies, privacy compliance, and contact transparency would enhance trust and compliance posture significantly.
Supersonicsupersonic.com
Technology
72Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Supersonic is a mobile game publishing platform under Unity Technologies, offering advanced technology and expert guidance to help mobile game developers maximize growth and profitability. The website is built on WordPress with a modern tech stack including Google Tag Manager, OneTrust for cookie consent, and reCAPTCHA for form security. The site is well-optimized for SEO and mobile devices, providing a professional user experience. Security posture is solid with HTTPS enforced and standard security practices, though improvements such as enabling DNSSEC and adding a Content-Security-Policy header are recommended. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the domain is legitimate and consistent with the business claims, reflecting a mature and trustworthy online presence.
Embracer Groupembracer.com
Technology · Sweden
70Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Embracer Group is a well-established global holding company specializing in the gaming and related media industries. Founded in 2004 and headquartered in Sweden, it manages a diverse portfolio of operative groups including THQ Nordic, PLAION, Coffee Stain, and others. The company targets investors, gamers, and media professionals, offering game development, publishing, and entertainment services. Its market position is strong, supported by a large catalog of franchises and a global presence with over 7,000 employees. The website reflects a mature digital presence with comprehensive corporate, governance, and investor information.
Purple Lamp Studiospurplelamp.com
Technology · Austria
49High
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Purple Lamp Studios is a Vienna-based game development company founded by industry veterans in 2020. The company focuses on creating games and related services, targeting gamers and industry partners. The website is professionally designed using WordPress with the Salient theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site is accessible, mobile-optimized, and SEO-friendly, though some technical improvements are possible. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration legitimacy, impacting trust. Overall, the site presents a credible business but would benefit from enhanced transparency and security practices.
ایران وب هاستirwebhost.com
Technology · Iran
60Medium
NIS2 10 · GDPR 50
NIS2 10 · GDPR 50
ایران وب هاست is a Persian-language web hosting and domain registration provider established since at least 2014, serving a broad range of customers from small businesses to large organizations in Iran. The company offers shared hosting, VPS, dedicated servers, SSL certificates, and domain services, positioning itself as a trusted hosting provider with over 14,000 websites hosted. The website is professionally designed using WordPress with the Enfold theme, optimized for SEO and mobile devices, and includes multiple trust seals such as eNamad and Samandehi. Technical infrastructure includes modern web technologies and cloud-based servers both inside and outside Iran. Security posture is good with HTTPS enforced and secure forms, but lacks some security headers and explicit privacy/cookie consent mechanisms. WHOIS data is missing or unavailable, which reduces domain trustworthiness despite the active business presence. Overall, the website is functional, professional, and trustworthy for its target market, but would benefit from improved transparency in domain registration and enhanced privacy compliance.
Ecliteclit.com
Technology · Turkey
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Eclit is a Turkish IT services company specializing in managed IT infrastructure, cloud platform services, and tailored technology solutions for businesses ranging from SMEs to large corporates. The company has a strong market presence with over a decade of operation, offering 24/7 system monitoring, cost-effective IT management, and robust data security solutions. Their website reflects a professional and consistent brand image with clear service descriptions and client testimonials. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Microsoft Clarity for user insights. Security posture is solid with HTTPS and domain transfer protections, though improvements such as enabling DNSSEC and security headers are recommended. Privacy compliance is basic with a cookie consent banner but lacks a clearly accessible privacy policy. Overall, the site is trustworthy and well-positioned in the technology sector.
- Tech-Accès Canada
visitesinteractives.ca
Technology · Canada
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Tech-Accès Canada operates a specialized interactive visit program (iVisit) aimed at supporting industrial technology projects within Canada. The website serves as a portal for companies to join a waitlist for the program, which is currently closed until April 2026. The organization positions itself as a niche facilitator in the Canadian industrial technology sector, providing advisory and client engagement services. The website is bilingual (French and English) and uses modern web technologies including Bootstrap, Kendo UI, and Google reCAPTCHA to ensure usability and security. The domain is registered since 2016 with privacy protection, consistent with a small to medium-sized non-profit or government-affiliated entity.
- Tech-Accès Canada
catcoupdepouce.ca
Technology · Canada
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Tech-Accès Canada operates a national initiative called Coup de pouce that connects innovative small Canadian businesses with 67 specialized technology access centers (CATs) affiliated with public colleges and cégeps. These centers provide applied research, technical advice, and training to foster innovation and productivity. The website is professionally designed, bilingual (French and English), and targets businesses and innovation stakeholders in Canada. The technical infrastructure leverages modern frontend technologies including jQuery, Bootstrap 4, and Kendo UI, providing a responsive and user-friendly experience. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are areas for improvement. The domain is privacy protected but shows no suspicious patterns and is consistent with the business profile. Overall, the site is functional and credible but could enhance its security posture and compliance transparency.
GoDaddy Operating Company, LLCgray-line.com
Technology · Germany
78Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
This website is a domain sales landing page hosted by GoDaddy, offering the domain gray-line.com for purchase or lease. It targets individuals or businesses interested in acquiring premium domains. The platform leverages GoDaddy's and Afternic's domain marketplace infrastructure, providing verified domain badges and customer trust signals such as a high Trustpilot rating. The technical infrastructure is modern, built on Next.js with React, and hosted on GoDaddy's platform, ensuring reliable performance and mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks explicit security headers and visible privacy policies, which are areas for improvement. Overall, the site is legitimate and professional, but could enhance privacy compliance and security transparency.
Simployerandfrankly.com
Technology · Norway
77Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Simployer is a technology company specializing in HR management and employee engagement solutions, offering a suite of products including employee surveys, HRM software, and expert HR support. The company targets HR professionals and managers seeking to improve workplace culture and productivity through data-driven insights. The website is professionally designed, mobile-optimized, and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and privacy compliance evident, though the absence of explicit Terms of Service and incident response contacts are areas for improvement. The missing WHOIS data introduces some uncertainty about domain registration legitimacy, but the overall brand and content quality support a trustworthy business presence.
Simployersimployer.com
Technology · Norway
77Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Simployer is a leading Nordic HR software provider offering a unified platform that covers the entire employee lifecycle from recruitment to offboarding. Their product suite includes HRM systems, employee surveys, expert compliance tools, pay equity analysis, learning programs, and handbooks. The company targets HR professionals, managers, and employees, positioning itself as a trusted partner with over 12,000 customers and 1.2 million users. Technically, the website is built on HubSpot CMS with modern frameworks like Bootstrap and integrates multiple marketing and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and consent management, though some gaps exist in incident response transparency and terms of service availability. The WHOIS data is missing or inaccessible, which raises some concerns about domain registration legitimacy, but the professional website content and business presence mitigate this risk. Overall, the site is well-designed, secure, and compliant with privacy regulations, making it a credible and trustworthy platform for HR solutions.
MAXXmarketing GmbHwebdesigner-profi.de
Technology · Germany
36High
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
MAXXmarketing GmbH operates the website www.webdesigner-profi.de, offering comprehensive web design, programming, SEO, and online marketing services primarily targeting businesses in Germany, Austria, and Switzerland. The company positions itself as a mid-sized agency with over 15 years of experience and a strong portfolio of more than 2000 projects, supported by trust signals such as Google Partner certification and notable client references. The website is professionally designed, mobile-optimized, and structured to provide clear navigation and service information. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, PHP, and MySQL, with asynchronous loading of analytics and marketing scripts such as Google Tag Manager and Yandex Metrika. Hosting appears to be provided by Your-Server.de based on nameserver data. Performance and SEO optimization are good, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks explicit security headers and incident response disclosures. From a security and compliance perspective, the site lacks visible privacy and cookie policies, consent mechanisms, and vulnerability disclosure information, which are areas for improvement. Contact information is clearly presented, enhancing business credibility. No WAF or blocking mechanisms were detected, allowing full content access and analysis. Overall, the website demonstrates a solid business and technical foundation with room to enhance privacy compliance and security best practices to further strengthen trust and regulatory adherence.
Famithemesfamithemes.com
Technology
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
FamiThemes is a small technology-focused business offering premium website themes aimed at enhancing online presence for website owners and developers. The website serves primarily as a directory for various theme subdomains and promotes partnership with IQS Directory, a manufacturing resource. The business model centers on theme design and distribution, targeting a niche market segment. Technically, the website employs standard HTML5 and JavaScript with HTTPS and strong security headers, but lacks advanced frameworks or CMS detection. The site is basic in design and content, with minimal mobile optimization and accessibility features. Security posture is good with proper HTTPS and security headers, but privacy compliance is poor due to absence of privacy and cookie policies and lack of contact information. WHOIS data is missing, raising concerns about domain legitimacy and trustworthiness. Overall, the site is functional but lacks comprehensive business and privacy transparency, which impacts its credibility and compliance standing.
- TOMRA
tomra.com
Technology · Norway
75Medium
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
TOMRA is a globally recognized leader specializing in reverse vending, recycling, and sensor-based sorting technologies that promote sustainability and circular economy principles. The company targets businesses and governments involved in resource recovery and waste management, offering a comprehensive portfolio of machines, digital tools, and industrial solutions. The website reflects a mature enterprise with a strong market position and a commitment to environmental responsibility. Technically, the site leverages modern frameworks such as Bootstrap and integrates advanced analytics and consent management tools, indicating a high level of digital maturity. Security-wise, the site enforces HTTPS, employs security headers, and uses reCAPTCHA to protect forms, though it lacks a dedicated security policy or public vulnerability disclosure program. The WHOIS data is notably missing or inaccessible, which is unusual for a large enterprise and may warrant further investigation. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for TOMRA.
- AAMBER STUDIO SA RO31273663
pattern.us
Technology · Romania
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Pattern Agency is a well-established digital and design agency based in Romania, founded in 2002 and operating under the legal entity AMBER STUDIO SA. The company offers a broad range of services including branding, web design and development, digital and social media marketing, video production, and event marketing. Their market position is supported by a portfolio of clients, awards, and recognitions, indicating a reputable presence in the digital agency sector. The website is professionally designed, mobile-optimized, and provides clear navigation and service descriptions, targeting businesses seeking creative digital solutions. Technically, the website is built on WordPress with the Avada theme and uses modern plugins such as Slider Revolution and CookieYes for cookie consent management. Hosting and DNS services are provided by GoDaddy and Cloudflare respectively, ensuring good performance and security. Analytics and marketing tools like Google Analytics, Google Tag Manager, Facebook Pixel, and HubSpot are integrated, reflecting a mature digital marketing infrastructure. From a security perspective, the site uses HTTPS and implements cookie consent with detailed categories, including necessary, analytics, and advertisement cookies. Google reCAPTCHA is used to protect forms from spam. However, there is room for improvement by enabling DNSSEC, adding security headers, publishing security policies, and providing incident response contacts. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a strong business credibility and technical maturity with good privacy compliance. The risk profile is low, but strategic enhancements in security policies and technical safeguards are recommended to further strengthen trust and compliance.
- QQuicket
quicket.com.au
Technology · Australia
63Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Quicket is a well-established online event ticketing platform serving primarily African and Australian markets. It offers a comprehensive suite of event management tools including ticket sales, reserved seating, ticket scanning, real-time analytics, and marketing features. The platform is trusted by over 200,000 events and emphasizes ease of use and customization for event organizers. Technically, the website is built on modern Angular framework with integration of multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and OneTrust for cookie consent. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. WHOIS data is unavailable due to privacy restrictions, which is common for commercial domains and does not raise immediate concerns. Overall, the website presents a professional, trustworthy, and user-friendly platform with moderate tracking and good compliance practices.
- SSaakuru Labs
saakuru.com
Technology
70Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Saakuru Labs is a pioneering technology company specializing in blockchain-integrated gaming solutions. Their platform empowers developers and gaming studios to embed advanced digital products into Web3 ecosystems rapidly, positioning themselves as innovators in the blockchain gaming sector. The company offers a comprehensive suite of services including incubation programs, tailored Web3 development, publishing support for the Asian market, funding initiatives, and ready-to-use blockchain gaming infrastructure. Their market position is strengthened by strategic partnerships with entities like Memecore and Oasys, and a strong presence across multiple social media channels. The website reflects a professional and consistent brand image with excellent content quality and user experience.
Matima Studiomatima-studio.com
Technology · Lithuania
52Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Matima Studio is a small game development company specializing in rhythm-based first-person shooter games, notably 'Tempo Punk'. The company benefits from EU funding and participation in the GameTech accelerator program, positioning itself in a niche market of rhythm shooters. Their website is professionally designed using WordPress and Elementor, showcasing their game and social media presence. Technically, the site uses modern web technologies and is hosted by a reputable provider, with HTTPS enabled and a moderate performance profile. However, the site lacks explicit privacy and cookie policies, security headers, and vulnerability disclosure information, which are areas for improvement. Overall, the security posture is moderate with no critical vulnerabilities detected, but enhancements in DNS security and security headers are recommended. The website content is safe for general audiences and well-aligned with the company's business focus.
No Brakes Gamesnobrakesgames.com
Technology · Lithuania
56Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
No Brakes Games is a Lithuania-based game development studio known primarily for its innovative physics-based games, including the popular Human: Fall Flat series. The company operates a professional website built on WordPress, showcasing its games, studio culture, and career opportunities. The site targets gamers, industry professionals, and potential employees, emphasizing creativity and unique gameplay experiences. The business model centers on game development and publishing, with a medium-sized team and a solid market position in the gaming industry. Technically, the website employs a modern technology stack including WordPress 6.8.3, Foundation CSS framework, and various JavaScript libraries for UI and interactivity. Hosting is provided by Hostex, with Google Analytics integrated for traffic analysis and Cookiebot managing GDPR-compliant cookie consent. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, reflecting good privacy compliance. However, DNSSEC is not enabled, and security headers are not explicitly detected, indicating areas for improvement. No exposed sensitive data or vulnerable libraries were found. The absence of explicit security policies or incident response contacts suggests a need for enhanced transparency and readiness. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements. The domain registration data aligns well with the business profile, supporting legitimacy. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security policies, and maintaining regular audits of third-party scripts to strengthen security posture and user trust.
Nordcurrentnordcurrent.com
Technology · Lithuania
74Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Nordcurrent is a medium-sized game development company founded in 2008, specializing in creating and publishing games across multiple platforms including Steam, GOG, Epic Store, Playstation, and Xbox. The company targets gamers and developers, positioning itself as an established player in the technology and media sectors. The website is professionally designed, mobile-optimized, and provides clear navigation and content relevant to its audience. Technically, the site is built on WordPress with modern frameworks like Bootstrap and uses reputable third-party services such as Cookiebot for cookie consent and Google Analytics for traffic analysis. Hosting is provided by Amazon AWS, ensuring reliable infrastructure. Security posture is good with HTTPS enforced, domain registration locks, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner supporting GDPR. Overall, the website is trustworthy, professional, and secure with minor areas for improvement in security disclosures and accessibility.
- Estoty LLC
estoty.com
Technology
69Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Estoty LLC is a well-established video game developer founded in 2010, specializing in creating engaging games across multiple platforms including mobile, PC, Switch, and VR. The company has achieved significant market success with over 1.5 billion downloads and numerous #1 hits in app stores, positioning itself as a notable player in the gaming industry. Their website reflects a professional and modern digital presence, emphasizing player experience and innovation. Technically, the site is built using modern frameworks such as Next.js and React, hosted on DigitalOcean, and optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved and a formal security policy is absent. Privacy compliance is addressed with a cookie consent mechanism and a basic privacy policy indicating GDPR awareness. Overall, the domain registration data supports the legitimacy of the business, showing consistency and appropriate domain age. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen trust and compliance.
- Global Game Jam, Inc.
globalgamejam.org
Technology · United States
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Global Game Jam, Inc. operates the Global Game Jam website, which serves as the central hub for the world's largest game creation event. The organization facilitates tens of thousands of participants worldwide, providing event registration, educational resources, and community engagement. The website reflects a mature and well-established non-profit entity with a strong global presence and reputable sponsors. Technically, the site is built on Drupal 10, integrates modern marketing and analytics tools, and is hosted with Cloudflare DNS services, ensuring reliable performance and security. However, there are minor gaps in privacy compliance, such as the absence of a cookie consent mechanism and no visible GDPR-specific policies. Security posture is solid with HTTPS and domain registration protections, but could be improved by enabling DNSSEC and publishing explicit security policies. Overall, the website is professional, trustworthy, and well-positioned in its niche, with recommendations to enhance privacy compliance and DNS security to further strengthen its digital maturity.
- Vortechs Media DOO
zemi.mk
Technology · North Macedonia
70Medium
NIS2 20 · GDPR 83
NIS2 20 · GDPR 83
Zemi.mk is a Macedonian-based web hosting provider and authorized .mk domain registrar operating since 2015 under the legal entity Vortechs Media DOO. The company offers a range of web hosting packages including shared, cloud, Windows, and Macedonian hosting, alongside domain registration and transfer services. Positioned as a leading local provider, Zemi.mk targets individuals and businesses in North Macedonia seeking affordable and reliable web services. The website is professionally designed, mobile-optimized, and provides clear navigation with comprehensive service descriptions and customer testimonials, enhancing trust and user experience. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Swiper.js, and integrates third-party services like Google Tag Manager and Tawk.to for analytics and live chat support. The site uses HTTPS with good SSL configuration, though some security headers are not explicitly detected. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR indicators. Contact options include email and web forms, with abuse reporting channels clearly provided. Security posture is solid with enforced HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data due to server-side errors limits domain registration verification, slightly impacting trustworthiness. No adult or questionable content is present, making the site safe for general audiences. Overall, Zemi.mk demonstrates a mature digital presence with good business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing a formal security policy and vulnerability disclosure program, and improving WHOIS data availability to strengthen legitimacy verification and trust.
HfG Schwäbisch Gmündopenmoji.org
Technology · Germany
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
OpenMoji is an academic open source project developed by students and professors at HfG Schwäbisch Gmünd, providing a comprehensive emoji library compliant with Unicode Emoji v16.0. The project targets designers, developers, and general users seeking free, consistent, and well-designed emojis under a Creative Commons license. The website demonstrates good content quality, clear navigation, and consistent branding, supported by a modern tech stack including Astro framework and JavaScript libraries such as jQuery and Fuse.js. Security posture is moderate with HTTPS usage but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and legitimate, supporting the project's credibility.
Lietuvos žaidimų kūrėjų asociacijagamejam.lt
Technology · Lithuania
38High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
LT Game Jam 2025 is a prominent event organized by Lietuvos žaidimų kūrėjų asociacija, positioning itself as the largest game jam in the Baltic region and part of the global game jam network. The website serves as an information and registration portal for participants, showcasing sponsors and partners from the gaming and technology sectors. The business model revolves around event organization, sponsorship, and community engagement within the game development industry. The target audience includes game developers, students, and enthusiasts interested in collaborative game creation.
Nimbus Hosting Ltdnimbushosting.co.uk
Technology · United Kingdom
74Medium
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
Nimbus Hosting Ltd operates a UK-focused premium managed web hosting platform targeting agencies and freelancers. Their website emphasizes managed WordPress hosting backed by UK-based support, positioning them as a specialized hosting provider in the UK market. The company has been established since 2011, indicating a mature presence in the hosting industry. Their business model centers on providing reliable, managed hosting services with a focus on performance and customer support. Technically, the website is built on WordPress with a modern tech stack including Font Awesome, Yoast SEO, Google Analytics, Google Tag Manager, and Cookiebot for consent management. The site demonstrates good mobile optimization and SEO practices, with moderate performance. Integration with marketing and analytics tools like HubSpot, Ortto, FullStory, and LinkedIn Insight Tag reflects a mature digital marketing infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of a published security policy, incident response information, or vulnerability disclosure reduces transparency. Contact information is limited to contact forms without explicit emails or phone numbers. Overall, the website is professional, trustworthy, and well-structured, with a strong UK market focus. The main risks relate to incomplete privacy and security policy disclosures and limited direct contact information. Strategic improvements in these areas would enhance compliance and trust.
- Sendtric
sendtric.com
Technology
53Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Sendtric is a technology-focused SaaS provider specializing in email countdown timers designed to maximize conversions and sales for marketers and e-commerce businesses. The website presents a professional and modern design built on WordPress with Astra theme and Elementor page builder, integrating SEO and analytics tools such as Yoast SEO and Google Tag Manager. The presence of cookie consent mechanisms and reCAPTCHA indicates attention to privacy and security best practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy or recent registration status. No explicit privacy policy, terms of service, or contact information were found, which could impact user trust and compliance. Overall, the technical infrastructure is solid, but improvements in transparency and compliance documentation are recommended.
Async Labsasynclabs.co
Technology · Croatia
66Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Async Labs is a Croatia-based digital agency specializing in software development, digital marketing, digital design, and blockchain development. Founded in 2020, the company targets businesses worldwide seeking innovative IT solutions and digital transformation. Their consultative approach and diverse service portfolio position them as a reliable partner for delivering effective digital products and marketing strategies. Technically, the website is built on WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tracking tools, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses standard security headers, but lacks visible privacy and cookie policies and incident response information, which are areas for improvement. Overall, Async Labs presents a professional and trustworthy online presence with good business credibility but should enhance privacy compliance and security transparency to strengthen user trust and regulatory adherence.
- Panteh Electronics
hypeware.hr
Technology · Croatia
56Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Hypeware.hr is a Croatian technology distribution and retail website specializing in products from major brands such as Samsung, Chuwi, and Hisense. The company appears to be a small-sized business founded in 2024, focusing on providing technology hardware and software solutions to both B2B and B2C customers. The website showcases product categories, partner logos, and provides a contact form for inquiries. Technically, the site is built on WordPress using Oxygen Builder and integrates modern tools like Google reCAPTCHA for security and cookie consent for GDPR compliance. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is good with HTTPS enforced and form protections, though it lacks advanced HTTP security headers and published security policies. WHOIS data confirms the domain is recently registered in Croatia with a consistent registrar and no privacy protection, supporting legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations, but could improve security headers and incident response transparency.
- Nanobit
nanobit.com
Technology · Croatia
53Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Nanobit is a well-established technology company specializing in game development, with a domain age of over 23 years reflecting its long-standing market presence. The company targets gamers and potential employees, offering a portfolio of games and career opportunities. The website is professionally designed using modern technologies such as Angular and Bootstrap, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and domain protections in place, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is addressed with a cookie consent mechanism and accessible privacy and terms of service pages. Overall, the website demonstrates high business credibility and trustworthiness with strong social media presence and consistent branding.
- QQuicket
quicket.co.za
Technology · South Africa
64Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Quicket is a well-established online event ticketing platform serving the African market, providing event organizers and attendees with a comprehensive suite of tools for event creation, ticket sales, and management. The platform supports a wide range of event types from large festivals to boutique events, boasting a user base of over 200,000 events. Technically, the website leverages modern web technologies including Angular, Google Tag Manager, Facebook Pixel, and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security policies, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the website content and technical setup suggest a legitimate business. Overall, the site scores well on content quality and business credibility but should enhance privacy compliance and security transparency.
24/7 Software247software.com
Technology
70Medium
NIS2 27 · GDPR 88
NIS2 27 · GDPR 88
24/7 Software is a B2B technology company specializing in operations and facility management software designed to enhance real-time communications, maximize user experience, and reduce operational risk. The company targets facility managers and operations teams in sectors such as sports venues, entertainment, convention centers, and airports. Their platform offers a comprehensive suite of tools including incident management, real-time communication, computerized maintenance management, guard tours, and advanced analytics. The website reflects a professional market position with notable clients and partners, supported by customer testimonials and a consistent brand presence. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies such as Google Analytics, AdRoll, and Wistia for marketing and analytics. The site is mobile-optimized with good SEO and accessibility features, though some improvements in security headers and published security policies could enhance its posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks explicit security policy documentation and vulnerability disclosure mechanisms. The WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and trust indicators suggest legitimacy. Overall, the site presents a solid digital presence with room for security and compliance enhancements. The risk assessment indicates a moderate to low risk profile with recommendations to improve security headers, publish incident response information, and consider vulnerability disclosure to strengthen trust and compliance.