Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
5,401–5,450 of 14,261
- CONCORDIA
concordia.ch
Healthcare · Switzerland
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
CONCORDIA is a well-established Swiss health insurance provider offering a comprehensive range of insurance and pension provision services tailored for individuals and families. The company maintains a strong market position supported by multiple agencies and a broad service portfolio including basic and supplementary health insurance, private pension solutions, and digital health advisory services. The website reflects a professional and user-friendly digital presence with clear navigation and extensive content relevant to its target audience. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies such as jQuery and Adobe Analytics for performance and user insights. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a positive user experience across devices. Security measures include HTTPS enforcement, appropriate security headers, and secure form handling, indicating a mature security posture. While the site demonstrates strong privacy compliance with a comprehensive privacy policy and cookie consent mechanism, it lacks explicit incident response contact details and a vulnerability disclosure policy. The WHOIS data aligns well with the business claims, showing no suspicious patterns and supporting the legitimacy of the domain. Overall, CONCORDIA's website is a trustworthy, secure, and professionally maintained platform that effectively supports its business objectives and customer engagement.
FresuCarefresucare.ch
Healthcare · Switzerland
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
FresuCare is a Swiss homecare provider specializing in clinical nutrition and related healthcare services with over 25 years of experience. As a subsidiary of Fresenius Kabi (Schweiz) AG, it offers comprehensive patient care including ambulatory nutrition therapy, a specialized pharmacy, and support for healthcare professionals. The website is well-structured, professionally designed, and targets patients, healthcare professionals, and cost bearers in Switzerland. Technically, the site uses Adobe Experience Manager CMS and integrates Adobe marketing and analytics tools along with OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, CSRF protection, and cookie consent mechanisms, though explicit security and privacy policies are not prominently found. Overall, the site demonstrates high business credibility and trustworthiness with consistent WHOIS data and no suspicious indicators. Recommendations include publishing detailed privacy and security policies and enhancing accessibility features.
Energie Wasser Bernewb.ch
Energy · Switzerland
81Low
NIS2 7 · GDPR 68
NIS2 7 · GDPR 68
Energie Wasser Bern is a large municipal utility provider based in Switzerland, offering essential services such as electricity, water, gas, district heating, and waste management primarily to residents and businesses in Bern. The website reflects a professional and consistent brand presence with a clear focus on serving the local community. The business model centers on utility provision and energy consulting, positioning the company as a key player in the regional energy sector. Technically, the website is built on the Weblication CMS platform and integrates modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly available. Overall, the site demonstrates high trustworthiness and business credibility, with room for improvement in privacy compliance documentation and direct contact information availability.
Stadiumbystadium.com
Technology
81Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Stadium operates as a global platform specializing in group gifting, swag, rewards, and recognition solutions primarily targeting corporate clients, HR departments, and marketing teams. The website presents a professional and consistent brand image, offering a variety of services including company shops, on-demand swag, snack boxes, bulk swag, peer-to-peer recognition programs, and automated gifting. The business model is B2B SaaS and service-oriented, positioning itself as a comprehensive solution for employee and client appreciation on a global scale. Technically, the website is built on WordPress using Elementor, enhanced with modern marketing and analytics tools such as HubSpot, Google Tag Manager, and PubNub for real-time features. The site demonstrates good SEO, accessibility, and mobile optimization practices, with moderate performance. Security is enforced via HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not published. The security posture is solid with no evident vulnerabilities or exposed sensitive data, but improvements are recommended in publishing security policies and implementing additional HTTP security headers. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner, indicating GDPR awareness. Overall, the website is trustworthy and professional, though the lack of WHOIS data for the domain raises some concerns about domain legitimacy and transparency. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving contact information availability to bolster trust and compliance.
- IGEL
igel.com
Technology
81Low
NIS2 10 · GDPR 88
NIS2 10 · GDPR 88
IGEL Technology operates a professional website focused on delivering a secure enterprise endpoint operating system tailored for SaaS, DaaS, and VDI environments. The company positions itself as a transformative technology provider in the endpoint OS market, targeting enterprise IT organizations. The website demonstrates a mature digital presence with modern technologies such as WordPress CMS, Cookiebot for GDPR compliance, and integration with marketing and analytics platforms. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly available. The absence of WHOIS registration data is a notable anomaly, suggesting privacy protection or domain registration issues, which slightly impacts trustworthiness. Overall, the website is professional, well-branded, and compliant with privacy regulations, supporting IGEL's market credibility.
Computer Manufaktur GmbHcomputer-manufaktur.de
Technology · Germany
76Low
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
Computer Manufaktur GmbH is a Berlin-based IT system house specializing in IT services, consulting, and software/web development primarily for medium-sized companies and associations. The company positions itself as a reliable partner for digital transformation, combining solid craftsmanship with passion for IT technologies. Their market position is strengthened by notable client references and industry awards, including recognition as a top IT service provider in Germany. Technically, the website is built on TYPO3 CMS, integrates modern tools like HubSpot forms and Google Analytics, and offers remote support via Teamviewer, reflecting a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit incident response policies. Overall, the website is professional, well-structured, and GDPR compliant, supporting a trustworthy business presence.
Nutanixnutanix.com
Technology · United States
83Low
NIS2 10 · GDPR 88
NIS2 10 · GDPR 88
Nutanix operates as a leading enterprise technology company specializing in a unified platform that integrates infrastructure and management to enable seamless operation of applications, data, and AI workloads across hybrid and multi-cloud environments. The company positions itself as a leader in distributed hybrid infrastructure, offering a broad portfolio of products including cloud platforms, Kubernetes management, unified storage, and enterprise AI solutions. The website reflects a mature enterprise-grade digital presence with comprehensive product information and clear navigation tailored to IT professionals and business decision-makers. Technically, the website leverages Adobe Experience Manager as its CMS, combined with Adobe's marketing and analytics suite, and OneTrust for privacy compliance. The site demonstrates good performance, mobile optimization, and accessibility features. Security best practices are observed with HTTPS enforcement and security headers, although explicit security policies and incident response details are not publicly disclosed. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through cookie consent mechanisms and a comprehensive privacy policy. The absence of WHOIS data limits transparency but does not detract from the overall legitimacy and professionalism of the site. Overall, Nutanix's website presents a trustworthy, professional, and secure digital front that aligns with its enterprise market positioning. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust further.
DataCore Softwaredatacore.com
Technology · United States
78Low
NIS2 55 · GDPR 73
NIS2 55 · GDPR 73
DataCore Software is a well-established enterprise technology company specializing in software-defined storage solutions that enhance data storage performance, efficiency, and availability. Their product portfolio includes SANsymphony for SAN and HCI environments, Swarm object storage, Nexus parallel file system, and Puls8 for Kubernetes environments. The company targets IT professionals and enterprises seeking modern, flexible, and resilient data storage technologies. Their market position is strong within the software-defined storage and hyperconverged infrastructure sectors, supported by a professional and comprehensive online presence. Technically, the website is built on WordPress with a modern tech stack including Gravity Forms, Google Tag Manager, and various analytics and marketing tools. The site demonstrates excellent SEO, mobile optimization, and accessibility. Security best practices are observed with HTTPS enforcement, security headers, and use of monitoring tools like Rollbar. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. The WHOIS data for the domain is not publicly available, which reduces transparency but does not necessarily indicate illegitimacy. The website content and branding are consistent and professional, supporting the company's credibility. Overall, the site presents a low-risk profile with strong business and technical maturity. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and improving WHOIS transparency to enhance trust and compliance posture.
Paessler AGpaessler.com
Technology · Germany
84Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Paessler AG is a reputable technology company specializing in network monitoring software, best known for its flagship product PRTG. The company offers solutions tailored for small to large enterprises, including hosted and enterprise-grade monitoring options. Their website reflects a mature digital presence with comprehensive product information, customer success stories, and multiple contact channels primarily via forms. Technically, the site is built on the Neos CMS and Flow PHP framework, leveraging modern JavaScript libraries and Google Tag Manager for analytics. Security measures such as HTTPS and anti-clickjacking scripts are in place, and privacy compliance is demonstrated through detailed privacy and cookie policies with consent mechanisms. However, the lack of publicly available WHOIS data slightly reduces transparency but is common for privacy-conscious businesses. Overall, the website presents a professional, trustworthy, and secure platform for its target audience of IT professionals and enterprises.
Citrixcitrix.com
Technology · United States
88Low
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
Citrix is a well-established enterprise software company founded in 1989, specializing in secure, scalable, and high-performing IT solutions for businesses worldwide. The company operates under the parent organization Cloud Software Group, Inc., and offers a broad portfolio of products including application and desktop virtualization, endpoint management, secure access, and analytics. The website reflects a mature digital presence with comprehensive product information, industry-specific solutions, and strong branding consistency. Technically, the site leverages modern web technologies such as Adobe Experience Manager, Google Analytics, and Akamai CDN services, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, secure cookie practices, and consent management, though explicit security policies and incident response contacts are not prominently published. The absence of WHOIS data limits domain registration insights, but the overall trust indicators and corporate affiliations support legitimacy. Privacy compliance is well addressed with clear policies and cookie consent mechanisms.
- LibreTexts
libretexts.org
Education · United States
77Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
LibreTexts is a well-established non-profit platform founded in 2016, specializing in open educational resources (OER) including customizable textbooks, adaptive homework, and interactive learning materials. It serves educators and students primarily in the United States, offering a comprehensive ecosystem for open education. The website is professionally designed using Drupal 10 and modern web technologies, providing excellent user experience and mobile optimization. The platform is recognized for its extensive textbook libraries and adaptive homework system, positioning it as a leader in the OER space. Security posture is generally good with HTTPS and domain protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Contact information is limited to email, with no phone numbers or physical addresses disclosed. Overall, LibreTexts demonstrates high business credibility and trustworthiness with strong community engagement and educational focus.
Discorddiscordapp.com
Technology
82Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Discord is a leading technology company specializing in group chat, voice, and video communication primarily targeted at gamers and online communities. The platform offers a freemium business model with additional paid features through Nitro subscriptions. The website reflects a mature digital presence with excellent design, comprehensive content, and strong user engagement features. Technically, Discord employs modern web technologies including Webflow CMS, Google Tag Manager for analytics, and Cloudflare for domain registration and likely CDN services, ensuring fast performance and robust infrastructure. Security posture is strong with HTTPS enforcement, multiple security headers, and cookie consent mechanisms, although DNSSEC is not enabled and no explicit security.txt or incident response contacts were found. Overall, the site is highly professional, trustworthy, and compliant with GDPR requirements, making it a reliable platform for its users.
- Akelius Residential Property AB
akelius.com
Real Estate · Sweden
76Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Akelius Residential Property AB is a well-established international real estate company specializing in rental apartments across major cities such as New York, Boston, Washington D.C., Toronto, Montreal, Paris, and London. Founded in 1997, the company operates through multiple country-specific subsidiaries, offering modern rental apartments and property management services. The website reflects a professional and consistent brand image, targeting renters seeking quality apartments in attractive urban locations. Technically, the website is built on a modern Angular framework with integration of Google Tag Manager, Hotjar, and Google Fonts, hosted on Oracle Cloud DNS infrastructure. The site demonstrates good performance, mobile optimization, and SEO practices, although accessibility features are basic. Analytics and marketing tools are used responsibly with cookie consent mechanisms in place, indicating GDPR compliance. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent. However, DNSSEC is not enabled, and some advanced security headers are missing. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is transparent and consistent with the business claims, supporting high legitimacy. Overall, Akelius.com presents a secure, professional, and trustworthy platform for real estate rental services with strong compliance and business credibility. Strategic improvements in security policies and incident response disclosures could further enhance trust and resilience.
HAProxy Technologieshaproxy.com
Technology
78Low
NIS2 55 · GDPR 88
NIS2 55 · GDPR 88
HAProxy Technologies is a recognized provider in the technology sector specializing in application delivery, load balancing, API security, and AI service support. The company targets enterprises and developers requiring scalable and secure application infrastructure solutions. Their market position is strong, supported by a professional and content-rich website that clearly communicates their offerings and brand identity. The website demonstrates a mature digital presence with modern technologies such as Google Tag Manager, Plausible Analytics, and Pingdom RUM integrated for performance and analytics. From a security perspective, the website enforces HTTPS, employs security headers, and manages cookie consent effectively, indicating a solid baseline security posture. However, the absence of explicit security policies, incident response information, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and security maturity. The lack of WHOIS domain registration data is a notable anomaly that reduces trustworthiness from a domain legitimacy standpoint, though the website content and branding strongly support the company's legitimacy. Overall, the website is professionally designed, mobile-optimized, and SEO-friendly, providing an excellent user experience. The company should consider publishing detailed security and incident response policies and establishing a vulnerability disclosure program to enhance trust and compliance. Addressing the WHOIS data gap or clarifying domain registration status would further strengthen their credibility.
- SALESmanago
salesmanago.com
Technology
80Low
NIS2 47 · GDPR 95
NIS2 47 · GDPR 95
SALESmanago operates as a technology company providing an AI-powered Lifecycle Engagement Platform designed to help marketers personalize omnichannel customer journeys. With over 2,000 eCommerce brands as clients, it holds a solid market position in the marketing automation SaaS sector. The platform offers services including email marketing, website marketing, social media marketing, and mobile marketing automation, targeting both B2B and B2C audiences. Technically, the website integrates multiple modern marketing and analytics tools such as Google Tag Manager, HubSpot, SalesLoft, Hotjar, and Cookiebot for consent management. The site is well-structured with good SEO and mobile optimization, although some accessibility features are basic. Performance is moderate, supported by external services like Cloudflare and Pingdom. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and a dedicated security policy or incident response contact. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with GDPR indicators and comprehensive cookie and privacy policies. Overall, the website presents a professional and trustworthy front with extensive marketing and analytics integration. However, the absence of WHOIS data for the domain reduces the trustworthiness score and warrants further verification. Strategic improvements in security transparency and WHOIS data availability are recommended.
Teadsteads.com
Media
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Teads is a leading global advertising technology company that has merged with Outbrain to form an omnichannel outcomes platform for the open internet. The company targets advertisers and media owners, providing innovative advertising solutions and creative services. The website reflects a mature digital presence with comprehensive content, strong branding, and a focus on user experience. Technically, the site is built on WordPress using modern frameworks and includes multilingual support via Weglot. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although there is no publicly available security policy or incident response contact information. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional site and business presence. Strategic recommendations include publishing detailed security policies and incident response contacts to enhance trust and compliance.
- RRoku
roku.com
Technology · United States
85Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Roku is a prominent technology company specializing in streaming entertainment solutions, offering a platform and devices that enable users to stream thousands of channels to their TVs. The website reflects a strong brand presence with consistent messaging and professional design, targeting a broad general audience interested in streaming media. The company maintains multiple international technical support phone numbers and active social media channels, reinforcing its global reach and customer engagement. Technically, the website employs modern tracking technologies such as Google Analytics and Google Tag Manager, indicating a mature digital marketing infrastructure. The site is accessible, mobile-optimized, and uses HTTPS, ensuring secure communications. However, explicit privacy, cookie, and terms of service policies were not detected in the provided content, which could be improved to enhance compliance and user trust. From a security perspective, the site demonstrates good practices with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of security headers and incident response information suggests areas for enhancement. The WHOIS data is unavailable, likely due to registry policies or privacy protection, which limits domain registration transparency but does not detract significantly from the site's legitimacy given the strong brand and content quality. Overall, Roku's website presents a professional and trustworthy front with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would further solidify user confidence and regulatory adherence.
Weboramaweborama.fr
Technology · France
81Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Weborama is a European leader in AdTech specializing in Semantic Artificial Intelligence solutions tailored for agencies, publishers, and advertisers in the digital advertising market. The company emphasizes technological innovation while maintaining respectful relationships with internet users. The website reflects a mature business with a domain registered since 2000 and hosted on professional infrastructure including AWS DNS services. The technical infrastructure is based on WordPress CMS with Divi theme and common JavaScript libraries such as jQuery and Owl Carousel, indicating a standard but effective digital presence. Security posture is adequate with HTTPS enabled and domain transfer protections in place, though DNSSEC is not enabled and security headers are missing, representing areas for improvement. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the website is professional and trustworthy but could enhance transparency and security practices to align with best industry standards.
Nasdaqnasdaq.com
Finance · United States
82Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Nasdaq operates as a leading global stock exchange and financial data provider, delivering comprehensive market data, news, and financial technology solutions to investors and market participants worldwide. The website reflects Nasdaq's strong market position and commitment to providing timely and accurate financial information. Technically, the site is built on Drupal 10 and integrates multiple modern advertising and analytics technologies, ensuring a responsive and user-friendly experience across devices. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for its target audience.
- Business Sweden
business-sweden.com
Government · Sweden
81Low
NIS2 55 · GDPR 88
NIS2 55 · GDPR 88
Business Sweden is a government-related organization focused on promoting Swedish companies' global sales and attracting international investment into Sweden. The website presents a professional and well-branded digital presence with clear messaging about its mission and services. The technical infrastructure leverages modern analytics and marketing tools such as Google Analytics, Microsoft Application Insights, Cookiebot for consent management, and eMarketeer for marketing automation. The site is well optimized for mobile and SEO, with good user experience and navigation clarity. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. The lack of WHOIS data for the domain is a notable concern, suggesting possible privacy protection or registration under a different domain name. Overall, the site is trustworthy and professional but would benefit from enhanced transparency and security documentation.
- AppsFlyer
appsflyer.com
Technology
77Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
AppsFlyer is a well-established global leader in mobile marketing analytics and attribution, founded in 2011. The company offers a comprehensive AI-powered SaaS platform that unifies marketing measurement, audience segmentation, fraud protection, and creative optimization. Their market position is strong, supported by numerous awards and a large customer base including major brands. Technically, the website is built on WordPress with modern marketing and analytics tools integrated, showing good digital maturity and SEO optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response details could be improved. The WHOIS data is incomplete or obscured, which slightly reduces domain trustworthiness but does not detract from the overall legitimacy indicated by the website content and external references. Overall, the site is professional, secure, and compliant with privacy regulations, targeting marketing and product teams seeking advanced analytics solutions.
Great Place To Work® Institutegreatplacetowork.ca
Other · Canada
82Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Great Place To Work® Canada is a leading global authority specializing in workplace culture certification, employee surveys, and recognition programs. The company empowers organizations to build high-trust cultures that enhance performance, innovation, and growth. Their offerings include certification, culture consulting, employee engagement surveys, and various recognition awards, targeting organizations seeking to improve workplace culture and employer branding. The website demonstrates a strong market position with a professional and consistent brand presence, supported by comprehensive content and multimedia resources. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and uses various JavaScript libraries including jQuery, Video.js, and Select2. It integrates Google Tag Manager and Google Analytics for tracking and marketing purposes. The site is mobile-optimized with responsive design and good SEO practices, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and incident response disclosures. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy policies and GDPR compliance indicators are present, enhancing trustworthiness. Overall, the website is professional, secure, and compliant with privacy standards, making it a trustworthy platform for its target audience. Strategic improvements in security headers and incident response transparency would further strengthen its posture.
Great Place to Work® Institute Inc.greatplacetowork.be
Other · Belgium
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Great Place To Work® Institute Inc. operates a professional website focused on workplace culture improvement, certification, and employee surveys. The company is positioned as a market leader in Belgium and internationally, offering services that help organizations build high-trust workplace cultures. The website is well-designed, content-rich, and targets organizations seeking to improve employee engagement and workplace environment. Technically, the site uses Joomla CMS with modern libraries and integrates Google Tag Manager and Analytics for tracking. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit incident response policies. WHOIS data is restricted, limiting transparency but the site content and branding indicate legitimacy. Overall, the site is professional, GDPR compliant, and trustworthy with room for security improvements.
Game Legendsgame-legends.de
E-commerce · Germany
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Game Legends operates as a German-based e-commerce platform specializing in the sale of video games and related merchandise, targeting gamers and fans of gaming culture. The website offers a broad selection of products including new releases, preorders, and gaming collectibles, with secure payment options such as PayPal and Amazon Pay. The business model focuses on retail sales with value-added services like free shipping over a certain order value. The market position is that of a niche online retailer with a consistent brand presence and a good user experience.
Roblox Corporationroblox.com
Technology
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Roblox Corporation operates a leading global online platform that enables users to create, share, and experience immersive 3D virtual worlds and games. The platform targets a broad audience, including children and general users, offering a social and creative gaming environment. The website reflects a mature digital presence with extensive platform support across mobile, console, and VR devices. Technically, the site employs modern JavaScript frameworks such as AngularJS and React, with a fast and responsive design optimized for multiple devices. Security posture is strong with HTTPS enforcement, CSRF protection, and hardware-backed authentication features, though explicit security headers could be improved. Privacy compliance is robust, with clear policies and cookie consent mechanisms. The absence of WHOIS data limits domain registration trust analysis but does not detract from the brand's established legitimacy. Overall, Roblox presents a professional, secure, and user-friendly digital platform with high trustworthiness.
Fandomfandom.com
Media
82Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Fandom is a leading entertainment media platform focused on fan communities for TV shows, movies, and games. It offers a rich content ecosystem including wikis, news, videos, and community engagement tools. The platform targets fans of popular franchises such as Star Wars, Marvel, and DC, positioning itself as a go-to source for entertainment enthusiasts. Technically, Fandom employs modern web technologies including React, MediaWiki, and robust analytics tools like Google Analytics and Comscore, ensuring a performant and user-friendly experience across devices. The site demonstrates excellent content quality, mobile optimization, and SEO practices. Security-wise, the site enforces HTTPS and uses consent management for privacy compliance, though explicit security policies and incident response contacts are not publicly visible. Overall, Fandom presents a high level of professionalism and trustworthiness with a strong market presence in the media sector.
- Vattenfall
vattenfall.com
Energy
80Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Vattenfall is a leading European energy company focused on transitioning towards fossil freedom. Their website reflects a professional corporate presence emphasizing renewable energy and sustainability. The site uses modern web technologies including JavaScript, YouTube API, and a consent management platform to ensure GDPR compliance. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are not evident. The domain is a subdomain of vattenfall.com, a well-known enterprise, and no WHOIS data is available for this subdomain, which is typical and not suspicious. Overall, the website is well-structured, professional, and trustworthy, targeting a general audience interested in energy solutions.
- OneTrust
onetrust.eu
Technology · United States
86Low
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
OneTrust is a leading enterprise SaaS platform specializing in privacy, consent, AI governance, and risk management solutions. Founded in 2016 and headquartered in Atlanta, US, it serves organizations seeking to automate compliance and build trust through responsible data and AI use. The company holds a strong market position as a trusted provider of governance and compliance software, supported by a comprehensive product suite and extensive integrations. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript libraries such as jQuery and Slick Carousel, and integrates advanced security and privacy tools including Cloudflare Turnstile captcha and OneTrust's own cookie consent SDK. The site demonstrates good performance, mobile optimization, and accessibility, with strong SEO and analytics implementations primarily via Adobe Analytics. Security posture is robust with HTTPS enforcement, security headers, and bot protection mechanisms. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. The WHOIS data is unavailable, which slightly impacts domain trust but is mitigated by the company's strong online presence and branding. Overall, OneTrust's website reflects a mature digital infrastructure and a high level of professionalism, supporting its role as a market leader in privacy and AI governance. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and improving transparency around incident response to further enhance trust and compliance posture.
- Vattenfall
vattenfall.de
Energy · Germany
80Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Vattenfall.de is the official German website of Vattenfall, a major European energy company specializing in green electricity, gas, solar energy, and heat pump solutions. The site targets German consumers seeking sustainable energy options and positions itself as a reliable energy supplier with high customer satisfaction. Technically, the website employs modern web technologies including Vue.js and Swiper.js for interactive components, uses custom fonts, and implements SEO best practices such as Open Graph meta tags. The site is mobile-optimized and presents a professional design with consistent branding. Security-wise, the site uses HTTPS and domain verification mechanisms but lacks explicit security headers and published security policies. No privacy or cookie policies were detected in the provided content, indicating potential compliance gaps. WHOIS data confirms the domain is legitimately owned by the Vattenfall group, with consistent nameservers and no privacy protection, supporting high trustworthiness. Overall, the website is professional and credible but would benefit from enhanced privacy disclosures and security transparency.
Racemap | Homeracemap.com
Technology
79Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Racemap is a technology-focused platform providing live tracking services for sports events, activities, and virtual races. The website offers real-time race streaming aimed at athletes, spectators, and event organizers. The business model centers on delivering interactive GPS tracking and virtual timing solutions to enhance race experiences. While the site content is professional and well-structured, the lack of WHOIS domain registration data raises concerns about domain legitimacy and ownership transparency. Technically, the site is built using modern frameworks such as React and hosted on the Weblium platform, indicating a moderate level of digital maturity. However, security posture is weak due to missing security headers, SSL configuration details, and absence of privacy and cookie policies, which are critical for compliance and user trust. Overall, the site is accessible and safe for general audiences but requires improvements in security and compliance to strengthen its risk profile.
Tickarootickaroo.com
Media · Germany
77Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Tickaroo is a well-established company founded in 2011 specializing in live blogging software that enables real-time coverage of news, sports, and events. The company targets media organizations, publishers, sports clubs, and event organizers, offering SaaS solutions to engage audiences and monetize live content. The website is professionally designed, mobile-optimized, and provides clear navigation with multi-language support. Technically, the site is built on HubSpot CMS, uses modern web technologies, and integrates Google Tag Manager for analytics. Security posture is strong with HTTPS enforced, proper security headers, and domain registration protections. Privacy compliance is evident with a cookie consent banner and a comprehensive privacy policy. No critical vulnerabilities or suspicious indicators were found. Overall, Tickaroo presents a credible and trustworthy online presence with strong business and technical foundations.
HockeyStackhockeystack.com
Technology
83Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
HockeyStack is a B2B SaaS analytics platform focused on providing GTM (Go-To-Market) intelligence that connects marketing and revenue data to help teams track attribution, pipeline, and ROI. The company targets marketing leaders, sales leaders, demand generation, and marketing operations professionals, positioning itself as a comprehensive solution for integrated marketing and sales analytics. The website demonstrates a strong market presence with customer logos, case studies, and a recent $20M Series A funding announcement, indicating growth and investor confidence. Technically, the website is built on Webflow CMS and leverages a modern tech stack including Google Analytics, Google Tag Manager, Facebook Pixel, Reddit Pixel, Microsoft Clarity, CrazyEgg, Hotjar, Leadfeeder, Ahrefs, and custom HockeyStack tracking scripts. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS with redirection and uses multiple reputable third-party analytics and tracking services. However, explicit security headers like X-Frame-Options and Referrer-Policy are not clearly present in the HTML, and no dedicated security or incident response policies are published. The absence of WHOIS data for the domain is a notable anomaly, reducing trust slightly despite the professional appearance and content. Overall, HockeyStack presents a professional and trustworthy online presence with extensive marketing and analytics integration. The main risk lies in the lack of WHOIS transparency and limited published security policies. Strategic recommendations include enhancing security header implementation, publishing security and incident response information, and considering a vulnerability disclosure program to strengthen trust and compliance.
Technology · United States
79Low
NIS2 35 · GDPR 65
NIS2 35 · GDPR 65
impact.com is an established enterprise SaaS company founded in 1992, providing a comprehensive partnership management platform that unifies affiliate, influencer, and referral marketing programs. The company positions itself as a market leader with a strong global presence and a robust technology stack integrating multiple marketing and analytics tools. Their website demonstrates excellent design, SEO, and user experience, targeting brands, agencies, and publishers seeking to optimize partnership-driven revenue. Technically, the site is built on WordPress, hosted with Amazon Registrar, and employs modern consent management and error monitoring solutions. Security posture is strong with HTTPS, domain locking, and consent-aware analytics, though DNSSEC is not enabled and explicit security policies are not published. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.
- MMeta
messenger.com
Technology
79Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Messenger.com is the official web platform for Meta's Messenger service, a leading global instant messaging and communication tool integrated with Facebook. The website offers users the ability to connect with friends and family through text, voice, and video, supporting community building and social interaction. The platform targets a broad general audience and operates under the Meta corporate umbrella, reflecting a mature and enterprise-level business model. Technically, the website employs modern web technologies including React and Facebook's proprietary BigPipe framework, ensuring fast performance and excellent mobile optimization. The infrastructure is hosted on Meta's own robust infrastructure, providing high availability and scalability. The site demonstrates good SEO and accessibility practices, with comprehensive metadata and multi-language support. From a security perspective, the site enforces HTTPS, uses secure login forms with encrypted password submission, and includes standard security headers. However, explicit cookie consent mechanisms and dedicated security policy pages are not evident, suggesting room for improvement in privacy compliance and incident response transparency. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, messenger.com presents a highly professional, trustworthy, and secure platform consistent with Meta's brand. The absence of WHOIS data is likely due to privacy protection and does not detract significantly from the site's legitimacy. Strategic recommendations include enhancing privacy compliance with explicit consent mechanisms, publishing security and incident response information, and providing clearer contact channels for security matters.
Delius Klasing Verlag GmbHboote-exclusiv.com
Media · Germany
76Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
BOOTE EXCLUSIV, operated by Delius Klasing Verlag GmbH, is a specialized media outlet focused on the luxury superyacht market. The website offers rich content including magazine issues, event coverage, and industry news targeted at affluent yacht enthusiasts. The digital infrastructure is modern, leveraging React and Next.js frameworks, with a strong emphasis on GDPR compliance through a robust consent management platform. Social media integration and digital app availability enhance user engagement. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers could be improved. Overall, the site presents a professional and trustworthy digital presence aligned with its niche market.
- Vattenfall
vlink.com
Energy · Germany
80Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Vattenfall's website for business customers offers comprehensive white-label energy solutions aimed at accelerating the energy transition. Their offerings include a centralized platform (VLINK), fulfillment services, and a prosumer app, targeting municipal utilities, developers, wholesalers, and regional craftsmen. The site is professionally designed, mobile-optimized, and provides clear contact information via email. Technically, the site uses modern JavaScript frameworks, cookie consent via OneTrust, and tracking tools like Piwik PRO and Visual Website Optimizer, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. Overall, the site is trustworthy and well-positioned in the energy sector.
Litmuslitmus.com
Technology
90Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Litmus is a well-established enterprise SaaS company specializing in email marketing platforms that provide comprehensive tools for email testing, analytics, and campaign optimization. The website demonstrates a mature digital presence with extensive use of marketing and analytics technologies, including Google Analytics, Hotjar, and Visual Website Optimizer. The platform targets marketing teams and enterprises seeking to improve email campaign effectiveness. Technically, the site is built on WordPress with modern JavaScript libraries and integrates multiple third-party services for marketing and analytics. Security posture is solid with HTTPS enforced and no exposed sensitive data, though explicit security headers are not clearly present and no public security or incident response policies were found. WHOIS data is incomplete, lacking registrar and registrant details, which is unusual but the website's professionalism and digital footprint support its legitimacy. Overall, the site is high quality, secure, and business credible, with room for improvement in transparency around security policies and WHOIS data.
- FFISCHER Spindle Group AG
fischerspindle.com
Manufacturing · Switzerland
80Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
FISCHER Spindle Group AG is a Swiss-based international technology leader specializing in the development and manufacturing of high-precision rotary products including milling spindles, grinding spindles, milling heads, and high-speed turbo compressors. The company emphasizes in-house production and quality control, serving a global industrial and manufacturing audience. Their website reflects a mature digital presence built on TYPO3 CMS, integrating modern technologies such as Google Analytics, reCAPTCHA, and Cookiebot for privacy compliance. The site is professionally designed, mobile-optimized, and provides comprehensive content including product information, news, events, and contact forms with CAPTCHA protection. Security posture is strong with HTTPS enforced and privacy mechanisms in place, though explicit security headers and incident response policies are not published. WHOIS data is missing, which raises some concerns about domain registration transparency, but the overall business credibility is supported by consistent branding, ISO certification, and active social media channels. Strategic recommendations include enhancing security headers, publishing a security policy, and improving domain registration transparency.
- AppsFlyer
onelink.me
Technology
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
AppsFlyer is a leading enterprise technology company specializing in mobile attribution and marketing analytics solutions. Their platform focuses on enhancing customer experience and engagement through advanced deep linking tools, enabling marketers and app developers to optimize mobile campaigns effectively. The company positions itself as a trusted partner in the mobile marketing ecosystem, offering comprehensive analytics and attribution services to a global audience. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, Mixpanel, and OneTrust for cookie consent management. The site demonstrates good digital maturity with responsive design, SEO optimization, and integration of marketing automation tools. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms, and implements cookie consent mechanisms aligned with GDPR. While some security headers are not explicitly detected, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The lack of public WHOIS data suggests privacy protection, which is justified for this business type. Overall, the website presents a professional, trustworthy, and secure front for AppsFlyer, supporting their market position as a top mobile marketing analytics provider. Strategic recommendations include enhancing security headers, publishing a security.txt file, and continuous monitoring of third-party scripts to maintain security and compliance.
Jaguar Land Rover Classicjaguarlandroverclassic.eu
Transportation
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Jaguar Land Rover Classic is the official heritage and classic division of Jaguar Land Rover, specializing in the preservation, restoration, and maintenance of classic Jaguar and Land Rover vehicles. The business offers a comprehensive range of services including approved classic vehicle sales, bespoke builds, servicing, parts sales, and classic driving experiences. The website reflects a premium market position with strong brand consistency and professional presentation. Technically, the site is built on Magento Commerce with modern JavaScript frameworks and integrates advanced search and analytics tools, indicating a mature digital infrastructure. Security posture is good with HTTPS enforcement, cookie consent mechanisms, and standard security headers, though there is room for improvement in publishing explicit security policies and vulnerability disclosure information. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements, serving a global audience of classic car enthusiasts and collectors.
Klevu Oyklevu.com
Technology · Finland
78Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Klevu Oy operates as a technology provider specializing in ecommerce search, merchandising, and personalization solutions. Recently integrated under the parent company Athos Commerce, Klevu combines its capabilities with other brands to offer comprehensive ecommerce transformation services. The website reflects a professional B2B SaaS model targeting ecommerce businesses seeking to optimize conversion rates and customer engagement. Technically, the site is built on WordPress with modern SEO and performance optimizations, including HubSpot integration for marketing and analytics. Security posture is solid with HTTPS and consent management, though lacks explicit security policies and headers. WHOIS data is unavailable, which slightly impacts trust but the overall digital presence and branding consistency support legitimacy.
Stor-Oslo Outletstoroslooutlet.no
Transportation · Norway
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Stor-Oslo Outlet is a Norwegian used car dealership based in Oslo, offering a wide selection of used vehicles from various brands, along with financing and trade-in services. The company targets local car buyers seeking quality used cars across different price ranges. Their market position is that of a medium-sized local dealer with a consistent brand presence and active social media engagement. Technically, the website is built on ASP.NET with modern JavaScript libraries and integrates multiple analytics and advertising platforms such as Google Analytics, Microsoft Clarity, Bing Ads, and Facebook Pixel. The site is mobile-optimized and employs cookie consent mechanisms to comply with GDPR. Security posture is strong with HTTPS, security headers, and anti-CSRF tokens, though no explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it lacks a terms of service page and direct contact emails or phone numbers in the visible content.
Zeekr Stor-Oslozeekrstoroslo.no
Transportation · Norway
85Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Zeekr Stor-Oslo is a specialized automotive dealership focused on selling and servicing Zeekr electric vehicles in the Oslo region of Norway. The website presents a professional and user-friendly interface with clear navigation and relevant content tailored to prospective car buyers interested in Zeekr models. The business model centers on retail sales, leasing campaigns, and after-sales service, positioning itself as a local authorized dealer with a focus on customer support and vehicle servicing. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, and CookieTractor for cookie consent management, running on a custom or ASP.NET-based platform. The site is mobile-optimized and SEO-friendly, though some accessibility features could be enhanced. Security posture is solid with HTTPS enabled and CSRF protections in place, but could benefit from additional HTTP security headers. Privacy compliance is well addressed with a clear cookie policy and GDPR-aligned consent mechanisms. Overall, the site reflects a legitimate and trustworthy business presence with no critical vulnerabilities or suspicious indicators.
Volvo Car Stor-Oslovolvocarstoroslo.no
Transportation · Norway
80Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Volvo Car Stor-Oslo operates as a regional authorized Volvo dealership serving the Greater Oslo area with multiple locations. The company offers new and used Volvo vehicles, comprehensive vehicle servicing, mobile service options, financing, and accessories. The website reflects a professional retail automotive business with strong brand alignment to Volvo Cars and targets both individual consumers and corporate clients. Technically, the site uses a modern ASP.NET framework with integrations for analytics and marketing tools such as Google Analytics, Microsoft Clarity, TikTok Pixel, and Bing Ads. Security posture is solid with HTTPS, anti-CSRF tokens, and security headers implemented, though no explicit security policy or incident response information is published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data limits domain trust verification, but the website content and branding strongly support legitimacy. Overall, the site is well-designed, user-friendly, and compliant with GDPR, making it a trustworthy digital presence for the business.
Världens Resor ABvarldensresor.se
Hospitality · Sweden
77Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Världens Resor AB is a Swedish tour operator specializing in guided group tours, thematic travel, and hiking trips across more than 100 countries. Established in 2003, it operates as part of the Unlimited Travel Group, a larger travel conglomerate with multiple subsidiaries. The company targets Swedish-speaking travelers seeking small group experiences with Swedish guides, emphasizing sustainability and quality. The website is well-structured, professionally designed, and mobile-optimized, providing rich content about tours, blogs, and company information. Technically, the site uses modern web technologies including ASP.NET Core, Umbraco CMS, jQuery, and integrates Google Tag Manager and CookieTractor for analytics and cookie consent management. Security posture is strong with HTTPS enforced and security cookies in use, though explicit security headers could be verified further. Privacy compliance is robust with clear GDPR-aligned policies and consent mechanisms. WHOIS data is unavailable due to an incorrect query format, which slightly reduces trustworthiness but the overall business credibility remains high due to transparent branding and parent company affiliation.
Specialresorspecial-resor.se
Hospitality · Sweden
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Specialresor is a Swedish travel company specializing in personalized, small group travel experiences that emphasize cultural immersion and unique journeys. The company operates under the parent organization Unlimited Travel Group, which provides corporate backing and a network of related travel brands. Their website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about their travel offerings, including popular trips and corporate travel services. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Cloudflare for security and performance. The presence of GDPR-compliant privacy and cookie policies, along with a consent mechanism, reflects a mature approach to privacy compliance. Security posture is solid with HTTPS enforced and anti-CSRF protections, though some security headers could be improved. The absence of WHOIS data for the exact domain queried introduces some uncertainty about domain registration legitimacy, but the active, professional website and corporate affiliation mitigate concerns. Overall, the site presents a trustworthy and credible business presence in the hospitality sector.
Ski Unlimitedskiunlimited.se
Hospitality · Sweden
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Ski Unlimited is a Swedish-based company specializing in organizing unique corporate conference trips and events at premium global destinations. Their website showcases a variety of curated travel experiences focused on skiing and adventure activities, targeting corporate clients seeking memorable team-building and event travel. The site is professionally designed, mobile responsive, and includes detailed descriptions and images of travel packages. Technically, the website employs modern tracking tools such as Google Tag Manager and CookieTractor for cookie management, and it uses HTTPS to secure communications. However, no WHOIS registration data was found for the domain, which raises concerns about domain legitimacy and ownership transparency. Additionally, the website lacks visible privacy policy and contact information pages, which are important for compliance and trust. Security headers are not evident, suggesting room for improvement in security posture. Overall, the site presents a good user experience and content quality but would benefit from enhanced transparency and security practices.
PolarQuestpolarquest.se
Hospitality · Sweden
79Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
PolarQuest is a specialized Swedish travel company focusing on polar expeditions to destinations such as Svalbard, Antarctica, and Greenland. Established in 1999, it operates small expedition ships offering intimate and nature-focused experiences with Swedish-speaking guides. The company emphasizes sustainability and climate investments, positioning itself as a trusted leader in the niche polar travel market. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and ASP.NET Core backend, with good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though no public security policy or incident response information is found. Overall, the site demonstrates a high level of professionalism and trustworthiness, with minor gaps in publicly disclosed security governance.
Go Active Travelgoactivetravel.se
Hospitality · Sweden
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Go Active Travel is a Swedish-based tour operator specializing in active and adventure travel experiences such as hiking, yoga, cycling, and fitness retreats. The company targets active travelers seeking guided and well-organized trips to various international destinations. Their website is professionally designed, mobile-optimized, and provides detailed trip information with pricing and scheduling. The technical infrastructure includes modern tracking tools like Google Tag Manager and a cookie consent mechanism via CookieTractor, indicating a commitment to privacy compliance. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and explicit security policies. WHOIS data for the queried subdomain is unavailable, suggesting a need for correct domain WHOIS checks to confirm registration details. Overall, the website is trustworthy, content-rich, and compliant with GDPR requirements, serving a niche market effectively.
Creative Meetingscreativemeetings.com
Other · Sweden
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Creative Meetings is a well-established Swedish event production agency with a strong focus on personalized and creative event solutions. Operating for over 26 years with a team of 25 employees, they have executed more than 6000 events across 60 countries. Their business model centers on close collaboration with clients and partners to deliver tailored event experiences, supported by a parent company, Unlimited Travel Group, which enhances their market reach and resources. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and CookieTractor for privacy compliance. It is hosted behind Cloudflare, ensuring good performance and security. The site is mobile-optimized and includes standard SEO and accessibility features, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, with clear user consent mechanisms. Security posture is solid with HTTPS enforced and bot protection via Cloudflare, but the absence of WHOIS data for the domain raises concerns about domain registration transparency. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a mature digital presence with moderate to high security and privacy compliance. Recommendations include enhancing security headers, adding explicit security and incident response policies, and verifying domain registration details to improve trustworthiness and compliance posture.