Technology security reports
23,995 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
20,201–20,250 of 23,995
- AAppXite
appxite.com
Technology
61Medium
NIS2 22 · GDPR 68
NIS2 22 · GDPR 68
AppXite operates a sophisticated multi-tier, multi-vendor, multi-cloud platform designed to facilitate as-a-service subscription and consumption offers. The company targets distributors, telcos, MSPs, and vendors, enabling them to automate and scale subscription, consumption, and AI-based services globally. The platform offers key services including CPQ, subscription billing and management, partner management, provisioning, invoicing, and sales analytics. The website is professionally designed, leveraging HubSpot CMS and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital presence. Technically, the website employs modern web technologies and frameworks, including jQuery, FontAwesome, and Slick Carousel, hosted likely on HubSpot infrastructure. The site is mobile-optimized with good SEO and accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not fully implemented. No visible vulnerabilities or exposed sensitive data were detected. The WHOIS data is notably absent or inaccessible, which raises concerns about domain registration legitimacy. Despite this, the website content and business information appear credible and consistent with a legitimate technology platform provider. The absence of contact emails and phone numbers on the site is a minor gap in transparency. Overall, AppXite presents a strong business and technical profile with room for improvement in security policy transparency and domain registration clarity. Strategic recommendations include enhancing security headers, publishing a security policy, and clarifying domain registration details to improve trust and compliance.
- Scandic Fusion
scandicfusion.com
Technology · Latvia
59Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Scandic Fusion is an IT consulting and implementation company specializing in business intelligence solutions, including data analytics, artificial intelligence, and enterprise performance management. The company positions itself as a trusted partner for leading global businesses, offering tailored services that drive intelligent business decisions and strategic growth. Their website reflects a professional and consistent brand image with clear service offerings and client testimonials. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as JavaScript, SVG graphics, and Google Tag Manager for analytics. The site is mobile-optimized and demonstrates good performance and SEO practices. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS with excellent SSL configuration and secure form validation. Nonetheless, it lacks important security headers and does not provide explicit incident response or vulnerability disclosure policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the website presents a moderate security posture with room for improvement in privacy compliance and security best practices. The business credibility is strong, supported by consistent WHOIS data and a clear market position. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security policies to improve trust and compliance.
The Customization Grouppicanova.org
Technology · Germany
58Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
The Customization Group is a large technology company specializing in mass customization solutions, serving millions of customers globally through tailored B2B and API services. The company positions itself as a world market leader in this niche, focusing on sustainable and scalable customization offerings. The website is professionally designed using the Wix platform, with a clear business description and structured data supporting SEO and business identity. However, the absence of WHOIS data raises concerns about domain registration legitimacy and transparency. Technically, the site employs modern web technologies and security hardening scripts, ensuring a good security posture with HTTPS and client-side protections. Privacy and cookie policies are not found, and contact information is limited to a postal address, which impacts privacy compliance and business credibility scores. Overall, the site is functional and professional but would benefit from enhanced transparency and compliance documentation.
- ABC software
abcsoftware.lv
Technology · Latvia
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
ABC software is a Latvian software development company specializing in integrated IT solutions primarily for law enforcement agencies and e-government systems. Their offerings include electronic document processing, IT system integration, and security solutions tailored for public sector clients. The company maintains partnerships with notable technology providers such as Oracle, Microsoft, and Sitecore, and collaborates on government projects, indicating a strong market position within Latvia's public IT sector. Technically, the website is built on ASP.NET Web Forms with a C# backend and uses jQuery for client-side scripting. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. Security posture is moderate; while HTTPS is presumably enabled, no security headers were detected, and no explicit security or incident response policies are published. The absence of privacy and cookie policies indicates compliance gaps. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the website presents a professional image with clear contact information and partner affiliations but would benefit from enhanced security practices and compliance documentation.
- IIdeaport Riga
ideaportriga.com
Technology
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Ideaport Riga presents itself as a specialized provider of AI-driven CRM solutions focusing on Salesforce and Siebel platforms. The website content is professionally crafted, targeting businesses seeking to enhance their CRM capabilities with AI technologies. The technical infrastructure leverages HubSpot CMS and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, and Leadfeeder, indicating a mature digital marketing approach. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS usage but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. Overall, while the business proposition is clear and the website is functional and well-designed, the lack of registration and compliance information introduces risk factors that should be addressed.
- GGeta AS
geta.no
Technology · Norway
82Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Geta AS is a Norwegian e-commerce focused consulting firm specializing in strategy, development, UX, and digital commerce solutions. The company targets Norwegian businesses seeking to enhance their online retail and digital commerce capabilities. The website demonstrates a solid market position with a range of services including e-commerce, CMS, PIM, order processing, integrations, and support. Technically, the site leverages modern Microsoft ASP.NET Core technologies hosted on Microsoft Azure, with integrations of Google Tag Manager, Facebook Pixel, and Application Insights for analytics and monitoring. The presence of a comprehensive cookie consent mechanism and privacy policy links indicates good privacy compliance aligned with GDPR requirements. Security posture is strong with HTTPS enforced and anti-forgery protections, though some security headers could be explicitly verified. The lack of WHOIS data is a concern but may be due to privacy protection or recent domain registration. Overall, the website is professional, well-structured, and trustworthy, though improvements in visible contact information and security policy disclosures are recommended.
TestDevLabtestdevlab.com
Technology
72Medium
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
TestDevLab is a specialized software quality assurance and testing service provider offering a comprehensive range of services including test automation, performance testing, security testing, regression testing, and accessibility testing. The company targets businesses and software development teams seeking to improve software quality and reliability. Their market position is strong as a leading QA provider with a professional and content-rich website showcasing extensive service offerings and case studies. Technically, the website is built on modern frameworks such as Next.js and React, with good performance, mobile optimization, and accessibility features. Security posture is solid with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is addressed with cookie consent and a comprehensive privacy policy. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and registration transparency. Overall, the website demonstrates a mature digital presence with room for improvement in transparency and direct contact information.
FirstHostfirsthost.lv
Technology · Latvia
61Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
FirstHost is a Latvia-based technology company specializing in high-performance web hosting, dedicated servers, and cloud VPS solutions primarily targeting European businesses. With over 18 years of experience and a client base exceeding 9,000, the company positions itself as a reliable and scalable IT infrastructure provider. Their services include dedicated servers, cloud hosting, domain registration, SSL certificates, and virtual desktop infrastructure, catering to enterprises seeking robust and flexible hosting solutions. The website reflects a mature digital presence with multilingual support and multiple currency options, indicating a broad regional focus. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and performance. Integration with analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Yandex Metrika demonstrates a data-driven approach to customer engagement. The site is mobile-optimized and exhibits good SEO practices, contributing to its accessibility and reach. From a security standpoint, the site enforces HTTPS and uses reputable third-party services for live chat and analytics. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are absent, representing areas for improvement. The lack of WHOIS data due to query limits restricts full domain trust verification, though the website content and business indicators suggest legitimacy. Overall, FirstHost presents a solid business and technical profile with room to enhance transparency around security and compliance. Strategic improvements in security documentation and WHOIS data availability would strengthen trust and compliance posture.
Jellyfish.techjellyfish.tech
Technology · Ukraine
56Medium
NIS2 22 · GDPR 80
NIS2 22 · GDPR 80
Jellyfish.tech is a Ukraine-based full-stack web and mobile development agency established in 2015. The company specializes in customer-centric IT consulting services, focusing on scalable and high-performing digital experiences. Their key services include MVP development, custom web and mobile development, software modernization, product discovery, and EdTech solutions. The agency positions itself as a reliable partner for businesses seeking agile and result-driven software development, leveraging modern technologies such as Python, Django, React, and FastAPI. Technically, the website is built on WordPress and hosted on DigitalOcean, utilizing a modern tech stack with integrations for analytics and marketing tools like Google Analytics, Facebook Pixel, Hotjar, and Calendly. The site is mobile-optimized with good SEO practices and a professional design. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and explicit security headers. Forms are protected with Google reCAPTCHA, but there is no published security policy or incident response contact. The WHOIS data is public and consistent with the business profile, indicating a legitimate and stable domain. Overall, Jellyfish.tech demonstrates a solid business and technical foundation with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen trust and regulatory adherence.
DDSTUDIOddstudio.com
Technology · United States
55Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
DDSTUDIO is a boutique design consultancy specializing in industrial design, user experience (UX), and user interface (UI) design. Established in 1997, the company positions itself as a premier partner for industry innovators seeking strategic, business-driven design solutions that empower people, influence positive change, and drive commercial success. Their services focus on human-centered design methodologies to create compelling, market-ready products. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content including case studies and client testimonials, indicating a strong market position in the technology sector. Technically, the website is built on WordPress using the Enfold theme and Avia framework, incorporating modern JavaScript libraries such as Swiper.js and Tippy.js, and integrates analytics tools like HubSpot and Google Analytics. The site is mobile-optimized and accessible, with good SEO practices and performance rated as moderate. Security posture is adequate with HTTPS enforced and use of reCAPTCHA, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is strong, with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, DDSTUDIO demonstrates a solid security and compliance posture with no critical vulnerabilities detected. The domain registration is consistent with the business history, enhancing trustworthiness. Strategic recommendations include enhancing DNS security, publishing a security.txt file, and improving security header implementation to further strengthen the security posture.
- SSIA „LAK 4”
lak4.lv
Technology · Latvia
43High
NIS2 0 · GDPR 0
NIS2 0 · GDPR 0
SIA „LAK 4” is a Latvian small-sized company specializing in ERP consulting and implementation services, particularly focused on the iScala software suite by Epicor. Founded in 2006, the company offers IT audits, training, system customization, and ongoing support to businesses seeking ERP solutions. The website content clearly communicates the company's services and contact information, targeting Latvian enterprises interested in business management software. Technically, the website is built with basic HTML, CSS, and JavaScript, incorporating Twitter widgets for social media integration. However, it lacks modern security features such as HTTPS and security headers, and no privacy or cookie policies are present, indicating limited compliance with data protection regulations. The absence of WHOIS data due to query limits restricts domain legitimacy verification, but the website content aligns with a legitimate small business profile. Overall, the site demonstrates moderate professionalism but requires significant improvements in security and privacy compliance to enhance trustworthiness and user safety.
- Autentica SIA
autentica.lv
Technology · Latvia
72Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Autentica SIA is a Latvian IT company specializing in business and IT strategy alignment, software development, implementation, and support services. The company serves clients primarily in the energy and government sectors, offering a broad range of IT solutions including public sector software, integration, mobile and web development, and automation. The website presents a professional image with clear service descriptions, client logos, and employee testimonials, indicating a stable market position and trustworthiness. Technically, the website is built on WordPress with common technologies such as jQuery, Bootstrap, and Google Maps API. SEO is enhanced by the Yoast SEO plugin, and the site is mobile-optimized with good navigation and content quality. Performance is moderate, with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and a cookie consent mechanism that supports GDPR compliance. However, the absence of security headers and incident response information suggests areas for enhancement. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy and professional, though the lack of WHOIS data limits full domain legitimacy assessment. Strategic recommendations include adding security headers, publishing security policies, and improving accessibility to strengthen compliance and security maturity.
Technology · Latvia
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Elektronikas un datorzinātņu institūts (EDI) is a Latvian research institute specializing in electronics and computer science. The organization focuses on innovative research and technological solutions in sectors such as smart transport, smart manufacturing, healthcare, space technologies, and security. The website presents a professional and content-rich platform targeting researchers, industry partners, and students, with multiple ongoing projects and services showcased. Technically, the site is built on WordPress with popular plugins like WPBakery and Slider Revolution, indicating a mature but somewhat dated infrastructure. Security posture is adequate with HTTPS enforced but lacks modern security headers and uses outdated libraries, which could pose risks. Privacy compliance is basic, with no visible cookie consent mechanisms or detailed privacy policies. Overall, the site reflects a credible research entity but would benefit from technical and security updates to enhance trust and compliance.
Emergnemergn.com
Technology
69Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Emergn is a professional services company specializing in building product-centric companies and capabilities through consulting, capability development, and software engineering. They serve large enterprises and global brands, helping them accelerate digital transformation and product delivery. The website demonstrates a mature digital presence with comprehensive content, strong branding, and a focus on client success stories and methodologies such as VFQ. Technically, the site is built on WordPress with modern SEO and analytics tools, optimized for performance and mobile use. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and incident response details could be improved. The absence of WHOIS data slightly reduces trust but is offset by the professional site and compliance indicators. Overall, Emergn presents as a credible and established player in the technology consulting space.
Brian Craybriancray.com
Technology
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website briancray.com serves as a personal portfolio for Brian Cray, a front-end software engineer currently working at Apple and previously at Topsy. The site provides minimal content focused on professional background with links to LinkedIn and GitHub profiles, targeting technology professionals and recruiters. The business model is personal branding and showcasing open source contributions, positioning Brian as an individual professional within the technology sector. The domain is well-established since 2006, indicating a stable online presence. Technically, the website is built using Svelte framework with CSS styling and is hosted with Cloudflare DNS services. The site loads quickly and is mobile responsive at a basic level but lacks advanced SEO and accessibility features. No CMS or analytics tools are detected, and the site does not implement privacy or cookie policies. Security is adequate with HTTPS enabled and domain registration protections in place, but DNSSEC is not enabled and no security headers are present. From a security perspective, the site shows a moderate posture with no visible vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies, security headers, and incident response information limits compliance and transparency. The lack of contact information and forms reduces potential attack surfaces but also limits user engagement and trust signals. Overall, the website is functional as a personal portfolio but would benefit from enhanced security practices, privacy compliance, and richer content to improve trustworthiness and professional presentation. Strategic improvements in security headers, DNSSEC, and policy disclosures are recommended to elevate the site's security and compliance posture.
- AAGroup
agroup.lv
Technology · Latvia
49High
NIS2 25 · GDPR 28
NIS2 25 · GDPR 28
AGroup is a technology company specializing in Human Capital Management solutions, offering a comprehensive suite of HR digitalization services and software modules including payroll, core HR, time and attendance, performance evaluations, recruitment, and more. The company targets businesses primarily in Latvia, Estonia, Lithuania, and Poland, positioning itself as a regional leader in HR management technology. The website is built on WordPress CMS with modern technologies and provides a professional, content-rich user experience. Security posture is solid with HTTPS and reCAPTCHA implemented, though some security headers and explicit privacy policies are missing. Tracking is done via Google Analytics and Facebook Pixel (commented out), with cookie consent managed by CookieYes. WHOIS data is unavailable due to query limits, limiting full domain trust assessment. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.
Blockvis, SIAblockvis.com
Technology · Latvia
69Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Blockvis, SIA is a Latvia-based technology company specializing in the development of intelligent AI agents and blockchain-based solutions. Founded in 2017, the company leverages deep blockchain expertise to deliver secure, transparent, and high-performing AI-driven products and services. Their market position is that of a niche technology provider focused on AI agent development, prompt engineering, LLM integration, autonomous workflows, and blockchain security consulting. The website reflects a professional and modern digital presence with clear service offerings targeting businesses and developers in the AI and blockchain sectors. Technically, the website is built using modern frameworks such as Next.js and React, hosted with Cloudflare DNS services, and optimized for fast performance and mobile responsiveness. The site demonstrates good SEO and accessibility practices but lacks some advanced security headers and DNSSEC, which could enhance its security posture. No forms or tracking scripts were detected, indicating minimal user data collection. From a security perspective, the site uses HTTPS and has domain registration protections in place, but it lacks published privacy and cookie policies, which are critical for GDPR compliance. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance trust and compliance. The WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration. Overall, Blockvis presents a credible and professional technology service business with a solid technical foundation but should address privacy compliance and security best practices to improve trust and regulatory adherence.
- LLab73 | Digital-agency
lab73.digital
Technology · United States
51Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Lab73.digital is a digital agency operating since 2017, targeting clients seeking digital services. The website content is minimal, primarily showing a loading animation with no visible textual or navigational content in the provided HTML snapshot. The technical infrastructure includes Google Tag Manager and Google Analytics for tracking, hosted likely via GoDaddy given the registrar and nameservers. The website lacks visible privacy, cookie, or terms of service policies and does not provide contact information, which limits transparency and compliance. Security posture is basic with no DNSSEC and no security headers detected, though HTTPS is presumed given the domain and Google Tag Manager usage. Overall, the site shows moderate technical implementation but poor content quality and privacy compliance.
eoacomdevemailonacid.com
Technology
84Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Email on Acid is a technology company specializing in email pre-deployment solutions, offering a comprehensive SaaS platform that enables marketers and developers to build, test, optimize, and analyze email campaigns. The company holds a strong market position as a leading provider in email testing and analytics, supported by industry certifications such as SOC 2 type 1, ISO 27001, and GDPR compliance. Their platform targets email marketing professionals seeking to improve campaign quality and ROI through advanced testing and analytics tools. Technically, the website is built on WordPress with modern SEO and performance optimizations, including the use of Yoast SEO, WP Rocket, and integrations with Google Analytics, Google Tag Manager, RudderStack, and Qualified for marketing and analytics. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, contributing to a fast and user-friendly experience. From a security perspective, the company emphasizes compliance and certifications, though some security headers are not explicitly detected. The site uses HTTPS and secure forms, and includes cookie consent mechanisms aligned with GDPR. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, though the professional presentation and certifications mitigate this concern. Overall, Email on Acid presents a mature and trustworthy digital presence with strong business credibility and technical infrastructure. The main risk lies in the lack of publicly available domain registration data, which should be monitored. Strategic recommendations include enhancing security headers, publishing incident response contacts, and establishing a vulnerability disclosure policy to further strengthen trust and security posture.
Sigma Embedded Engineering ABsigmaembeddedengineering.se
Technology · Sweden
42High
NIS2 47 · GDPR 25
NIS2 47 · GDPR 25
Sigma Embedded Engineering AB is a Swedish technology consulting company specializing in embedded engineering, product development, electrification, AI, digitalization, and connectivity solutions. As part of the larger Sigma Group, it benefits from a strong market position with a medium-sized workforce and a broad service offering targeting technology professionals and clients in energy and transport sectors. The website reflects a professional and consistent brand image with clear contact information and active recruitment efforts. Technically, the website is built on WordPress with modern plugins and tools such as Yoast SEO, Google Analytics, and Google Tag Manager. It is hosted by Loopia AB, a reputable registrar and hosting provider. The site is mobile optimized and performs moderately well, with good SEO practices implemented. However, some improvements could be made in accessibility and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and important security headers. There is no visible privacy policy or incident response information, which are gaps in compliance and security transparency. Cookie consent is implemented properly, indicating some attention to privacy compliance. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic recommendations include adding a privacy policy, enabling DNSSEC, publishing security policies, and implementing security headers.
Sigma Groupsigmacivil.se
Technology · Sweden
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Sigma Group is a large, well-established consulting company headquartered in Sweden, specializing in technological consulting services with a strong presence across multiple countries. The company is owned by Danir AB and operates several subsidiaries focused on different industry verticals. The website presents a professional and comprehensive digital presence with clear business descriptions, career opportunities, and news updates. Technically, the site uses modern frameworks such as Vue.js and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and secure form handling, though explicit security headers and incident response policies are not evident. Privacy compliance is well addressed with clear cookie and privacy policies including consent mechanisms. Overall, the website demonstrates a high level of professionalism and trustworthiness, though WHOIS data for the exact www subdomain is missing, which slightly impacts domain trust assessment.
Sigma Industry Evolutionsigmaindustryevolution.se
Technology · Sweden
48High
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Sigma Industry Evolution is a Swedish consulting company specializing in product development with a focus on mechatronics, embedded systems, robotics, and AI technologies. As part of the larger Sigma Group owned by Danir AB, it leverages a strong market position and a broad partner ecosystem to deliver integrated engineering solutions. The website reflects a professional and modern consulting firm targeting businesses requiring advanced engineering expertise. Technically, the site is built on Drupal 9 with modern libraries and includes analytics and user behavior tracking tools such as Google Tag Manager and Hotjar. The security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking scripts. Overall, the site is well-designed, content-rich, and trustworthy, with room for improvement in security and privacy transparency.
Sigma Industry Solutionssigmaindustrysolutions.se
Technology · Sweden
52Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Sigma Industry Solutions is a Swedish engineering and IT consultancy specializing in advanced projects within automation and digitalization sectors. As part of the larger Sigma Group with 5000 employees, it combines the agility of a smaller firm with the resources of a large organization. Their key services include industrial and process automation, digitalization, and support services. The website is professionally designed using Drupal 9 and modern web technologies, optimized for mobile and accessibility, and includes Google Analytics for user tracking. Security posture is good with HTTPS enabled and no visible vulnerabilities, though DNSSEC is not enabled and security headers are missing. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided including email and physical address. The domain registration is consistent with the business claims and shows no suspicious patterns.
Sigma Softwaresigma.software
Technology · Ukraine
77Low
NIS2 47 · GDPR 65
NIS2 47 · GDPR 65
Sigma Software is a well-established global technology consulting and software development company founded in 2002, with a strong market position among the top 100 outsourcing companies worldwide. The company offers a broad range of services including custom software development, IT consulting, dedicated teams, cybersecurity, AI consulting, and legacy system modernization. Their target audience includes enterprises, product houses, and startups seeking reliable technology partners. The website reflects a mature digital presence with professional design, comprehensive content, and multiple global offices, primarily in Ukraine and Europe. Technically, the website is built on WordPress with modern frameworks and integrates Google Tag Manager, Google Analytics, and cookie consent mechanisms, indicating a good level of digital maturity. The site is mobile-optimized, accessible, and SEO-friendly, although performance is moderate. Security posture is solid with HTTPS and cookie consent but lacks explicit security headers and published security policies. No WAF or blocking mechanisms were detected, and the domain registration is privacy-protected but consistent with the business profile. Overall, the security posture is good but could be improved by publishing security policies, incident response contacts, and implementing security headers. Privacy compliance is basic due to the absence of a visible privacy policy and terms of service. Business credibility is high with clear contact information, social proof, and trust indicators. The risk level is moderate with recommendations to enhance transparency and security best practices.
Hi Brohibro.co
Technology · Turkey
70Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Hi Bro is a Turkish digital marketing and creative agency specializing in web design, SEO, social media management, PPC advertising, and production services. The company targets businesses primarily in Kocaeli, Kıbrıs, İstanbul, and Ankara, offering tailored digital solutions with over 15 years of experience. Their website demonstrates a professional design with modern technologies and interactive content, reflecting a mature digital presence. The technical infrastructure includes Bootstrap, jQuery, Google Tag Manager, Facebook Pixel, and Cloudflare DNS, supporting a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data shows domain privacy protection typical for agencies, with domain age consistent with business claims. Overall, the website is functional, professional, and credible but could improve privacy transparency and security practices.
senserobotchesssenserobotchess.com
Technology
73Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
SenseRobot is an e-commerce business specializing in AI-powered robotic board games including Chess, Go, Gomoku, and Xiangqi. The company positions itself as the official AI provider of the European Chess Union, targeting enthusiasts, learners, and educational institutions. Their products feature advanced robotics and AI capabilities to enhance learning and play experiences. Technically, the website is built on the Shopify platform, leveraging modern web technologies and third-party marketing tools such as Klaviyo and Facebook Pixel. The site is well-structured, mobile-optimized, and includes privacy and cookie consent mechanisms, reflecting a good level of digital maturity. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security headers and incident response information are lacking. The absence of WHOIS registration data is a notable concern, potentially indicating a very new domain or privacy protection, which slightly impacts trust. Overall, the website is professional and functional, but improvements in transparency and security policies are recommended.
Stellisstellis.co
Technology · Poland
45High
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Stellis is a small technology company founded in 2021, specializing in sports technology solutions. Their flagship product, Stellis One, offers an integrated platform for sports organizations. The company positions itself as a trusted tech partner for the digital transformation of sports entities, leveraging a team of executive managers, developers, and consultants with a passion for sports. Their market position is focused on innovation and comprehensive digital tools tailored to sports organizations. Technically, the website is built on WordPress with modern plugins and uses Google Analytics for tracking. The site is mobile optimized and SEO friendly, though performance is moderate. Security posture is good with HTTPS enabled and no obvious vulnerabilities, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and compliance.
- BBelz & Rupp Internetmanagement Saarbrücken
belz-rupp.com
Technology · Germany
58Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Belz & Rupp Internetmanagement Saarbrücken is a small digital agency based in Germany specializing in web design, TYPO3 CMS implementation, online marketing, logo development, and print services. The company targets businesses and organizations seeking affordable and professional digital and print solutions. Their market position appears local to Saarbrücken with a focus on quality service delivery. Technically, the website is built on the TYPO3 CMS platform, enhanced with jQuery and Lightbox for UI components, and uses Matomo for analytics alongside Usercentrics for GDPR-compliant consent management. The site is well-structured, mobile-optimized, and employs HTTPS with good privacy practices, although some security headers are missing. From a security perspective, the site demonstrates a moderate security posture with HTTPS and consent management but lacks explicit security policies and vulnerability disclosure mechanisms. The absence of WHOIS domain registration data is a notable anomaly that impacts trust and legitimacy assessments. Overall, the website is professional and functional with good privacy compliance but requires verification of domain registration and enhancement of security headers and policies to improve trustworthiness and security posture.
Falconyincy.io
Technology
78Low
NIS2 27 · GDPR 95
NIS2 27 · GDPR 95
Falcony is a technology company specializing in mobile-first incident reporting and compliance solutions. Their flagship product, Observe, enables users to report incidents directly from their mobile devices, streamlining compliance processes. Recently, Falcony joined the WeKomply family, enhancing its market position and expanding its compliance solution offerings. The website is professionally designed using Webflow CMS, with good mobile optimization and clear navigation. It employs modern technologies including Google Tag Manager and Cookiebot for analytics and consent management. Security posture is strong with HTTPS enforced and comprehensive cookie consent mechanisms in place. However, the absence of visible contact information and security incident response details suggests areas for improvement. Overall, the website reflects a legitimate and professional SaaS business with a focus on compliance and user privacy.
Falconyfalcony.io
Technology · Finland
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Falcony is a SaaS platform focused on enabling employee and stakeholder involvement to build safer, happier, and more productive workplaces. The company offers a modular compliance and reporting platform with features including audits, observations, ESG compliance, risk management, whistleblowing, and tenant portals. Positioned as part of the WeKomply family, Falcony targets enterprises and organizations across multiple sectors such as technology, real estate, energy, transportation, and hospitality. The website is professionally designed, multilingual, and integrates modern web technologies to deliver a seamless user experience. Privacy and cookie consent mechanisms are implemented, reflecting good compliance practices. However, direct contact information such as emails and phone numbers are not publicly listed, with contact primarily via web forms.
Danir ABdanir.se
Technology · Sweden
49High
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Danir AB is a well-established, family-owned investment and holding company based in Sweden, focusing on long-term entrepreneurship and social engagement. Founded in 1986, Danir owns and develops a diversified portfolio of subsidiaries primarily in technology, energy, real estate, and other sectors. The company emphasizes organic growth and local leadership within its subsidiaries, maintaining a stable and decentralized management approach. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content about its holdings and social initiatives. Technically, the website is built on WordPress with modern plugins and integrates Google Tag Manager for analytics. It uses HTTPS and has a cookie consent mechanism compliant with GDPR. While the site performs moderately well and is mobile-optimized, there are opportunities to enhance security by enabling DNSSEC and adding more security headers. Accessibility features are basic but could be improved. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive data. The privacy and cookie policies are comprehensive and transparent, supporting GDPR compliance. However, no explicit security policy or incident response information is found, and no vulnerability disclosure or security.txt file is present. Overall, Danir's website demonstrates a strong business credibility and trustworthy online presence, with a good balance of content quality, technical implementation, and privacy compliance. Strategic improvements in security headers and accessibility would further strengthen its posture.
- QQuadranet
quadranet.com
Technology
54Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Quadranet operates as a technology company specializing in hosting and data center services, with a domain established in 1999 indicating a mature presence in the market. The website content is extremely minimal, consisting solely of a centered logo image on a black background, lacking any substantive information, metadata, or user engagement features. This minimalism severely limits the ability to assess the company's digital maturity or customer engagement strategies. Technically, the website shows no evidence of modern web technologies, frameworks, or CMS platforms, and lacks essential SEO and accessibility features. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy or cookie policies, which are critical for compliance and user trust. The WHOIS data reflects a legitimate and stable domain registration without privacy protection, supporting the domain's authenticity. Overall, the website's lack of content and security features presents a high risk for user trust and compliance, necessitating urgent improvements.
- Net Affinity Ltd.
netaffinity.io
Technology
72Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Net Affinity Ltd. operates an application platform accessible at app.netaffinity.io, likely serving the hospitality or travel technology sector. The website is primarily a login portal with minimal public-facing content, indicating a focus on existing customers or internal users. The technical infrastructure includes modern iconography via Font Awesome and bot mitigation through Google reCAPTCHA, reflecting a baseline digital maturity. However, the absence of visible privacy, cookie, or terms of service policies, along with no contact information, limits transparency and user trust. The WHOIS data is unavailable due to a malformed request or privacy protection, which further constrains trust assessment. Security measures are basic but include HTTPS and reCAPTCHA, though security headers and advanced protections are not evident. Overall, the site presents a moderate risk profile with room for improvement in transparency, compliance, and security hardening.
V360 agencyvvunk.ee
Technology · Estonia
43High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
V360 Agency OÜ is a small Estonian digital agency specializing in web development, e-commerce solutions, branding, and full digital marketing services. The company positions itself as a creative and professional partner for businesses seeking to elevate their digital presence. Their website showcases a portfolio of projects and client testimonials, indicating a trusted market position within their niche. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and Tippy.js, and integrates Google Tag Manager and reCAPTCHA for analytics and security. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS and reCAPTCHA, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business.
Ask Any Differencetrackduck.com
Technology
73Medium
NIS2 55 · GDPR 85
NIS2 55 · GDPR 85
Ask Any Difference is a small technology-focused informational website founded in 2019, providing a broad range of articles, guides, and tutorials related to computer software and technology. The site targets individuals interested in improving their computer skills and understanding software programs. The business model centers on content publishing with monetization likely through affiliate marketing and advertising. Technically, the site is built on WordPress with common performance and SEO optimizations, including caching and structured data markup. The hosting and domain registration are consistent and legitimate, with no privacy protection used, indicating transparency. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. The site integrates multiple third-party marketing and analytics tools, including Google Tag Manager and JourneyMV scripts. Overall, the website is functional, content-rich, and moderately secure but would benefit from enhanced security practices and privacy compliance improvements.
TracePartstraceparts.com
Technology
87Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
TraceParts operates as a leading global provider of 3D digital content for engineering professionals, offering free access to an extensive library of CAD models and supplier catalogs. The website is professionally designed with excellent content quality, targeting CAD users and engineers worldwide. The business model focuses on providing valuable digital assets to the engineering community, supporting product design and manufacturing processes. Technically, the site employs modern JavaScript libraries, analytics platforms like Piano Analytics and HubSpot, and a consent management platform (Didomi) to manage user privacy preferences. The website is accessible, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses consent management but lacks visible security headers and explicit security policies, which are recommended for enhancement. The absence of WHOIS data raises some concerns about domain registration transparency, though the website content and branding suggest a legitimate and established business. Overall, the site presents a strong digital presence with room for improvement in privacy compliance and security best practices.
Sigma Groupsigma.se
Technology · Sweden
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Sigma Group is a large, well-established technology consulting firm headquartered in Sweden, with approximately 4,600 employees across eleven countries. The company focuses on enhancing customer competitiveness through technological expertise and innovative solutions. Owned by Danir AB, Sigma operates multiple subsidiaries specializing in various technology and industry sectors. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. The technical infrastructure leverages modern JavaScript frameworks (Vue.js), and integrates multiple analytics and marketing tools, indicating a strong digital marketing strategy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and explicit security policies added. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. Overall, Sigma Group presents a trustworthy and credible business with a strong online presence.
Sigma Technology Groupsigmatechnology.com
Technology · Sweden
65Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Sigma Technology Group is a well-established global technology company founded in 1999, specializing in software and embedded systems development, IT infrastructure, cloud services, and digital transformation. The company targets businesses seeking advanced digital and engineering solutions, positioning itself as a trusted partner with a strong presence in Sweden and international offices. Their key services include software development, AI consulting, DevOps, cloud technology, and automotive solutions, supported by a professional and comprehensive online presence. Technically, the website is built on WordPress with modern JavaScript libraries and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and no exposed sensitive data, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website reflects a high level of professionalism, trustworthiness, and business credibility.
- SSIGMA TECHNOLOGY ORIGO AB
docfactory.com
Technology · Sweden
63Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Sigma Technology Origo is a Sweden-based technology consulting company specializing in connecting business-critical information sources to empower data-driven decision making and personalized experiences. The company offers a range of services including Aftersales Digital Twin, Workshop solutions, Diagnostics, Renderpoint/Topicpack, and a cloud-based CCMS platform called Studio. It operates as part of the Sigma Technology Group, a global technology consulting firm with a presence in multiple countries and owned by Danir AB. The website content is professional and clearly targets businesses seeking advanced technology and digital solutions. Technically, the website uses standard web technologies such as HTML5, CSS, and JavaScript with jQuery, and is moderately optimized for mobile and performance. Security posture is moderate with HTTPS assumed but lacking explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain is well-established and trustworthy, with no blocking or WAF detected.
Siemens AGc2comms.cloud
Technology · Germany
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
The website c2comms.cloud is a minimal placeholder or landing page associated with Siemens AG, a large multinational technology and industrial company headquartered in Germany. The domain is relatively new, registered in late 2022, and uses AWS infrastructure for DNS and real user monitoring. The site content is minimal with no visible business descriptions, contact information, or interactive elements. Footer links point to Siemens corporate legal and privacy pages, confirming corporate ownership. The technical infrastructure is modern but basic, with no CMS or advanced frameworks detected. Security posture is adequate with HTTPS and domain transfer protection but lacks DNSSEC and security headers. Privacy compliance is supported by links to comprehensive Siemens policies but lacks on-site consent mechanisms. Overall, the site appears legitimate but underdeveloped, likely serving as a technical or internal platform rather than a customer-facing portal.
CoreITcoreit.se
Technology · Sweden
71Medium
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
CoreIT is a Swedish IT company providing a comprehensive range of IT services targeting businesses and organizations. The website is built on a modern WordPress platform using Elementor, indicating a moderate level of digital maturity. The site features good design quality, mobile responsiveness, and SEO optimization, supporting a positive user experience. However, the absence of WHOIS data for the exact domain queried limits the ability to fully verify domain legitimacy and business registration details. Security posture is moderate with no visible advanced security headers or policies, and privacy compliance is weak due to missing privacy and cookie policies. Tracking technologies such as Facebook Pixel and LinkedIn Insight are used, indicating moderate user tracking. Overall, the website presents a professional front but would benefit from enhanced transparency and security practices.
- Streamify AB
streamify.io
Technology · Sweden
77Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Streamify AB operates a specialized live shopping platform designed to enhance e-commerce customer engagement and conversion rates through live video streaming technology. The company targets online retailers and brands seeking to leverage interactive live shopping experiences. Founded in 2017 and based in Sweden, Streamify has established a solid market presence with notable clients and a comprehensive SaaS offering that includes mobile recording apps, product synchronization, replay capabilities, and integrated analytics. Technically, the website employs modern web technologies including Google Tag Manager, HubSpot, and LinkedIn Insight tags, with a focus on performance and mobile optimization. The platform uses HTTPS and implements cookie consent mechanisms, reflecting a good level of privacy compliance. However, explicit security headers and published security policies are absent, indicating room for improvement in security transparency. From a security perspective, the site demonstrates a mature posture with secure forms and encrypted connections but lacks published incident response or vulnerability disclosure information. The absence of public WHOIS data due to privacy protection is common for commercial SaaS businesses and does not detract from the site's legitimacy. Overall, Streamify presents a professional, trustworthy digital presence with moderate technical sophistication and good privacy practices. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and expanding direct contact information to improve trust and compliance. These steps will strengthen the company's security posture and customer confidence while supporting continued growth in the competitive live shopping market.
Cleverec ABcleverec.se
Technology · Sweden
43High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Cleverec AB operates a specialized SaaS platform called Cleverservice, designed to streamline referee assignments, digital receipts, payments, and tax reporting for sports associations primarily in Sweden. The company has an established market presence since 2014, focusing on a niche segment with tailored services for associations and referees. The website is built on WordPress with the Divi theme, incorporating modern web technologies and analytics tools such as Google Analytics and Google Tag Manager. The site demonstrates good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and additional security headers are recommended. Privacy compliance is well addressed with a dedicated GDPR page and cookie policy. Overall, the website reflects a professional and trustworthy digital presence aligned with the company's business objectives.
SiteSpeakAIsitespeak.ai
Technology · Iceland
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
SiteSpeakAI is a technology startup founded in 2023 that offers an AI-powered customer support chatbot builder. Their platform enables businesses to create custom-trained GPT-like AI agents that can be deployed across multiple platforms including websites, Slack, Telegram, and Discord to reduce support tickets and improve user experience. The company positions itself as an innovative provider in the AI customer support automation market, targeting businesses seeking to automate and enhance their customer service operations. Technically, the website employs modern JavaScript frameworks such as Alpine.js, integrates analytics via PostHog and New Relic, and uses Cloudflare for DNS services, indicating a mature and performant digital infrastructure. Security-wise, the site enforces HTTPS and uses domain transfer protection, but lacks visible security policies, privacy and cookie policies, and incident response information, which are areas for improvement. Overall, the website is professional and functional but would benefit from enhanced transparency and compliance documentation to improve trust and privacy posture.
Trinidad Wiseman OÜtwn.ee
Technology · Estonia
65Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Trinidad Wiseman OÜ is an Estonian technology company specializing in human-centered digital services including software development, business analytics, machine learning, user experience design, accessibility audits, and training. The company holds a strong market position with over 20 years of experience, more than 140 specialists, and a significant number of successful public sector projects. Their business model focuses on service delivery to public and private sector clients, emphasizing professionalism, autonomy, and user-centric solutions. Technically, the website is built on Drupal 10 with modern frontend technologies and integrates Cookiebot for privacy compliance. The site is well-optimized for mobile and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and secure form handling, although explicit security policies and incident response information are not published. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements, supporting the company's credible market presence.
Convivaconviva.com
Technology
70Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Conviva operates a leading real-time performance analytics platform focused on digital experience monitoring for media, streaming, and related industries. The company leverages full-census client-side telemetry to provide actionable insights that improve app performance, user engagement, and operational efficiency. Their market position is strong, supported by customer testimonials, industry awards, and extensive use of modern web technologies. The website is professionally designed, mobile optimized, and SEO friendly, reflecting a mature digital presence. However, the absence of WHOIS registration data raises questions about domain registration status, though the active and rich website content suggests legitimate business operations. Security posture is good with HTTPS and no exposed sensitive data, but lacks explicit security policies and vulnerability disclosures. Privacy compliance is basic with cookie consent but no visible privacy policy. Overall, Conviva presents as a credible and professional technology company with room to improve transparency in privacy and security documentation.
- Churnkey
churnkey.co
Technology · Iceland
70Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Churnkey is a technology company founded in 2020, specializing in SaaS solutions aimed at reducing customer churn and enhancing subscriber retention for subscription-based businesses. The website presents a professional and modern design, leveraging advanced frontend frameworks such as Vue.js and Nuxt.js, and is hosted with Cloudflare for performance and security benefits. The company integrates multiple marketing and analytics tools including HubSpot, Dreamdata, Google Tag Manager, and Facebook Pixel, indicating a mature digital marketing approach. However, the site lacks explicit privacy and cookie policies, as well as visible contact information, which impacts its privacy compliance and user trust. Security posture is generally good with HTTPS enabled and Cloudflare protection, but could be improved by enabling DNSSEC and publishing security policies. Overall, the website is functional and professional but would benefit from enhanced transparency and compliance documentation.
Stackpilestackpile.io
Technology · South Africa
70Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Stackpile is a technology company founded in 2016, offering a SaaS platform that simplifies the installation of third-party integrations and unified analytics tracking for websites. Positioned as a niche provider, Stackpile targets website owners and developers seeking to streamline their analytics and integration management through a single API. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, the site employs modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Analytics, Hotjar, Mixpanel, and New Relic, hosted via Cloudflare ensuring good performance and security. Security posture is solid with HTTPS enforced and domain registration protected by privacy services, though improvements are recommended in security headers and explicit security policies. Privacy compliance is basic with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the site is trustworthy with no blocking or suspicious indicators detected.
- SSoftExpert OÜ
itx.ee
Technology · Estonia
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
SoftExpert OÜ is an Estonian IT company specializing in the development and maintenance of mission-critical and complex web-based systems. Established since 2000, it has contributed to several major Estonian web services such as CV-Online and various photo and video platforms. The company offers a broad range of IT services including consulting, system creation, and maintenance, targeting Estonian businesses requiring reliable IT partnerships. The website content is primarily in Estonian with an English option, reflecting a local market focus. Technically, the website uses legacy technologies such as PHP, Perl, and C, hosted on Unix/Linux platforms. The site lacks modern frameworks and shows basic SEO and accessibility features. Performance is moderate, but mobile optimization is poor. The site includes Google Analytics and Tag Manager scripts for user tracking but lacks visible privacy or cookie policies, which is a compliance gap. From a security perspective, no HTTPS confirmation or security headers were detected in the provided data, indicating potential vulnerabilities. No forms or input fields are present, reducing attack surface but also limiting user interaction. The WHOIS data is consistent and transparent, with a domain age appropriate for the business history. Overall, the security posture is moderate but requires improvements in SSL/TLS implementation and security headers. The overall risk is moderate with recommendations to implement HTTPS, add privacy and cookie policies, improve mobile responsiveness, and enhance security headers. These steps will improve compliance, user trust, and security resilience.
- Overcode.bg
affiliatly.com
Technology
79Low
NIS2 14 · GDPR 68
NIS2 14 · GDPR 68
Affiliatly is a SaaS provider specializing in affiliate marketing program management software tailored for e-commerce businesses. The platform offers a comprehensive suite of features including multiple affiliate tracking methods, affiliate management, payment integrations, marketing asset management, and performance analytics. With over 11 years of experience and more than 2500 registered clients, Affiliatly positions itself as a reliable and established player in the affiliate marketing technology space. The website targets e-commerce store owners and affiliate marketers seeking to launch and manage affiliate programs efficiently. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and various JavaScript libraries for UI enhancements and analytics. It integrates with a broad range of popular e-commerce platforms, demonstrating a mature and flexible technical infrastructure. The site is mobile-optimized and uses Matomo for privacy-conscious analytics tracking. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, privacy policies, and incident response documentation, reflecting a solid security posture. However, the absence of WHOIS data and lack of explicit security headers indicate areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security maturity is good but could benefit from enhanced header configurations and clearer security contact information. The overall risk assessment is moderate with a trustable business presence but some transparency concerns due to missing WHOIS data. Strategic recommendations include improving security headers, providing explicit security contact channels, enhancing accessibility, and maintaining regular audits of third-party scripts to sustain security and compliance standards.