Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
5,051–5,100 of 14,261
Tax Peopletax-people.eu
Finance
81Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Tax People is a specialized recruitment and mediation firm focusing on tax professionals for permanent and interim roles. With over 30 years of experience and a unique PACT assessment tool, they position themselves as a trusted partner in the tax recruitment market. The website is professionally designed using WordPress and modern web technologies, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and GDPR-compliant cookie consent, though some security headers are missing. The absence of public WHOIS data suggests privacy protection, which is reasonable for this business type. Overall, the site is credible and trustworthy with room for improvement in contact transparency and security hardening.
Porsche Holdingporscheholding-newsroom.at
Transportation · Austria
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Porsche Holding newsroom is a corporate communication platform operated by Porsche Holding, a leading automotive distributor and service provider based in Austria. The website serves as a media hub offering press releases, news stories, press contacts, and a newsletter subscription service targeted at media representatives, journalists, bloggers, and the online community. The platform is professionally designed and well-structured, reflecting the company's strong market position in the transportation sector. Technically, the website is built on TYPO3 CMS with Tailwind CSS for styling and integrates modern analytics and marketing tools such as Google Tag Manager, eTracker, and Signalize. It features GDPR-compliant privacy and cookie policies with active consent mechanisms, ensuring compliance with European data protection regulations. The site is mobile optimized and accessible, providing a good user experience. From a security perspective, the website enforces HTTPS and includes cookie consent but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data due to quota limits restricts domain registration verification, but the website's branding and content strongly indicate legitimacy. Overall, the website presents a secure, compliant, and professional digital presence for Porsche Holding's corporate communications. Strategic improvements include adding security headers, publishing a security policy, and providing incident response contacts to enhance trust and security posture.
Gläserne Manufakturglaesernemanufaktur.de
Manufacturing · Germany
77Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The Gläserne Manufaktur website serves as a digital gateway to Volkswagen's electric mobility manufacturing and visitor experience center located in Dresden, Germany. It offers detailed information about factory tours, showroom visits, test drives, and event venue hire, positioning itself as a flagship experience site for Volkswagen's ID.3 electric vehicle production. The site targets a broad audience including automotive enthusiasts, potential visitors, and customers interested in sustainable mobility. Technically, the website is built on modern frameworks including React and Adobe Experience Manager, hosted on Volkswagen's infrastructure, and optimized for performance, accessibility, and SEO. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though it lacks a dedicated security policy or incident response contact information. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable source for visitors and stakeholders.
Autostadt GmbHautostadt.de
Transportation · Germany
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Autostadt GmbH operates a prominent automotive visitor attraction and brand experience center located in Wolfsburg, Germany. The website serves as a comprehensive portal for visitors, offering information on vehicle pick-up, events, educational programs, hospitality services, and corporate information. The company targets a broad audience including families, automotive enthusiasts, educational groups, and business clients. The business model integrates experiential marketing, education, and hospitality services, positioning Autostadt as a leading destination in the automotive and transportation sector. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies such as jQuery and SVG graphics. Hosting is supported by Azure CDN, ensuring good performance and availability. The site is mobile-optimized and accessible, with clear navigation and SEO-friendly metadata. Cookie consent mechanisms and privacy policies demonstrate compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and employs a cookie consent modal for user privacy. However, no explicit security headers were detected in the HTML source, and no dedicated incident response or vulnerability disclosure information is published. No vulnerabilities or exposed sensitive data were found in the provided content. Overall, the security posture is solid but could be enhanced by adding security headers and a security.txt file. The domain WHOIS data is minimal but consistent with a legitimate German hosting provider. The lack of detailed registrant information slightly reduces trust but does not raise suspicion. The website content is safe for general audiences, with no adult or questionable material. Social media presence and multiple contact channels enhance business credibility. Strategic recommendations include improving security header implementation, publishing incident response contacts, and enhancing transparency around vulnerability disclosures to strengthen trust and compliance.
- Cubic³
cubictelecom.com
Technology
85Low
NIS2 47 · GDPR 100
NIS2 47 · GDPR 100
Cubic³ is a technology company specializing in global connectivity solutions for software-defined vehicles and other high-value mobile assets. The company offers a cloud-based platform and connected services designed to provide seamless, secure, and scalable connectivity worldwide. Their market position is strong, supported by partnerships with Tier 1 mobile networks and a presence in over 200 countries. The website reflects a mature digital infrastructure with modern technologies, SEO optimization, and compliance with privacy regulations such as GDPR. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response details could be enhanced. Overall, the site projects professionalism and trustworthiness, although the lack of WHOIS transparency slightly impacts domain trust.
FAS Advogadosfasadv.com.br
Other · Brazil
88Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
FAS Advogados is a Brazilian law firm operating in cooperation with CMS, offering comprehensive legal services across multiple practice areas and sectors. The firm targets corporate clients and businesses, providing expertise in areas such as antitrust, banking, capital markets, compliance, and data protection. The website reflects a well-established medium-sized legal services provider with a strong market position and international cooperation. Technically, the website is built on a modern stack with CMS Legal, Bootstrap, and Cloudflare hosting, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response details are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with moderate user tracking via Piwik PRO and LinkedIn Insight Tag. No critical vulnerabilities or suspicious content were detected.
- ams OSRAM
ams-osram.com
Technology · Austria
76Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
ams OSRAM is a global leader specializing in innovative light and sensor solutions, offering a broad portfolio including high-performance LEDs, lasers, mixed-signal analog ICs, and sensors tailored for automotive, industrial, medical, and consumer applications. The company operates primarily in the B2B technology sector with a strong market position and enterprise scale. The website reflects a mature digital presence built on modern technologies such as React and Liferay, with integrated analytics and cookie consent mechanisms to support GDPR compliance. Security posture is solid with HTTPS enforced and domain transfer protections, though improvements in DNSSEC and security headers are recommended. Privacy policies and incident response details are not explicitly published, representing an area for enhancement. Overall, the website is professional, trustworthy, and safe for general audiences.
- Archipel Academy
archipelacademy.com
Education · Netherlands
79Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Archipel Academy is a Dutch-based company specializing in smart learning solutions tailored for HR and Learning & Development professionals. Their offerings include skill-based, functional, society, and individual learning solutions, supported by a suite of digital learning platforms such as LXP and LMS. The company targets a broad range of industries including energy, transport, retail, government, and manufacturing, serving medium-sized organizations with scalable and effective learning strategies. The website is professionally designed, leveraging HubSpot CMS and integrating modern marketing and analytics tools, providing a good user experience with mobile optimization and clear navigation. However, the absence of publicly available WHOIS data raises questions about domain registration legitimacy, although the presence of client logos and awards supports business credibility. Privacy compliance is partially addressed with a cookie consent banner but lacks a dedicated privacy policy page. Security posture is strong with HTTPS, security headers, and form protections in place.
- Notruf und Reparatur Porsche Austria | Unfall Spezialist
unfall-spezialist.at
Transportation · Austria
76Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
The website Unfall-Spezialist.at serves as a specialized platform providing accident emergency and repair services primarily for Porsche and other VW Group vehicles in Austria. It offers key services such as 24-hour emergency calls, towing, accident report downloads, and online repair requests. The site leverages official VW Group branding and fonts, indicating a close association or authorization by the VW Group. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and OneTrust for cookie consent, reflecting a moderate level of digital maturity. However, no explicit privacy policy or terms of service pages were found, which is a gap in compliance and user transparency. Security posture is adequate with HTTPS enforced but lacks visible security headers and incident response information. Overall, the site is professional and functional but could improve in privacy and security transparency.
- Porsche
porsche.at
Transportation · Austria
80Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Porsche Österreich operates as the official Austrian website for the Porsche brand, providing comprehensive information about Porsche's luxury sports cars, SUVs, and electric vehicles. The site targets automotive enthusiasts and potential buyers in Austria, offering detailed model specifications, online configurators, and customer services. The business is positioned as a premium automotive manufacturer with a strong brand presence and a focus on high-quality user experience. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integrations such as Google Tag Manager for analytics and OneTrust for cookie consent management. The site is mobile-optimized and accessible, with good SEO practices and consistent branding. Hosting and CMS details are not explicitly disclosed but appear to be custom or proprietary. From a security perspective, the site enforces HTTPS with strong security headers and does not expose sensitive data. Cookie consent mechanisms comply with GDPR requirements. However, there is no explicit security policy or incident response contact information published, and no vulnerability disclosure policy or security.txt file is present. Overall, the security posture is strong but could be improved with more transparency on security governance. The domain WHOIS data aligns well with the Porsche brand and Austrian market, indicating high legitimacy and trustworthiness. No WAF or blocking mechanisms interfere with content access. The website is safe for general audiences, containing no adult or questionable content. Strategic recommendations include publishing a dedicated security policy, providing incident response contacts, and implementing a vulnerability disclosure program to enhance trust and compliance.
Automobili Lamborghini S.p.A.lamborghini.com
Transportation · Germany
85Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Automobili Lamborghini S.p.A. is a globally recognized luxury automotive manufacturer specializing in high-performance sports cars and supercars. The official website serves as a comprehensive platform showcasing their product lineup, latest news, events, and dealer information, targeting affluent customers and automotive enthusiasts worldwide. The brand holds a premium market position under the Volkswagen Group umbrella, emphasizing exclusivity and innovation. Technically, the website leverages modern web technologies including React and Next.js frameworks, integrated with Google Tag Manager and New Relic for analytics and performance monitoring. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a smooth user experience across devices. Privacy compliance is robust, with clear cookie consent mechanisms and GDPR-aligned policies implemented via OneTrust. From a security perspective, the site enforces HTTPS with strong SSL configurations and employs standard security headers. While no explicit security policy or incident response details are publicly disclosed, no vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable or privacy protected, which is typical for high-profile brands to mitigate spam and abuse risks. Overall, the website presents a secure, professional, and trustworthy digital presence aligned with Lamborghini's luxury brand image. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and enhancing transparency around data protection officer contacts to further strengthen trust and compliance.
Secure Privacysecureprivacy.ai
Technology · Denmark
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Secure Privacy is a Denmark-based technology company specializing in cookie consent and privacy compliance solutions. Founded in 2017, it offers SaaS products that help businesses comply with GDPR, CCPA, LGPD, and over 55 other privacy laws worldwide. The company positions itself as a leading provider in the privacy compliance market, targeting businesses that require automated and seamless privacy management. The website reflects a professional and modern digital presence, leveraging React and Gatsby frameworks, hosted with Cloudflare DNS services, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced, security headers implemented, and no visible vulnerabilities. However, the site lacks explicit security policy and incident response information, which could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
Vismevisme.co
Technology
80Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Visme is a technology company providing a SaaS platform for creating professional presentations, infographics, documents, and other visual content. Positioned as an established player in the visual content creation market, Visme targets businesses, marketers, educators, and freelancers with a comprehensive suite of design tools including AI-powered features. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, trustworthy, and well-branded, supporting a medium-sized business model in the technology sector.
Smeg S.p.A.smegstore.us
E-commerce · Italy
81Low
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
SMEG USA operates as an e-commerce platform retailing stylish and high-quality kitchen appliances under the SMEG brand. The website targets general consumers seeking modern, energy-efficient kitchen products and offers a variety of appliances including major and small appliances, retro refrigerators, and kitchen accessories. The business is positioned as a medium-sized entity with a focus on design and quality, leveraging the established SMEG brand from Italy. Technically, the site is built on Shopify, utilizing modern JavaScript frameworks and integrations with marketing and analytics tools such as Google Analytics, Facebook Pixel, and Klaviyo. The site demonstrates good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and use of CAPTCHA and fraud filtering apps, though DNSSEC is not enabled and some security headers are not explicitly present. Privacy compliance is weak due to the absence of visible privacy and cookie policies, and no explicit contact information is provided for customer or security inquiries. Overall, the domain registration data aligns well with the SMEG brand and the website content, indicating legitimacy despite the domain's recent creation. Strategic improvements in privacy disclosures and security header implementation would enhance trust and compliance.
BOSCHbosch-home.ca
Manufacturing · Canada
79Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Bosch Home Appliances Canada operates a comprehensive e-commerce and informational website offering a wide range of high-end kitchen and home appliances. The company leverages its long-standing brand reputation of over 125 years to target Canadian consumers seeking quality and innovation in home appliances. The website is well-structured, professionally designed, and optimized for both desktop and mobile users, providing a seamless user experience with clear navigation and accessibility features. Technically, the site employs modern web technologies including Adobe Experience Manager CMS, Adobe Analytics, and robust cookie consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, CSRF protections, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high legitimacy and trustworthiness despite the absence of detailed WHOIS data, likely due to privacy protection. Strategic recommendations include enhancing transparency around security policies and vulnerability disclosures to further strengthen user trust and compliance.
Volkswagen Groupvwgroup.com
Transportation · Germany
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Volkswagen Group is a leading global automotive manufacturer focused on shaping the future of mobility through innovation, sustainability, and technology leadership. The website reflects a mature digital presence with comprehensive corporate information, investor relations, media resources, and career opportunities. The technical infrastructure uses modern web technologies and includes privacy-conscious analytics with user consent mechanisms. Security posture is strong with HTTPS and cookie consent but lacks explicit security policy and vulnerability disclosure details. The absence of WHOIS data is unusual but the website's professional presentation and official social media presence strongly support legitimacy. Overall, the site is well-structured, user-friendly, and trustworthy.
- Google LLC
mattacreates.org
Technology · United States
84Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The analyzed website is a Google Consent Management page designed to handle user privacy preferences and consent related to Google services, specifically for users accessing Google News from Germany. It is part of Google's extensive ecosystem, reflecting their commitment to GDPR compliance and user data protection. The page is professionally designed with excellent user experience and mobile optimization, consistent with Google's branding and technical standards. The technical infrastructure leverages modern web technologies and Google Cloud hosting, ensuring fast performance and robust security. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no detected vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies, consent mechanisms, and GDPR adherence. Overall, the domain is legitimate, trustworthy, and part of a globally recognized enterprise with a strong market position in technology and digital advertising.
- TTariffPilot GmbH
tariffpilot.com
Technology · Germany
79Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
TariffPilot GmbH operates a specialized AI-powered cloud platform designed to automate and accelerate the customs tariff classification process for companies engaged in cross-border trade. The platform integrates the official EZT-Online customs tariff database and provides detailed classification suggestions with justifications, significantly reducing manual effort and time. The website is professionally designed, mobile-optimized, and rich in relevant content including customer testimonials, partner logos, and comprehensive FAQs. Technically, the site uses modern frameworks such as Astro, integrates Google Analytics and rapidmail for marketing, and is hosted likely on Google Cloud infrastructure. Security posture is strong with HTTPS and a strict Content-Security-Policy, though some additional security headers and explicit incident response policies are absent. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the WHOIS data is missing or unavailable, which raises concerns about domain registration transparency despite the professional appearance and business legitimacy of the site. Overall, the website presents a credible and trustworthy business front with minor areas for security and compliance improvement.
Tracifytracify.ai
Technology · Canada
82Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Tracify is a technology company specializing in AI-driven customer interaction tracking and attribution solutions, primarily targeting e-commerce brands and agencies. Their platform offers advanced features such as AI behavior-based attribution, cross-device and cross-domain tracking, and comprehensive dashboards for real-time analytics, creative analysis, customer journey mapping, influencer tracking, and profitability insights. The company emphasizes privacy, with all technology made and hosted in Germany, aligning with GDPR compliance standards. Technically, the website is built on WordPress using Elementor and several plugins for enhanced functionality, including CleanTalk for anti-spam, Iubenda for cookie compliance, and multiple analytics tools such as Matomo, PostHog, LinkedIn Insight, and Intercom for marketing and customer engagement. The site demonstrates good SEO and mobile optimization, though some security headers could be improved. The domain is privacy-protected but consistent with the business profile and age. Security posture is solid with HTTPS enforced and anti-spam measures, but lacks explicit security policies and incident response contacts. No vulnerabilities or suspicious patterns were detected. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website presents a professional and trustworthy front with moderate to good technical maturity. The overall risk is low, but recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and considering a vulnerability disclosure program to enhance trust and security posture further.
Beenario GmbHbugfender.com
Technology
84Low
NIS2 47 · GDPR 65
NIS2 47 · GDPR 65
Bugfender is a technology company providing a SaaS platform focused on app logging, error monitoring, and bug tracking for application developers. Founded in 2014, it has established a strong market presence with over 34,000 apps trusting its services, including notable brands. The company offers key services such as remote logging, crash reporting, and user feedback collection, targeting software development teams seeking to improve app quality and customer support. Technically, the website is built on WordPress with modern JavaScript libraries and integrates analytics and customer engagement tools like Plausible Analytics and Intercom. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security-wise, Bugfender enforces HTTPS, employs security headers, and maintains domain registration protections, though enabling DNSSEC and publishing a security.txt file would enhance its posture. Privacy compliance is strong with clear policies and consent mechanisms. Overall, Bugfender demonstrates a high level of professionalism, trustworthiness, and technical maturity, making it a reliable service provider in its niche.
Heise Medienheise.de
Media · Germany
82Low
NIS2 25 · GDPR 85
NIS2 25 · GDPR 85
Heise Medien operates heise.de, a leading German IT news and media portal offering comprehensive coverage of technology, science, and related topics. The website serves a broad audience including IT professionals and technology enthusiasts, providing news, forums, online magazines, price comparisons, and software downloads. The business model combines advertising, subscription services, and e-commerce. Technically, the site employs modern web technologies, including a consent management platform, analytics, and personalization tools, ensuring a mature digital infrastructure. Security posture is strong with HTTPS and consent mechanisms, though explicit security headers and vulnerability disclosure policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR principles, though contact and legal policy information could be more explicit.
Axel Springer Teaser Ad GmbHadup-tech.com
Media · Germany
79Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
AdUp Technology is a digital marketing company specializing in native advertising and performance marketing, primarily serving advertisers and publishers in the European travel sector. As part of the Axel Springer group, it leverages strong partnerships and exclusive content access to maintain a competitive market position. The company offers CPC-based advertising solutions with advanced regional targeting and machine learning optimization. Technically, the website is built on TYPO3 CMS, uses modern JavaScript frameworks, and integrates Google Analytics with privacy-conscious configurations. The site is well-designed, mobile-optimized, and provides clear navigation and comprehensive privacy and terms policies. Security posture is solid with HTTPS and consent management, though some security headers and explicit incident response contacts are missing. Overall, the business appears credible and professional, though WHOIS data is unavailable, which slightly reduces trust transparency.
- PPorsche Holding GmbH
carlog.com
Transportation · Austria
78Low
NIS2 22 · GDPR 88
NIS2 22 · GDPR 88
Carlog.com is a digital platform operated by Porsche Holding GmbH, providing vehicle order tracking and customer service primarily for Porsche customers in Austria and related markets. The website offers real-time updates on vehicle orders, enhancing customer experience and transparency. The platform targets car buyers and automotive clients, positioning itself as an important service within the automotive retail and logistics sector. Technically, the site uses modern JavaScript modules, Google Tag Manager for analytics, and OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain registration consistent with the business identity, though improvements in security headers and incident response disclosures are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting a positive risk profile.
Car Connectivity Consortiummirrorlink.com
Technology · United States
79Low
NIS2 24 · GDPR 95
NIS2 24 · GDPR 95
The Car Connectivity Consortium (CCC) is a well-established organization focused on developing and promoting global technologies for smartphone-centric car connectivity solutions. The website clearly communicates key business updates such as the sunsetting of MirrorLink® operations by September 30, 2023, reflecting transparency and active engagement with its audience. CCC operates as a consortium, providing certification and standards development services primarily targeting automotive and technology sectors. The organization maintains a medium-sized presence with a professional and consistent brand image, supported by clear contact channels and social media engagement. Technically, the website is built on a modern WordPress CMS platform enhanced with Bootstrap for responsive design, Yoast SEO for search optimization, and integrates analytics tools like Google Analytics and HubSpot. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience. Hosting and domain registration are consistent with the organization's profile, registered through GoDaddy with a domain age appropriate for its business history. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. While explicit security headers are not fully visible in the HTML, the site follows best practices such as using reCAPTCHA for forms and avoiding exposure of sensitive data. No vulnerabilities or suspicious patterns were detected. Incident response information is available, indicating preparedness for security events. Overall, the website presents a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its target audience of automotive industry professionals and technology developers. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and conducting regular security audits to further strengthen the security posture.
- Google LLC
youtube.de
Technology · United States
86Low
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
YouTube, owned by Google LLC, is the world's leading online video sharing and streaming platform, offering a vast array of user-generated and professional content. It serves a global audience with a business model primarily based on advertising revenue complemented by premium subscription services. The platform is highly recognized for its extensive content library and user engagement features. Technically, YouTube employs a modern web technology stack including Polymer framework, web components, and extensive use of Google APIs. The site is optimized for performance, accessibility, and mobile responsiveness, hosted on Google Cloud infrastructure ensuring scalability and reliability. From a security perspective, YouTube enforces HTTPS, employs strong security headers, and integrates advanced bot protection mechanisms. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, reflecting a mature approach to data protection and user privacy. Overall, YouTube demonstrates a high level of digital maturity, security posture, and business credibility. The domain is well-established and consistent with the company's history. No critical vulnerabilities or compliance gaps were detected in the accessible content. Strategic recommendations include maintaining continuous security audits and enhancing incident response transparency.
- GGoingElectric.de – Elektroauto News
goingelectric.de
—
78Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
- WWorld Economic Forum
weforum.org
Government · Switzerland
76Low
NIS2 55 · GDPR 100
NIS2 55 · GDPR 100
The World Economic Forum is a globally recognized non-profit organization established in 1971, dedicated to fostering public-private cooperation to address global economic and social challenges. It serves as a platform for leaders from government, business, academia, and civil society to collaborate on shaping agendas that impact the world. The website reflects this stature with professional design, comprehensive content, and a focus on transparency through privacy and cookie policies. The target audience includes global leaders, policymakers, and the informed public. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, and authentication services via LoginRadius. The use of Chakra UI framework indicates a modern, responsive design approach. Performance is moderate with good mobile optimization and accessibility features, supporting a positive user experience. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates consent mechanisms for privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure policy and security.txt file suggests room for improvement in transparency and incident response readiness. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The lack of WHOIS data is consistent with privacy protection practices common among high-profile organizations. Strategic recommendations include enhancing security transparency and maintaining up-to-date third-party components to sustain security posture.
IONITYionity.eu
Energy
79Low
NIS2 22 · GDPR 85
NIS2 22 · GDPR 85
IONITY operates a leading high-power electric vehicle charging network across 24 European countries, offering fast, reliable, and sustainable charging solutions. Their business model includes subscription plans and pay-per-use options accessible via an app, targeting EV drivers seeking convenient long-distance travel solutions. The website demonstrates a mature digital presence with multi-language support and clear pricing information. Technically, the site is built on Webflow with modern JavaScript libraries and includes a consent management platform ensuring GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and incident response information are absent. Overall, the site reflects a professional and trustworthy brand with room for enhanced transparency in security policies and contact details.
Ellielli.eco
Energy · Germany
84Low
NIS2 22 · GDPR 88
NIS2 22 · GDPR 88
Elli is a brand under the Volkswagen Group focused on providing comprehensive solutions in the E-Mobility and energy sectors. The company offers products such as Wallbox charging stations, sustainable electricity tariffs, and mobility services targeting both private consumers and business clients. The website reflects a strong market position with professional branding and a clear focus on sustainability and innovation in electric life. Technically, the site is built on modern web technologies including Webflow CMS, SVG animations, and video content, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy and professional, supporting Elli's business credibility as a Volkswagen Group brand.
Volkswagen AGvolkswagen-karriere.de
Transportation · Germany
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Volkswagen AG operates a comprehensive career website targeting job seekers, students, graduates, and professionals interested in automotive industry careers. The site offers detailed information on job opportunities, apprenticeships, internships, and dual study programs, reflecting Volkswagen's strong market position as a leading global automotive manufacturer. The website is well-branded, professionally designed, and provides extensive resources to support applicants throughout the recruitment process. Technically, the site leverages modern web technologies including React and Adobe Experience Manager, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS enforcement, security headers, and consent management, although explicit incident response contacts and vulnerability disclosure mechanisms are not publicly detailed. Overall, the site demonstrates a mature digital presence aligned with Volkswagen's enterprise scale and reputation.
Volkswagen Nutzfahrzeugevolkswagen-nutzfahrzeuge.de
Transportation · Germany
76Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Volkswagen Nutzfahrzeuge is the official commercial vehicle brand of Volkswagen AG, offering a wide range of commercial vehicles, including vans, transporters, and electric models. The website serves as a comprehensive platform for product information, vehicle configuration, financing, leasing, and after-sales services, targeting both private and business customers. The brand holds a strong market position in the transportation sector in Germany and internationally. Technically, the website is built on modern web technologies including React and Adobe Experience Manager, ensuring fast performance, mobile optimization, and good accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security and privacy policies are not prominently published. Overall, the site reflects a mature digital presence consistent with a large enterprise brand.
Volkswagen AGautosuche.de
Transportation · Germany
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Volkswagen AG operates a comprehensive automotive website focused on new and used vehicle sales, leasing, financing, and mobility services primarily targeting the German market. The site demonstrates a mature digital infrastructure leveraging modern web technologies such as React and Adobe Experience Manager, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and consent management mechanisms in place. Privacy policies are comprehensive and GDPR compliant, reflecting Volkswagen's commitment to data protection. Overall, the website is professional, trustworthy, and well-aligned with Volkswagen's brand and business objectives.
- Škoda UK
skoda.co.uk
Transportation · United Kingdom
79Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Škoda UK operates as the official UK website for the Škoda automotive brand, offering a comprehensive range of new and used cars, financing options, and aftersales services. The company has a long heritage dating back to 1895 and maintains a strong market presence in the UK transportation sector. The website is professionally designed, mobile-optimized, and provides rich content including car configurators, brochures, and test drive bookings. Technically, the site leverages modern frameworks such as React and Bootstrap, hosted on Azure CDN, ensuring fast performance and good accessibility. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, the site is trustworthy and well-positioned but could improve transparency and security documentation.
Monotypemonotype.com
Technology · United States
86Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Monotype is a leading enterprise technology company specializing in global font licensing and scalable typography solutions. The company serves global brands and designers by providing trusted font licensing services and brand consistency tools. Their market position is strong, supported by a professional and content-rich website that highlights their key services and iconic typefaces. The technical infrastructure includes modern web technologies such as Adobe DTM and Visual Website Optimizer, indicating a mature digital marketing and analytics capability. The website is built on Drupal CMS and optimized for mobile devices, providing a good user experience. Security posture is robust with HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly detailed. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. Overall, the website reflects a high level of professionalism and trustworthiness, though the absence of WHOIS data limits domain registration transparency. Strategic recommendations include publishing detailed security policies, vulnerability disclosure information, and enhancing accessibility compliance to further strengthen trust and compliance.
Mageworxmageworx.com
E-commerce
83Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Mageworx is a specialized eCommerce software provider focusing on Magento extensions and Shopify apps. The company positions itself as a trusted Magento partner with a significant customer base of over 25,000 Magento store owners worldwide. Their website reflects a professional and well-structured digital presence built on Magento 2 technology, featuring modern JavaScript libraries and integrations such as Google Analytics and Tag Manager for marketing and analytics purposes. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content tailored to eCommerce businesses. From a security perspective, the website enforces HTTPS and includes cookie consent mechanisms, indicating awareness of privacy regulations. However, the absence of WHOIS data and lack of explicit privacy policy, terms of service, and security policy pages reduce transparency and trust. No security headers were detected in the provided data, and there is no visible vulnerability disclosure or incident response information, which are areas for improvement. Overall, the website is safe and professional, with no adult or questionable content detected. The technical infrastructure is modern but could benefit from enhanced security practices and clearer compliance documentation. The lack of WHOIS data is a notable concern that impacts the domain's trustworthiness assessment. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, providing clear contact information for incident response, and improving WHOIS transparency to strengthen business credibility and user trust.
EqualWebequalweb.com
Technology
81Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
EqualWeb is a technology company specializing in web accessibility solutions that combine AI-driven automation with expert remediation services to help businesses comply with ADA and WCAG 2.2 standards. Their hybrid approach ensures continuous accessibility monitoring and remediation, positioning them as a leader in the accessibility compliance market. The website is professionally designed, mobile-optimized, and integrates multiple third-party marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is generally strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response information are lacking. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or domain registration issues, which slightly impacts trustworthiness. Overall, EqualWeb presents a credible and professional front with room for improvement in transparency and security best practices.
- CUPRA
cupraofficial.com
Transportation · Spain
84Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
CUPRAofficial.com is the official website for CUPRA, a premium automotive brand specializing in electrified sporty vehicles under the Volkswagen Group umbrella. The site offers comprehensive information on new electric and hybrid car models, financial services, after-sales support, and technical assistance. The website is well-designed, mobile-optimized, and provides a rich user experience with clear navigation and professional branding. Technically, the site leverages Adobe Experience Manager, Google Tag Manager, and OneTrust for cookie consent, hosted on Volkswagen Group's cloud platform, ensuring fast performance and modern infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is good, with cookie consent and privacy policies in place, indicating GDPR adherence. However, the absence of WHOIS data for the domain is unusual and slightly reduces trust, though the website content and branding strongly support legitimacy. Overall, the site represents a mature digital presence for a large automotive brand with room for improvement in transparency around security and contact information.
Healthcare · Slovakia
84Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Všeobecná zdravotná poisťovňa (VšZP) operates as the largest health insurance provider in Slovakia, offering comprehensive healthcare coverage and services to insured individuals. The website reflects a professional and consistent brand image, targeting Slovak residents seeking health insurance solutions. Key services include insurance coverage, an online customer portal, and a mobile application to facilitate user engagement and service access. The company holds a strong market position as a leading healthcare insurer in the region. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and Cookiebot for cookie consent management. The CMS used is WebJET by InterWay, indicating a mature digital infrastructure. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Performance is moderate, with asynchronous loading of analytics and consent scripts. From a security perspective, the site enforces HTTPS with good SSL configuration and includes standard security headers. The cookie consent mechanism is robust and GDPR compliant, providing users with clear options for cookie preferences. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not evident, representing areas for improvement. No vulnerabilities or suspicious activities were detected in the analyzed content. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include publishing detailed security and incident response policies, enhancing accessibility, and implementing a vulnerability disclosure program to further strengthen trust and security posture.
- TTÜV SÜD
tuv-sud.sk
Technology · Slovakia
77Low
NIS2 47 · GDPR 65
NIS2 47 · GDPR 65
TÜV SÜD Slovakia operates as a trusted partner providing quality, safety, and sustainability services, including testing, certification, auditing, and consulting. With over 150 years of experience, the company holds a strong market position in Slovakia and internationally, supported by a professional and comprehensive website that targets businesses requiring compliance and certification services. The website is well-structured, mobile-optimized, and uses modern technologies such as Sitecore CMS, Google Tag Manager, and Adobe Tag Manager, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not publicly disclosed. The absence of WHOIS registration data for the domain is a notable anomaly, warranting further verification. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR, making it a reliable resource for its target audience.
OSRAM a.s.osram.sk
Energy · Slovakia
83Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
OSRAM a.s. is a well-established company specializing in innovative and sustainable lighting solutions, including LED and OLED products, automotive replacement bulbs, and industrial and entertainment lighting systems. The company operates as part of the global ams OSRAM group, positioning itself as a leader in optical and lighting technologies. The website targets primarily B2B customers in automotive, industrial, and entertainment sectors, offering a comprehensive product portfolio and digital presence. Technically, the website employs modern JavaScript libraries, Algolia search, and user consent management tools, ensuring a functional and moderately optimized user experience. Security posture is strong with HTTPS enforcement and consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, supporting OSRAM's market credibility.
- MetLife poisťovňa
metlife.sk
Finance · Slovakia
77Low
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
MetLife poisťovňa is a well-established insurance provider in Slovakia offering life, accident, and travel insurance products for individuals and companies. The website reflects a professional and consistent brand presence with clear service offerings and customer support channels. The technical infrastructure leverages Adobe Experience Manager CMS and Adobe DTM for analytics, complemented by a robust cookie consent mechanism via Osano, indicating a mature digital presence. Security posture is strong with HTTPS enforced and partial security headers observed, though some improvements are recommended. Overall, the site is trustworthy, compliant with GDPR, and provides a good user experience.
- Lusa
lusa.pt
Media · Portugal
89Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Lusa.pt is the official website of Lusa, the largest Portuguese language news agency worldwide. The site offers news content, press releases, photo and video galleries, and podcast services targeting Portuguese-speaking audiences. The business model centers on news distribution and media services, positioning Lusa as a key player in the Portuguese media industry. The website is professionally designed with consistent branding and good content quality, catering to a general audience interested in news.
Newsasset LTDnewsasset.com
Media · Greece
79Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Newsasset LTD is a well-established company founded in 2005, specializing in media content and information management solutions. The company offers a comprehensive suite of AI-powered tools and platforms designed to enhance newsroom operations, content verification, media monitoring, and corporate publishing. Their market position is supported by partnerships with leading news agencies and media groups, and the website reflects a professional and consistent brand image targeting media companies and corporations. Technically, the website is built on a modern ASP.NET framework with integration of popular front-end libraries and APIs such as Google Maps and reCAPTCHA, hosted behind Cloudflare for DNS and security. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is solid with HTTPS enforced, session management, and anti-bot protections, though some security headers could be improved. Privacy compliance is strong with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the website and domain registration data indicate a legitimate and credible business with a good digital maturity level.
GovCygov.cy
Government · Cyprus
81Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
GovCy is the official government portal of the Republic of Cyprus, serving as a centralized digital gateway for citizens and other users to access a wide range of public services, both digital and non-digital. The portal hosts websites and services of ministries, departments, and other public authorities, providing comprehensive information and facilitating government-citizen interactions. It is positioned as a key digital infrastructure for e-government in Cyprus, supported by the European Union co-funding and aligned with national digital transformation goals. Technically, the website is built on WordPress CMS, leveraging modern web technologies including jQuery and Matomo analytics for privacy-conscious user tracking. The site demonstrates good SEO practices, accessibility, and mobile optimization, with structured data enhancing search engine understanding. Hosting appears to be government-managed, ensuring control and reliability. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses secure forms without visible vulnerabilities. However, it lacks publicly disclosed security policies, incident response procedures, and vulnerability disclosure mechanisms, which are recommended for transparency and trust. The use of Matomo analytics aligns with privacy best practices, and cookie consent mechanisms are implemented. No critical security issues or suspicious content were detected. Overall, GovCy presents a professional, trustworthy, and well-maintained government portal with excellent content quality and user experience. Strategic improvements in security transparency and incident response readiness would further enhance its security posture and public trust.
Yelloyello.co
Technology · United States
77Low
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
Yello is an enterprise-focused technology company specializing in talent acquisition software and recruitment CRM solutions. Their platform is designed to help Fortune 500 companies attract and nurture top talent efficiently. The company operates primarily in the B2B SaaS market, targeting HR and talent acquisition professionals. The website reflects a mature digital presence with professional branding and comprehensive service descriptions. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices. Security posture is strong, with HTTPS enforced and multiple security headers present, though a dedicated security policy and incident response information are absent. Overall, the site is trustworthy and well-optimized for its audience.
- PPodbean
podbean.com
Technology
82Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Podbean is a well-established podcast hosting and monetization platform serving over 600,000 podcasters globally. The company offers a comprehensive suite of tools including podcast hosting, promotion, monetization via ads and subscriptions, analytics, and mobile apps. Their market position is strong with trusted partnerships and endorsements from major organizations. Technically, the website employs modern web technologies such as Bootstrap, GSAP, and Google Tag Manager, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. Privacy compliance is good with clear policies and GDPR indicators. Overall, Podbean demonstrates a mature digital presence with high professionalism and trustworthiness.
- CCompliance People
compliance-people.com
Finance · Netherlands
80Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Compliance People is a specialized executive search firm focused on recruiting compliance professionals for permanent and interim roles, primarily serving the finance sector in the Netherlands. The company emphasizes a high success rate and deep market knowledge, leveraging a unique PACT Assessment tool developed in collaboration with HartKantoor. The website is professionally designed, multilingual (English and Dutch), and optimized for user experience and SEO. The technical infrastructure is based on WordPress with modern libraries and frameworks, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The absence of WHOIS data for the domain is a notable anomaly that requires further verification to confirm domain legitimacy.
WordPress.comwp.me
Technology · United States
80Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
WordPress.com is a leading technology company specializing in website building and managed WordPress hosting services. Owned by Automattic Inc., it offers a comprehensive platform that caters to individuals, bloggers, businesses, and enterprises with a wide range of services including domain registration, themes, plugins, ecommerce, and professional email. The company holds a strong market position as a pioneer and largest contributor to the WordPress open-source ecosystem, serving millions of users worldwide. Technically, WordPress.com leverages a mature WordPress CMS infrastructure, modern web technologies, and optimized hosting to deliver fast, secure, and mobile-friendly experiences. The website demonstrates excellent design quality, SEO optimization, and accessibility features, reflecting high digital maturity. Security posture is robust with enforced HTTPS, multiple security headers, and secure form implementations, although DNSSEC is not enabled, which is recommended for enhanced DNS security. Privacy compliance is well addressed with clear privacy and cookie policies, consent mechanisms, and GDPR adherence. Overall, WordPress.com presents a trustworthy, professional, and secure online presence with strong business credibility and technical excellence.
Volkswagen AGvolkswagen.de
Transportation · Germany
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Volkswagen AG operates a comprehensive and professionally designed website for its German market, offering detailed information on its automotive products, including electric vehicles, leasing, financing, and mobility services. The site demonstrates a mature digital infrastructure using modern web technologies such as React and Adobe Experience Manager, ensuring fast performance and excellent mobile optimization. Security measures are robust, with HTTPS enforcement, security headers, and consent management mechanisms in place. Privacy policies are comprehensive and GDPR compliant, reflecting Volkswagen's commitment to data protection. Overall, the website reflects Volkswagen's strong market position as a leading automotive manufacturer with a clear focus on electric mobility and customer engagement.
Volkswagen Österreichvolkswagen.at
Transportation · Austria
77Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Volkswagen Österreich operates as the official Volkswagen brand website for Austria, providing comprehensive information on vehicle models, offers, and services including vehicle configuration and test drives. The site targets both private customers and business clients within Austria, positioning itself as a key player in the automotive transportation sector. The website demonstrates a high level of digital maturity, utilizing modern web technologies such as React and Next.js, and integrates Google Tag Manager for analytics and marketing purposes. The design is professional, mobile-optimized, and accessible, offering a seamless user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, although no explicit incident response contacts or vulnerability disclosure policies are visible. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a commitment to user data protection. Overall, the site is trustworthy and professionally maintained, though the absence of WHOIS data limits full domain legitimacy verification.