Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
5,451–5,500 of 14,261
Särnmark Assistans ABsarnmark.se
Healthcare · Sweden
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Särnmark Assistans AB is a pioneering Swedish company specializing in personal assistance and rehabilitation services, with over 30 years of experience. The company operates nationwide with multiple local offices and emphasizes personalized, safe, and transparent assistance tailored to individual needs. Their services include legal advisory support, customer models for assistance, and rehabilitation programs, including a facility in Spain. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong accessibility features. Technically, the site leverages modern web technologies such as Webflow CMS, Google Tag Manager, Microsoft Clarity, and Cloudflare for performance and security. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be explicitly confirmed. The absence of WHOIS data for the exact queried domain is a minor concern but likely due to querying the subdomain rather than the root domain. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
Manufacturing · Sweden
76Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
IBECO Ingenjörsfirma F. Berglund & Co Aktiebolag is a medium-sized Swedish company specializing in supplying VA (water and sewage) and VVS (heating, ventilation, and sanitation) products. They serve primarily professional customers in Scandinavia, offering a broad product range from small pipe diameters to large stormwater pipes, along with rental equipment and fast delivery services. The company emphasizes sustainability and operational efficiency through initiatives like IBECO Express. Their market position is strong as one of Scandinavia's largest agencies in their sector. Technically, the website is built on the Umbraco CMS platform using ASP.NET Core technology, integrating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and CookieTractor for cookie consent management. The site is mobile-optimized with good SEO and accessibility basics, though some security headers could be improved. The SSL configuration is excellent, and security best practices like antiforgery tokens are in place. From a security perspective, the site demonstrates a mature posture with HTTPS enforcement, privacy compliance, and no visible vulnerabilities or exposed sensitive data. Cookie consent and privacy policies are comprehensive and GDPR compliant. However, the WHOIS data for the www subdomain is missing, which slightly reduces trust but is not uncommon. Overall, the site is professional, trustworthy, and secure. The overall risk assessment is low, with recommendations to enhance security headers and continue regular security audits. The company should maintain transparency and compliance to uphold trust and support its market position.
Grodangrodan.se
Hospitality · Sweden
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Grodan is a hospitality business operating classic Swedish-French restaurants and event venues in central Stockholm, Sweden. The website presents two main locations and offers dining and event hosting services. The site is professionally designed with good content quality and clear navigation, targeting general audiences interested in dining and events in Stockholm. The business model focuses on restaurant services and event spaces, positioning Grodan as an established local player in the hospitality sector. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, CookieTractor for cookie consent management, and integrates Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized and uses HTTPS with secure cookies and CSRF protection tokens, indicating a reasonable level of digital maturity. From a security perspective, the site benefits from HTTPS and cookie consent mechanisms but lacks explicit security headers and published privacy or security policies. No contact information for incident response or vulnerability disclosure is provided, which limits transparency and responsiveness. The absence of WHOIS data for the domain www.grodan.se raises concerns about domain registration legitimacy, although the website content itself appears legitimate and professional. Overall, the website scores moderately well in content quality, technical implementation, and security posture but is penalized for missing privacy policies, contact details, and unclear domain registration data. Strategic improvements in transparency, security headers, and domain verification are recommended to enhance trust and compliance.
iCore – Business integration solutionsicoresolutions.com
Technology · Sweden
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
iCore Solutions AB is a Swedish technology company specializing in business integration solutions, offering a leading Integration Platform as a Service (iPaaS) and related professional services. The company targets businesses seeking to automate and integrate critical business processes to improve efficiency, innovation, and ROI. Their market position is strong within the Nordic region, supported by customer testimonials and case studies from notable clients such as Bergans of Norway and Kicks. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the website is built on a modern stack including jQuery, Google Tag Manager, and CookieTractor for cookie consent management, likely powered by Umbraco CMS. The site is mobile-optimized, uses responsive images, and employs HTTPS for secure communications. However, explicit security headers are not evident in the HTML content, suggesting room for improvement in security hardening. From a security perspective, the site demonstrates good privacy compliance with a detailed privacy policy and cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data for the domain is a concern, potentially indicating recent registration or privacy protection, which slightly reduces trustworthiness. Overall, the security posture is solid but could benefit from publishing security policies and incident response contacts. The overall risk assessment is moderate with a recommendation to verify domain registration details and enhance security headers. Strategic improvements in transparency and security documentation will strengthen trust and compliance posture, supporting the company’s professional image and business growth.
CookieTractorcookietractor.se
Technology · Sweden
79Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
CookieTractor is a Swedish technology company specializing in cookie consent solutions designed to help websites comply with GDPR and ePrivacy directives. Their product is a user-friendly, accessible cookie banner that supports multiple languages and offers detailed cookie management features. The company targets website owners who require compliant and accessible cookie consent mechanisms, positioning itself as a trusted and sustainable Swedish solution with a growing customer base including notable organizations. Technically, the website uses modern web technologies including ASP.NET Core, jQuery, and integrates analytics and marketing tools such as Google Analytics, Matomo, and Hubspot. The infrastructure emphasizes performance, accessibility, and compliance, with data hosted on Swedish servers. Security posture is strong with HTTPS, secure forms, and cookie blocking until consent, though explicit security policies and incident response contacts are not published. The WHOIS data for the exact domain queried is missing, likely due to querying a subdomain, which slightly reduces domain registration trustworthiness. Overall, CookieTractor presents a professional, compliant, and technically mature offering in the cookie consent market.
Eurotrekeurotrek.ch
Hospitality · Switzerland
82Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Eurotrek is a Swiss-based travel company specializing in tailor-made active holidays, primarily cycling and hiking tours across Switzerland and Europe. The company targets active travelers seeking self-guided and guided tours with luggage transport services. Their market position is that of a niche operator with a strong focus on quality and customer satisfaction, supported by positive user ratings and professional digital presence. Technically, the website is built using modern web technologies including React and employs good SEO and accessibility practices. The site is mobile-optimized and features rich multimedia content such as autoplay videos and adaptive images. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks visible incident response or security policies. Privacy compliance is mostly met with a comprehensive privacy policy and GDPR adherence, though a cookie consent mechanism is missing. Overall, the website is professional, trustworthy, and well-suited for its business purpose.
Bambuser ABbambuser.com
Technology · Sweden
84Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Bambuser AB operates as a leading video commerce platform, delivering innovative solutions such as live video shopping, shoppable video, and digital clienteling to brands and retailers globally. Established in 2007, the company has positioned itself as a market leader in the technology and e-commerce sectors, providing scalable interactive video tools that enhance customer engagement and conversion. The website reflects a mature digital infrastructure with modern technologies including Webflow CMS, Google Tag Manager, and various marketing and analytics integrations. Security posture is strong, evidenced by ISO 27001 certification and penetration testing by a reputable cybersecurity firm. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, Bambuser demonstrates a high level of professionalism, technical maturity, and trustworthiness.
QVCqvc.com
E-commerce · United States
78Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
QVC is a leading enterprise-level e-commerce and televised shopping platform offering a wide range of consumer products including beauty, electronics, fashion, and home goods. The website demonstrates a strong market position with extensive live streaming shopping events and a comprehensive online retail presence targeting general consumers. Technically, the site leverages a modern technology stack including Adobe Experience Manager, various analytics and marketing tools, and live shopping integrations, delivering excellent performance and mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and secure cookie practices, although explicit security policy and incident response information are not publicly available. Overall, the site is highly professional, trustworthy, and compliant with privacy regulations, making it a reliable platform for consumers.
- Wine & Spirit Education Trust
wsetglobal.com
Education · United Kingdom
77Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Wine & Spirit Education Trust (WSET) is a well-established global leader in drinks education, offering qualifications in wine, spirits, beer, and sake. Founded in 2006, it operates as a registered charity based in the UK, serving a mature audience of drinks professionals and enthusiasts worldwide. The organization maintains a strong market position as the largest provider in its niche, with a broad network of course providers in over 70 countries and multiple language offerings. Key services include progressive qualification levels, online learning, and custom courses tailored for business clients.
- KKaemingk
kaemingk.com
Retail · Netherlands
86Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Kaemingk is an established international wholesaler specializing in seasonal decoration products, serving primarily B2B customers. With over 85 years of experience, the company holds a strong market position in the retail sector, particularly in the Netherlands. The website reflects a professional business model focused on wholesale distribution of decorative items. Technically, the website employs a modern technology stack including Google Analytics, Hotjar, Cookiebot for consent management, and Microsoft Application Insights for telemetry, hosted likely on Microsoft Azure. The site demonstrates good mobile optimization and SEO practices, though accessibility could be improved. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but could benefit from enhanced security headers and published security policies. Privacy compliance is well addressed with comprehensive privacy and cookie statements and GDPR-aligned consent mechanisms. Overall, the website is trustworthy and professionally maintained, with no critical vulnerabilities detected.
BOMA GmbHolerum.de
Retail · Germany
79Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
BOMA GmbH operates the website olerum.de, a well-established German e-commerce platform specializing in plants, greenhouses, and garden accessories. The company leverages strong partnerships with local nurseries to offer high-quality products and a broad selection to gardening enthusiasts and home gardeners. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, targeting a broad audience of garden lovers. Technically, the site uses modern JavaScript libraries such as jQuery, Splide.js, and Owl Carousel, alongside Google Analytics and Tag Manager with robust consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be enhanced. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR requirements.
- JJaguar Land Rover Classic
jaguarlandroverclassic.de
Transportation · Germany
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Jaguar Land Rover Classic is a specialized division of Jaguar Land Rover focused on providing classic Jaguar and Land Rover parts and restoration services. The website targets classic car enthusiasts and owners primarily in Germany and Europe, leveraging a robust e-commerce platform based on Magento Enterprise. The technical infrastructure includes modern JavaScript libraries, advanced search capabilities via Klevu, and GDPR-compliant cookie management through Cookiebot. Security posture is strong with HTTPS enforced and standard security headers present, though explicit privacy and terms policies are not detected in the provided content. Overall, the site demonstrates a mature digital presence aligned with a large automotive brand, though improvements in transparency and contact availability would enhance trust and compliance.
Lisebergliseberg.se
Hospitality · Sweden
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Liseberg is a well-established amusement park and hospitality business in Sweden, offering a wide range of entertainment, accommodation, and event services. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and New Relic for performance monitoring, ensuring a good user experience across devices. Security posture is strong with HTTPS enforcement and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, supporting Liseberg's market position as a leading entertainment venue in Sweden.
DUXIANAduxiana.co.uk
Retail · United Kingdom
81Low
NIS2 10 · GDPR 83
NIS2 10 · GDPR 83
DUXIANA is a premium retailer specializing in beds and furniture, emphasizing healthy and comfortable sleep through innovative technology and sustainable solutions. The company has a long heritage dating back to 1926 and operates internationally with multiple localized domains. The website demonstrates a high level of professionalism, excellent design, and clear navigation, targeting consumers seeking luxury sleep products and furniture. Technically, the site uses modern tracking and analytics tools such as Google Tag Manager and Azure Application Insights, combined with a cookie consent mechanism to manage user privacy. Security posture is good with HTTPS enforced and secure cookie attributes, though explicit security headers and detailed privacy policies are missing. WHOIS data for the exact domain queried is unavailable due to a query error, but the website content and structure indicate a legitimate and established business. Overall, the site is safe, well-structured, and trustworthy, with room for improvement in privacy transparency and security header implementation.
Starbreeze AB (publ)starbreeze.com
Technology · Sweden
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Starbreeze AB (publ) is an independent developer, publisher, and distributor of PC and console games with a global market focus and studios in multiple European cities. The company emphasizes community building through its games and offers a range of services including game development, publishing, franchising, and community engagement platforms such as Nebula. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content including news, updates, and career opportunities. Technically, the site uses modern frameworks like Next.js and React, hosted on WP Engine, and integrates Google Analytics and Cookietractor for analytics and privacy compliance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly detailed. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the overall site and business indicators suggest legitimacy. Strategic recommendations include enhancing security transparency and monitoring domain registration status.
- FFacebook
fb.watch
Technology · United States
88Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Facebook Video is a key component of Facebook's social media platform, offering users a place to watch videos, reels, and original shows. As part of Meta Platforms, Inc., it holds a leading position in the global technology and media industry, leveraging a robust advertising-based business model. The platform targets a broad general audience with a focus on video content consumption and social engagement. Technically, the site employs modern web technologies including React and advanced JavaScript frameworks, ensuring fast performance, excellent mobile optimization, and good accessibility. Security measures are strong, with HTTPS enforcement and comprehensive security headers, reflecting a mature security posture. Privacy policies and cookie consent mechanisms are well implemented, supporting GDPR compliance. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity, with extensive user tracking aligned with its advertising business model.
Deutsches Jugendherbergswerk (DJH)jugendherberge.de
Hospitality · Germany
77Low
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The website www.jugendherberge.de represents the Deutsches Jugendherbergswerk (DJH), a large and established non-profit organization operating a network of approximately 400 youth hostels across Germany. The site targets families, school groups, youth groups, and solo travelers, offering affordable accommodation and specialized travel programs. The business model focuses on hospitality and group travel services with a strong emphasis on inclusivity and community experience. Technically, the site is built on TYPO3 CMS, employs modern JavaScript frameworks like Vue.js for interactive components, and integrates analytics and consent management tools such as Matomo, Google Tag Manager, and Usercentrics CMP. The website is mobile-optimized, accessible, and SEO-friendly with structured data markup.
- Complianz B.V.
complianz.io
Technology · Netherlands
84Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Complianz B.V. operates a leading privacy compliance platform specializing in WordPress and Shopify plugins and apps, trusted by over one million users globally. Their offerings focus on GDPR, ePrivacy, CCPA compliance, and cookie consent management, positioning them as a key player in the privacy technology sector. The company is based in the Netherlands and has been active since 2018, demonstrating a mature and stable market presence. Their website reflects a professional and user-friendly design, with comprehensive legal documentation and strong trust signals such as positive user reviews and a money-back guarantee. Technically, the website is built on WordPress using Elementor and integrates multiple modern technologies including Easy Digital Downloads for e-commerce, MonsterInsights for analytics, and Google Tag Manager for marketing. The site is well-optimized for performance, mobile responsiveness, SEO, and accessibility. Security practices include HTTPS enforcement and consent management, though there is room for improvement in DNSSEC and security headers. From a security perspective, the site shows a good posture with no detected vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response information and lack of a vulnerability disclosure program are areas for enhancement. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, Complianz.io presents a trustworthy, professional, and technically sound online presence with a strong focus on privacy compliance solutions. Strategic improvements in security transparency and DNS security would further strengthen their position and trustworthiness.
Jaguar Land Rover Classicjaguarlandroverclassic.com
Transportation · United Kingdom
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Jaguar Land Rover Classic operates as the official heritage and classic vehicle division of Jaguar Land Rover, focusing on preserving, restoring, and maintaining classic Jaguar and Land Rover vehicles. The business offers a range of services including bespoke vehicle builds, continuation models, servicing, restorations, parts supply, and lifestyle merchandise. The website reflects a premium brand image consistent with its market position and targets classic car enthusiasts and collectors globally, primarily in the UK and Europe. Technically, the site is built on Magento 2 with modern JavaScript frameworks and integrates essential tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though some security headers could be improved. The absence of WHOIS data is a notable anomaly that requires further investigation but does not detract from the overall professional presentation and trust signals on the site.
Gourmet Bernergourmetberner.de
E-commerce · Germany
81Low
NIS2 22 · GDPR 100
NIS2 22 · GDPR 100
Gourmet Berner is a German e-commerce business specializing in gourmet food products such as spices, antipasti, liqueurs, and gift baskets. The website positions itself as a strong brand for fine gourmet items, targeting general consumers interested in high-quality culinary products. The business operates on the Shopify platform, leveraging its robust e-commerce infrastructure and integrations with trusted third-party services like Trusted Shops and Complianz for compliance and marketing. Technically, the site uses modern web technologies and Shopify's Alchemy theme, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and a formal security policy are absent. Privacy compliance is partially addressed with cookie consent but lacks a visible privacy policy or terms of service. Overall, the domain registration data aligns well with the website's business claims, indicating legitimacy and trustworthiness.
PATZER ERDEN GmbHfrux.de
Retail · Germany
77Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
PATZER ERDEN GmbH operates the frux brand, specializing in high-quality soils and gardening substrates for hobby gardeners and commercial trade customers. The company has a strong market presence in Germany and parts of Europe, supported by multiple production sites and a comprehensive product portfolio including organic and peat-free soils. The website is well-structured, content-rich, and professionally designed, offering detailed product information and gardening tips. Technically, the site uses established JavaScript libraries and frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.
elhoelho.com
Retail · Netherlands
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
elho is a medium-sized retail company specializing in designer flowerpots and planters made from 100% recycled plastic, emphasizing sustainability and modern design. The company targets consumers interested in home and garden decor, offering a broad assortment through an e-commerce platform. The website is professionally designed with excellent content quality, multi-language support, and clear navigation, reflecting a mature digital presence. Technically, the site uses modern technologies including Umbraco CMS, Shopify for e-commerce, and integrates Google Tag Manager and Optimize for analytics and marketing. Security posture is strong with HTTPS enforced and secure cookie flags, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. WHOIS data is unavailable, which slightly reduces trust but is mitigated by the professional site and business transparency. Overall, elho presents a trustworthy and well-managed online presence with a focus on sustainability and customer engagement.
Bolsius International BVbolsius.com
Retail · Netherlands
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Bolsius International BV is a well-established European candle manufacturer and retailer, founded in 1870, with a strong emphasis on quality, heritage, and sustainability. The company is B Corp certified, reflecting its commitment to social and environmental responsibility. The website is professionally designed, multilingual, and optimized for user experience and SEO, targeting a broad consumer audience interested in candles and related products. Technically, the site is built on WordPress using modern libraries such as jQuery, Bootstrap, and Slick Carousel, with integration of Google Maps API and Yoast SEO for enhanced functionality and search visibility. Security posture is good with HTTPS enforced and a comprehensive cookie consent mechanism, though some security headers are missing and no explicit security or incident response policies are published. WHOIS data is unavailable, which slightly reduces transparency and trust but does not detract significantly from the overall legitimacy given the professional web presence and branding. Overall, the site demonstrates a mature digital infrastructure with good privacy compliance and business credibility.
Preziprezi.com
Technology · United States
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Prezi is a well-established technology company specializing in AI-enhanced presentation software designed to engage audiences effectively. Founded in 2000, Prezi offers a SaaS platform targeting business professionals, educators, and students, providing key services such as video presentations, interactive presentations, and infographic design tools. The company holds a strong market position as a leader in interactive presentation technology with a large user base and major corporate customers. Technically, Prezi's website demonstrates a mature digital infrastructure hosted on AWS, built with modern web technologies including Webflow CMS, JavaScript frameworks, and integrated marketing and analytics tools such as Google Tag Manager, Hotjar, and Optimizely. The site is fast, mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. From a security perspective, Prezi maintains a robust posture with HTTPS enforcement, SOC 2 compliance, and comprehensive privacy and cookie policies with consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, minor improvements such as enabling DNSSEC and publishing a security.txt file could enhance security transparency and DNS security. Overall, Prezi presents a low-risk profile with strong business credibility, technical sophistication, and compliance adherence. Strategic recommendations include enhancing incident response visibility, publishing vulnerability disclosure information, and enabling DNSSEC to further strengthen trust and security posture.
- Microsoft Corporation
office365.com
Technology · United States
79Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Microsoft Corporation operates the website www.microsoft.com, specifically the Finnish localized Microsoft 365 product page. The company is a global leader in technology, providing subscription-based productivity software and cloud services under the Microsoft 365 brand. The website targets a broad audience including home users, businesses, enterprises, and educational institutions, offering a comprehensive suite of applications, intelligent cloud services, and AI-powered features such as Copilot. The site is professionally designed, well-structured, and optimized for mobile devices, reflecting Microsoft's strong digital maturity and global market presence. Technically, the website leverages modern web technologies including Adobe Experience Manager CMS, JavaScript frameworks, and Microsoft Azure hosting. Performance is fast with good SEO and accessibility features. Security is robust with HTTPS, strong security headers, and no detected vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms aligned with GDPR requirements. The security posture is strong, supported by certifications such as ISO 27001 and SOC reports. Incident response and vulnerability disclosure processes are publicly available, enhancing trust. The domain is highly legitimate despite the absence of raw WHOIS data due to privacy protection, as it aligns with Microsoft's branding and global reputation. Overall, the website represents a secure, professional, and trustworthy digital presence for Microsoft 365 in Finland, supporting Microsoft's business objectives and customer engagement effectively.
CookieTractorcookietractor.com
Technology · Sweden
79Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
CookieTractor is a specialized European technology company providing a user-friendly, accessible cookie consent solution designed to help websites comply with GDPR and the ePrivacy Directive. The company emphasizes accessibility, supporting WCAG 2.2 AAA standards and the European Accessibility Act, and offers a customizable cookie banner with multi-language support. Their business model is SaaS-based with tiered pricing according to website size. The website content is professional and well-structured, targeting website owners needing compliant cookie management solutions. Technically, the site uses modern JavaScript libraries, integrates Matomo and Google Analytics for tracking, and is hosted behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS and secure form handling, although explicit security headers and a public security policy are absent. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms. However, the lack of WHOIS registration data reduces trustworthiness and business credibility, suggesting the domain may be unregistered or privacy protected. Overall, CookieTractor presents a mature, compliant, and accessible solution with room for improvement in transparency and security documentation.
SAGAFLOR AGdabluehichauf.de
Retail · Germany
77Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
SAGAFLOR AG operates the 'da blüh ich auf' brand, a well-established German gardening retail and information platform. The website offers a broad range of garden products including soil, fertilizers, mulch, and seeds, complemented by gardening tips, recipes, and a market locator for regional garden centers. The company emphasizes quality, regional connection, and sustainability, targeting gardening enthusiasts and consumers in Germany. Technically, the website employs modern JavaScript libraries such as jQuery, Splide.js, and Owl Carousel, and integrates analytics tools like Matomo and Google Analytics with a strong cookie consent mechanism ensuring GDPR compliance. Accessibility is enhanced via the UserWay widget, and the site is mobile-optimized with good SEO practices. Security posture is solid with HTTPS enforced and session management cookies in place, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site reflects a professional, trustworthy, and user-friendly digital presence aligned with its business goals.
Dagens Nyheterdn.se
Media · Sweden
77Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Dagens Nyheter is a leading Swedish national newspaper providing trusted news, award-winning photojournalism, and investigative reporting. The website is professionally designed with excellent content quality targeting a general audience interested in Swedish and global news. The technical infrastructure uses modern web technologies, including custom fonts and a consent management platform, ensuring good performance and privacy compliance. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the website demonstrates a mature digital presence with strong business credibility and privacy adherence.
Switzerland Cheese Marketing Beneluxkaasuitzwitserland.nl
Retail · Netherlands
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website www.kaasuitzwitserland.nl serves as a regional marketing platform for Switzerland Cheese Marketing Benelux, promoting Swiss cheese products to consumers in the Netherlands and surrounding Benelux countries. It offers rich content including recipes, inspiration, and educational materials about Swiss cheese, leveraging multimedia such as videos and images to engage visitors. The site is well-branded and consistent with the parent organization's identity, targeting cheese enthusiasts and consumers interested in quality Swiss cheese products. Technically, the site is built on TYPO3 CMS, utilizing modern web technologies including Usercentrics for consent management and Sentry for error tracking. The site demonstrates good mobile optimization, SEO practices, and basic accessibility features. Performance is moderate with embedded video content and external scripts. From a security perspective, the site enforces HTTPS, implements key security headers, and uses consent management for cookies, reflecting a mature security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policy and incident response information, which could enhance trust and preparedness. Overall, the website presents a professional, trustworthy, and GDPR-compliant presence with clear contact information and social media integration. The risk profile is low, with recommendations focusing on enhancing security transparency and accessibility.
Intersim AGschweizerkaese.de
Retail · Germany
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website www.schweizerkaese.de is a professionally designed platform promoting Swiss cheese, primarily targeting consumers in Germany and Austria. It offers rich content including recipes, lifestyle tips, and brand storytelling to engage its audience. The site is powered by TYPO3 CMS and integrates modern technologies such as Vimeo for video content, Usercentrics for consent management, Google Tag Manager for analytics, and Sentry for error monitoring. The business behind the site is Intersim AG, a medium-sized entity operating in the retail sector with a focus on food marketing. The domain registration data is consistent and trustworthy, supporting the legitimacy of the website. However, explicit privacy policies and terms of service are not found on the main page, which could be improved for better compliance and transparency.
Kaas uit Zwitserlandkaasuitzwitserland.be
—
78Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Intersim AGfromagesdesuisse.be
Retail · Germany
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The website www.schweizerkaese.de is a marketing and informational platform focused on Swiss cheese products, targeting German-speaking consumers in Germany and Austria. Operated by Intersim AG, the site provides rich content including recipes, lifestyle tips, and brand storytelling to engage its audience. The site leverages TYPO3 CMS and integrates modern technologies such as Vimeo for video content and Usercentrics for GDPR-compliant cookie management. Social media presence on YouTube, Instagram, and Facebook further supports its marketing efforts. Technically, the site is well-structured with good mobile optimization and SEO practices, although some accessibility features could be improved. Security posture is solid with HTTPS, error monitoring via Sentry, and cookie consent mechanisms, but lacks explicit security headers and published security policies. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the website is professional, trustworthy, and well-positioned in its niche.
Switzerland Cheese Marketing SAformaggiosvizzero.ch
Other · Switzerland
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Switzerland Cheese Marketing SA operates the website www.formaggiosvizzero.ch as a non-profit organization dedicated to promoting Swiss cheese. The website is content-rich, professionally designed, and targets a general audience interested in Swiss cheese, recipes, and related events. The technical infrastructure is based on TYPO3 CMS with modern integrations such as Usercentrics for consent management, Google Tag Manager for analytics, and Sentry for error tracking. Security posture is good with HTTPS enforced and consent mechanisms in place, though explicit security headers and privacy policies are missing. Overall, the website is trustworthy and well-positioned in its niche.
- Jaguar Latvija
jaguar.lv
Transportation · Latvia
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Jaguar Latvija is the official regional website representing the Jaguar automotive brand in Latvia. The site provides vehicle information, brand services, and customer support tailored to Latvian consumers. It serves as a digital presence for Jaguar under the parent company Jaguar Land Rover, targeting the Latvian market with localized content and multiple language options. The website demonstrates a moderate level of digital maturity, leveraging modern JavaScript frameworks such as Nuxt.js and integrating Google Tag Manager and Usercentrics for analytics and consent management. The design is professional and mobile-optimized, offering a good user experience with clear navigation and branding consistency. Security posture is adequate with HTTPS enforced and use of consent management, but lacks explicit security headers and visible privacy or cookie policies in the provided content. No contact information or incident response details are found, indicating areas for improvement in transparency and compliance. Overall, the website is trustworthy and aligns well with the brand's global presence, but could enhance privacy compliance and security best practices to strengthen user trust and regulatory adherence.
ООО «Атлант-М Британия»jaguar-atlantm.by
Transportation · Belarus
77Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
ООО «Атлант-М Британия» является официальным дилером Jaguar в Беларуси, предоставляя полный спектр услуг по продаже новых и подержанных автомобилей, сервисному обслуживанию, корпоративным продажам и финансовым программам. Сайт демонстрирует широкий модельный ряд Jaguar и ориентирован на покупателей из Беларуси и СНГ. Технически сайт построен на современном стеке с использованием множества аналитических и маркетинговых инструментов, обеспечивая хорошую производительность и мобильную оптимизацию. С точки зрения безопасности, сайт использует HTTPS и реализует cookie consent, однако отсутствуют некоторые расширенные заголовки безопасности и публичные политики безопасности. В целом, сайт демонстрирует высокий уровень профессионализма, прозрачности и доверия, что подтверждается наличием официальных контактных данных и социальных сетей.
Kundokundo.se
Technology · Sweden
78Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Kundo is a Swedish technology company specializing in AI-enhanced customer service solutions. Their platform integrates self-learning AI agents with human support to automate knowledge and case management, delivering accurate responses across multiple digital channels. Positioned as a leading customer service system in Sweden, Kundo targets businesses seeking to modernize and automate their customer support operations. The website is professionally designed using HubSpot CMS, featuring multilingual support and comprehensive privacy and cookie policies. Technically, the site employs modern web technologies and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. WHOIS data for the www subdomain is unavailable, but this is consistent with typical domain registration practices. Overall, Kundo presents a credible and trustworthy digital presence with moderate to high security and compliance maturity.
- Jobylon AB
jobylon.com
Technology · Sweden
77Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Jobylon AB operates a modern, flexible talent acquisition platform designed for leading employers worldwide. Their platform focuses on streamlining recruitment processes, enhancing employer branding, and improving candidate experience. The company is positioned as a trusted partner in HR technology, serving clients in over 80 countries with a scalable SaaS solution. The website demonstrates a strong market presence with customer testimonials, partner integrations, and ISO 27001 certification, underscoring their commitment to security and quality. Technically, Jobylon leverages HubSpot CMS and associated marketing and analytics tools, including Google Tag Manager and Vimeo for video content. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security practices include HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in implementing additional security headers and publishing vulnerability disclosure policies. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive policies and GDPR adherence. However, the absence of WHOIS domain registration data introduces some uncertainty regarding domain legitimacy, which should be further investigated. Overall, Jobylon presents a professional, trustworthy online presence with a strong focus on business credibility and user experience. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to bolster trust and compliance.
Cventpasskey.com
Technology · United States
86Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Cvent is a leading enterprise software provider specializing in event marketing and management solutions, including Passkey room block management tailored for the hospitality industry. The company targets event planners, hospitality professionals, and meeting organizers with a B2B SaaS business model. Their market position is strong, supported by a comprehensive suite of services and integration capabilities. The website reflects a mature digital presence with professional design and consistent branding. Technically, the site is built on Drupal 10 and leverages a modern technology stack including Adobe DTM, Datadog RUM, Marketo, and RudderStack for analytics and marketing automation. Performance is moderate with good mobile optimization and SEO practices. Accessibility is basic but could be improved. Security posture is robust with HTTPS enforced, strong security headers, and a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public security.txt and incident response information suggests room for improvement in transparency and vulnerability disclosure. Overall, the website is trustworthy and professional, supporting a high level of business credibility. The lack of WHOIS data slightly reduces trust but is offset by the company's known market presence and security practices. Strategic recommendations include publishing security policies, enhancing accessibility, and maintaining regular audits of third-party scripts.
- SurveyMonkey
usabilla.com
Technology
88Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
SurveyMonkey is a well-established SaaS company founded in 1999, providing online survey and feedback solutions primarily targeting customer experience professionals and businesses. The company operates under the parent brand Momentive and offers a comprehensive platform for surveys, forms, market research, and customer feedback management. The website reflects a mature digital presence with consistent branding, professional design, and clear navigation tailored to its enterprise audience. Technically, the website leverages modern web technologies including React, Google Tag Manager, and privacy management tools like Fides.js. The site is mobile-optimized, accessible, and performs moderately well. The use of structured data enhances SEO and content discoverability. Analytics and marketing tools are integrated responsibly with visible cookie consent mechanisms. From a security perspective, the site enforces HTTPS and demonstrates good security practices including cookie consent and privacy policies. However, explicit security headers and incident response contacts are not clearly visible, and the WHOIS data is unavailable, which slightly reduces domain trust verification. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, SurveyMonkey presents a high-quality, trustworthy online presence with strong privacy compliance and business credibility. The main risk lies in the lack of publicly available WHOIS data, which may be due to registry policies but should be monitored. Strategic recommendations include enhancing transparency around security headers, incident response, and vulnerability disclosures to further strengthen trust and compliance.
Non-profit · Spain
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
The Asociación Católica de Propagandistas (ACdP) is a Spanish non-profit organization dedicated to Catholic propagation and community engagement. The website serves as a digital platform to inform visitors about the association's mission and to facilitate donations. It targets the Spanish-speaking Catholic community and supporters. The organization maintains a moderate-sized online presence with active social media channels and a donation system integrated via GiveWP. Technically, the website is built on WordPress 6.7.1, leveraging popular plugins such as Yoast SEO for search optimization and Cookiebot for cookie consent management, indicating a reasonable level of digital maturity. The site uses Google Analytics and Google Tag Manager for visitor tracking and marketing purposes. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features could be improved. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, aligning with GDPR requirements. However, the absence of a publicly accessible privacy policy, terms of service, and security policy pages represents gaps in compliance and transparency. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a trustworthy and professional front for the ACdP organization, but it would benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic recommendations include publishing comprehensive privacy and terms policies, adding incident response contacts, and improving accessibility standards.
- Pratiche.it S.r.l
pratiche.it
Other · Italy
77Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Pratiche.it S.r.l operates a leading online service platform in Italy specializing in the provision of official documents related to conservatory, land registry (catasto), Public Vehicle Registry (P.R.A.), and registry office (anagrafe) services. The website targets private individuals, professionals, and companies seeking quick and easy access to these documents online. The company positions itself as the number one service in its sector within Italy, offering a streamlined digital experience for document requests. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and Cookiebot for cookie consent management. Hosting is provided by Aruba S.p.A., a reputable Italian hosting provider. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in speed and accessibility. From a security perspective, the site enforces HTTPS, implements standard security headers, and uses secure cookies for session management. The cookie consent mechanism is comprehensive and GDPR compliant, reflecting a strong privacy posture. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates areas for enhancement. No critical vulnerabilities or exposed sensitive data were detected. Overall, Pratiche.it presents a professional and trustworthy online presence with a solid foundation in security and privacy compliance. Strategic recommendations include publishing detailed security and incident response policies, improving accessibility, and adding terms of service to enhance legal clarity and user trust.
- Upsun
upsun.com
Technology
77Low
NIS2 25 · GDPR 68
NIS2 25 · GDPR 68
Upsun is a technology company offering a highly flexible Platform as a Service (PaaS) designed to empower developers and enterprises with production-perfect cloud application environments. Formerly known as Platform.sh, Upsun positions itself as a developer-friendly cloud platform supporting multiple frameworks and languages, with predictable and customizable pricing models. The company targets software development teams and businesses seeking reliable and scalable cloud hosting solutions. Technically, the website is built on modern frameworks such as Gatsby and React, optimized for performance, mobile responsiveness, and SEO. The platform supports major cloud providers including AWS, Azure, and GCP, indicating a robust and scalable infrastructure. Security-wise, Upsun employs HTTPS with strong Content Security Policies and domain transfer protections, though DNSSEC is not enabled. The site integrates multiple analytics and marketing tools with appropriate cookie consent mechanisms, reflecting good privacy compliance. Overall, Upsun demonstrates a mature digital presence with strong business credibility and technical sophistication.
Aha!aha.io
Technology
85Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Aha! is a leading SaaS provider specializing in product development software, trusted by over one million product builders worldwide. Their comprehensive suite includes tools for roadmapping, customer interview management, idea capture, project management, and agile delivery, enhanced by a purpose-built AI assistant to accelerate workflows. The company positions itself as the world's #1 product development software, serving product teams across various industries with a focus on delivering lovable products efficiently. Technically, the website leverages modern web technologies including React, Lottie animations, and integrates with Contentful for asset management. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. SEO best practices are evident through comprehensive metadata and structured data. From a security perspective, the site enforces HTTPS and employs secure form handling and event tracking. However, explicit security headers and a public security policy are absent, indicating room for improvement in transparency and defense-in-depth. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and business credibility. The lack of public WHOIS data is consistent with privacy protection practices common among large SaaS providers. No critical security issues or content safety concerns were identified, positioning Aha! as a reliable and secure platform for product development teams.
- Alla nyheter från Dagens Media
dagensmedia.se
Media · Sweden
78Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Dagens Media is a Swedish media news platform focused on marketing and media industry professionals. It operates as a business news site providing aggregated news and industry insights. The website is branded consistently with Bonnier News, a major media group in Sweden, indicating a strong market presence. Technically, the site uses modern web technologies including React and Next.js, with integrated consent management via Didomi to comply with GDPR requirements. Security posture is strong with HTTPS and standard security headers implemented, though explicit privacy and terms pages are not found in the provided content. No contact information or WHOIS data for the exact subdomain was found, but the site appears legitimate and professional. Overall, the site is well-structured, mobile-optimized, and trustworthy for its target audience.
- Channel Factory
channelfactory.com
Media · United States
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Channel Factory is a media technology company specializing in AI-powered video advertising solutions primarily for YouTube and social media platforms. Their platform focuses on brand suitability, contextual targeting, and media optimization to deliver superior ROI for advertisers. The company holds recognized certifications such as the YouTube Measurement Program badge and kidSAFE Seal Program, reinforcing its credibility in the digital advertising space. The website demonstrates a mature digital presence with advanced technical infrastructure including modern JavaScript libraries, HubSpot integration, and comprehensive cookie consent management. Security posture is strong with HTTPS enforced and bot management via Cloudflare, though explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, the company presents a professional, trustworthy image with extensive business and technical maturity.
- SkiStar
skistar.com
Hospitality · Sweden
77Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
SkiStar is a prominent hospitality and tourism company specializing in ski vacations in Sweden and Norway. The website offers comprehensive information and booking services for ski resorts, targeting ski enthusiasts and travelers seeking winter holidays. The company holds a strong market position in the Scandinavian ski resort sector, providing key services such as accommodation bookings, ski school reservations, and vacation packages. The website is professionally designed with excellent content quality and user experience, reflecting a mature digital presence.
Expressen ABexpressen.se
Media · Sweden
79Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Expressen AB operates one of Sweden's leading news websites, www.expressen.se, providing comprehensive coverage of news, sports, and entertainment. Founded in 1944 and part of the Bonnier News group, Expressen targets a broad Swedish audience with high-quality journalistic content. The website demonstrates a mature digital presence with modern web technologies and integrated video content. Privacy and ethical standards are well addressed through detailed policies and a consent management platform, reflecting compliance with GDPR requirements. Security posture is solid with HTTPS enforced and privacy SDKs in use, though some security headers could be improved. Overall, Expressen maintains a strong market position as a trusted media outlet in Sweden.
Media · Sweden
82Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Dagens industri (di.se) is a leading Swedish business news website operated by Bonnier News Business. It provides up-to-date news, market analysis, and in-depth reports targeting business professionals and investors in Sweden. The site features real-time stock data, video content, and comprehensive news coverage relevant to the financial markets and business community. Technically, the website leverages modern web technologies including Google Tag Manager, Didomi Consent Management Platform, and WebSocket for real-time data, hosted on Google Cloud Platform. The site demonstrates good digital maturity with responsive design and effective consent management for GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving a large audience in the Swedish media sector.
INTE BARA POST ABintebarapost.se
Transportation · Sweden
78Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Inte Bara Post AB is a Swedish full-service office management and logistics company offering a range of services including courier (Bud), event management, facility maintenance (Allt-i-allo), staffing (Bemanning), and food and beverage services (Skafferi). The company positions itself as an environmentally conscious leader in its sector, emphasizing sustainability with commitments like Net Zero 2040 and ISO certifications. Their target audience includes businesses of various sizes seeking flexible office management solutions. The website reflects a professional and consistent brand image with clear service offerings and a strong focus on customer satisfaction and environmental responsibility. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Typekit fonts, Swiper.js for sliders, and Google Tag Manager for analytics and marketing tags. The site is well-optimized for mobile devices, loads quickly, and includes accessibility features. Cookie consent management is implemented via CookieTractor, ensuring GDPR compliance. The site integrates multiple tracking and advertising services including Google Analytics, Facebook Pixel, Google Ads, and LinkedIn Insight Tag. From a security perspective, the site enforces HTTPS and uses Cloudflare for CDN and WAF services, although explicit security headers like Content-Security-Policy and X-Frame-Options are not detected. No vulnerabilities or exposed sensitive data were found in the HTML content. However, the absence of a published security policy or incident response contact information is noted. The WHOIS lookup for the domain www.intebarapost.se failed, indicating a possible domain registration anomaly or subdomain usage, which slightly reduces trustworthiness. Overall, the website presents a credible and professional business with good technical implementation and privacy compliance. The main risk lies in the unclear domain registration status, which should be investigated further. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and clarifying domain registration details to improve trust and compliance.
Skultunaskultuna.com
E-commerce · Sweden
83Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Skultuna is a well-established Swedish heritage brand founded in 1607, operating an international e-commerce store specializing in home decor, jewelry, and figurines. The website is built on the Shopify platform, leveraging modern web technologies and integrations such as Klaviyo for marketing and Lucky Orange for user behavior analytics. The site demonstrates good digital maturity with responsive design, clear navigation, and GDPR compliance through a comprehensive cookie consent mechanism and privacy policy. Security posture is solid with HTTPS enforced and secure payment methods, though some security headers could be improved and explicit security policies published. Overall, the website presents a professional and trustworthy online retail experience with moderate user tracking and good privacy practices.