Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
5,851–5,900 of 99,069
Other
61Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website at swiatmedycyny.com is currently inaccessible, returning a 403 Forbidden error page served by nginx. This indicates that the content is blocked or restricted by server configuration or security rules, preventing access to any meaningful website content or business information. The domain is registered with OVH sas since 2019 and is active with no privacy protection on WHOIS data. Due to the lack of accessible content, no metadata, forms, contact information, or security policies are available for analysis. The technical infrastructure details such as HTTPS status, security headers, and analytics usage cannot be determined. Overall, the website's digital maturity is very low, and the security posture cannot be fully assessed but is likely poor given the absence of visible security best practices.
- MARK'S Marszałkowscy
biz.pl
Manufacturing · Poland
51Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
MARK'S Marszałkowscy is a well-established Polish family-owned meat production company founded in 1991, specializing in high-quality meats, cold cuts, ready meals, and select beef. The company holds a strong market position as a leader in quality meat products with a presence in over 40 countries. Their website reflects a mature digital infrastructure built on WordPress, enhanced with SEO and multilingual capabilities, and integrates modern marketing and analytics tools such as Google Tag Manager and Hotjar. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting the company's credibility and customer engagement.
- GGlobal Lift
globalliftsk.com
Manufacturing · Slovakia
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Global Lift is a Slovakian business specializing in the supply of elevator components, targeting industry professionals and businesses. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with basic mobile optimization and SEO. However, the site lacks comprehensive privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is minimal with no detected security headers or advanced protections, and the absence of WHOIS registration data raises concerns about domain legitimacy. Overall, the site is functional but requires significant improvements in security, compliance, and business transparency to enhance trust and professionalism.
- SSākumlapa
erto.lv
Other · Latvia
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website er to.lv is accessible and appears to represent a Latvian business or service entity, though explicit business details are not clearly presented in the content. The site uses standard web technologies such as HTML5, CSS3, and Google Fonts, with a basic design and moderate mobile optimization. No advanced CMS or frameworks are detected. Security posture is limited, with no visible security headers or privacy policies, and WHOIS data is minimal and privacy-protected, which reduces transparency. No contact information or social media links are provided, limiting user engagement and trust signals. Overall, the site is functional but lacks comprehensive business and security disclosures.
Health&Beauty Clinichealthandbeautyclinic.pl
Healthcare · Poland
56Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Health&Beauty Clinic is a specialized healthcare provider based in Warsaw Wola, Poland, offering a range of medical aesthetic and dental services. The clinic targets a general audience seeking professional treatments in medycyna estetyczna, stomatologia, kosmetologia, and related therapies. The website is built on WordPress using Elementor, integrating modern tracking and marketing tools such as Google Analytics and Facebook Pixel. It features a cookie consent mechanism but lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is good with HTTPS and reCAPTCHA, though security headers are missing. WHOIS data confirms the domain is relatively new but consistent with the business identity, supporting legitimacy.
Nomonomoview.pl
Real Estate · Poland
59Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Nomo is a newly established Polish company specializing in architectural window and glazing solutions that emphasize natural light and harmony with the environment. Their business model focuses on delivering premium fenestration products such as sliding windows, large-format panoramic windows, aluminum facades, interior partitions, winter gardens, and all-glass balustrades. The website reflects a professional and consistent brand image targeting homeowners and architectural clients seeking high-quality, design-oriented solutions. Technically, the site is built on WordPress with modern SEO plugins and JavaScript libraries, hosted by a reputable Polish provider. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly presented, supporting business credibility.
Real Estate · Poland
65Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
Ogrodniak.pl is a professional landscape architecture studio based in Łódź, Poland, specializing in designing, creating, and maintaining private and commercial gardens. The website presents a strong market position as a local expert with a comprehensive range of services including garden design, lawn installation, garden care, fertilization, irrigation systems, and use of professional gardening equipment. The business targets individual clients, companies, and property managers, emphasizing quality, sustainability, and attention to detail. Technically, the website is built on modern frameworks such as Next.js and hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and Google reCAPTCHA integration, although explicit privacy and cookie policies are missing, which impacts privacy compliance. Overall, the site is professional, trustworthy, and well-structured, but could improve transparency and compliance documentation.
Litigato | Kancelaria Prawno-Podatkowalitigato.pl
Other · Poland
72Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Litigato is a small Polish legal and tax advisory firm specializing in supporting taxpayers during tax audits, proceedings, and criminal tax defense. The website targets Polish taxpayers and businesses seeking expert legal and tax advice, positioning itself as a niche service provider in Warsaw. The digital infrastructure is built on WordPress with modern technologies such as Bootstrap, jQuery, and Google services, indicating a moderate to good level of digital maturity. The site is mobile optimized and includes a comprehensive cookie consent mechanism, reflecting awareness of privacy compliance requirements. Security posture is solid with HTTPS and DNSSEC enabled, though some security headers and policies could be improved. Overall, the website is professional and trustworthy but lacks explicit privacy and terms of service pages, as well as direct contact details, which slightly impacts privacy compliance and business credibility scores.
SIA "RITLOGISTIKA"ritlogistika.lv
Transportation · Latvia
56Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
SIA "RITLOGISTIKA" is a Latvian logistics and freight transportation company with over 20 years of experience, offering a wide range of cargo transport services including road, sea, and air freight across Latvia, the Baltics, Europe, and globally. The company operates with a medium-sized fleet and has a subsidiary in Estonia, positioning itself as a reliable and professional service provider with a strong focus on customer satisfaction and cargo safety. The website reflects a mature digital presence built on WordPress with modern SEO and privacy compliance tools, providing clear contact channels and service information. Security posture is solid with HTTPS, anti-spam measures, and cookie consent mechanisms, though lacking explicit security policies or incident response details. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.
Kancelaria Prawna Szeffner Wspólnicykancelaria-szeffner.pl
Other · Poland
54Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Kancelaria Prawna Szeffner Wspólnicy is a Warsaw-based legal firm offering comprehensive legal services to both companies and private individuals. Established in 2022, the firm positions itself as a local trusted provider specializing in areas such as divorce and legal advice. The website reflects a professional image with clear contact information and a focus on client engagement. Technically, the site is built on WordPress using Elementor, supported by Google Tag Manager and Cookiebot for analytics and privacy compliance. The hosting is provided by dhosting.pl, with domain registration consistent with the firm's founding date. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though DNSSEC is not enabled and security headers are not explicitly detected. Overall, the site demonstrates good digital maturity and compliance with GDPR requirements through Cookiebot integration.
Kancelaria Karkowskakancelaria-karkowska.pl
Other · Poland
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Kancelaria Karkowska is a newly established Polish legal services firm specializing in providing multidisciplinary legal advice and representation, particularly assisting patients. The website presents a professional image with clear branding under the leadership of Professor Dorota Karkowska. The business targets general clients seeking legal counsel in Poland. Technically, the website is built on WordPress using the Kadence theme and several plugins including All in One SEO and Complianz GDPR for cookie consent. The site is mobile optimized and SEO friendly but lacks some compliance pages such as privacy policy and terms of service. Security posture is basic with HTTPS enabled but no advanced security headers or incident response information published. Overall, the domain registration is recent but consistent with a new business launch, with no suspicious indicators.
- GGOLDEXCODE INNOVATIONS .Inc.
africarparts.com
Transportation · Ghana
64Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
AfriCarParts is a specialized online marketplace focused on connecting buyers and sellers of auto parts across Ghana and Nigeria. The platform offers a wide catalog of over 50,000 parts from more than 2,500 verified sellers, positioning itself as a leading player in the African auto parts e-commerce sector. Its business model centers on facilitating direct communication between buyers and sellers, primarily via WhatsApp integration, and providing tools such as price comparison and delivery tracking to enhance user experience. The company behind the site is GOLDEXCODE INNOVATIONS .Inc., founded in 2024, with a medium-sized operational footprint in the transportation sector. Technically, the website employs modern web technologies including JavaScript modules and SVG icons, with a custom or proprietary CMS. It is hosted on infrastructure linked to Name.com and uses HTTPS for secure communications. The site is well-optimized for mobile devices and offers good accessibility and SEO features, though some security headers are missing. Analytics are implemented via a custom proxy script, indicating moderate user tracking without reliance on major third-party analytics platforms. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and advanced security headers. There is no visible cookie consent mechanism or published security policy, which may impact privacy compliance. The WHOIS data raises concerns due to a future domain creation date inconsistent with the website's stated founding year, suggesting a need for verification. No critical vulnerabilities or malicious content were detected. Overall, AfriCarParts presents a professional and trustworthy marketplace with strong business credibility and user engagement. Strategic improvements in privacy compliance, security policy transparency, and domain registration verification are recommended to enhance trust and security posture.
SIA “Rijzemess”rijzemes.lv
Transportation · Latvia
56Medium
NIS2 2 · GDPR 43
NIS2 2 · GDPR 43
SIA “Rijzemess” is a Latvian family-owned company specializing in forestry clearing and land maintenance services, operating for over 10 years primarily in the Kurzeme region. Their key offerings include shrub and tree clearing, material transportation, wood chipping, excavation, bulk cargo, and trailer services. The company targets both private individuals and businesses, positioning itself as a reliable regional service provider with modern equipment and professional service. The website is built on WordPress with modern plugins and includes clear contact information and social media presence, reflecting a mature digital footprint. Security posture is good with HTTPS and reCAPTCHA implemented, though security headers are missing and no explicit privacy policy page was found. Overall, the site is professional, trustworthy, and compliant with basic privacy and security standards.
- MMidasbuy Top-Up Center
midasbuy.com
Other
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website 'Midasbuy Top-Up Center' appears to be a digital platform focused on providing top-up services, likely for gaming or digital content. The site uses modern web technologies such as React and JavaScript, with resources served from a dedicated CDN. However, the content is minimal and primarily a JavaScript application shell, with no visible textual content or detailed business information on the analyzed page. The absence of privacy, cookie, and terms of service policies, as well as contact information, limits the transparency and trustworthiness of the site. From a technical perspective, the site demonstrates moderate digital maturity with a modern tech stack and mobile optimization. However, there is no evidence of security headers or SSL configuration details in the provided data, which are critical for secure operations. The WHOIS data is notably missing or unavailable, which raises concerns about the domain's legitimacy and registration status. Security posture is weak due to the lack of visible security best practices and policies. No forms or data collection mechanisms were detected, reducing immediate risk but also limiting user engagement features. Overall, the site is accessible without WAF or security challenges but lacks critical compliance and trust indicators. The overall risk assessment suggests caution due to the missing WHOIS data and lack of compliance documentation. Strategic recommendations include implementing comprehensive privacy and cookie policies, publishing contact and incident response information, enhancing security headers and SSL configuration, and improving transparency around domain registration and business identity.
- EElliott
elliott.diy
Technology
67Medium
NIS2 47 · GDPR 50
NIS2 47 · GDPR 50
Elliott.diy is a personal website operated by an individual named Elliott, focused on cybersecurity, reverse engineering, and related technical experiments. The site serves as a blog and project showcase targeting cybersecurity enthusiasts and researchers. The content is well-structured, with recent blog posts on relevant security topics such as remote code execution and malware tracking. Technically, the site is built using the Astro static site generator, hosted with Cloudflare DNS, and employs modern web technologies ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protection enabled, though DNSSEC is not enabled and security headers are missing. Privacy compliance is weak due to the absence of privacy and cookie policies. Contact information is limited to an email address and social media links. Overall, the site is trustworthy and professional for a personal technical blog but could improve compliance and security best practices.
Samorząd Województwa Mazowieckiegomazovia.pl
Government · Poland
62Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Mazovia.pl is the official website of the Samorząd Województwa Mazowieckiego (Mazowieckie Voivodeship Government) in Poland. It serves as a comprehensive information portal providing news, announcements, and resources related to regional governance, culture, transport, health, education, ecology, and public safety. The site targets residents, local government officials, businesses, media, and NGOs within the Mazowieckie region. Its business model is that of a public sector communication platform, emphasizing transparency and citizen engagement. Technically, the website is built on a custom CMS platform (SmartSite by BIT Sp. z o.o.) and leverages common web technologies such as jQuery, Bootstrap, Font Awesome, and various carousel and UI libraries. The site is hosted by home.pl sp. z o.o., a reputable Polish hosting provider. The site demonstrates good mobile optimization, accessibility features including contrast toggles and sign language translation links, and SEO best practices with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS but lacks visible security headers in the provided HTML. DNSSEC is not enabled for the domain, which is a recommended improvement. There is no visible security policy, incident response contact, or vulnerability disclosure mechanism such as a security.txt file. Cookie consent and privacy policies are present and appear GDPR compliant. No critical vulnerabilities or exposed sensitive data were detected in the analysis. Overall, mazovia.pl is a trustworthy and professionally maintained government website with a strong focus on accessibility and compliance. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security policies, and implementing a vulnerability disclosure process to enhance security posture further.
- iGaming Centre
igamingcentre.com
Media
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
iGaming Centre is an online informational platform and directory focused on the iGaming industry, providing a comprehensive directory of suppliers, industry news, professional services, jobs, and events. The website positions itself as a leading hub for iGaming professionals and businesses seeking industry updates and networking opportunities. The business is relatively new, founded in 2023, and targets industry professionals globally. The platform leverages modern web technologies including Next.js and React, hosted with Cloudflare DNS services, and integrates Google Analytics for user tracking. The website is well-optimized for mobile devices and offers a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism or detailed GDPR compliance indicators. No direct contact information or incident response policies are published, which could be improved to enhance trust. Overall, the site is safe, professional, and relevant to its target audience, with moderate risk due to limited security and privacy disclosures.
PCexprespcexpres.sk
Technology · Slovakia
55Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
PCexpres is a Slovakian company specializing in the service, buyback, and sale of electronic devices, particularly mobile phones and smart gadgets. The website presents a focused retail and service business model targeting general consumers in Slovakia. The company leverages the Shoptet e-commerce platform, integrating common analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook SDK for user engagement and tracking. The site is well-structured with good design quality and mobile optimization, although it lacks explicit privacy and terms of service documentation. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but could be improved by adding explicit security headers and updating outdated libraries. Overall, the domain registration data aligns with the business claims, indicating legitimacy and consistent operation.
- GGenerator AI Music
generatoraimusic.com
Technology
59Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Generator AI Music is a technology-focused company offering an AI-powered music generation platform that enables users to create unique music tracks from text, lyrics, or by remixing existing songs. The platform targets a broad audience including musicians, content creators, podcasters, and marketers, providing subscription-based plans with tiered features from free to professional levels. The website demonstrates a modern technical infrastructure using Next.js, React, Stripe for payments, and multiple analytics tools, reflecting a mature digital presence with good performance and mobile optimization. Security posture is generally good with HTTPS and secure payment integration, but lacks published privacy and cookie policies, and DNSSEC is not enabled. The WHOIS data raises concerns due to a domain creation date set in the future, which impacts trustworthiness. Overall, the site is professional and content-rich but would benefit from improved compliance documentation and domain legitimacy verification.
- SodaVideo AI
sodavideo.ai
Technology · Iceland
64Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
SodaVideo AI is a technology startup specializing in AI-powered video generation, offering advanced models such as Sora 2 and Veo 3 to transform text and images into professional-quality videos. The platform targets content creators, marketers, filmmakers, and educators, providing a subscription and credit-based business model with flexible pricing plans. The website demonstrates a high level of digital maturity with a modern React and Next.js infrastructure, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforcement and domain transfer protection, though some improvements are recommended such as enabling DNSSEC and publishing explicit security policies. Overall, the platform presents a professional, trustworthy, and user-friendly experience with clear business credibility and market positioning.
Nana Banana Pronanabanana-pro.com
Technology
62Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Nana Banana Pro is a small technology startup offering an advanced AI-powered image editing SaaS platform. The service leverages cutting-edge AI models such as Imagen 3 and Gemini 3 to provide users with powerful text-to-image and image-to-image generation capabilities. The website presents a professional and modern interface with clear descriptions of features, pricing plans, and user benefits, targeting both individual creators and professional users. Technically, the platform is built on modern web technologies including React and Next.js, hosted with Cloudflare DNS services, and integrates multiple analytics tools for user tracking and marketing insights. Security posture is generally good with HTTPS enforced and domain transfer lock enabled, but lacks DNSSEC and visible security policies. Privacy compliance is partially addressed with published privacy and cookie policies, though no active consent mechanism is detected. The domain WHOIS data raises some concerns due to a future creation date and minimal registrant information, which may indicate a new or pre-launch product. Overall, the website is trustworthy and professional but would benefit from enhanced transparency in security and privacy practices.
TryVeo4.iotryveo4.io
Technology · Iceland
61Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
TryVeo4.io is a technology startup specializing in AI-powered video generation, offering professional 1080p video creation with advanced motion synthesis and multi-shot storytelling capabilities. Positioned as an enterprise-grade SaaS platform, it targets content creators, marketers, and businesses seeking efficient, high-quality video production without complex tools. The company operates a subscription model with tiered plans based on credits for video generation, emphasizing speed, quality, and ease of use. The website demonstrates a modern, professional design with clear navigation and comprehensive content about its services and pricing.
VidMix.aividmix.ai
Technology
63Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
VidMix.ai is a technology company specializing in AI-powered video generation services. Their platform enables users to create professional videos from images, text, and audio using advanced AI models such as Sora 2 and Veo 3.1. The company targets content creators and businesses seeking fast, high-quality video content with a subscription-based business model offering free and paid plans. Technically, the website is built on modern frameworks like Next.js and integrates analytics and chat support tools, providing a fast and mobile-optimized user experience. Security posture is good with HTTPS and no exposed sensitive data, but lacks explicit security headers and published security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security disclosures.
Other
64Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.radissonhotels.com is currently inaccessible due to server-side blocking or a Web Application Firewall (WAF) mechanism, as evidenced by the 'Access Denied' error page. This prevents any meaningful extraction of website content, metadata, or technical details. The WHOIS query for the domain returned no match, indicating either privacy protection, registry data issues, or an anomaly in the WHOIS database. Consequently, no registrant or registrar information is available for verification. The lack of accessible content and WHOIS data severely limits the ability to assess the website's security posture, compliance status, or business credibility. The site appears to be protected against automated queries or unauthorized access, which while enhancing security, also hinders external analysis.
- BBoundHub - Home
boundhub.com
Media
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
BoundHub is an adult entertainment website specializing in bondage, domination, and fetish video content. It operates as a niche video sharing platform targeting adults interested in BDSM and related fetishes. The site offers user accounts, video uploads, community features, and monetizes through affiliate advertising and ad networks. Technically, it uses the Kernel Video Sharing CMS, integrates Google Analytics, and employs basic age verification overlays. The website is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and explicit privacy policies. The absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Overall, the site functions well for its niche but requires improvements in security, privacy compliance, and trust signals to enhance credibility and user safety.
Other · Brazil
54Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Guia Bet BR is a Brazilian Portuguese website focused on ranking and promoting online betting and casino platforms targeted at Brazilian users. The site offers a curated list of gambling platforms with bonuses, fast withdrawals via PIX, and user comments to enhance trust. The business model is affiliate marketing, driving traffic to various gambling sites. Technically, the site uses modern web standards, including HTML5, CSS3, JavaScript, and Google Fonts, with a responsive design and interactive features like carousels and toast notifications. However, no CMS or hosting provider information is evident. Security posture is moderate; HTTPS is used, but no security headers or privacy policies are present, and no contact or incident response information is provided. The WHOIS data is missing, raising concerns about domain legitimacy. Overall, the site is functional and visually consistent but lacks critical compliance and security transparency, posing risks to users and partners.
- 188bet
188bet5.net
Other · Brazil
57Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
188bet5.net is an online gambling platform focused on the Brazilian market, offering sports betting, live casino games, and exclusive slot titles. The website is professionally designed with comprehensive content in Portuguese, targeting adult Brazilian gamblers. It provides multiple secure payment options including PIX and cryptocurrencies, and emphasizes security with SSL encryption and identity verification processes. The platform positions itself as a leading player in Brazil with competitive odds, bonuses, and 24/7 Portuguese support. Technically, the site uses modern libraries like Bootstrap and Font Awesome, is mobile optimized, and hosted behind Cloudflare DNS. Security posture is good but could be improved with DNSSEC and additional security headers. Privacy compliance is strong with a detailed privacy policy and data protection officer contact, though cookie consent is missing. The WHOIS data shows suspicious domain registration dates inconsistent with the website's active status, which lowers domain trustworthiness. Overall, the platform appears legitimate but the domain registration anomaly warrants caution.
- LLedini.lv
ledini.lv
Technology · Latvia
51Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Ledini.lv is a small Latvian creative studio specializing in 3D printing and professional photography services. The business combines technological precision with artistic expression, targeting clients who require custom 3D prototypes and event photography. The website is well-designed, mobile responsive, and provides clear service descriptions and contact information, positioning the company as a niche local service provider in the technology and media sectors. Technically, the website uses standard modern web technologies including HTML5, CSS3, JavaScript, and Google Fonts. It is mobile optimized and offers a good user experience, though no CMS or advanced frameworks are detected. Performance is moderate with no visible errors or broken elements. However, security posture is moderate due to lack of visible security headers and unknown SSL configuration. Privacy compliance is low as no privacy or cookie policies are present. From a security perspective, the site does not exhibit any blocking or WAF challenges and contains no exposed sensitive data or vulnerable libraries. The WHOIS data is minimal but consistent with a Latvian natural person registrant, aligning with the website's local business focus. The absence of detailed registrant or registrar information limits full trust assessment but no suspicious patterns are found. Overall, the website presents a professional and trustworthy front for a small creative business but would benefit from enhanced security headers, privacy policies, and SSL verification to improve compliance and trustworthiness.
- SSanitex Latvia
sanitex.lv
Retail · Latvia
71Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Sanitex Latvia is a well-established FMCG distribution company founded in 1992, serving over 32,000 clients and collaborating with more than 500 manufacturers across the Baltic states. The website reflects a professional B2B business model focused on wholesale and distribution services. Technically, the site is built on WordPress with Elementor, leveraging modern plugins and SEO tools, and is hosted behind Cloudflare DNS services. Security measures include HTTPS enforcement, Google reCAPTCHA for bot protection, and a GDPR-compliant cookie consent mechanism. However, explicit privacy policy and terms of service pages are not detected, and no direct contact information is publicly available on the site. Overall, the website demonstrates a solid digital presence with good technical implementation and security posture but could improve transparency and user trust by publishing comprehensive privacy and security policies.
- SIA LīvMet
livmet.lv
Manufacturing · Latvia
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
SIA LīvMet is a Latvian manufacturing company specializing in metal constructions and metalworking services including laser cutting, bending, and welding. The company targets industrial and commercial clients requiring metal parts and constructions. The website is built on the Wix platform, leveraging standard Wix technologies and includes error monitoring via Sentry. While the site is technically sound with HTTPS enabled and moderate performance, it lacks explicit privacy, cookie, and terms of service policies, as well as clear contact information, which impacts its privacy compliance and business credibility scores. Security posture is adequate but could be improved by adding security headers and formal policies. Overall, the website presents a professional image consistent with a small manufacturing business in Latvia.
Līvānu novada pašvaldībalivani.lv
Government · Latvia
57Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Līvānu novada pašvaldība is the official municipal government entity for Līvāni Municipality in Latvia, providing a comprehensive digital platform for residents and businesses. The website offers detailed information about local government structure, public services, news, events, and community engagement opportunities. It serves as a key communication channel between the municipality and its citizens, supporting transparency and accessibility. The site also links to various official government and partner services, enhancing its utility and reach. Technically, the website is built on the Drupal CMS platform, employing modern web technologies such as Bootstrap and FontAwesome for responsive design and user experience. It includes accessibility features and a cookie consent mechanism compliant with GDPR requirements. The site demonstrates good SEO practices and moderate performance, suitable for its public service role. From a security perspective, the website enforces HTTPS, implements standard security headers, and avoids exposing sensitive data. While no explicit security or incident response policies are published, the site maintains a solid security posture appropriate for a government entity. No vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professional, and well-maintained. Strategically, the municipality should consider publishing explicit security policies and a vulnerability disclosure program to enhance transparency and trust. Regular audits of third-party scripts and dependencies are recommended to maintain security hygiene. Additionally, providing contact information for a data protection officer could further strengthen GDPR compliance and user confidence.
SIA ENERGOFIRMA “JAUDA”jauda.com
Energy · Latvia
50Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
SIA ENERGOFIRMA “JAUDA” is a well-established Latvian company specializing in high-quality solutions in the energy and metal processing sectors. The company offers a range of products including compact transformer substations (KTA), switchboards, metal constructions, and various metal processing services. Positioned as one of the largest electromaterial and equipment manufacturers in the Baltic region, Jauda targets business clients requiring industrial and energy-related equipment and services. The website reflects a professional and modern digital presence with clear navigation, multilingual support, and comprehensive product and service information. Technically, the website is built on WordPress CMS, utilizing modern SEO and analytics tools such as Yoast SEO and Google Analytics, alongside a cookie consent management plugin ensuring GDPR compliance. The site is mobile-optimized, accessible, and performs moderately well. Hosting and domain registration are stable and consistent with the company's long operational history. From a security perspective, the site uses HTTPS with a valid SSL certificate and implements cookie consent mechanisms. However, it lacks advanced security headers and published security policies or incident response contacts, which are recommended for enhanced trust and compliance. No vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, the website demonstrates a high level of professionalism, business credibility, and compliance with privacy regulations. Strategic improvements in security policies and technical security headers would further strengthen the company's digital trustworthiness and resilience.
MG56mg56.lv
Transportation · Latvia
53Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
MG56 is a Latvian-based small business operating an e-commerce platform specializing in the sale and long-term leasing of certified used cars with additional warranty options. The website is built on Shopify, leveraging modern web technologies and providing a professional user experience with multilingual support in English and Latvian. The company maintains an active social media presence on Facebook, Instagram, and TikTok, enhancing its market reach. Technically, the site is well-implemented with fast performance, mobile optimization, and secure HTTPS connections. However, it lacks explicit privacy and cookie policies, visible contact information, and some security headers, which are areas for improvement. The WHOIS data indicates the domain is active and registered to a natural person in Latvia, consistent with the business profile.
- Circle K
circlek.lv
Energy · Latvia
70Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Circle K Latvia operates as a prominent fuel and convenience retail provider, offering quality fuel products, food, and beverages to private individuals and businesses. The website demonstrates a mature digital presence with integration of modern marketing and analytics tools such as Google Analytics, Adobe Launch, and Salesforce Pardot. The technical infrastructure is based on Drupal CMS with additional third-party services enhancing user experience and marketing capabilities. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and bot detection, although some security headers could be explicitly confirmed and enhanced. Privacy compliance is well addressed with detailed cookie policies and GDPR-aligned consent management. Overall, the website reflects a professional and trustworthy business with a clear focus on customer convenience and digital engagement.
Shipstage GmbHshipstage.com
Transportation · Germany
66Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Shipstage GmbH operates a sophisticated B2B shipping platform focused on optimizing and automating shipping processes for online retailers, marketplaces, and fulfillment companies. The platform offers multi-carrier integration, shipping label creation, returns management, and shipment tracking, positioning itself as a comprehensive solution in the e-commerce logistics sector. Founded in 2014 and based in Hamburg, Germany, Shipstage leverages modern web technologies including Next.js and AWS hosting to deliver a performant and mobile-optimized user experience. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and security headers, though DNSSEC is not enabled, representing a minor area for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, Shipstage presents a credible and trustworthy business with transparent pricing and extensive customer support resources.
—
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
- BadIdeas.fund
badideas.fund
Technology · Belgium
74Medium
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
BADideas.fund is a startup funding entity focused on supporting bold founders from the Baltics and Central and Eastern Europe (CEE) region. The fund emphasizes fast, founder-friendly funding and is led by a community of unicorn builders, targeting early-stage B2B and marketplace startups with global ambitions. The website presents a professional and consistent brand image, hosted on the Wix platform, with clear business descriptions and structured data indicating a legitimate business presence based in Belgium. Technically, the site uses modern JavaScript polyfills and Wix's infrastructure, providing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit privacy or cookie policies. No WAF or blocking mechanisms were detected, and no suspicious content or vulnerabilities were found. Overall, the site is trustworthy but could improve privacy compliance and security best practices.
Education · Latvia
50Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Latvijas Tālmācības profesionālais centrs (LTPC) is a Latvian educational institution specializing in distance learning and professional qualification programs. The organization offers a wide range of vocational and professional development courses accessible globally, targeting students and adult learners. Their business model focuses on flexible, modular education with support for unemployed persons through government programs. The website reflects a medium-sized education provider with consistent branding and a clear presentation of services. Technically, the website employs a modern technology stack including jQuery, Google Analytics, Facebook Pixel, Hotjar, and LiveChat, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO practices but lacks some accessibility features. Performance is moderate, and the site uses HTTPS with secure form submissions, though security headers are missing. From a security perspective, the site demonstrates good baseline practices such as HTTPS and secure data handling in forms. However, it lacks publicly disclosed privacy and cookie policies, security policies, and incident response information, which are critical for GDPR compliance and user trust. The use of multiple tracking and advertising tools suggests moderate user tracking without clear consent mechanisms. Overall, the website is professional and trustworthy with no signs of malicious activity or content safety concerns. Strategic improvements in privacy compliance, security headers, and transparency would enhance the security posture and user confidence.
—
73Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
—
60Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
—
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
- Nno
den0x.com
Technology
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website den0x.com presents a minimalistic security testing login interface with no substantive business or branding information. The site appears to be designed for security testing purposes rather than as a commercial or public-facing business platform. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript without any detected frameworks or CMS. Hosting appears to be via Njalla, a privacy-focused provider, but no HTTPS or security headers are evident, indicating a weak security posture. The WHOIS data shows a domain creation date in the future (November 2025), which is inconsistent and suspicious, reducing trust in the domain's legitimacy. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available, further limiting compliance and trustworthiness.
NetPro SIAnasstore.lv
Technology · Latvia
56Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
NAS STORE, operated by NetPro SIA, is an authorized reseller specializing in networking and storage solutions including brands like Synology, MikroTik, QNAP, Ubiquiti, and Ajax. The company targets customers across the European Union with a focus on fast courier delivery services. The website is built on WordPress with WooCommerce, leveraging modern plugins and integrations such as Trustpilot for customer reviews and Stripe for payment processing. The technical infrastructure is solid with HTTPS and Cloudflare DNS, ensuring secure and reliable access. However, the absence of explicit privacy policies and terms of service on the homepage indicates room for improvement in compliance and transparency. Security posture is generally good but could benefit from enhanced security headers and incident response disclosures. Overall, NAS STORE presents a professional and trustworthy online presence in the technology reseller sector.
SC grupascgrupa.lv
Transportation · Latvia
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
SC grupa is a well-established Latvian road construction company with over 25 years of experience, specializing in road, street, and infrastructure construction as well as building materials production. The company targets business and government clients within Latvia, positioning itself as a reliable and professional service provider in the transportation sector. The website reflects this with clear business descriptions, consistent branding, and multilingual support. Technically, the site runs on WordPress 6.8.2 with common JavaScript libraries such as jQuery and Bootstrap, offering moderate performance and good mobile optimization. SEO practices are well implemented with comprehensive metadata and structured data. Security posture is adequate with HTTPS enforced but lacks advanced security headers and visible security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.
Jānis Alksnisalksnis.eu
Technology · Latvia
66Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website www.alksnis.eu is a Latvian language technology and cybersecurity blog authored by Jānis Alksnis. It provides news, insights, and educational content focused on information technology, cybersecurity, and related technological developments, targeting Latvian-speaking professionals and enthusiasts. The site maintains a consistent brand presence with regular content updates and social media integration. Technically, the site is built on WordPress with modern web technologies including Google Tag Manager, jQuery, and various plugins for enhanced functionality. It uses HTTPS with good SSL configuration and basic security practices, though it lacks some advanced security headers and a cookie consent mechanism. Privacy and cookie policies are present and appear comprehensive, indicating GDPR awareness. However, no explicit security policy or incident response contact information is published. Overall, the site is professional, trustworthy, and safe for general audiences, with a good balance of content quality and technical implementation.
Olaines novada pašvaldībaolaine.lv
Government · Latvia
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Olaines novada pašvaldība operates a municipal government website serving residents, businesses, and visitors of the Olaine municipality in Latvia. The site provides comprehensive local information including news, events, governance, social services, culture, and sports. It targets a broad audience including youth and visitors, positioning itself as an essential local government information portal. The website demonstrates a consistent and professional design with clear navigation and mobile optimization, reflecting a mature digital presence for a government entity. Technically, the site employs modern technologies such as Google Tag Manager, Cookiebot for cookie consent, and Google Analytics for traffic analysis. Security measures include HTTPS enforcement and CSRF protection cookies, although explicit security headers and incident response policies are not evident in the provided data. Cookie management is robust with detailed categorization and user consent mechanisms compliant with GDPR principles. Overall, the website is safe, trustworthy, and well-aligned with its government function, though it would benefit from publishing explicit privacy and security policies and enhancing security headers. The domain registration data is consistent with the website's government nature and Latvian location, supporting its legitimacy.
- AS Latvenergo
latvenergo.lv
Energy · Latvia
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
AS Latvenergo is a leading Latvian state-owned energy company specializing in electricity and heat production, trading, and natural gas sales. Established in 1939, it holds a significant market position in the Baltic region, serving approximately 896,000 customers. The company emphasizes renewable energy, with 66% of its production from renewable sources, and offers services including energy efficiency and electric vehicle charging. The website reflects a professional corporate presence with clear navigation and comprehensive information about the company and its services. Technically, the website is built on OctoberCMS and employs modern web technologies such as Google Tag Manager, Facebook Pixel, and Usercentrics for cookie consent management. The site is mobile-optimized and demonstrates good SEO practices. Security posture is strong with HTTPS enforced and privacy compliance evident through detailed cookie and privacy policies. However, explicit security policies and incident response contacts are not found, representing an area for improvement. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements. The presence of official contact details, social media links, and consistent branding further enhance credibility. No critical vulnerabilities or suspicious content were detected, indicating a low-risk profile for users and stakeholders.
qwertiko GmbHqwertiko.de
Technology · Germany
60Medium
NIS2 10 · GDPR 60
NIS2 10 · GDPR 60
qwertiko GmbH operates a professional IT system hosting service primarily targeting businesses and IT professionals in Germany. The website presents a professional image with consistent branding and a focus on technology hosting solutions. The technical infrastructure is based on WordPress CMS with common plugins such as Yoast SEO and Contact Form 7, hosted on nroute.de servers. The website is accessible, mobile-optimized, and SEO-friendly but lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with no visible security headers or incident response information, indicating room for improvement in security best practices.
- GGamiCool.com Inc.
gamicool.com
Technology
70Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
GamiCool is a newly founded technology company specializing in AI-powered game creation and asset generation. Their platform enables users ranging from beginners to professional teams to create playable games and generate diverse game assets such as images, 3D models, music, and sound effects without requiring coding skills. The company positions itself as an innovative SaaS provider simplifying game development workflows with AI assistance. Technically, the website is built on modern frameworks like Next.js and React, hosted likely behind Cloudflare, and integrates analytics and tracking tools such as Google Tag Manager and Microsoft Clarity. The site is well-optimized for performance, mobile responsiveness, and SEO, with comprehensive structured data enhancing search visibility. Security posture is solid with HTTPS enforced and domain registration locked, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is partially addressed with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the website and business present a professional and trustworthy front with room for improvement in privacy and security transparency.
- EverGrow Tech Inc.
vomo.ai
Technology · United States
71Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
VOMO.ai is a technology company specializing in AI-powered meeting transcription and audio/video transcription services. The company offers a SaaS platform that records, transcribes, and summarizes meetings with high accuracy and speed, targeting business professionals and teams. The website is well-designed, mobile-optimized, and uses modern web technologies including WordPress, Elementor, and WP Rocket. It integrates Google OAuth for secure user login and employs Google Analytics and Tag Manager for tracking. The domain registration is consistent with the business identity, registered under EverGrow Tech Inc. in the US, founded in 2023. However, the site lacks visible privacy and cookie policies, which are important for GDPR compliance and user trust. No direct contact information or security policies are published, representing areas for improvement.