Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
501–550 of 14,261
- OOwens Corning
owenscorning.com
Manufacturing · United States
77Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Owens Corning is a leading global manufacturer specializing in roofing, insulation, composite materials, and doors. The company serves building professionals, contractors, and consumers with a broad portfolio of building and remodeling solutions. Their market position is strong, supported by comprehensive corporate governance, sustainability initiatives, and investor relations transparency. The website reflects a mature enterprise with consistent branding and professional content. Technically, the website employs modern web technologies including React, Adobe DTM for tag management, and Osano for consent management, indicating a high level of digital maturity. The site is mobile optimized, accessible, and SEO-friendly, with good performance metrics. Analytics and marketing tools are used responsibly with visible cookie consent mechanisms. From a security perspective, the site enforces HTTPS and uses cookie consent banners to comply with privacy regulations. While explicit security headers are not fully visible in the HTML, no vulnerabilities or exposed sensitive data were detected. The absence of a public security policy or vulnerability disclosure page is noted as an area for improvement. Overall, the website presents a low risk profile with strong business credibility and privacy compliance. The lack of WHOIS data slightly reduces trust but is mitigated by the professional presentation and extensive corporate information. Strategic recommendations include enhancing security header implementation, publishing a security policy, and establishing a vulnerability disclosure process.
Foulston Siefkin LLPfoulston.com
Other · United States
80Low
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
Foulston Siefkin LLP is the largest Kansas-based law firm, providing a broad range of legal services including corporate and business law, healthcare law, litigation, and employment law. The firm targets businesses and individuals seeking professional legal counsel, positioning itself as a leading regional legal service provider with a strong market presence in Kansas and surrounding areas. Their website reflects a professional and comprehensive approach, featuring detailed practice areas, attorney search capabilities, and client testimonials, supporting their market leadership claims. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Owl Carousel, and integrates Google Tag Manager and CookieYes for analytics and privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data is a notable anomaly that warrants further investigation to confirm domain registration legitimacy. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance, though improvements in security policy transparency and domain registration verification are recommended to enhance trust and security posture.
Rivkin Radlerrivkinradler.com
Other · United States
76Low
NIS2 29 · GDPR 68
NIS2 29 · GDPR 68
Rivkin Radler is a well-established regional law firm serving corporations, middle-market companies, and individuals primarily in the Northeastern United States. The firm offers a broad range of legal services with a focus on corporate law and client success. Their website reflects a professional and modern digital presence built on WordPress with a solid technical infrastructure including Bootstrap and jQuery. Security measures such as HTTPS, Google reCAPTCHA, and cookie consent mechanisms are implemented, indicating a mature security posture. However, the absence of WHOIS registration data and explicit security policies suggests areas for improvement in transparency and compliance. Overall, the website is trustworthy and functional, supporting the firm's market position effectively.
- American Century Investments®
americancentury.com
Finance · United States
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
American Century Investments® is a well-established investment management firm focused on serving institutional investors, professional investors, and wholesale clients. The company provides investment planning, management, and advisory services, with a notable emphasis on funding life-changing medical research. The website reflects a professional and consistent brand image, targeting a specialized financial audience with clear legal disclaimers and compliance with international privacy regulations such as GDPR. Technically, the website employs modern web technologies including JavaScript frameworks like Svelte, jQuery, and Adobe's Dynamic Tag Management for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism that aligns with privacy best practices. External integrations include trusted analytics and search services. From a security perspective, the site enforces HTTPS, implements key security headers, and avoids exposing sensitive data. However, it lacks publicly visible security policies, incident response contacts, or vulnerability disclosure mechanisms, which are recommended for organizations in the financial sector. The absence of WHOIS data is a minor concern but does not detract significantly from the site's legitimacy given the professional presentation. Overall, the website demonstrates a strong digital maturity and security posture appropriate for its industry and audience. Strategic recommendations include publishing explicit security and incident response policies, providing clear security contact channels, and adding vulnerability disclosure information to enhance transparency and trust.
- CColliers
colliers.com
Real Estate · Germany
83Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Colliers is a leading global real estate services and investment management company, offering a comprehensive range of services including brokerage, property management, and consulting. The website reflects a strong market position with professional branding and extensive regional presence, targeting real estate investors, occupiers, and owners. Technically, the site employs modern technologies such as Google Tag Manager, OneTrust for cookie consent, and Cloudflare for security, indicating a mature digital infrastructure. Security posture is robust with HTTPS enforcement, security headers, and bot protection mechanisms, although explicit security policies and incident response contacts are not prominently published. Overall, the site demonstrates high professionalism and trustworthiness, with minor gaps in publicly available security documentation.
MBA Groupmba-group.com
Other · United Kingdom
83Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
MBA Group is a UK-based communications agency specializing in transactional communications, acquisition and retention marketing, plug-in operations, digital transformation, and sustainability services. The company positions itself as a technology-driven and creatively delivered service provider, supported by multiple ISO certifications and industry accreditations. Their website reflects a professional and modern digital presence with clear navigation and rich multimedia content. The company targets businesses seeking to enhance customer communication and engagement through integrated technology solutions. Technically, the website is built on WordPress with modern JavaScript libraries and integrates several marketing and analytics tools such as Google Analytics, HubSpot, LinkedIn Insight, and Apollo tracking. Security measures include HTTPS enforcement and Google reCAPTCHA v3 on forms, though explicit HTTP security headers are not detected. The absence of WHOIS domain registration data is a notable concern but is mitigated by the professional website and certifications. Overall, the website demonstrates a mature digital infrastructure and a strong security posture with room for improvement in transparency and security header implementation.
JPMorgan Chase & Co.jpmorganchase.com
Finance · United States
83Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
JPMorgan Chase & Co. is a leading global financial services firm with a strong market position and a comprehensive portfolio of banking, investment, and asset management services. The website reflects the company's enterprise stature with professional design, clear navigation, and rich content targeting individuals, businesses, and institutions. Technically, the site is built on Adobe Experience Manager, leveraging modern technologies and CDN services for fast and reliable performance. Security posture is robust, with HTTPS enforced, multiple security headers, and privacy compliance mechanisms including GDPR adherence and cookie consent. The absence of WHOIS data is consistent with privacy protection practices common among large financial institutions, and does not detract from the site's legitimacy. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with industry standards.
Andrews Property Groupandrewsonline.co.uk
Real Estate · United Kingdom
80Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Andrews Property Group is a well-established real estate agency operating across the South of England, with a history spanning 80 years and ownership by the Andrews Charitable Trust. The company offers a comprehensive suite of property-related services including sales, lettings, mortgages, auctions, and property management, targeting buyers, sellers, renters, and landlords in the UK market. Their website reflects a professional and consistent brand image with clear navigation and detailed service information. Technically, the site is built on Starberry CMS and leverages modern web technologies such as RequireJS, Bootstrap, and integrates multiple analytics and marketing tools including Google Analytics, Hotjar, and Microsoft Clarity. Hosting appears to be on Amazon Web Services with Elastic Load Balancing and Cloudflare protection. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data query failed due to an invalid domain format including 'www', but the site is accessible and legitimate. Overall, the website demonstrates a mature digital presence with strong business credibility and privacy compliance.
Whitbread PLCwhitbread.co.uk
Hospitality · United Kingdom
86Low
NIS2 47 · GDPR 100
NIS2 47 · GDPR 100
Whitbread PLC is a leading hospitality company primarily operating in the UK and Germany, owning the Premier Inn brand, the largest hotel chain in the UK. The company also operates several branded restaurants and hospitality services. The website reflects a mature digital presence with comprehensive corporate, sustainability, and investor information, targeting a broad audience including investors, customers, and employees. Technically, the site is built on WordPress with modern JavaScript libraries and analytics tools, demonstrating good performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR consent. Overall, the website projects high professionalism and trustworthiness, supporting Whitbread's market position as a major hospitality player.
MasTec, Inc.mastec.com
Energy · United States
83Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
MasTec, Inc. is a leading specialty contractor focused on engineering, designing, and constructing infrastructure projects primarily in the energy and telecommunications sectors. With a workforce of nearly 22,000 professionals and over 80 years of experience, MasTec holds a strong market position as a top infrastructure construction company in the United States. Their key services span civil infrastructure, communications, data centers, EV infrastructure, pipeline infrastructure, power delivery and generation, technology deployment, and water and wastewater solutions. The website reflects a professional corporate presence with comprehensive investor relations and sustainability reporting. Technically, the website employs modern front-end technologies including Bootstrap, Leaflet, Font Awesome, and Google Fonts. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security-wise, the site uses HTTPS and script integrity attributes but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or malicious content were detected in the provided data. The WHOIS data is unavailable or protected, which introduces some uncertainty about domain registration details. However, the website's corporate content, investor relations, and contact information strongly support legitimacy. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. Overall, the site demonstrates a mature digital presence suitable for an enterprise infrastructure contractor. Strategic recommendations include enhancing security posture by implementing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration transparency to improve trustworthiness.
Horne Engineeringhorne.co.uk
Manufacturing · United Kingdom
80Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Horne Engineering is a UK-based manufacturer specializing in thermostatic showers, taps, and valves, with a history dating back to 1909. The company focuses on delivering safe hot water solutions primarily for domestic and commercial applications, targeting engineers, plumbers, and building managers. Their product range includes thermostatic taps, showers, mixing valves, and related technical support services. The website reflects a mature digital presence with professional design, clear navigation, and relevant content tailored to their industry niche. Technically, the site employs common web technologies such as jQuery, Google Tag Manager, and Microsoft Application Insights for analytics and monitoring. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected in the HTML source. The WHOIS lookup for the subdomain www.horne.co.uk failed due to domain naming rules, indicating the query was likely made on a subdomain rather than the registered domain horne.co.uk, limiting domain registration transparency. Overall, the website is trustworthy and professional, with moderate technical sophistication and compliance with privacy regulations.
- JJust Keyrings
justkeyrings.co.uk
Retail · United Kingdom
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Just Keyrings is a UK-based e-commerce business specializing in custom printed promotional keyrings, targeting businesses seeking bulk orders with free artwork and fast delivery. The company positions itself as an experienced specialist with over 15 years in the industry. The website is built on Magento with the modern Hyvä theme and uses Alpine.js for frontend interactivity, indicating a moderate level of digital maturity. Cookie consent is managed via Cookiebot, and Google Tag Manager is used for analytics, reflecting attention to privacy and marketing needs. Security posture is good with HTTPS enforced, CSRF protections, and secure cookie handling, though explicit security policies and incident response information are absent. Overall, the site is professional and trustworthy but lacks some transparency in domain registration and formal security documentation.
PayPalpaypal.com
Finance · Germany
89Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
PayPal is a leading global online payment platform offering digital wallet services, payment processing, and flexible payment options including buy now pay later and installment plans. The website targets both private consumers and business customers in Germany, providing localized content and services. The site demonstrates strong branding consistency and professional content quality, reflecting PayPal's market position as a trusted financial technology provider. Technically, the site uses modern JavaScript frameworks, proprietary PayPal components, and integrates analytics and monitoring tools such as Datadog and Google Analytics. Hosting appears to be via Fastly edge servers, ensuring fast and reliable performance. Security posture is strong with HTTPS enforced, anti-clickjacking measures, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with accessible privacy and cookie policies and GDPR adherence. WHOIS data is unavailable due to registry restrictions, but this does not detract from the site's legitimacy given PayPal's global brand recognition. Overall, the website is secure, compliant, and professionally maintained, supporting PayPal's business objectives effectively.
Other
79Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The website www.crowell.com is currently inaccessible beyond a Cloudflare security challenge page employing Turnstile captcha, which blocks direct access to any substantive content. Due to this, no business information, contact details, or policies are visible, severely limiting the ability to assess the company's market position or services. The domain WHOIS data is unavailable, indicating either the domain is unregistered, recently registered, or privacy-protected with no public data. Technically, the site uses Cloudflare's security infrastructure, including strict Content-Security-Policy headers, which is a positive security measure. However, the lack of accessible content and transparency reduces trust and credibility significantly.
- Sonoco Products Company
sonoco.com
Manufacturing · United States
76Low
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
Sonoco Products Company operates a professional and comprehensive website focused on packaging solutions across multiple industries. The company positions itself as a global leader in manufacturing metal, paper, and specialty packaging products, serving business customers primarily in North America and globally. The website demonstrates a mature digital presence with modern technologies such as Drupal 10, Google Tag Manager, and Cookiebot for privacy compliance. The site is well-structured, mobile-optimized, and provides clear navigation and rich content about products, markets, sustainability, and corporate information. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain www.sonoco.com is a notable anomaly, though the website content and branding strongly indicate legitimacy. Overall, the site reflects a large enterprise with a strong market position in manufacturing and packaging solutions.
Thermonthermon.com
Energy · United States
76Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Thermon is a well-established industrial heating solutions provider, founded in 1994, with a strong market position as a world leader in industrial process heating. The company serves industrial sectors requiring flow assurance, temperature maintenance, freeze protection, and environmental monitoring. Their business model is primarily B2B, targeting large industrial clients in energy, transportation, and manufacturing sectors. The website reflects a mature digital presence with comprehensive content, consistent branding, and multiple language support.
Agileagilesolutions.co.uk
Technology · United Kingdom
78Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Agile is a UK-based consulting firm specializing in data, cloud, and AI services aimed at driving business transformation. Established in 2006, Agile has built a strong market position with a medium-sized business model focused on delivering data strategy, governance, integration, and monetization services. The company partners with leading technology providers such as Microsoft, AWS, Snowflake, and Informatica, serving a global client base including notable organizations like BAE, BBC, and Natwest. Technically, the website is built on WordPress using modern frameworks like Elementor and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS enforced but lacks visible security headers and formal security policies. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, Agile presents a professional and trustworthy online presence with opportunities to enhance security and privacy transparency.
White Peak Wealth Management Ltd | Financial Adviser | Duffieldwhitepeakwm.co.uk
—
79Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Teradatateradata.com
Technology · United States
80Low
NIS2 47 · GDPR 58
NIS2 47 · GDPR 58
Teradata is a leading enterprise technology company specializing in AI-driven autonomous knowledge platforms that enable large organizations to connect, analyze, and operationalize data at scale. Their platform supports multi-modal data integration, AI operationalization, and autonomous decision-making, positioning them as a key player in the AI and data analytics market. The website reflects a mature digital presence with comprehensive content, multi-language support, and strong branding consistent with an enterprise-grade technology provider. Technically, the site leverages modern frameworks such as Vue.js, Kentico CMS, and cloud-based monitoring tools like Azure Application Insights, indicating a robust and scalable infrastructure. Security posture is strong with HTTPS enforcement and consent management, though some advanced security headers and public vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility, though the lack of WHOIS data transparency is a minor concern. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure policies, and providing clearer incident response contacts to further strengthen trust and compliance.
Rock Management Servicesrms.ltd
Other · United Kingdom
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Rock Management Services Ltd. is a UK-based company offering comprehensive business support services to organizations aiming to remain lean and focus on their core operations. Their service portfolio includes administrative support across HR, IT, finance, compliance, and consulting, positioning them as a trusted outsourcing partner with a proven track record and senior experienced personnel. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to business clients. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, Slider Revolution, and Google Analytics integrations, indicating a mature digital infrastructure. The site is mobile-optimized and employs cookie consent mechanisms, demonstrating awareness of privacy regulations. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and includes cookie consent banners but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is unavailable due to a domain naming error, which is unusual but does not appear to affect the legitimacy of the website. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, incident response transparency, and WHOIS data clarity would enhance trust and compliance.
CACIcaci.co.uk
Technology · United Kingdom
79Low
NIS2 55 · GDPR 83
NIS2 55 · GDPR 83
CACI is an established enterprise technology company specializing in connecting data, technology, and human insight to deliver scalable, innovative solutions that drive business transformation and operational excellence. The company targets business and government clients seeking advanced data analytics, AI, and technology consulting services. The website demonstrates a mature digital presence with professional design, comprehensive navigation, and strong SEO implementation. Technically, the site is built on WordPress with modern libraries and includes cookie consent and analytics integrations, reflecting a good level of digital maturity. Security posture is solid with HTTPS and consent mechanisms, though improvements are recommended in security headers and explicit security policies. WHOIS data for the exact domain queried is unavailable due to it being a subdomain, which slightly impacts trust but does not detract from the overall legitimacy given the professional content and branding. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and providing direct contact information for security and privacy inquiries.
- Morton Fraser MacRoberts LLP
macroberts.com
Other · United Kingdom
78Low
NIS2 55 · GDPR 70
NIS2 55 · GDPR 70
Morton Fraser MacRoberts LLP (MFMac) is a leading Scottish law firm providing expert legal services to businesses, the public sector, and individuals. The firm is well-positioned in the Scottish legal market, recognized by prestigious legal directories such as Chambers and Partners and Legal 500. Their services span multiple sectors including energy, real estate, public sector, manufacturing, and healthcare. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and strong branding consistency. Technically, the website leverages modern technologies including Umbraco CMS, Google Tag Manager, Microsoft Application Insights, Hotjar, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced, security headers present, and use of reCAPTCHA on forms. Privacy compliance is well addressed with detailed policies and consent mechanisms. The WHOIS data is unavailable, which limits transparency on domain registration details. However, the website content and business information strongly indicate legitimacy and professionalism. No critical security vulnerabilities or compliance gaps were detected. Overall, the site demonstrates a mature digital infrastructure suitable for a large professional services firm.
- M
—
76Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Personalised Memento Companypersonalisedmemento.co.uk
Retail · United Kingdom
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Personalised Memento Company operates as the UK's leading trade supplier of personalised gifts, offering a vast catalogue of over 5000 products. Their business model focuses on drop-shipping directly to customers, enabling trade clients to avoid inventory costs. The company is based in Stoke-on-Trent and targets trade and wholesale customers, positioning itself as a market leader in the personalised gift retail sector. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome, and Google reCAPTCHA, ensuring a responsive and user-friendly experience. The site is well-structured with clear navigation and mobile optimization, though accessibility features are basic. Performance is fast, and SEO practices are adequate but could be enhanced. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect login forms. However, no explicit security headers were detected, and there is no dedicated security policy or incident response information available. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data due to domain naming rules error introduces some uncertainty regarding domain legitimacy. Overall, the website presents a professional and trustworthy front for its business operations, with strong content and user experience. The main risk lies in the lack of domain registration transparency and some missing security best practices. Strategic improvements in security headers, domain registration clarity, and incident response readiness would enhance the site's trust and resilience.
- Warwick Hotels and Resorts
capitalhotel.co.uk
Hospitality · United Kingdom
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
The Capital Hotel, Apartments & Townhouse is a luxury boutique hotel located in Knightsbridge, London, operated under the Warwick Hotels and Resorts brand. The website presents a comprehensive offering of accommodations, dining, events, and wellness services targeting upscale travelers and tourists. The site is professionally designed with clear navigation and integrates modern booking and analytics technologies, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and consent management, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy given the brand association and professional web presence. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party scripts.
- Anne Arundel Community College
aacc.edu
Education · United States
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Anne Arundel Community College (AACC) is a well-established public community college serving Anne Arundel County, Maryland. The institution offers a broad range of associate degree programs, certificates, and continuing education courses aimed at students, workforce professionals, and community members. The website reflects a professional educational institution with clear navigation, relevant content, and a focus on accessibility and user experience. The college positions itself as a key regional educational provider with a strong community focus. Technically, the website leverages modern web technologies including jQuery, Google Tag Manager, Google Analytics, and a Consent Management Platform (Osano) to ensure compliance with privacy regulations. The site is built on the TERMINALFOUR CMS platform, which is common for educational institutions. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the website enforces HTTPS, implements standard security headers, and uses a consent management platform to comply with privacy laws such as GDPR. However, there is no publicly available security policy or incident response information, and no vulnerability disclosure program is evident. The WHOIS data is unavailable, which is unusual but may be explained by registrar policies for .edu domains. Overall, the security posture is good but could be improved by publishing more explicit security and incident response information. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing transparency around security policies, incident response, and vulnerability disclosure, as well as improving accessibility compliance. The website is trustworthy and professional, serving its educational mission effectively.
- Hallmark
hallmark.com
Retail · United States
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Hallmark is a well-established retail company specializing in greeting cards, gifts, ornaments, home decor, and gift wrap products. The website reflects a strong market position with a comprehensive e-commerce platform targeting general consumers seeking celebratory and holiday-related products. The company leverages advanced digital marketing and analytics tools such as Bloomreach Exponea, Datadog RUM, and Adobe DTM to enhance user experience and monitor performance. The site is professionally designed, mobile-optimized, and provides clear navigation and rich content, supporting a high level of user engagement and trust. Security measures include HTTPS enforcement, Google reCAPTCHA Enterprise for bot protection, and consent management via OneTrust, indicating a mature security posture. However, the absence of publicly available WHOIS data is noted, likely due to privacy protection, but does not detract from the overall legitimacy given the brand's prominence. Strategic recommendations include publishing explicit security policies, vulnerability disclosure information, and enhancing transparency around data protection officer contacts to further strengthen trust and compliance.
Rollins, Inc.rollinscorp.com
Other · United States
83Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Rollins, Inc. is a global leader in pest control and wildlife management services, operating through a family of well-known brands such as Orkin and Hometeam Pest Defense. The company serves over 2.8 million customers worldwide with more than 900 locations, emphasizing protection of homes, families, and businesses. Their market position is strong, supported by transparent investor relations and comprehensive corporate governance disclosures. Technically, the website is modern, fast, and mobile-optimized, leveraging CDN hosting and popular analytics tools. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. The WHOIS data is incomplete, which is unusual for a public company, but the website content and branding strongly support legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations.
dejurepharmacy.co.uk — Premium Domain For Sale | Atomdejurepharmacy.co.uk
Other
79Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The website represents a premium domain sales page hosted on atom.com, specifically offering the domain dejurepharmacy.co.uk for purchase. The business operates as a domain marketplace, providing verified premium domains with options for installment payments and free transaction support. The site targets domain buyers and investors seeking high-value domain names. Technically, the site employs modern web technologies including Google Tag Manager, Google reCAPTCHA for bot protection, and New Relic for performance monitoring. The site is served over HTTPS with a valid SSL certificate, ensuring secure communications. However, explicit security headers and privacy policies are not evident, indicating room for improvement in compliance and security best practices. The absence of WHOIS data for the atom.com domain introduces some uncertainty regarding domain registration legitimacy, though the site content and branding appear professional and consistent with its business model. Overall, the site presents a moderate security posture with good technical implementation but lacks comprehensive privacy and contact information. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing clear contact and incident response details to enhance trust and compliance.
- MMextrade Official
mextrade.co.uk
Retail · United Kingdom
77Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Mextrade Official is a UK-based wholesale supplier specializing in authentic Mexican food ingredients, targeting restaurants, chefs, and food businesses across the UK. The company offers fresh corn tortillas made locally and a range of traditional Mexican products. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrated marketing tools such as Google Analytics, Facebook Pixel, and Judge.me for customer reviews. The digital infrastructure reflects a moderate to good level of technical maturity with responsive design and standard SEO practices. Security posture is strong with HTTPS enforcement and Shopify's built-in security features, although explicit security policies and incident response information are absent. Privacy compliance is limited due to missing privacy and cookie policies, which should be addressed to enhance trust and regulatory adherence. Overall, the site presents a professional and trustworthy front for a niche retail business in the food wholesale sector.
- Galliard Homes Limited
galliardhomes.com
Real Estate · United Kingdom
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Galliard Homes Limited is a well-established UK-based property developer specializing in residential developments, primarily in London and surrounding areas. With over 30 years of experience, the company offers new build homes, luxury apartments, and buy-to-let investment opportunities. The website reflects a mature digital presence with comprehensive content, clear navigation, and multiple interactive features such as property search forms and development showcases. The company maintains active social media profiles and provides detailed business and contact information, enhancing trust and transparency. Technically, the website is built on Drupal 11 with modern front-end libraries and integrates various marketing and analytics tools including Google Analytics, HubSpot, Facebook Pixel, and Cookiebot for consent management. The site is mobile-optimized and accessible, though some security best practices like security headers could be improved. The SSL configuration is strong, ensuring secure communications. Security posture is generally good with HTTPS enforced and no visible vulnerabilities in the HTML content. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve security readiness. Overall, the website is professional, trustworthy, and well-suited for its target audience of property buyers and investors. Strategic improvements in domain registration transparency and security headers would further strengthen its security and credibility.
- Avient Corporation
polyone.com
Manufacturing · United States
81Low
NIS2 22 · GDPR 100
NIS2 22 · GDPR 100
Avient Corporation is a global leader in the manufacturing of advanced composites, specialty polymers, color and additive systems, and thermoplastic and polymer compounds. The company serves industrial manufacturers and energy sector clients with innovative materials designed to enhance performance and environmental protection. Avient holds a strong market position as a leading supplier in its industry, supported by ISO certifications and a professional digital presence. The website reflects a mature digital infrastructure built on Drupal 10, integrating modern analytics and consent management tools, indicating a good level of digital maturity. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though the absence of WHOIS data slightly impacts domain trustworthiness. Strategic recommendations include enhancing transparency around security policies and vulnerability disclosures to further strengthen trust and compliance.
- LLawsons
lawsons.co.uk
Retail · United Kingdom
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Lawsons is a well-established independent timber, building materials, and fencing merchant serving London and the South East since 1921. The company targets both trade professionals and the general public, offering a comprehensive range of high-quality materials. Their market position as a leading independent merchant is supported by a professional e-commerce website built on Magento, featuring clear navigation and product categorization. The website integrates multiple third-party services for analytics, marketing, and customer reviews, indicating a mature digital presence. Technically, the website employs modern web technologies including Magento, RequireJS, jQuery, and Google Tag Manager, with performance and mobile optimization rated as moderate to good. The site uses HTTPS with excellent SSL configuration, but lacks explicit security headers which could enhance protection. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Security posture is generally sound with HTTPS enforced and no obvious vulnerabilities detected in the content. However, the absence of security headers and lack of visible incident response or security policies suggest areas for improvement. The WHOIS data could not be retrieved due to domain naming rules error, limiting the ability to fully verify domain registration legitimacy. Overall, Lawsons presents a professional and trustworthy online presence with room for security enhancements and improved transparency in contact and security policies. Strategic recommendations include implementing security headers, publishing incident response information, and ensuring clear contact details are available to users.
- VVML
salmon.com
E-commerce
77Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
VML is a global commerce and marketing agency specializing in integrated omnichannel commerce solutions. Their expertise spans omni-channel commerce, commerce platforms, and marketplace & eRetail strategies, supported by a large team of practitioners with backgrounds in CPG, DTC, and technology sectors. The website demonstrates a mature digital presence with modern tracking and consent technologies, professional design, and comprehensive privacy and cookie policies. However, the absence of WHOIS data and explicit security headers slightly detracts from transparency and security posture. Overall, VML presents a strong market position with a focus on driving business growth through integrated commerce and marketing strategies.
Evoture.com — Premium Domain For Sale | Atomevoture.com
Technology
77Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The website atom.com/name/Evoture serves as a premium domain marketplace landing page, specifically promoting the sale of the Evoture.com domain. The business model focuses on offering verified premium domains with flexible payment options such as installments, targeting startups and businesses in technology, travel, and personal development sectors. The site positions itself as a trusted reseller with transaction support and no extra fees. Technically, the site employs modern web technologies including Google Fonts for typography, Google reCAPTCHA for bot protection, and New Relic for performance and error monitoring. The site is served over HTTPS, ensuring secure communications. However, the absence of explicit privacy, cookie, and terms of service policies, as well as lack of visible contact information, limits its privacy compliance and business transparency. Security posture is generally good with HTTPS and bot protection, but could be improved by adding security headers and vulnerability disclosure information. Overall, the site is professional and functional but would benefit from enhanced compliance and transparency measures.
- LLieferando
lieferando.de
E-commerce · Germany
82Low
NIS2 35 · GDPR 88
NIS2 35 · GDPR 88
Lieferando is a leading online marketplace specializing in food delivery, groceries, and everyday products primarily serving Germany and Austria. Founded in 2009 and operating under the parent company Just Eat Takeaway.com, Lieferando offers a comprehensive platform that connects consumers with over 35,000 restaurants and stores. The company also provides logistics services with employed couriers, enhancing delivery reliability for partners without their own delivery infrastructure. The website is professionally designed, mobile-optimized, and rich in content, targeting consumers seeking convenient food and grocery delivery solutions.
Other
77Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
The domain www.techgeneration.uk is currently not registered or is invalid as per the Nominet UK WHOIS data, which states the domain cannot be registered due to naming rules violations. Consequently, the website content is inaccessible or blocked, preventing any meaningful content or business information extraction. No metadata, contact details, or security policies are available for analysis. The lack of accessible content and WHOIS data indicates the domain is not active or legitimate at this time. The technical infrastructure cannot be assessed due to absence of content and headers. Security posture is unknown and likely poor given the domain status. Overall, the risk of engaging with this domain is high due to its invalid registration status and lack of transparency.
- KKGN Pillinger
kgnpillinger.com
Manufacturing · United Kingdom
76Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
KGN Pillinger is a UK-based manufacturer and supplier specializing in water boosting equipment and related services. Established in 2004, the company holds a strong market position as a leading provider in its niche, offering a range of products including booster sets, fabrication services, packaged pumping stations, and bespoke systems. The website serves both as an informational platform and an online shop, targeting businesses and professionals in the water engineering sector. The company emphasizes service and repair capabilities alongside manufacturing expertise. Technically, the website is built on the Shopify platform, leveraging modern e-commerce technologies such as jQuery, PageFly page builder, and lazy loading for images. The site is hosted on Shopify's CDN infrastructure, ensuring moderate performance and good mobile optimization. SEO and accessibility are addressed at a basic to good level, with clear navigation and professional design. Analytics tools like Google Analytics and Shopify Pixel are integrated for user tracking and marketing insights. From a security perspective, the site uses HTTPS with a valid SSL certificate and domain registration protections like clientDeleteProhibited and clientTransferProhibited statuses. However, DNSSEC is not enabled, and explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, representing areas for improvement. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms, which could expose the company to regulatory risks. No incident response or vulnerability disclosure information is provided. Overall, the website presents a professional and trustworthy front for the business, with solid technical foundations but gaps in privacy and security policy transparency. Strategic improvements in these areas would enhance compliance and customer trust.
Cotswold Grey Ltdcotswoldgrey.com
Retail · United Kingdom
78Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Cotswold Grey Ltd operates an e-commerce website specializing in contemporary and vintage furniture, homeware, and antiques, targeting consumers interested in stylish home furnishings primarily in the United Kingdom. The company leverages the Shopify platform for its online presence, integrating multiple marketing and analytics tools such as Google Analytics, Hotjar, Klaviyo, and Trustpilot to enhance customer engagement and trust. The website demonstrates a good level of digital maturity with modern technologies and a responsive design, providing a positive user experience. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security headers could be improved. The absence of WHOIS data raises some concerns about domain registration legitimacy, but the active and professional website presence mitigates immediate risk. Overall, the site is well-positioned in its niche retail market with room for security and transparency enhancements.
- Lektronix
lektronix.ie
Manufacturing
76Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Lektronix is a specialized service provider focusing on repair and replacement parts for industrial automation systems, including electronics, motors, and robots. The company is presented as a part of Rockwell Automation, indicating a strong market position within the manufacturing sector. The website is professionally designed with good content quality and clear navigation, targeting industrial clients primarily in German-speaking regions and other European countries through sister sites. Technically, the site employs modern JavaScript libraries, Google reCAPTCHA for bot protection, and tracking tools such as Google Tag Manager and Bing Ads, reflecting a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and bot protection mechanisms, but lacks some security headers and explicit security policies. The absence of WHOIS data and registrant information introduces some uncertainty about domain legitimacy, although the website branding and content suggest a legitimate business. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.
Roundhouseroundhouse.org.uk
Media · United Kingdom
81Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Roundhouse is a well-established and iconic music and arts venue located in Camden, United Kingdom, with a history dating back to the 1960s. The organization focuses on providing a creative space that empowers communities through music, arts, and cultural events. Their market position is strong within the cultural and entertainment sector, targeting a broad audience interested in arts and live performances. The website reflects a professional and consistent brand image, supported by active social media channels and comprehensive privacy and cookie policies, indicating a mature digital presence. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and integrates various third-party services including Google Tag Manager, Cookiebot for consent management, and Freshbots for chatbot functionality. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers could be improved. Performance is moderate, with a well-structured technical stack that supports the business model effectively. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms that comply with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the WHOIS data for the domain is unavailable due to a domain naming rules violation error from Nominet UK, which is unusual but does not appear to impact the legitimacy of the website itself. The absence of explicit contact emails or phone numbers on the homepage suggests contact information may be located deeper within the site. Overall, the website presents a low risk with a solid security posture and good privacy compliance. Strategic recommendations include enhancing security headers, auditing third-party scripts regularly, and improving transparency around contact and incident response information to further strengthen trust and compliance.
King’s Elykingsely.org
Education · United Kingdom
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
King’s Ely is a well-established independent day and boarding school located near Cambridge, UK, serving children aged 2-18. The website reflects a professional educational institution with comprehensive offerings including nursery, prep, senior school, and sixth form education. The site targets parents and prospective students, providing detailed information about admissions, academic programs, and school life. The business model is focused on private education with a strong local market position in Cambridgeshire. Technically, the website employs modern web technologies such as jQuery, Bootstrap, and Kendo UI, with integration of Google Tag Manager and CookieYes for analytics and privacy compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS enforced and anti-forgery cookies in use, though some security headers could be improved. Privacy compliance is robust, featuring a detailed cookie consent mechanism aligned with IAB TCF standards. Overall, the domain WHOIS data is unavailable, but the website content and structure strongly indicate legitimacy and professionalism.
Innovation Groupinnovation.group
Technology · United Kingdom
85Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Innovation Group is a leading global technology company specializing in insurance technology solutions, delivering pioneering platforms and operational support to insurers, fleet managers, and automotive manufacturers. Their flagship Gateway platform offers end-to-end claims management and connectivity solutions, positioning them as a key player in the InsureTech sector. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to their target audience. Technically, the site is built on WordPress with modern integrations such as Google Analytics and Iubenda for privacy compliance, hosted on Microsoft Azure infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and vulnerability disclosures are absent. WHOIS data is privacy protected, which is typical for technology companies, but limits transparency. Overall, the site demonstrates a high level of professionalism and trustworthiness, suitable for their enterprise-level clientele.
AMT-Sybexamt-sybex.com
Energy · United Kingdom
82Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
AMT-Sybex is a specialized provider of enterprise asset management (EAM) and mobile solutions, primarily serving asset intensive businesses in the energy, water, and transportation sectors. The company operates as part of Jonas Computing (UK) Limited and has a strong market position supported by over 25 years of industry experience. Their offerings include proprietary EAM software, mobile geospatial solutions, and comprehensive implementation and managed services. The website reflects a professional and well-established business with ISO 9001 and ISO 27001 certifications, indicating a commitment to quality and information security.
RK Kuttingkutting.co.uk
Manufacturing · Germany
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
RK Kutting is a medium-sized, family-owned manufacturing company specializing in fluid technology solutions, including hoses, fittings, and custom products tailored for various industrial applications. The company positions itself as a quality and innovation-focused supplier serving B2B clients in manufacturing and related sectors. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting industrial customers. Technically, the website is built on the TYPO3 CMS platform and employs a modern technology stack including jQuery, Bootstrap, and various UI libraries. Hosting is provided by 1und1, and the site demonstrates good mobile optimization and SEO practices. Cookie consent is managed via Cookiebot, ensuring GDPR compliance. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements cookie consent mechanisms. However, it lacks some advanced security headers and does not publish explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Analytics usage is moderate with Google Analytics tracking, disclosed properly in the cookie policy. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. The risk profile is low, with recommendations to enhance security headers and publish security policies to further strengthen the security posture.
Park School (Bournemouth) Ltdparkschool.co.uk
Education · United Kingdom
77Low
NIS2 10 · GDPR 88
NIS2 10 · GDPR 88
Park School (Bournemouth) Ltd operates a well-established independent co-educational day school serving children aged 0-11 in Bournemouth, Dorset. Founded in 1928, it holds a strong market position as a leading prep school with a reputation for academic excellence, pastoral care, and a supportive community. The website reflects a professional and comprehensive presentation of their educational services, including nursery and prep school offerings, co-curricular activities, and community engagement. Technically, the site is built on a Juniper Websites CMS platform, leveraging modern JavaScript libraries such as jQuery, Owl Carousel, and FontAwesome for UI and interactivity. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and rich content. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. The absence of WHOIS data due to domain naming rules violation is a concern, though the website content and business information appear legitimate. Overall, the site demonstrates a mature digital presence suitable for its educational audience, with room for improvement in security transparency and domain registration clarity.
- JJotun
jotun.com
Manufacturing · Germany
82Low
NIS2 10 · GDPR 88
NIS2 10 · GDPR 88
Jotun is a globally recognized manufacturer of paints and coatings, serving diverse sectors including decorative, marine, protective, and powder coatings. The company positions itself as a leader in quality and innovation, protecting various types of properties from iconic buildings to homes. The website reflects a mature digital presence with a modern tech stack including React, Google Tag Manager, and OneTrust for privacy compliance. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy given the company's established market presence and certifications. Strategic recommendations include publishing security policies, establishing a vulnerability disclosure program, and enhancing transparency with security.txt.
TIMETtimet.com
Manufacturing · United States
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
TIMET is a leading global manufacturer and supplier of titanium mill and melted products, serving key industrial sectors such as aerospace, defense, and commercial industries. Established in 1950, TIMET holds a significant market position supplying nearly one-fifth of the world's titanium, with production facilities in the United States and Europe. The company operates under the parent organization Precision Castparts Corp., reflecting a large enterprise scale and strong industry presence. The website content is professional, well-structured, and targets industrial customers and partners.
DOF Group ASAdofsubsea.com
Energy · Norway
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
DOF Group ASA is a leading global provider of integrated offshore energy services, specializing in subsea operations, renewables, marine management, and fleet operations. The company leverages a skilled workforce and a modern fleet of purpose-built vessels to serve offshore energy producers worldwide. Their market position is strong, supported by a comprehensive investor relations section and a clear focus on sustainability and safety. Technically, the website is built on Webflow with modern analytics and tracking tools, delivering fast performance and excellent mobile optimization. Security posture is solid with HTTPS and standard best practices, though explicit security policies and vulnerability disclosures are absent. Overall, the site reflects a professional and trustworthy business presence with room for enhanced transparency in security and incident response. The WHOIS data is incomplete, but the domain appears legitimate based on content and branding.
Sentenialsentenial.com
Financial services · Ireland
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68