Technology security reports
23,995 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
2,151–2,200 of 23,995
- PPEAR s.r.o.
pear.cz
Technology · Czech Republic
40High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
PEAR s.r.o. is a Czech software company specializing in reservation and economic systems for the travel industry, with over 25 years of experience. Their website presents a professional image targeting travel agencies, tour operators, and related sectors. The company offers a range of software products and services including reservation systems, economic systems, custom software development, training, and support. The website is built on TYPO3 CMS and uses common web technologies such as jQuery and Google Analytics. While the site is content-rich and well-structured, it lacks visible privacy and cookie policies, which is a compliance concern. The absence of WHOIS data limits domain trust verification, but the presence of ISO certifications and client references supports business credibility.
- Aspire Themes, LLC
aspirethemes.com
Technology
63Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Aspire Themes, LLC is a specialized provider of premium Ghost CMS themes targeting publishers, bloggers, and newsletter creators. Established in 2015, the company offers a curated selection of professional, accessible, and customizable themes trusted by notable clients such as Harvard and Quillette, as well as thousands of other customers. Their business model centers on one-time purchases with free support and updates, positioning them as a niche player in the Ghost theme market with a strong reputation for quality and customer satisfaction. Technically, the website is built using modern web standards and tools including Jekyll for static site generation, integrates Google Tag Manager and Microsoft Clarity for analytics, and demonstrates excellent mobile optimization and SEO practices. The site is hosted on a domain registered with NameCheap, with HTTPS enforced and no signs of blocking or WAF interference. Security posture is solid with no exposed vulnerabilities, though improvements could be made by enabling DNSSEC and adding explicit security headers. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the website reflects a professional and trustworthy digital presence with room for enhanced security and privacy transparency.
Jitsijitsi.org
Technology
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Jitsi.org is the official website for Jitsi, an open-source video conferencing software project founded in 2010 and currently backed by 8x8, Inc. The platform offers free video conferencing solutions for web and mobile, with options for self-hosting and integration into other applications. The website serves a global audience interested in secure, flexible, and free video communication tools. Technically, the site is built on WordPress, uses modern web technologies including Bootstrap and jQuery, and is hosted with Cloudflare DNS services. Google Analytics is used for visitor tracking, but no explicit cookie consent mechanism or privacy policy is present on the homepage. Security posture is generally good with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. No direct contact emails or phone numbers are listed, though social media and community forums provide engagement channels. Overall, the site is professional, trustworthy, and well-branded, but could improve privacy compliance and security transparency.
- LLog in
bsblogin.com
Technology
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website bsblogin.com serves as a login portal primarily for BlueSkyPlan or related services, focusing on user authentication with support for external providers such as Google, Apple, and Microsoft. It highlights a new security feature enabling Passkey login via Windows Hello, aiming to enhance user convenience and account protection. The site is technically built using modern web technologies including Bootstrap, jQuery, and ASP.NET MVC frameworks, hosted likely via GoDaddy infrastructure. While the site demonstrates basic mobile optimization and user interface design, it lacks comprehensive privacy and cookie policies, security headers, and explicit contact information, which are critical for compliance and trust. The domain registration data is consistent and legitimate, with domain age appropriate for the business type. Overall, the site presents a moderate security posture with room for improvement in privacy compliance and security best practices.
Technology · Brazil
70Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
CERT.br is the national Computer Security Incident Response Team (CSIRT) of last resort in Brazil, maintained by NIC.br. It provides incident management, situational awareness, and knowledge transfer services to networks using NIC.br-managed resources. The website demonstrates a strong market position as a trusted authority in cybersecurity incident response, supported by partnerships with international organizations such as FIRST and SEI. The content is comprehensive, professionally presented, and targeted at security professionals, network administrators, and the broader Brazilian internet community. Technically, the site uses modern frameworks like Bootstrap and FontAwesome, with good mobile optimization and accessibility features. While no explicit CMS or hosting provider is identified, the site shows good SEO and performance characteristics. Security posture is strong with HTTPS and best practices in incident response, though explicit security headers and vulnerability disclosure policies could be improved. Overall, the security posture is robust with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good with a comprehensive privacy policy, though cookie consent mechanisms are absent. The domain WHOIS data aligns perfectly with the business claims, confirming legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and implementing cookie consent to improve privacy compliance and user trust.
Technology · Brazil
66Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Registro.br is the official Brazilian domain registry responsible for managing .br domain registrations. Operated by NIC.br, it serves individuals and organizations in Brazil seeking to register and manage their internet domain names under the .br country code. The website provides domain search, registration, and management services, along with educational resources and security awareness content. The site is well-positioned as a trusted authority in the Brazilian internet ecosystem, supported by partnerships with CGI.br and CERT.br. Technically, the website employs modern web technologies including Vue.js and JavaScript ES modules, ensuring a responsive and performant user experience. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and professional design. Security best practices are observed with HTTPS enforcement and secure form handling, although some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy, though cookie consent mechanisms are absent. From a security perspective, the domain registration details align with the official registry, showing high legitimacy and no suspicious patterns. No vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit incident response contact information and vulnerability disclosure policies, which could enhance trust and security posture. Overall, Registro.br presents a high-quality, trustworthy, and professional web presence suitable for its critical role in Brazil's internet infrastructure. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security and compliance profile.
PIXELPETER GmbHpixelpeter.ch
Technology · Switzerland
53Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
PIXELPETER GmbH is a Swiss-based technology service provider specializing in web development, graphic design, SEO, media production, AI consulting, and hosting services. With over 25 years of experience and a strong portfolio of projects and satisfied clients, the company targets SMEs, freelancers, artists, associations, and social organizations. The website reflects a professional and consistent brand image with clear service offerings and a focus on customer orientation. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and responsive design principles to ensure good mobile optimization and user experience. While performance is moderate, the site is well-structured with SEO-friendly meta tags and basic accessibility features. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers, privacy and cookie policies, and incident response information, indicating room for improvement in compliance and security posture. No vulnerabilities or suspicious elements were detected in the content or scripts. Overall, the website presents a low-risk profile with a solid business credibility score but requires enhancements in privacy compliance and security best practices to strengthen trust and regulatory adherence.
Agder XRagderxr.no
Technology · Norway
51Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Agder XR is a competence network focused on XR technology in the Agder region of Norway, aiming to increase regional and national market share in XR. The website presents a professional platform offering networking, events, research, and updates on XR technology. The technical infrastructure is based on WordPress with Elementor and several modern plugins, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers and formal policies are missing. Overall, the site is safe, professional, and targeted at businesses and individuals interested in XR technology in Norway.
Webstepwebstep.no
Technology · Norway
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Webstep is a Norwegian technology house established in 2000, providing reliable, flexible, and experienced IT expertise and new IT solutions. The company targets business and public sector clients seeking technology consulting and IT services. The website is built on WordPress with modern SEO and analytics tools, including Google Analytics and Microsoft Clarity, and employs a comprehensive GDPR-compliant cookie consent mechanism. The technical infrastructure is supported by Cloudflare, enhancing security and performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the website presents a professional and trustworthy digital presence consistent with the company's market position.
Netlab ASnetlab.no
Technology · Norway
57Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Netlab AS is a Norwegian technology company specializing in web development and digital solutions, serving ambitious organizations primarily in Norway. Established in 2014, the company emphasizes sustainable and strategic digital products, leveraging a methodical approach and strong technological choices. Their market position is solidified by 20 years of industry experience and a portfolio of notable client references. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website employs modern web technologies including Bootstrap, GSAP, Swiper.js, and integrates Google Analytics and Tag Manager for analytics. The presence of a cookie consent mechanism indicates GDPR compliance efforts. The CMS appears custom or proprietary, likely ASP.NET based on hidden form fields. Performance and mobile optimization are good, though accessibility could be improved. Security posture is strong with HTTPS enforced and ISO 27001 and 9001 certifications prominently displayed. However, security headers are not explicitly detected and no vulnerability disclosure or incident response contacts are published. No WAF or blocking mechanisms are present, allowing full content access. Overall, the website and domain registration data align well, indicating a legitimate and trustworthy business. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility compliance to further strengthen security and trust.
Mobai ASmobai.bio
Technology · Norway
67Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Mobai AS is a technology company specializing in biometric identity verification solutions, including face verification, identity proofing, and liveness detection. Their services target banks, identity providers, and regulated industries, offering secure and accessible digital identity solutions. The company leverages academic research and certifications such as NIST testing and Swiss Center for Biometrics certification to establish credibility and market position. Technically, the website is built on modern frameworks like Webflow and integrates advanced SDKs for mobile platforms, ensuring a seamless developer experience and fast performance. Security posture is strong with HTTPS and secure forms, though improvements are recommended in security headers and cookie consent mechanisms. Privacy policies and terms of service are comprehensive and GDPR compliant. WHOIS data is privacy-protected but consistent with a legitimate tech business. Overall, Mobai presents a professional, trustworthy, and technically mature digital presence.
ViroSafe Norge ASvirosafe.no
Technology · Norway
75Medium
NIS2 — · GDPR —
NIS2 — · GDPR —
ViroSafe Norge AS is a leading Norwegian distributor specializing in IT security solutions, serving Managed Service Providers (MSPs) across Norway since 2001. The company offers a comprehensive portfolio of cybersecurity products and services including backup and restore, endpoint protection, email security, network and cloud security, security culture training, and SOC services. Their market position is strong within the Norwegian IT security sector, focusing on value-added partnerships and expert support for MSPs. Technically, the website is built on a custom ASP.NET platform with modern front-end technologies such as jQuery, Bootstrap, and various JavaScript libraries for enhanced user experience and interactivity. The site is mobile-optimized and integrates marketing and analytics tools like HubSpot and Google Analytics, alongside Google reCAPTCHA for form security. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and employs reCAPTCHA to protect forms. Cookie consent mechanisms and a comprehensive privacy policy demonstrate GDPR compliance. However, there is a lack of explicit security policies, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a professional and trustworthy front for ViroSafe's business operations. The absence of WHOIS data from the Norid registry is a notable gap, limiting full domain legitimacy verification. Nonetheless, the business information, contact details, and content quality support a high trust level. Strategic recommendations include enhancing security headers, publishing security policies, and implementing vulnerability disclosure protocols to further strengthen security posture and compliance.
- Swoop Exchange
swoop.exchange
Technology
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Swoop Exchange operates as a Meta-DEX and Bridge Aggregator platform, providing decentralized finance users with optimized swap rates across multiple blockchain networks. The platform aggregates quotes from leading DEX aggregators and bridges to facilitate efficient on-chain and cross-chain swaps, targeting DeFi traders and blockchain users seeking best rates and seamless interoperability. The website presents a professional and modern interface built on Next.js and React, incorporating advanced UI elements such as Lottie animations for enhanced user experience. Security posture is strong with HTTPS enforcement and comprehensive security headers, though the absence of explicit privacy and cookie policies, as well as contact information, limits full compliance and trust. The domain WHOIS data is privacy protected, which is common in the crypto space but reduces transparency. Overall, the platform demonstrates solid technical maturity and a clear business focus but would benefit from enhanced privacy compliance and clearer business contact details to improve trust and regulatory adherence.
Rubicrubic.exchange
Technology
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Rubic is a decentralized crypto exchange and cross-chain bridge aggregator platform that provides users and developers with access to over 220 DEXs and 100+ blockchains. It offers a comprehensive suite of services including a best rate finder, crypto swap API, SDK, and widget integration for dApps. The platform is positioned as a top aggregator in the blockchain space, emphasizing security, liquidity aggregation, and MEV protection. The RBC token fuels its ecosystem, supporting subscriptions, airdrops, and grants. Technically, Rubic employs modern web technologies such as Next.js, React, and integrates third-party widgets and analytics, delivering a fast, mobile-optimized, and accessible user experience. Security is a priority, with HTTPS enforcement, multiple grants from reputable blockchain projects, and audits by MixBytes. However, some privacy compliance aspects like cookie consent banners and direct contact emails could be improved. Overall, Rubic presents a professional, trustworthy, and technically mature platform in the crypto exchange aggregator market.
Unizenzcx.com
Technology
56Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Unizen is a decentralized finance platform specializing in omni-chain enabled decentralized exchange aggregation across multiple blockchain networks. The platform targets DeFi users and cryptocurrency traders seeking cross-chain asset swaps and liquidity aggregation. The website employs modern web technologies such as React and Next.js, indicating a contemporary technical infrastructure with moderate performance and mobile optimization. However, the site lacks comprehensive privacy, cookie, and terms of service policies, as well as explicit contact information, which impacts user trust and compliance posture. Security measures such as security headers and vulnerability disclosures are absent, suggesting room for improvement in security maturity. Overall, the domain is well-established with a reputable registrar, supporting legitimacy, but the website would benefit from enhanced transparency and security practices to improve trust and compliance.
- Bitly, Inc.
datasecai2025.com
Technology · United States
80Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Bitly, Inc. is a well-established technology company specializing in branded link management and URL shortening services. Founded in 2003, Bitly serves a broad business and marketing audience, offering SaaS solutions that enable customization, sharing, and tracking of links. The company holds a strong market position, trusted by major brands globally. The website reflects a mature digital infrastructure built on WordPress, hosted on AWS, and integrates modern analytics and marketing technologies such as Google Tag Manager, Snowplow, and OneTrust for consent management. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although DNSSEC is not enabled. Privacy and compliance policies are comprehensive and GDPR-aligned. Overall, the site demonstrates high professionalism, excellent content quality, and strong business credibility.
BlueSkyMeetblueskymeet.com
Technology
54Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
BlueSkyMeet is a technology company providing a video conferencing platform based on the open-source Jitsi Meet software. The platform offers features such as video and audio conferencing, screen sharing, recording, and collaborative whiteboarding. The service targets general users and organizations seeking reliable online meeting solutions. The website is branded consistently with BlueSkyMeet and includes mobile app links for Android and iOS, indicating a multi-platform approach. Technically, the site leverages modern web technologies including WebRTC, service workers for PWA functionality, and integrates Google Analytics for user tracking. The domain is registered with GoDaddy since 2020, aligning with the company's recent establishment. Security posture is moderate with HTTPS enabled and domain status protections, but lacks DNSSEC and visible security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and security hardening.
- IMPACT
impactplus.com
Technology
71Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
IMPACT is a professional coaching and training company specializing in sales and marketing growth through their proprietary Endless Customers System™. They target business leaders and teams aiming to improve customer acquisition via content, website, and sales strategies. The company has a strong market presence with a consistent brand and positive client testimonials. Technically, the website is built on HubSpot CMS with modern marketing and analytics tools integrated, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. WHOIS data is missing, which slightly impacts trust but does not detract from the overall professionalism and legitimacy of the business. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information.
Webovky pro firmywebovkyprofirmy.cz
Technology · Czech Republic
43High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Webovky pro firmy is a Czech Republic based small business specializing in custom web design and development services tailored for companies. Established since 2016, they have completed over 180 web projects, focusing on responsive design, SEO optimization, and content creation. Their market position is that of a trusted local web development provider with a professional online presence and client testimonials. Technically, the website is built on WordPress using Elementor and other modern plugins, hosted likely by WEDOS, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and secure form handling, though lacking explicit security headers and detailed security policies. Privacy compliance is partial, with a cookie consent banner but no dedicated privacy or terms pages. Overall, the site is professional, trustworthy, and business-focused, with room for improvement in security and compliance documentation.
- FFORPSI
aspone.cz
Technology · Czech Republic
68Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
ASPone, operating under FORPSI and ASPone, s.r.o., is a specialized Czech web hosting provider focusing on ASP.NET and Microsoft-based hosting solutions. The company offers a range of hosting plans from free to VIP tiers, targeting developers and businesses requiring Windows Server environments with MSSQL and IIS support. Their market position is that of a leading Czech specialist in ASP.NET webhosting, supported by clear service offerings and professional website presentation. Technically, the website employs modern technologies including ASP.NET, .NET Core, MVC frameworks, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The infrastructure is Windows Server-based, with daily backups ensuring data resilience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and published security policies suggests room for improvement. The lack of WHOIS data limits domain trust assessment, but the website's professional content and contact transparency mitigate some concerns. Overall, the site is well-structured, privacy-conscious, and business credible, suitable for its target audience.
Templatedtemplated.co
Technology · Curaçao
58Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Templated is a specialized knowledge platform focused on online gambling and digital tools, providing expert-reviewed content such as casino reviews, payment method comparisons, and responsible gambling information. The website targets players, affiliates, and developers, positioning itself as a trusted and transparent resource in the regulated gambling industry. Technically, it is built on WordPress using the GeneratePress theme, with performance optimizations and privacy-respecting analytics. Security posture is solid with HTTPS and security headers, though lacks explicit security policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and compliant with basic privacy standards.
- Absolutus.cz
absolutus.cz
Technology · Czech Republic
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Absolutus.cz is a small Czech technology service provider specializing in affordable web design, web management, SEO, social media management, and hosting services. The company emphasizes a creative and technically skilled team with a transparent pricing model that avoids overhead costs. Their market position targets small to medium businesses and individuals primarily in the Czech Republic. Technically, the website is built on Joomla CMS with modern frameworks like Gantry and Bootstrap, and integrates Google Analytics for tracking. The site is mobile optimized and provides clear navigation and content relevant to their services. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks explicit security policies and advanced security headers. WHOIS data is missing, which reduces trustworthiness from a domain registration perspective. Overall, the website is professional, trustworthy, and compliant with GDPR, but would benefit from enhanced security disclosures and domain registration transparency.
Technology · Czech Republic
46High
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
fitness-rezervace.cz operates a specialized online reservation and information system primarily targeting fitness centers, gyms, yoga studios, and various sports facilities in the Czech Republic. Established in 2011, the company offers a comprehensive software solution that includes user management, payment integration, live streaming capabilities, and advanced features such as turnstiles, vouchers, and REST API for developers. Their market position is that of a niche leader within the Czech fitness and sports reservation software sector, supported by a small but focused business model emphasizing customization and client support. The website reflects a professional and consistent brand image with clear business information and contact details.
Research & Development Worldrdworldonline.com
Technology
67Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Research & Development World is a specialized online media platform delivering the latest news, trends, and analysis in the research and development sector. It hosts the RD 100 awards and targets professionals and stakeholders in various industries engaged in R&D activities. The website demonstrates a moderate level of digital maturity, leveraging WordPress CMS with SEO optimization via Yoast and integrating advertising and tracking technologies such as Google Tag Manager and Cookiebot for privacy compliance. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and formal security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content is professional and consistent with its stated business purpose. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security documentation.
Xenoplexus Webstudios, LLCidowebsitestuff.com
Technology · United States
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Xenoplexus Webstudios, LLC is a small freelance web development business operated by Blake Myers, offering custom website design, performance optimization, responsive development, logo creation, and consulting services. The company targets small businesses, non-profits, and schools, emphasizing high-quality, standards-compliant web solutions. The website demonstrates a professional portfolio with multiple client projects and clear contact information including physical addresses in the US and Czech Republic. Technically, the site uses modern web technologies such as HTML5, CSS3, JavaScript, and PHP, with a focus on responsive design and performance. Hosting is provided by DreamHost, with Cloudflare nameservers, and the site enforces HTTPS with a clientTransferProhibited domain status, indicating good security practices. However, DNSSEC is not enabled and security headers are not detected, suggesting room for improvement in security hardening. Privacy compliance is addressed with a GDPR privacy policy, but no cookie consent mechanism is present. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the website is well-structured, trustworthy, and professionally maintained, with a solid security posture but some opportunities for enhancement.
LabBoîtelabboite.fr
Technology · France
51Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
LabBoîte is a French fablab community platform established since 2016, offering services such as machine and space reservations, training registrations, event participation, and project documentation. The website serves makers and hobbyists interested in collaborative fabrication activities. Technically, the site is built on AngularJS and the Fab-manager platform, integrating Google Analytics for user tracking and Stripe for payment processing. The site is mobile-optimized with a moderate performance profile. Security posture is adequate with HTTPS and CSRF protections, but lacks visible security headers and explicit privacy policies. The domain registration is consistent and legitimate, supporting trust in the platform. Overall, the site provides a functional and community-focused digital presence with room for improvement in privacy and security transparency.
DSI Czech & Slovakdsi.sk
Technology · Slovakia
63Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
DSI Czech & Slovak operates as a regional distributor and retailer specializing in electronic products, serving primarily the Slovak and Czech markets. The company positions itself as a trusted provider offering exclusive and authorized distribution services, supported by a professional website that highlights its key services and partnerships. The website is built on a modern WordPress CMS infrastructure with Elementor, ensuring a good user experience and mobile optimization. Cookiebot is implemented for GDPR-compliant cookie management, reflecting a commitment to privacy compliance. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates a mature digital presence with room for improvement in transparency and accessibility.
OnceHuboncehub.com
Technology
85Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
OnceHub is a technology company specializing in online appointment booking software designed to streamline scheduling for businesses and professionals. The platform offers branded booking pages, AI-driven scheduling, team routing, and extensive integrations with productivity and communication tools. Positioned as a competitive SaaS provider, OnceHub targets a broad business audience seeking efficient scheduling solutions. The website is built on HubSpot CMS, leveraging modern web technologies and integrating marketing and analytics tools such as Google Analytics, HubSpot tracking, and CookieYes for consent management. Security posture is strong with HTTPS enforcement, CSRF protection, and cookie consent mechanisms, although explicit incident response and vulnerability disclosure policies are not publicly detailed. Overall, the site is professional, well-structured, and compliant with GDPR, providing a trustworthy user experience.
- PPřihlášení do systému WebSOUL
web-soul.cz
Technology · Czech Republic
38High
NIS2 17 · GDPR 15
NIS2 17 · GDPR 15
The website web-soul.cz serves primarily as an administrative login portal for the WebSOUL system, with minimal public-facing content. It lacks any visible business descriptions, contact information, or user engagement features. The site is in Czech and appears targeted at internal users or administrators. The domain is registered since 2009 with a Czech registrar, indicating a stable and legitimate presence, but the lack of public business information limits external trust. Technically, the site is very basic, built with simple HTML and CSS, without modern frameworks or CMS detected. There is no evidence of HTTPS enforcement or security headers, which poses security risks especially for a login page. The site does not implement privacy or cookie policies, nor does it provide any compliance information. No analytics or advertising technologies are present, indicating minimal tracking. From a security perspective, the absence of HTTPS, security headers, and CSRF protections on the login form are significant vulnerabilities. The site does not provide any incident response or security policy information. The WHOIS data is consistent and public, supporting legitimacy but does not compensate for the lack of security best practices. Overall, the website scores low on content quality, security posture, and privacy compliance. It is recommended to implement HTTPS, add security headers, provide privacy and cookie policies, and improve transparency with contact and business information to enhance trust and security.
- TTomáš Michálek
smartteplomery.cz
Technology · Czech Republic
45High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website smartteplomery.cz represents a small technology business focused on providing smart thermometers and meteorological stations with remote administration capabilities. The business appears to be newly established in 2024, targeting consumers and small businesses interested in temperature monitoring solutions. The website offers an e-shop and user account management features, emphasizing data visualization and remote device control. Technically, the website is built with standard HTML, CSS, and JavaScript without reliance on major frameworks or CMS platforms. Hosting is provided by WEDOS, a Czech hosting provider. The site demonstrates good mobile optimization and user experience with a clean, consistent design. However, SEO and accessibility features are basic, and no advanced analytics or marketing tools are detected. From a security perspective, the site uses HTTPS (assumed from domain and modern standards, though not explicitly confirmed in the HTML). There is a lack of security headers and no visible privacy or cookie policies, which impacts GDPR compliance. No contact information or incident response channels are provided, limiting transparency and trust. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and clearer business contact information to improve trust and regulatory adherence.
INFOSECURITY.SK | Portál do sveta informačnej bezpečnostiinfosecurity.sk
Technology · Slovakia
59Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
INFOSECURITY.SK is a Slovak-language portal dedicated to information security, providing news, articles, and resources for cybersecurity professionals and enthusiasts. The website operates on a WordPress platform, hosted likely by Websupport, and employs modern web technologies including Google Analytics and Tag Manager for user tracking. The site is well-structured with good mobile optimization and moderate performance. Security posture is solid with HTTPS and DNSSEC enabled, though it lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is basic, with a cookie consent mechanism present but no detailed privacy policy or terms of service pages found. Overall, the site is a niche content portal with moderate trustworthiness and professional presentation.
Technology · Slovakia
66Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Kempelen Institute of Intelligent Technologies (KInIT) is a Slovak research institute specializing in harnessing research for human and industrial applications, with a strong focus on AI talent development, education, and industry collaboration. The institute maintains a medium-sized presence with multiple partnerships and memberships in reputable organizations, positioning itself as an important research hub in Slovakia. The website reflects a professional and comprehensive digital presence, optimized for SEO and mobile users, and supported by modern web technologies including WordPress, Yoast SEO, Google Tag Manager, and Facebook Pixel. Security posture is strong with HTTPS, DNSSEC, and cookie consent mechanisms in place, although additional HTTP security headers and explicit security policies could enhance protection. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management. Overall, the site demonstrates high professionalism and trustworthiness, with no critical security or content safety issues detected.
Gerulata Technologies j. s. a.gerulata.com
Technology
71Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Gerulata Technologies is a specialized technology company focused on providing advanced AI-powered tools and professional services to combat information warfare and disinformation. Their offerings, including the Gerulata Juno platform, target government institutions, regulators, law enforcement, military, intelligence agencies, research institutions, and journalism professionals. The company positions itself as a niche provider in the information security and analysis sector with a strong emphasis on digital safety and strategic communications. Technically, the website employs a modern tech stack including jQuery, Slick Carousel, Axios, Google reCAPTCHA v3, Matomo analytics, and CookieYes for consent management. The site is well-structured, mobile-optimized, and incorporates privacy-respecting analytics. However, no CMS or hosting provider details are explicitly identified. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and provides a comprehensive cookie consent mechanism aligned with GDPR. However, security headers are not explicitly detected, and there is no visible security policy or incident response information. The absence of WHOIS data for the domain is a notable concern, as it reduces trust in domain legitimacy despite the professional website presence. Overall, the website is professional, secure, and privacy-conscious but would benefit from improved transparency regarding domain registration, explicit security policies, and direct contact information to enhance trust and compliance.
Ahosting a.s.ahosting.cz
Technology · Czech Republic
59Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Ahosting a.s. is a Czech-based hosting provider offering webhosting, managed servers, and domain registration services primarily targeting Czech and regional customers. The company emphasizes quality, reliability, and personal technical support, positioning itself as a trusted mid-sized player in the hosting market since 2007. The website is professionally designed with clear navigation and relevant content tailored to its audience. Technically, the site uses common web technologies including jQuery, Google Analytics, and Smartsupp live chat, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and secure login areas, but lacks advanced security headers and explicit vulnerability disclosure or incident response information. Privacy compliance is basic with a privacy policy present but no visible cookie consent mechanism. WHOIS data is unavailable, which reduces transparency and trustworthiness, though the website content and company information appear legitimate. Overall, the site is safe, professional, and functional with room for security and privacy improvements.
- LLUVENEX
luvenex.cz
Technology · Czech Republic
41High
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
LUVENEX is a small Czech digital agency specializing in creative graphic work, website development, and internet marketing services. The company presents itself as a team of experienced professionals offering comprehensive digital solutions including web design, SEO, PPC advertising, and social media management. The website is professionally designed with clear service descriptions and client testimonials, indicating a stable market position within its niche. Technically, the site uses standard web technologies such as HTML5, CSS3, and Google Fonts, with moderate performance and good mobile optimization. However, there is no evidence of advanced frameworks or CMS platforms. Security posture is limited due to lack of HTTPS verification, missing security headers, and absence of privacy or cookie policies. The WHOIS data is unavailable, which raises concerns about domain legitimacy and transparency. Overall, the website is functional and professional but requires improvements in security, compliance, and trust signals to enhance its credibility and risk profile.
TITANS.EUtitans.eu
Technology
74Medium
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
TITANS.EU operates as a freelance IT job marketplace targeting developers and programmers, connecting freelancers with projects. The website presents a professional and consistent brand image with a focus on trusted freelance IT work, leveraging over 10 years of market presence. The technical infrastructure is based on WordPress CMS with modern JavaScript libraries and integrations such as Google Tag Manager, Facebook Pixel, Hotjar, and Smartsupp Live Chat, indicating a mature digital presence. Security posture is generally good with HTTPS enforced and cookie consent implemented, though the absence of security headers and explicit privacy policy pages suggests room for improvement. Overall, the site is accessible and functional with moderate to good performance and SEO optimization.
Geozogeozo.com
Technology
67Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Geozo is a global native and push advertising platform that aims to boost revenue growth for publishers and advertisers by combining effective ad formats with a qualified team. The website presents a professional and modern design built on Nuxt.js with integrations such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The domain is well-established since 2010, registered with a reputable registrar and uses Cloudflare DNS services, indicating a stable technical foundation. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is functional and credible but would benefit from enhanced transparency and security documentation.
Technology
70Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
greenpeace.social is a decentralized social networking platform powered by Mastodon software, emphasizing privacy, ethical design, and no advertising. The platform targets users seeking an alternative social network free from corporate surveillance. The website is well-branded and consistent with Greenpeace's values, offering features such as posts, hashtags, and news exploration. Technically, it uses modern web technologies including React and WebSockets, hosted partially on Google Cloud Storage for media assets. The platform is mobile optimized and provides a good user experience with clear navigation. Security posture is moderate; HTTPS is implied but explicit security headers are missing. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism or terms of service found. WHOIS data is limited due to TLD restrictions and privacy protections, but no suspicious patterns are detected. Overall, the site is trustworthy and aligns with its non-profit, privacy-focused mission.
Smart Sendersmartsender.eu
Technology
67Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Smart Sender is a technology company offering a SaaS chatbot platform that integrates with multiple popular instant messengers such as Telegram, Viber, WhatsApp, Instagram Direct, Facebook Messenger, Skype, VKontakte, Kik, Line, and WeChat. The platform focuses on automating customer engagement, increasing sales, and improving customer loyalty through chatbots, autoresponders, and automated sales funnels. The website presents a professional and consistent brand image with clear pricing plans and calls to action for free trials and registration. Technically, the website is built using modern JavaScript frameworks, primarily Vue.js, and incorporates common analytics and marketing tools like Google Analytics and Facebook Pixel. The site is mobile-optimized with good SEO practices and a moderate performance profile. Security-wise, HTTPS is enforced, and CSRF tokens are present, but there is room for improvement in implementing additional security headers and publishing explicit security policies. The security posture is solid but could benefit from enhanced transparency around incident response and vulnerability disclosure. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. No direct contact emails or phone numbers are provided, which may limit immediate customer support access but is common for SaaS platforms relying on account portals. Overall, the website and business appear legitimate, professional, and trustworthy with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.
- Cassini
cassini.eu
Technology
70Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Cassini is an official European Commission initiative aimed at fostering entrepreneurship in the space sector across the EU from 2021 to 2027. It supports startups, SMEs, and entrepreneurs with funding, hackathons, mentoring, business acceleration, and matchmaking services. The initiative is positioned as a key enabler for the EU space economy, leveraging a €1 billion fund and various programs to stimulate innovation and market uptake of space technologies and services. The website reflects a professional and consistent brand aligned with EU standards and space industry stakeholders. Technically, the website is built on Drupal 10, employing modern web technologies and analytics tools such as Matomo and Google Tag Manager. The site is mobile optimized, accessible, and SEO friendly, providing a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and explicit incident response information. From a security and compliance perspective, the site respects GDPR principles with a comprehensive privacy policy and cookie policy, though it lacks a cookie consent mechanism. No direct contact emails or phone numbers are published, relying on contact forms. WHOIS data is privacy protected by EURid, typical for .eu domains, and consistent with the official nature of the initiative. No suspicious or malicious indicators were found. Overall, Cassini's website is a trustworthy, well-maintained platform supporting EU space entrepreneurship. Strategic recommendations include enhancing security headers, publishing incident response contacts, implementing cookie consent, and providing more direct contact information to improve transparency and user trust.
Spacemanicspacemanic.com
Technology
64Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Spacemanic is a specialized satellite mission integrator focusing on nanosatellite and CubeSat platforms, components, and services. The company offers a range of solutions including satellite design, development, testing, launch campaigns, and ground station services, targeting space research organizations and aerospace industry clients. Their market position is that of a niche provider with flight heritage and certifications such as NASA certification and ITAR-free status. Technically, the website is built on WordPress with Elementor and uses modern technologies including Google reCAPTCHA Enterprise and HubSpot analytics, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and content-rich, but could improve transparency and compliance aspects.
- TRL SPACE
trlspace.cz
Technology · Czech Republic
45High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
TRL SPACE is a Czech Republic-based mission integrator specializing in small satellites, probes, and space technology solutions. Founded in 2021, the company focuses on providing affordable and customized satellite solutions for sovereign satellite systems, Earth Observation, Communications, and lunar missions. Their business model centers on mission integration services and delivering bespoke satellite products and services to a diverse client base including commercial customers and space sector entities. The company maintains a strong partnership ecosystem with numerous research and space organizations, enhancing its market position as a premier mission integrator in the region. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site demonstrates good mobile optimization and user experience with clear navigation and professional design. However, SEO and accessibility features are basic, and performance is moderate. The hosting provider is not explicitly identified, but external scripts are served via Amazon CloudFront. From a security perspective, the website uses HTTPS but lacks visible security headers and published security policies such as privacy, cookie, or incident response policies. No forms collecting sensitive data are present on the homepage, reducing immediate risk exposure. The WHOIS data is consistent with the business profile, showing domain registration in 2021 with no privacy protection, supporting legitimacy. Overall, the security posture is moderate but could be improved by implementing security headers, privacy policies, and incident response information. The overall risk assessment indicates a trustworthy and professional business with minor compliance gaps primarily in privacy and security policy disclosures. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing incident response contacts to improve compliance and trust.
constellr GmbHconstellr.com
Technology · Germany
67Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
constellr GmbH is a technology company specializing in thermal intelligence derived from proprietary space-based microsatellite technology. Their platform provides high-precision absolute temperature readings of the Earth's surface, enabling governments and industries to monitor risks related to climate, defense, agriculture, urban planning, and infrastructure. Positioned as a leader in thermal intelligence, constellr serves a niche market focused on strategic decision-making for resilience and sustainability. The website is built on modern web technologies including Webflow CMS, Google Tag Manager, HubSpot forms, and Usercentrics for consent management, reflecting a mature digital infrastructure. The site is well-optimized for performance, mobile responsiveness, and accessibility, with professional design and clear navigation enhancing user experience. Security posture is generally strong with HTTPS enforced and secure form handling; however, the absence of explicit security headers and incident response information suggests room for improvement. Privacy compliance is robust, with a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR requirements. Overall, the website presents a professional and trustworthy front for constellr GmbH, though the lack of WHOIS registration data introduces a moderate risk factor. Strategic recommendations include enhancing security headers, publishing incident response contacts, and monitoring domain registration details to strengthen trust and compliance.
BRNO SPACE CLUSTER z.s.brnospacecluster.cz
Technology · Czech Republic
43High
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Brno Space Cluster z.s. is a technology-focused business entity formed by multiple companies and institutions from the Brno region, specializing in engineering services and cooperation on space projects. Leveraging experience from major aerospace players such as ESA, ArianeGroup, OHB, Avio, and Leonardo, the cluster operates in the commercial space market, providing services including satellite development exemplified by the Mise Drak project. The website reflects a professional and consistent brand presence with clear contact information and a strong partner ecosystem. Technically, the website is built on the Webflow CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, and jQuery. It integrates Google Analytics for user tracking and is hosted on servers associated with the Ignum nameservers. The site is mobile-optimized with good SEO practices but lacks some accessibility features and security headers which could enhance its technical robustness. From a security perspective, the website uses HTTPS with excellent SSL configuration, but it lacks visible security headers and does not provide privacy or cookie policies, indicating compliance gaps with GDPR and related regulations. No forms or direct data collection mechanisms are present, reducing immediate data exposure risks. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the organization's founding date and no suspicious registration patterns. Overall, the website presents a moderate risk profile with good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.
Xiphosxiphos.com
Technology · Canada
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Xiphos is a specialized technology company focused on delivering space-grade embedded processing solutions, particularly for satellite and aerospace applications. With a domain age dating back to 1997, the company demonstrates a longstanding presence in the space technology sector. Their product portfolio includes various computer-on-module families optimized for low size, weight, and power (SWaP) applications in space environments. The website is professionally designed, mobile-optimized, and leverages modern web technologies and marketing tools such as HubSpot CMS, Google Analytics, and Hotjar. However, explicit privacy and terms of service policies are not detected in the provided content, which is a compliance gap. Security posture is generally good with HTTPS and transfer protection on the domain, but could be improved by enabling DNSSEC and adding security headers. Overall, the website and domain data indicate a credible and trustworthy business with a clear focus on aerospace embedded systems.
IOT World Todayiotworldtoday.com
Technology
72Medium
NIS2 47 · GDPR 85
NIS2 47 · GDPR 85
IoT World Today is a specialized media outlet providing news, analysis, and case studies focused on the Internet of Things (IoT) industry. Founded in 2018 and operating under the Informa Tech umbrella, it targets professionals and stakeholders interested in IoT technologies across sectors such as smart cities, transportation, robotics, and industrial IoT. The website offers a well-structured, content-rich platform with a professional design and consistent branding, supported by active social media channels and newsletter subscriptions. Technically, the site leverages modern web technologies including SPA frameworks, Contentstack CMS, and integrates multiple third-party services such as Google Tag Manager, Facebook SDK, and New Relic for analytics and monitoring. Consent management is implemented via Transcend, indicating attention to privacy compliance. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and employs security monitoring tools. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. The absence of WHOIS data limits domain trust verification, though the website's professional presentation and affiliation with Informa Tech suggest legitimacy. Overall, IoT World Today presents a credible and professional platform for IoT industry information, with moderate technical maturity and privacy compliance. Strategic enhancements in security transparency and domain registration clarity would further strengthen trust and resilience.
- Affino
affino.com
Technology
79Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Affino is a technology company specializing in AI-enhanced customer experience solutions delivered via a unified SaaS platform. Their offerings include personalization, automation, AI-powered search, adaptive analytics, and conversion funnel optimization. The company positions itself as a leader providing hands-on services to help clients outperform competitors. Technically, the website employs modern front-end technologies such as HTML5, CSS3, JavaScript, jQuery, and SVG graphics, with a proprietary CMS platform. The site is well-designed, mobile-optimized, and provides clear navigation and professional content. Security posture is moderate with HTTPS implied and secure login forms, but lacks explicit security headers and published security policies. Privacy compliance is limited with no visible privacy or terms of service pages, though a cookie policy with consent mechanism is present. WHOIS data is unavailable, which reduces trustworthiness but the professional presentation and contact information support business credibility. Overall, the site is suitable for business audiences seeking AI-driven customer experience platforms.
Technology · Czech Republic
45High
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
WebX.cz is a Czech-based web hosting and domain registration service provider established in 2001. The company offers Linux-based web hosting with support for PHP, SQL databases, SSL certificates, and domain registrations across multiple TLDs, primarily targeting Czech and European customers. The website presents a basic but functional online self-service platform for managing hosting services, domains, and email. The market position is that of a small but established player with a significant number of hosted domains and a focus on reliability and user convenience. Technically, the website uses legacy HTML standards and lacks modern frameworks or analytics tools, indicating a need for modernization. Security posture is moderate, with SSL encryption and daily backups, but lacks published security policies, incident response contacts, and security headers. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy but would benefit from enhanced privacy, security, and technical improvements.
Technology · Czech Republic
56Medium
NIS2 15 · GDPR 40
NIS2 15 · GDPR 40
business communication s.r.o. operates as a Czech IT services company specializing in network management, virtualization infrastructure, and cybersecurity solutions. Founded in 2003, the company targets business customers seeking secure and modern IT infrastructure management. Their website reflects a professional presence with clear service offerings and contact information, though lacks some compliance documentation such as a privacy policy and terms of service. Technically, the site is built on WordPress with standard libraries like jQuery and Bootstrap, and employs Google Analytics for visitor insights. Security posture is solid with HTTPS and cookie consent mechanisms, but could be improved by adding security headers and publishing security policies. The absence of WHOIS data limits domain trust evaluation, but the website content and business information appear legitimate and consistent with a small-sized technology service provider in the Czech Republic.
- HHugin Cybersecurity AS
hugin.io
Technology · Norway
72Medium
NIS2 47 · GDPR 65
NIS2 47 · GDPR 65
Hugin Cybersecurity AS is a newly established Norwegian cybersecurity company focused on providing effortless cybersecurity solutions for small and medium businesses. The website's title and meta description emphasize this target audience and business focus. However, the website content is currently minimal and displays a client-side application error, limiting user engagement and information availability. The technical infrastructure leverages modern JavaScript frameworks such as Next.js and React, with integrations of HubSpot and Apollo tracking scripts, indicating a moderate level of digital maturity. Hosting is provided via Cloudflare, but DNSSEC is not enabled, and no security headers are detected, suggesting room for improvement in security hardening. The security posture is weak due to missing privacy and cookie policies, lack of incident response contact information, and absence of security best practices visible in the HTML content. Overall, the website presents a low trustworthiness level and poor user experience. Strategic recommendations include fixing the application errors, implementing comprehensive privacy and cookie policies with GDPR compliance, enabling DNSSEC and security headers, and providing clear contact and incident response information to enhance credibility and security posture.