Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
5,601–5,650 of 14,261
Barnes & Noble Collegeshoptruespirit.com
Education
80Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Barnes & Noble College operates a professional and comprehensive campus bookstore and retail services website, targeting educational institutions, students, and faculty. The company offers a wide range of services including course materials, affordable access programs, open educational resources, and retail solutions such as store design and merchandising. The website reflects an enterprise-level business with consistent branding and a strong market position in the education retail sector. Technically, the site is built on WordPress with modern frameworks like Tailwind CSS and Alpine.js, and integrates analytics and marketing tools such as Google Analytics, HubSpot, and LinkedIn Insight. The site is mobile optimized and SEO friendly, though accessibility could be improved. Security posture is good with HTTPS enforced and domain locking, but DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is partial, with a cookie consent banner present but no visible privacy policy or terms of service pages. Overall, the site is trustworthy and professional, but could enhance compliance and security transparency.
Insightlyinsightly.com
Technology · United States
82Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Insightly is a well-established CRM and project management software provider founded in 2009 and headquartered in San Francisco, USA. The company offers a modern, scalable SaaS platform designed to help businesses build lasting customer relationships, automate marketing, manage sales cycles, and deliver projects efficiently. Their market position is strong within the CRM technology sector, targeting businesses of various sizes worldwide. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on WordPress and leverages a modern technology stack including jQuery, Google Tag Manager, Microsoft Clarity, and various marketing and analytics tools. The site is optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Security practices include HTTPS enforcement and use of reCAPTCHA, though some security headers could be improved. From a security and compliance perspective, Insightly maintains comprehensive privacy and cookie policies with GDPR compliance indicators. However, no explicit security policy or incident response information is published. The WHOIS data for the domain is unavailable, which is unusual but does not detract significantly from the site's legitimacy given the strong business presence and trust signals. Overall, Insightly's website demonstrates a mature digital presence with strong business credibility, good technical implementation, and solid privacy compliance. Strategic improvements in security headers and transparency around security policies would further enhance trust and security posture.
Unbounceunbounce.com
Technology · Canada
78Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Unbounce is a well-established SaaS company specializing in landing page creation and conversion rate optimization, leveraging AI insights to help marketers and businesses increase leads and sales. The company holds a strong market position as a leading platform in its niche, targeting marketing professionals and businesses seeking to optimize digital campaigns. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation, supporting a positive user experience and strong brand consistency. Technically, the site is built on WordPress, hosted on AWS infrastructure, and integrates multiple modern marketing and analytics tools such as Google Analytics, Segment, and Microsoft Clarity, indicating a high level of digital maturity and performance optimization. Security posture is solid with HTTPS enforced, appropriate security headers, and no visible vulnerabilities, although there is room for improvement in publishing explicit security policies and vulnerability disclosures. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms, aligning with GDPR requirements. Overall, the website and domain registration data indicate a trustworthy and credible business with a strong online presence.
- Meta
meta.com
Technology
81Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Meta is a leading global technology company primarily known for its social media platforms and related services. The analyzed website serves as a Meta Store portal requiring user authentication via a Meta account, indicating it is intended for registered users only. The site integrates heavily with Facebook and Instagram login mechanisms and uses advanced JavaScript frameworks such as React. However, public content is inaccessible without login, limiting the ability to fully assess the site. The domain WHOIS data is not publicly available, consistent with privacy protection practices common among large tech companies. The website employs extensive tracking and advertising pixels from multiple ad networks and analytics providers, reflecting a mature marketing infrastructure. Security headers and public privacy or cookie policies are not detectable in the accessible content, which is a gap in compliance and security posture.
- Llocaljob.de
nrw-jobs.de
Media · Germany
79Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
localjob.de is a well-established regional job board headquartered in Munich, Germany, offering a broad spectrum of job listings across various industries and regions in Germany. Leveraging partnerships with 21 regional newspaper publishers and over 150 newspaper editions, it provides extensive reach and a diverse job market platform for both job seekers and employers. The platform supports employers with multi-channel advertising including social media and Google Ads, and offers personalized regional support. Technically, the site is built on modern web technologies including React and Next.js, hosted on Microsoft Azure CDN, and employs Matomo analytics alongside Google Tag Manager and a consent management platform, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement and consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, localjob.de presents a professional, trustworthy, and user-friendly platform with excellent content quality and regional market penetration.
Media · Germany
79Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
localjob.de is a well-established regional job board platform based in Germany, specializing in connecting job seekers with employers through a broad network of regional newspaper partnerships. The platform offers a comprehensive range of job listings across multiple sectors and regions, supported by a professional and user-friendly website. Technically, the site leverages modern web technologies including React and Next.js, hosted on Azure CDN, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced and privacy policies in place, though explicit security headers and incident response contacts could be improved. Overall, localjob.de presents a trustworthy and professional service with strong regional market penetration.
- ShareTheMeal
sharethemeal.org
Non-profit
79Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
ShareTheMeal is a well-established non-profit platform affiliated with the United Nations World Food Programme, focused on fighting global hunger through donations and fundraising campaigns. The website offers a professional, content-rich experience with clear calls to action for donations and detailed information about ongoing humanitarian projects worldwide. The platform supports multiple languages and is optimized for mobile and desktop users, reflecting a mature digital presence. Technically, the site uses modern frameworks such as Remix, integrates analytics tools like Amplitude and Firebase, and is hosted on AWS, ensuring reliability and performance. Security posture is strong with HTTPS enforced and multiple security headers present, although DNSSEC is not enabled and no visible cookie consent mechanism was detected, which could be improved for compliance. Overall, the domain registration is consistent with the organization's profile, showing a long-standing presence since 2012. The site is trustworthy, safe, and professionally managed, making it a credible platform for charitable donations.
The New York Timesnyt.com
Media · United States
87Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
The New York Times is a globally recognized media organization providing comprehensive news coverage, investigative journalism, opinion pieces, and multimedia content. It operates a subscription-based business model supplemented by advertising revenue and maintains a strong market position as a leading news provider. The company also operates several subsidiaries including NYT Cooking, Wirecutter, and The Athletic, expanding its content offerings and audience reach. Technically, the website employs a modern technology stack including React, GraphQL APIs, and advanced monitoring tools such as Datadog RUM and Sentry. It leverages Fastly CDN for hosting and performance optimization and implements robust privacy and consent management mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses security headers, and integrates error and performance monitoring. Privacy compliance is strong with clear policies and consent mechanisms. However, explicit incident response contacts and vulnerability disclosure information are not publicly evident. The WHOIS data is unavailable, likely due to registry restrictions, but this does not detract from the site's legitimacy given its brand recognition and trust signals. Overall, the site presents a low risk profile with excellent content quality, technical implementation, and business credibility. Strategic recommendations include publishing explicit security policies, providing incident response contacts, and continuous auditing of third-party scripts to maintain security posture.
- SSmartlook.com, s.r.o.
smartlook.com
Technology · Czech Republic
79Low
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
Smartlook.com, s.r.o. operates a sophisticated SaaS platform providing combined quantitative and qualitative product analytics for websites and mobile applications. The company offers session recordings, heatmaps, event tracking, funnels, and crash reports, targeting growing teams seeking actionable user insights. Recently acquired by Cisco, Smartlook holds a strong market position with over 2800 paying customers and extensive integration capabilities. The website is professionally designed, SEO optimized, and mobile responsive, reflecting a mature digital presence. Technically, the site runs on WordPress with modern analytics and consent management tools, ensuring good performance and compliance. Security posture is solid with HTTPS and cookie consent, though additional security headers and explicit incident response policies could enhance trust. Overall, the domain WHOIS data is unavailable, possibly due to privacy protection, but the Cisco acquisition and trust signals support legitimacy. Strategic recommendations include publishing security policies, enhancing header security, and adding vulnerability disclosure mechanisms.
Snowplow Analytics Ltdsnowplow.io
Technology · United Kingdom
78Low
NIS2 40 · GDPR 100
NIS2 40 · GDPR 100
Snowplow Analytics Ltd operates a sophisticated composable customer data infrastructure platform designed to empower data and product teams with real-time behavioral data collection, modeling, and activation capabilities. Positioned as a global leader in behavioral data for AI, Snowplow serves digital-first companies seeking to leverage proprietary customer intelligence for competitive advantage. Their key services include event tracking, data pipelines, data product studios, and real-time personalization tools, supported by a robust ecosystem of integrations and technology partners. The company targets data engineers, product teams, and AI practitioners with a B2B SaaS and infrastructure business model.
Chromium Projects / Googlechromium.org
Technology
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The Chromium Projects website serves as the official hub for the open-source Chromium and ChromiumOS projects, which underpin Google's Chrome browser and ChromeOS operating system. The site targets developers and contributors interested in these projects, providing documentation, code, and resources. It is clearly branded with Google assets and links to official Google properties, establishing strong market positioning as a leading technology initiative in open-source browser and OS development. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integrations such as Google Analytics and Algolia DocSearch for enhanced user experience and search functionality. The site is hosted by Google, ensuring fast performance and good mobile optimization. Accessibility and SEO practices are well implemented, contributing to a professional and user-friendly digital presence. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, reflecting good privacy compliance. However, explicit security headers and dedicated security or incident response policies are not present on this page, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected, and the domain shows strong legitimacy despite unavailable WHOIS details, likely due to privacy protection. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for its developer audience. Strategic recommendations include enhancing security transparency, publishing vulnerability disclosure information, and providing clearer contact channels for security incidents to further strengthen trust and compliance.
Google LLCchrome.com
Technology · United States
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Google Chrome is the official web browser product offered by Google LLC, a leading technology enterprise headquartered in the United States. The website serves as the primary distribution and informational portal for the Chrome browser, emphasizing speed, security, and customization. Google Chrome holds a dominant market position globally as a preferred web browser. The business model revolves around free software distribution, with monetization driven by integration into Google's broader ecosystem and services. Technically, the website is built using modern web technologies including JavaScript, Google Tag Manager, and YouTube APIs, hosted on Google's infrastructure ensuring fast performance and excellent mobile optimization. The site employs HTTPS with strong SSL configurations and uses trusted script policies to enhance security. However, explicit security headers like HSTS or X-Frame-Options are not evident in the provided data. From a security perspective, the site demonstrates a mature posture with enforced HTTPS and no visible vulnerabilities or exposed sensitive data. Privacy compliance indicators such as privacy and cookie policies or consent mechanisms are not detected in the provided content, which slightly lowers the privacy compliance score. No contact information or incident response channels are explicitly listed, which is typical for a product landing page. Overall, the website is highly professional, trustworthy, and secure, reflecting Google's brand and standards. The lack of WHOIS data is due to privacy protection but is justified given the nature of the domain. Strategic recommendations include adding explicit privacy and cookie policies with consent mechanisms and enhancing security headers to further strengthen the security posture.
—
83Low
NIS2 65 · GDPR 58
NIS2 65 · GDPR 58
- Sierra
sierra.chat
Technology · United States
81Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Sierra is a technology company founded in 2017 that provides AI-driven customer experience solutions to businesses. Their platform enables companies to deploy AI agents that improve customer engagement, support, and operational efficiency across multiple channels including voice and chat. Sierra positions itself as a trusted partner to leading consumer brands, offering a customizable and scalable AI solution tailored to brand tone and business processes. Technically, Sierra employs a modern tech stack including React, Next.js, Sanity CMS, and Vercel hosting, ensuring fast performance and mobile optimization. Security-wise, the website uses HTTPS with strong headers and domain registration protections, though DNSSEC is not enabled. Privacy and compliance documentation such as privacy and cookie policies are not found in the analyzed content, representing an area for improvement. Overall, Sierra demonstrates a strong market presence and technical maturity with room to enhance privacy compliance and transparency.
- GGraco Inc.
graco.com
Manufacturing · United States
82Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Graco Inc. is a leading global manufacturer and supplier of fluid management products and equipment, serving industrial, manufacturing, contractor, and vehicle service sectors. The company maintains a professional and comprehensive website that targets B2B customers with detailed product categories, solutions, and support resources. The technical infrastructure leverages modern web technologies including Adobe Experience Manager, Bootstrap, and advanced analytics tools such as Google Tag Manager and Dynatrace, indicating a mature digital presence. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although no explicit security policy or incident response contacts are publicly available. Overall, the website reflects a well-established business with good compliance and security practices, though the lack of WHOIS data limits domain registration transparency.
Snowplow Analytics Ltdsnowplowanalytics.com
Technology · United Kingdom
78Low
NIS2 40 · GDPR 100
NIS2 40 · GDPR 100
Snowplow Analytics Ltd operates a sophisticated composable customer data infrastructure platform designed to empower data and product teams with real-time, AI-ready behavioral data. Positioned as a global leader in behavioral data for AI, Snowplow offers a suite of services including event tracking, data pipelines, and real-time personalization tools, targeting digital-first companies and AI application developers. The company maintains a strong market presence with a medium-sized operation founded in 2012 and headquartered in the UK with a US office in Boston. Technically, the website leverages modern web technologies including Webflow CMS, Cloudflare DNS, and a variety of JavaScript trackers and analytics tools such as Snowplow Tracker, Google Tag Manager, and Smartlook. The site is well optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, Snowplow demonstrates a robust posture with enforced HTTPS, multiple security headers, and a comprehensive cookie consent mechanism. However, DNSSEC is not enabled, and there is no public vulnerability disclosure or incident response contact information, which are areas for improvement. Overall, the website and business exhibit high professionalism, trustworthiness, and compliance with privacy regulations including GDPR. The domain registration data aligns well with the company's claims, supporting legitimacy. Strategic recommendations include enabling DNSSEC, publishing vulnerability disclosure policies, and enhancing incident response transparency to further strengthen security and trust.
Movable Inkmovableink.com
Technology
78Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Movable Ink is an established enterprise-level technology company specializing in AI-driven personalized marketing solutions. Their platform enables marketers to deliver dynamic, data-driven content across multiple customer touchpoints including email, mobile, and web. The company positions itself as a leader in autonomous marketing, blending creativity with machine intelligence to optimize customer engagement and revenue. The website reflects a mature digital presence with modern design, mobile optimization, and integration of advanced marketing and analytics tools such as Adobe Marketo and Intellimize. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in DNS security and explicit security policy disclosures. Privacy compliance is partially addressed with cookie consent mechanisms but lacks visible privacy and terms of service documentation in the provided content. Overall, the domain registration data aligns well with the business profile, indicating a legitimate and stable online presence.
Cocolyzecocolyze.com
Technology · France
82Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Cocolyze is a French-based technology company founded in 2017 that offers a comprehensive SaaS SEO tool designed for businesses and SEO agencies. Their platform provides a wide range of SEO services including keyword tracking, competitor analysis, backlink monitoring, content writing assistance, and site scanning. Positioned as an intuitive alternative to complex SEO tools, Cocolyze targets users seeking an all-in-one solution with prioritized recommendations and simplified reports. The website demonstrates a professional and consistent brand presence with strong content quality and user experience.
—
82Low
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
REVIEWS.ioreviews.io
Technology
76Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
REVIEWS.io is a mature SaaS platform specializing in company and product review collection, user-generated content, and reputation management for e-commerce businesses. The platform offers a comprehensive suite of services including review invites, AI review assistance, loyalty programs, and integrations with major e-commerce and marketing platforms. The website demonstrates a strong market position with a professional design, clear navigation, and extensive resource offerings. Technically, the site is built on Webflow CMS with modern analytics and consent management tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. Privacy compliance is partially addressed via cookie consent but lacks a visible privacy policy in the provided content. Overall, the domain shows privacy protection in WHOIS data, which is typical for commercial SaaS providers. The site is trustworthy, professional, and well-positioned in the technology and e-commerce sectors.
Before you continue to YouTubewthr.com
Other
78Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The analyzed URL is a consent management interface subdomain of YouTube (consent.youtube.com), operated by Google. This page is designed to manage user consent for cookies and data processing, primarily for GDPR compliance in the EU. The subdomain is not separately registered, which is typical for service subdomains under large corporate domains. The page content is minimal and focused solely on consent UI, lacking typical website elements such as privacy policies, contact information, or business descriptions. The technical infrastructure appears to be part of Google's robust platform, but detailed technical and security configurations are not visible in the provided data. The security posture is assumed strong given Google's standards, but no explicit headers or certificates were analyzed here. Overall, the page is safe and appropriate for general audiences, with no adult or explicit content detected.
The Bannerthebaltimorebanner.com
Media · United States
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The Baltimore Banner is a professional independent news media organization delivering vital journalism focused on Baltimore and Maryland. The website offers comprehensive coverage of local news, politics, business, sports, culture, and events, targeting residents and stakeholders in the region. The business model is subscription-based with advertising and sponsored content revenue streams, positioning it as a key local media player. Technically, the site employs a modern tech stack including React, Arc Publishing CMS, and multiple analytics and advertising technologies, ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS and monitoring tools like Sentry, though explicit security policies and incident response information are not publicly disclosed. Privacy and cookie policies are present and GDPR compliant. Overall, the site is professional, trustworthy, and content-rich, but the lack of WHOIS domain registration data reduces domain trustworthiness and transparency.
The Athletictheathletic.com
Media · United States
86Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
The Athletic is a premium sports news and analysis platform owned by The New York Times, offering comprehensive coverage across multiple sports leagues and teams. It targets sports enthusiasts seeking in-depth stories, scores, schedules, and podcasts through a subscription-based model. The website demonstrates a high level of professionalism, consistent branding, and excellent content quality, positioning it strongly in the media industry. Technically, the site leverages modern web technologies including React and Next.js, with integrations for analytics and consent management such as Google Tag Manager, Chartbeat, Datadog RUM, and Transcend. The site is optimized for performance, mobile responsiveness, and accessibility, providing a fast and user-friendly experience. From a security perspective, the site enforces HTTPS, employs multiple security headers, and shows no signs of exposed sensitive data or vulnerabilities. Privacy compliance is robust with clear privacy and cookie policies, GDPR adherence, and visible contact information. However, there is room to improve by publishing a vulnerability disclosure policy and enhancing incident response contact visibility. Overall, the website presents a low-risk profile with strong trust indicators and a mature digital presence. The lack of WHOIS data is likely due to privacy protections common for high-profile domains and does not detract from the site's legitimacy.
ESPNespn.com
Media · United States
77Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
ESPN is a leading global sports media company providing live scores, sports news, video highlights, fantasy sports, and streaming services. Owned by The Walt Disney Company, ESPN commands a strong market position with a broad target audience of sports fans worldwide. The website reflects a mature digital presence with professional design, consistent branding, and comprehensive content offerings. Technically, ESPN employs modern web technologies including JavaScript frameworks, prebid advertising, Google Publisher Tags, and robust consent management via OneTrust. The site is optimized for desktop and mobile platforms, delivering fast performance and good accessibility. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly found. Privacy compliance is well addressed through detailed policies linked to Disney's corporate privacy site and active cookie consent mechanisms. WHOIS data is unavailable likely due to registry privacy, but brand legitimacy is high given ESPN's corporate ownership. Overall, ESPN's website is professional, secure, and compliant, serving a large enterprise audience effectively.
Non-profit
80Low
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
The UN World Food Programme (WFP) is the world's largest humanitarian organization dedicated to saving lives in emergencies and providing food assistance to build peace, stability, and prosperity for populations affected by conflict, disasters, and climate change. The organization operates globally with a presence in over 120 countries and territories, offering a broad range of services including emergency relief, food assistance, supply chain management, and resilience building. Their business model is non-profit, relying heavily on donations and partnerships with governments, NGOs, and private sectors. The website reflects a strong market position as a leading humanitarian entity with extensive outreach and engagement capabilities. Technically, the website is built on Drupal CMS and employs a modern technology stack including Google Tag Manager, Google Analytics, TikTok Analytics, Facebook Pixel, Hotjar, and Bing Ads for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, with fast to moderate performance. The use of multiple languages and comprehensive content demonstrates digital maturity and global accessibility. From a security perspective, the website enforces HTTPS, implements multiple security headers, and follows best practices for secure forms and data handling. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. However, the WHOIS data is not publicly available, likely due to privacy protection, which is justified given the organization's international and humanitarian nature. Overall, the WFP website is a highly professional, trustworthy, and secure platform that effectively supports the organization's mission. Strategic recommendations include maintaining regular security audits, monitoring third-party scripts, and establishing a public vulnerability disclosure policy to further enhance security posture and transparency.
Impact Hub GmbHimpacthub.net
Non-profit · Austria
83Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Impact Hub GmbH operates a global network dedicated to fostering social impact through entrepreneurship, innovation, and collaboration. Established in 2005 and headquartered in Vienna, Austria, the organization connects impact makers, corporates, public sector entities, and entrepreneurs to build sustainable and inclusive ecosystems worldwide. Their services include collaborative spaces, memberships, ecosystem building, and partnership programs, positioning them as a key player in the non-profit social innovation sector. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and hosted with Cloudflare DNS services. The site demonstrates excellent performance, mobile optimization, and SEO practices, supported by structured data and a privacy-conscious analytics setup using PostHog with IP anonymization. From a security perspective, the site enforces HTTPS, uses domain transfer protection, and avoids exposing sensitive data. However, DNSSEC is not enabled, and explicit security headers are not clearly visible, indicating room for improvement. Privacy compliance is strong with comprehensive privacy and cookie policies and active consent mechanisms, aligning with GDPR requirements. Overall, the website presents a professional, trustworthy, and well-maintained digital presence with a high level of content quality and business credibility. Strategic recommendations include enabling DNSSEC, publishing explicit security and incident response policies, and adding a vulnerability disclosure framework to enhance security posture and stakeholder trust.
Stockholm Environment Institutesei-international.org
Non-profit · Sweden
78Low
NIS2 25 · GDPR 80
NIS2 25 · GDPR 80
Stockholm Environment Institute (SEI) is an established international non-profit research institute focused on environmental and sustainable development challenges. The organization operates multiple global centers and provides research, policy analysis, data tools, and events to influence sustainability practices worldwide. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site is built on WordPress with modern SEO and analytics tools, ensuring good performance and accessibility. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, SEI presents a trustworthy and credible online presence aligned with its mission and audience.
Zemantazemanta.com
Technology
82Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Zemanta operates as a technology company specializing in programmatic advertising through its flagship product, Zemanta One, a multi-channel demand-side platform (DSP) designed for performance marketing. The website positions Zemanta as a performance-focused DSP, branded under Outbrain DSP, indicating a strong market presence in the digital advertising sector. The target audience primarily includes advertisers and marketers seeking advanced programmatic advertising solutions. Technically, the website is built on WordPress using the Divi theme, integrating modern web technologies such as Google Analytics, Google Tag Manager, and OneTrust for cookie consent, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and uses reCAPTCHA and cookie consent mechanisms, but lacks some explicit security headers and published security policies, which are areas for improvement. The WHOIS data is unavailable or protected, which slightly reduces trust but is somewhat mitigated by the professional presentation and association with Outbrain. Overall, the website demonstrates a solid business and technical foundation with moderate security posture and privacy compliance.
- Zeta Global
boomtrain.com
Technology · United States
77Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Zeta Global operates a sophisticated AI-powered marketing cloud platform designed to help enterprises acquire, grow, and retain customers through data-driven insights and automation. The company leverages proprietary AI technologies and a vast consumer data cloud to deliver personalized marketing experiences across multiple channels. Their market position is strong as a leading AI marketing platform with a comprehensive suite of tools including AI Agents, AI Flows, and a customer data platform. Technically, the website is built on WordPress with modern integrations such as Elementor, Marketo, HubSpot, and Wistia for video content, supported by Akamai DNS and secure HTTPS connections. Security posture is solid with HTTPS and domain transfer protections, though there is room to improve by publishing explicit security policies and vulnerability disclosures. Overall, the site demonstrates high professionalism, excellent content quality, and good privacy compliance, making it a trustworthy and credible digital presence for an enterprise marketing technology company.
Red Bull GmbHredbullshop.com
Retail · Austria
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
The website www.redbullshop.com serves as the official online retail platform for Red Bull branded merchandise, targeting consumers interested in apparel and accessories associated with the Red Bull lifestyle. The site leverages strong brand recognition and offers services including international shipping and customer support, positioning itself as a key player in the branded merchandise e-commerce sector. Technically, the site employs modern web technologies including JavaScript, Google Tag Manager, and custom fonts, delivering a responsive and well-structured user experience optimized for both desktop and mobile users. Security measures are robust, with HTTPS enforced and multiple security headers implemented, although public security policies and incident response information are not readily available. The absence of WHOIS data for the domain raises some concerns about registration transparency, but the overall site content, branding, and security posture suggest legitimacy. Strategic recommendations include enhancing transparency around security policies and incident response, improving accessibility features, and maintaining rigorous audits of third-party scripts to mitigate potential vulnerabilities.
diva-e Digital Value Excellence GmbHdiva-e.com
Technology · Germany
78Low
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
diva-e Digital Value Excellence GmbH is a prominent German digital experience partner specializing in end-to-end digital solutions ranging from strategy to implementation. The company positions itself as a market leader in digital experience services, targeting businesses seeking digital transformation and sustainable business success. Their key services include digital consulting, digital experience platforms, digital marketing, application management, and total experience solutions. The website reflects a mature digital presence with professional branding and comprehensive content tailored for a B2B audience. Technically, the website leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, integrates consent management via Usercentrics, and uses HubSpot for marketing and form handling. The site is mobile-optimized, accessible, and SEO-friendly, indicating a high level of digital maturity. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, employs standard security headers, and integrates privacy compliance tools. However, explicit security policies and incident response information are not prominently published, which could be improved. The absence of WHOIS registration data is a minor concern but does not significantly detract from the overall trustworthiness given the professional web presence and social proof. Overall, diva-e demonstrates a strong digital and business posture with good security hygiene and privacy compliance. Strategic recommendations include publishing detailed security policies, enhancing incident response visibility, and clarifying domain registration details to bolster trust further.
- Cognizant Netcentric
netcentric.biz
Technology
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Cognizant Netcentric is a large technology services company specializing in building digital customer experiences leveraging Adobe Experience Cloud. The company positions itself as a trusted advisor and partner to leading brands, offering services such as content supply chain optimization, customer journey management, and digital strategy. Their market position is reinforced by industry awards and sponsorships, including recognition as an Adobe Partner of the Year and Diamond Sponsor at Adobe Summit Germany 2025. Technically, the website employs modern web technologies including ES modules, responsive images, and Adobe's Franklin framework, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, providing an excellent user experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit cookie consent mechanisms are absent. WHOIS data is unavailable, likely due to privacy protection, but the website's professional branding and trust signals mitigate concerns. Overall, the site demonstrates strong business credibility and technical maturity with minor areas for security and privacy improvement.
HackerOnehackerone.com
Technology
89Low
NIS2 87 · GDPR 80
NIS2 87 · GDPR 80
HackerOne is a leading global platform specializing in offensive security, combining AI capabilities with a large community of security researchers to provide continuous vulnerability discovery and remediation. The company offers a comprehensive suite of services including AI Red Teaming, bug bounty programs, pentesting as a service, and vulnerability disclosure programs. Their market position is strong, supported by partnerships with major enterprises such as Salesforce, IBM, and Adobe. Technically, the website is built on Drupal CMS with modern tracking and marketing technologies, optimized for performance and mobile use. Security posture is robust with HTTPS, CSP nonce usage, and secure form handling, though some security headers could be explicitly confirmed. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS data limits domain registration insights but does not detract from the overall legitimacy and professionalism of the business.
Tellent Recruiteerecruitee.com
Technology
78Low
NIS2 35 · GDPR 70
NIS2 35 · GDPR 70
Recruitee, branded as Tellent Recruitee, is a mature and reputable SaaS company founded in 2009 that provides a modern, collaborative applicant tracking system and recruitment marketing platform. The company targets hiring teams and HR professionals, offering a comprehensive suite of recruitment tools including pipelines, sourcing, referrals, assessments, e-signatures, and onboarding. The platform supports multi-language content and integrates with various services to enhance recruitment workflows. Technically, the website is built on Webflow CMS, hosted likely on AWS infrastructure, and employs modern JavaScript libraries and analytics tools such as Segment and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and SEO, with excellent design and user experience. Security-wise, the site uses HTTPS with domain status locks to protect domain integrity but lacks DNSSEC and explicit security headers, which are recommended improvements. No privacy or cookie policies were detected in the provided content, indicating an area for compliance enhancement. Overall, the domain registration data aligns with the business claims, showing a consistent and legitimate online presence.
- Livestorm
livestorm.co
Technology · France
86Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Livestorm is a leading European-based SaaS company specializing in video engagement platforms for webinars, virtual meetings, and events. The company offers a comprehensive suite of products including live, on-demand, and automated webinars, with strong AI integration to enhance user experience. Positioned as a market leader, Livestorm targets marketing teams and enterprises globally, emphasizing ease of use, customization, and seamless integrations with popular CRM and marketing tools. The website reflects a mature digital presence with excellent content quality, clear navigation, and professional branding.
- Flaticons
flaticons.net
Technology
76Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Flaticons.net is a specialized online platform offering over 8,000 royalty free flat icons with a user-friendly customization tool aimed at web developers, designers, and businesses. Established in 2013, the site provides free icon packs and a flaticon generator to create personalized icons for personal and commercial use. The business operates a freemium model, monetizing primarily through advertising and possibly premium services. The website is well-structured with clear navigation and a consistent brand presence, targeting a niche market in the technology sector focused on digital assets for web projects. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Google Adsense, and Google Tag Manager, hosted behind Cloudflare DNS. The site is mobile optimized with good SEO practices and basic accessibility features. Performance is moderate, with room for improvement in accessibility and security headers. The domain is well-established and registered with NameCheap, showing consistency between domain age and business maturity. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain transfer protections enabled. However, it lacks DNSSEC, security headers, and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected, but the absence of terms of service and security policies suggests areas for compliance and trust enhancement. Privacy compliance is basic, with a privacy policy and cookie consent mechanism present but no GDPR-specific indicators. Overall, Flaticons.net presents a moderate risk profile with a solid business foundation and technical implementation but could benefit from enhanced security practices and compliance documentation to improve trust and resilience against threats.
Domodomo.com
Technology · United States
94Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Domo is a cloud-native data experience platform that empowers businesses to connect, transform, and visualize data at scale. Positioned as a leader in the business intelligence and AI-powered analytics market, Domo offers a comprehensive suite of services including data connectors, ETL pipelines, dashboarding, app development, and workflow automation. The platform targets enterprises and business users seeking to accelerate data-driven decision-making. Technically, the website is built on modern web technologies including Webflow CMS and integrates multiple marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, and Facebook Pixel. The site demonstrates excellent design quality, mobile optimization, and SEO practices. Security-wise, the site enforces HTTPS, uses security headers, and implements GDPR-compliant cookie consent mechanisms, reflecting a mature security posture. However, the absence of public WHOIS data suggests domain privacy protection, which slightly reduces transparency but is common for enterprise domains. Overall, the website is professional, trustworthy, and well-structured, supporting Domo's market credibility.
Verkadaverkada.com
Technology · United States
78Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Verkada is a leading enterprise technology company specializing in modern, cloud-managed physical security systems. Their integrated platform combines video surveillance, access control, alarms, environmental sensors, intercoms, and visitor management into a single cloud-based solution. Trusted by over 33,000 organizations, Verkada targets enterprises and organizations seeking scalable, easy-to-use security solutions. The company emphasizes AI-powered analytics and seamless integration across devices and locations. Technically, the website is built using the Hugo static site generator, leveraging modern JavaScript frameworks, Wistia for video hosting, and Google Tag Manager for analytics. The site is well-optimized for performance, mobile responsiveness, and SEO, with comprehensive privacy and cookie policies in place. Security best practices are evident, including HTTPS enforcement, SOC 2 type 2 compliance, and strong encryption standards. The security posture is robust with no visible vulnerabilities or exposed sensitive data. However, the absence of public incident response contacts and vulnerability disclosure policies suggests areas for improvement. The WHOIS data is missing or unavailable, which slightly reduces domain trustworthiness but does not outweigh the professional presentation and trust signals on the site. Overall, Verkada presents a mature, secure, and professional digital presence aligned with its market position as a top cloud physical security provider. Strategic recommendations include enhancing transparency around incident response and vulnerability disclosures to further strengthen trust and compliance.
- TrueContext (Formerly ProntoForms)
prontoforms.com
Technology · Canada
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
TrueContext, formerly known as ProntoForms, is a well-established technology company founded in 2001, specializing in mobile data collection and workflow automation solutions for field service environments. Positioned as a leading B2B SaaS platform, TrueContext bridges the gap between field operations and back-office systems, targeting enterprises requiring efficient and intelligent workflows. The company maintains a professional online presence with comprehensive content, live webinars, and strong branding consistency. Technically, the website is built on WordPress and hosted on Amazon AWS, leveraging modern marketing and analytics tools such as Google Tag Manager, Hotjar, and LinkedIn Insight Tag. The site demonstrates good SEO practices and mobile optimization, although accessibility features could be enhanced. Security posture is solid with HTTPS enforcement, security headers, and domain registration protections, but could benefit from enabling DNSSEC and publishing explicit security policies. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, TrueContext presents a credible and trustworthy digital footprint with moderate to high technical maturity and security awareness.
Atomists.com
Technology
84Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
The website is a domain marketplace landing page operated by Atom, offering the premium domain ists.com for sale along with a free logo. The site targets domain buyers and brand investors, positioning itself as a professional platform for premium domain sales. The technical infrastructure includes modern JavaScript libraries and New Relic monitoring, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks explicit security headers and privacy policies. Overall, the site is functional and professional but would benefit from enhanced compliance and transparency measures. The domain WHOIS data is unavailable, suggesting the domain may be unregistered or in transition, which impacts trust and legitimacy assessments.
- Ansarada
ansarada.com
Technology · Australia
77Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Ansarada is a leading enterprise SaaS provider specializing in AI-powered Virtual Data Rooms and dealmaking tools. The company targets dealmakers, financial sponsors, advisors, and procurement professionals globally, offering secure, compliant, and intelligent solutions to streamline M&A, capital raising, and procurement processes. Their market position is strong, supported by a large global customer base and ISO 27001 certification. Technically, the website leverages modern frameworks like React, integrates advanced analytics and marketing tools, and demonstrates excellent performance and mobile optimization. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly found. Overall, the site is professional, trustworthy, and well-structured, with privacy protection on domain registration typical for enterprise SaaS. Strategic recommendations include publishing detailed security policies, vulnerability disclosure, and enhancing security contact transparency.
Heavyheavy.com
Media
79Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Heavy.com is an established sports news media website founded in 1998, providing comprehensive coverage of major sports leagues including NFL, NBA, MLB, and NHL. The site offers news, player statistics, analysis, trade rumors, and subscription-based alerts targeting sports fans and fantasy sports enthusiasts. Technically, the website is built on WordPress CMS with SEO optimizations via Yoast SEO Premium and uses Cloudflare for DNS and AdThrive for advertising. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enabled and domain transfer protections, but lacks visible security headers and published security policies. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms of service pages detected. Overall, the site is professional and trustworthy with moderate user tracking via advertising and analytics services.
Switcher Limitedswitcher.ie
Finance · Ireland
82Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Switcher Limited operates Switcher.ie, a well-established online comparison platform based in Ireland, founded in 2014. The company specializes in helping Irish consumers compare and switch between energy providers, broadband, mortgages, mobile plans, insurance, and financial products. The website is accredited by the Commission for Regulation of Utilities (CRU) and is a member of Guaranteed Irish, reinforcing its trustworthiness and market position. It serves a broad audience of Irish consumers looking to save money and time by making informed choices across multiple sectors. The business model focuses on lead generation and providing impartial, expert comparison services.
Choice Bankbankwithchoice.com
Finance · United States
78Low
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
Choice Bank is a community-focused financial institution offering a broad range of business and personal banking services, including insurance, succession planning, employee benefits, and wealth management. The bank emphasizes a "People First" approach, aiming to build strong relationships with clients through local decision-making and personalized service. It holds a solid market position with industry recognitions and serves customers primarily in the United States. The website reflects a medium-sized enterprise with consistent branding and professional content.
Digital Control Roomdigitalcontrolroom.com
Healthcare · United Kingdom
80Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Digital Control Room is a specialized company providing automated compliance and digital asset monitoring solutions primarily for the pharmaceutical and life sciences sectors. Their platform enables clients to discover and audit digital content across multiple brands and languages, ensuring regulatory compliance and reducing risk. The company positions itself as a trusted partner for global oversight of distributed digital content, supported by client testimonials from top pharma companies and recognized by awards such as The Kings Awards for Enterprise Innovation. Technically, the website is built on WordPress using modern plugins like Breakdance and Yoast SEO, with jQuery and Swiper.js for interactive elements. The site is well-optimized for SEO and mobile devices, offering a professional user experience. Security measures include HTTPS enforcement and cookie consent management, though there is room for improvement in implementing additional security headers and a dedicated security.txt file. The security posture is solid with no visible vulnerabilities or exposed sensitive data, and privacy compliance is well addressed with comprehensive policies and consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, warranting further verification. Overall, the site demonstrates a mature digital presence with strong business credibility but should enhance transparency around domain registration and security policies.
Euractiv.eseuractiv.es
Media · Spain
79Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Euractiv.es is a Spanish-language European news media website specializing in European political, economic, technological, and environmental news. It serves a general audience interested in European affairs and operates as part of the broader Euractiv network with related domains for events and job listings. The website employs a modern technical infrastructure based on WordPress, enhanced with SEO tools, consent management, and push notification services. Security measures include HTTPS, security headers, and anti-bot protections, reflecting a mature security posture. However, the absence of explicit privacy and cookie policies and lack of direct contact emails or phone numbers indicate areas for compliance and transparency improvement. Overall, Euractiv.es presents a professional and trustworthy media presence with moderate tracking and advertising typical for its industry.
Media · Slovakia
80Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
euractiv.sk is a Slovak media website focused on providing news and information about the European Union in the Slovak context. Established in 2003, it operates as a small media outlet targeting a general audience interested in EU affairs. The website uses WordPress CMS with popular plugins such as Yoast SEO and Bootstrap for responsive design. It integrates Cookiebot for cookie consent management and employs Google Analytics and Gemius for visitor analytics, alongside advertising services like Google DoubleClick. The site is hosted by websupport.sk with DNSSEC enabled and uses HTTPS, indicating a secure technical foundation. However, explicit privacy policy and terms of service pages were not found in the provided content, and no direct contact or security policy information is visible.
Euractiv DEeuractiv.de
Media · Germany
80Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Euractiv DE is a professional German-language media outlet specializing in European politics and policy news. It operates as part of a broader Euractiv network with multiple language editions, targeting a general audience interested in EU affairs, economy, technology, environment, defense, and health. The website offers news articles, newsletters, events, and job listings, positioning itself as a leading source for European policy information in Germany. Technically, the site is built on WordPress, leveraging modern SEO plugins, Cloudflare CDN, Google Tag Manager, and OneSignal for push notifications, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and use of reCAPTCHA, though explicit security headers and incident response information are not evident. Privacy compliance is partial due to missing explicit privacy and cookie policy pages in the analyzed content. Overall, the site is trustworthy, professionally designed, and well-structured, with moderate user tracking and advertising integration. Strategic improvements include publishing clear privacy and cookie policies, enhancing security headers, and adding vulnerability disclosure mechanisms.
- Kwanko
kwanko.com
Technology
78Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Kwanko is a global affiliate marketing network specializing in performance marketing solutions for advertisers, agencies, and publishers. The company offers a technology platform named SKALE and provides services that enable clients to achieve marketing results based on performance. The website is professionally designed, multilingual, and targets a broad international audience in the digital marketing sector. Kwanko maintains active social media channels and integrates modern marketing and analytics tools to optimize user engagement and campaign effectiveness. Technically, the site is built on WordPress with Bootstrap and includes various tracking and consent management scripts to ensure GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are not publicly available. The WHOIS data for the domain is missing or unavailable, which raises some transparency concerns but does not detract significantly from the overall legitimacy given the professional web presence and business operations.
- Saleor Commerce, Inc.
saleor.cloud
E-commerce · United States
83Low
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
Saleor Commerce, Inc. operates a leading open source, headless e-commerce platform designed for modern software development teams. The platform emphasizes composable commerce with a GraphQL-first API, enabling businesses to build flexible and scalable commerce solutions. Saleor targets developers and enterprises seeking customizable and extensible e-commerce backends, supported by a strong open source community and trusted by global brands such as Lush and Breitling. The company was founded in 2018 and is headquartered in the United States. Technically, the website leverages modern web technologies including React and Next.js, with a cloud hosting infrastructure likely on AWS. The platform supports both cloud and self-hosted deployments, with a focus on performance, mobile optimization, and accessibility. The site demonstrates good SEO practices and integrates marketing and analytics tools such as HubSpot and Google Tag Manager, with appropriate cookie consent mechanisms. From a security perspective, the site enforces HTTPS and employs domain transfer protections. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not publicly disclosed. No vulnerabilities or exposed sensitive data were detected in the analysis. The domain registration details are consistent with the business claims, enhancing trustworthiness. Overall, Saleor presents a professional, secure, and privacy-conscious digital presence with a strong emphasis on developer experience and open source collaboration. Strategic recommendations include enabling DNSSEC, publishing formal security and incident response policies, and adding a security.txt file to facilitate vulnerability disclosures.