Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,190001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
60,951–61,000 of 99,067
Blaues Kreuz Schweizblaueskreuz.info
Non-profit · Switzerland
52Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Blaues Kreuz Schweiz is a Swiss non-profit organization dedicated to providing comprehensive information and support related to alcohol consumption and addiction. Their website offers a variety of resources including online tests, help offers, educational content, and testimonials aimed at affected individuals, their families, and interested parties. The organization maintains a professional online presence with clear contact information and social media engagement, reinforcing its credibility in the addiction support sector. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and uses both Google Analytics and Matomo for analytics, balancing functionality with privacy considerations. The site is well-optimized for mobile devices, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and privacy-conscious analytics, but lacks explicit security headers and incident response contact details. The WHOIS data for the domain is malformed and unavailable, which limits domain registration trust analysis. Despite this, the website content and professional presentation suggest legitimacy. No WAF or blocking mechanisms were detected, and the site is fully accessible. The content is mature audience appropriate, focusing on alcohol and addiction education without any explicit adult content. Overall, Blaues Kreuz Schweiz presents a trustworthy and professional resource in its domain, with room for improvement in security policy transparency and WHOIS data clarity.
- Blaukreuz-Brockis
blaukreuz-brocki.ch
Non-profit · Switzerland
61Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Blaukreuz-Brockis operates as a Swiss non-profit organization focused on retailing second-hand goods through multiple physical Brocki shops across Switzerland. Their business model supports social causes, including addiction support and integration services. The website reflects a mature digital presence built on Drupal 10, integrating Google Maps for location services and Matomo for privacy-conscious analytics. The site is professionally designed, mobile-optimized, and provides clear contact information for various locations. Security posture is solid with HTTPS and security headers in place, though explicit privacy and cookie policies are missing, which impacts compliance. No incident response or vulnerability disclosure information is provided, representing an area for improvement. Overall, the website is trustworthy and serves its target audience effectively.
- Blaues Kreuz St. Gallen - Appenzell
blaueskreuz-sg-app.ch
Non-profit · Switzerland
62Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Blaues Kreuz St. Gallen - Appenzell is a reputable non-profit organization dedicated to providing comprehensive support and prevention services related to alcohol addiction in the St. Gallen and Appenzell regions of Switzerland. The website offers detailed information on counseling, ambulant withdrawal, prevention programs, aftercare, and integration services, targeting individuals affected by alcohol dependency, their families, and related institutions. The organization is affiliated with national and international Blue Cross bodies, enhancing its credibility and reach. Technically, the website employs modern web technologies including jQuery, Swiper.js, and FontAwesome, with a custom CMS backend. It features good mobile optimization, clear navigation, and a cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Overall, the site reflects a professional and trustworthy digital presence for a medium-sized regional non-profit.
Non-profit · Switzerland
64Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
The Stiftung Jugendsozialwerk Blaues Kreuz BL operates as a Swiss non-profit organization providing a broad range of social services focused on youth and community support. Their offerings include employment assistance, housing, leisure activities, school support, and counseling, targeting children, adolescents, and families primarily in the Basel-Landschaft region. The organization maintains a professional online presence with clear navigation, multilingual support in German, and active social media engagement. Technically, the website is built using modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, supported by the webIQ 5.0 framework. It features responsive design optimized for mobile devices and integrates Google Analytics with IP anonymization, reflecting a moderate level of digital maturity. However, some security best practices such as security headers and incident response disclosures are absent. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for a non-profit entity, though it limits transparency. Certifications such as ZEWO and SQS Swiss Made enhance trustworthiness. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with an overall AI score of 81. Strategic improvements include adding security headers, publishing a vulnerability disclosure policy, and enhancing accessibility features to further strengthen security posture and compliance.
Webconnexwebconnex.com
Technology · United States
72Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Webconnex is a technology company specializing in flexible event, ticketing, and fundraising software solutions. Established since 2008, it operates multiple product brands including TicketSpice, RegFox, GivingFuel, and RedPodium, serving over 60,000 organizations globally. The company positions itself as a people-first organization with a strong emphasis on team culture and customer service. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, Wistia for video hosting, and Sentry for error monitoring, ensuring a fast, responsive, and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are not publicly documented. The WHOIS data for the domain is not publicly available, likely due to privacy protection, which slightly impacts transparency but does not detract significantly from the overall trustworthiness given the professional web presence. Overall, Webconnex demonstrates a mature digital infrastructure and a credible business model with room for improvement in security policy transparency.
- OOne-Check GmbH
f24.org
Other · Switzerland
53Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at f24.org currently serves as a placeholder or offline page displaying the Chrome T-Rex runner game, with no visible business-related content or contact information. The domain is registered to One-Check GmbH, a Swiss company established in 2002, indicating a legitimate and longstanding registration. However, the website itself lacks any meaningful content, policies, or security features that would support a professional business presence. From a technical perspective, the site uses basic HTML, CSS, and JavaScript to deliver the offline game experience. There is no evidence of modern frameworks, CMS, or analytics tools. The hosting is provided by hostpoint.ch, a known hosting provider. Mobile optimization and accessibility are basic, and SEO is poor due to lack of metadata and content. Security posture is weak, with no HTTPS enforcement or security headers detected in the provided content. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available. The WHOIS data is consistent and trustworthy, but the website content does not reflect an active or professional business presence. Overall, the website appears to be either inactive, under construction, or repurposed as a placeholder page. This results in a low AI score and poor trust indicators. Strategic recommendations include developing a proper business website with clear content, implementing security best practices, and publishing necessary compliance policies.
St.Gallen-Bodensee Tourismusgallen-bodensee.ch
Hospitality · Switzerland
64Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
St.Gallen-Bodensee Tourismus operates as a regional tourism authority promoting the St.Gallen-Lake Constance region in Eastern Switzerland. The website provides cultural, scenic, and outdoor activity information targeting tourists and visitors. It positions itself as a trusted source for regional travel guidance and event promotion. The business model focuses on tourism promotion and visitor engagement through digital content and guided tours. Technically, the website is built on the Contao Open Source CMS platform, utilizing Bootstrap for responsive design and modern web standards. It integrates Cookiebot for GDPR-compliant cookie consent management, Google Tag Manager, and Plausible Analytics for data collection and marketing optimization. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. From a security perspective, the site enforces HTTPS and employs standard security headers, ensuring a secure browsing experience. Cookie consent is actively managed, and no exposed sensitive data or vulnerabilities were detected in the provided content. However, the absence of a security.txt file and explicit incident response contacts suggests room for improvement in vulnerability disclosure and incident management. Overall, the website is professionally designed, trustworthy, and compliant with privacy regulations. The risk profile is low, with recommendations focusing on enhancing security transparency and formalizing incident response mechanisms.
- Gg+m elektronik ag
gm-elektronik.swiss
Technology · Switzerland
60Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website for gm-elektronik.swiss is currently inaccessible beyond a security challenge page powered by BitNinja.IO, which blocks direct content access. The domain is registered to g+m elektronik ag, a Swiss company established in 2015, consistent with the domain name and country. The website appears to use outdated CMS technologies (Joomla 1.5 and WordPress 2.5) which are known to have multiple security vulnerabilities. No business descriptions, contact information, or compliance policies are visible on the site. The technical infrastructure is basic, hosted on trendhosting-net.ch, with minimal SEO and accessibility features. Security posture is moderate due to the presence of a security challenge but weakened by outdated software and lack of security headers or policies. Overall, the site’s digital maturity is low, and the lack of visible content and policies limits trust and user engagement.
Ebnat AGebnat.ch
Manufacturing · Switzerland
59Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Ebnat AG is a Swiss specialist company focused on manufacturing high-quality brushes and cleaning solutions for household and dental hygiene sectors. The company offers customized product development, private label, and white label services, emphasizing innovation, quality, and sustainability. Their market position is strong within the manufacturing industry, targeting B2B customers and brand owners. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive business information. Technically, the site uses modern technologies including Google Analytics, Google Tag Manager, Cloudflare Turnstile for bot protection, and Laravel Livewire framework. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.
Bank Frick AGbankfrick.li
Finance · Liechtenstein
69Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Bank Frick AG is a well-established full-service bank based in Liechtenstein, specializing in providing banking services to financial intermediaries and professional clients. Founded in 1998, the bank has positioned itself as an innovative leader in blockchain banking and digital financial solutions. Its modular service offerings include intermediary solutions, blockchain banking, fund and capital market solutions, and acquiring services, targeting clients primarily in the EEA/EU, Switzerland, and Liechtenstein. The website reflects a professional and trustworthy brand with comprehensive content and clear navigation.
- AAppenzeller Bahnen
appenzellerbahnen.ch
Transportation · Switzerland
68Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Appenzeller Bahnen is a regional transportation company operating rail services across the Swiss cantons of Appenzell Innerrhoden, Appenzell Ausserrhoden, and St.Gallen. The company provides travel information, ticketing, and group travel services, positioning itself as a key regional mobility provider. The website reflects a professional digital presence with clear branding and relevant content tailored to travelers in the region. Technically, the site is built on the Contao CMS platform, leveraging modern web technologies including jQuery, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile-optimized and implements good SEO and accessibility practices. Security posture is strong with HTTPS enforced, multiple security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit terms of service and a published security policy or incident response contacts. Overall, the website is trustworthy, secure, and professionally maintained, supporting the company's business objectives effectively.
zubischuhe.ch AGzubi.swiss
Retail · Switzerland
73Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Zubi is a Swiss-based retail company specializing in footwear, outdoor clothing, and equipment for families and outdoor enthusiasts. Established in 2015, the company operates both an e-commerce platform and likely physical retail locations, positioning itself as a trusted provider of quality outdoor products. The website is professionally designed with consistent branding and clear messaging targeting the Swiss market. Technically, the site leverages modern frameworks such as Next.js and Material UI, hosted likely on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced, appropriate security headers, and domain registration consistency. However, there is room for improvement in enabling DNSSEC and publishing explicit security policies or vulnerability disclosures. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.
- TToggenburg Tourismus
toggenburg.swiss
Hospitality · Switzerland
63Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Toggenburg Tourismus operates the website toggenburg.swiss, serving as a regional tourism portal for the Toggenburg area in Switzerland. The site provides comprehensive information about the region's natural attractions, seasonal activities, and accommodations, targeting tourists and visitors interested in authentic nature experiences in the Swiss Alps. The business is positioned as a small, regional tourism promoter with a clear focus on hospitality and outdoor leisure. Technically, the website is built on the Contao Open Source CMS platform and employs modern web technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and social sharing tools like ShareThis. Hosting is provided by Hostpoint, a reputable Swiss hosting provider. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the website uses HTTPS with a valid SSL certificate and implements a detailed cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, and some recommended security headers are missing. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business identity, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital presence for Toggenburg Tourismus, with good content quality and compliance. Strategic improvements in security headers and DNS security could further strengthen its posture.
- St.Galler Stadtwerke
sgsw.ch
Energy · Switzerland
74Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
St.Galler Stadtwerke is a regional utility provider based in St.Gallen, Switzerland, offering a comprehensive range of services including electricity, water, gas, district heating, fiber optic connectivity, and e-mobility solutions. The company positions itself as a reliable partner for the city's energy and infrastructure needs, targeting both residential and business customers. Their website reflects a professional and customer-focused approach with clear service offerings and accessible contact information. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome Pro, and the ArcGIS JavaScript API for interactive mapping. It integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Siteimprove Analytics. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS and includes CSRF protection scripts, but lacks visible security headers and explicit security or incident response policies. Tracking scripts are present without a clear cookie consent mechanism, which may pose privacy compliance risks. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy, well-maintained, and professionally presented, with minor recommendations to enhance privacy compliance and security transparency.
RaumUnion AGraumunion.ch
Real Estate · Switzerland
52Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
RaumUnion AG is a Swiss-based company specializing in architecture and realization services, targeting institutional investors, real estate funds, private investors, public entities, foundations, and cooperatives. Their offerings include modular and flexible services for new constructions and renovations across residential, commercial, healthcare, and industrial sectors. The company positions itself as an expert with tailored project models to meet diverse client needs. Technically, the website is built on WordPress with modern JavaScript libraries like Alpine.js and jQuery, optimized for performance and mobile responsiveness. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy, with clear contact information and partner relationships.
PUSCH Praktischer Umweltschutzpusch.ch
Education · Switzerland
70Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
PUSCH Praktischer Umweltschutz is a Swiss non-profit organization dedicated to supporting municipalities, schools, and companies in practical environmental protection. Their services include environmental education, consultancy on biodiversity, climate, sustainable procurement, and circular economy. The website is professionally designed using TYPO3 CMS, with a clear structure and multilingual support (German and French). The organization maintains a strong online presence with social media channels and provides comprehensive contact information. Technically, the site uses modern web technologies and includes Google Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though no explicit security or incident response policies are published. Overall, the domain registration aligns well with the organization's profile, indicating legitimacy and trustworthiness.
Education · Switzerland
66Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Pädagogische Hochschule Thurgau (PHTG) is a Swiss educational institution specializing in scientifically grounded teacher training and continuing education for all levels of primary and secondary education. The institution offers a broad range of study programs, professional development courses, and research projects, targeting educators and education professionals. The website reflects a strong regional presence with collaborations such as with the University of Konstanz, emphasizing cross-border educational opportunities. Technically, the website is built on modern web standards, leveraging Google Tag Manager and CookieYes for consent management, and is likely hosted on Wix, as indicated by certain cookies. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security policy and incident response information. Overall, the domain registration details align with the institution's identity, supporting legitimacy and trustworthiness.
- Olma Messen St.Gallen
olma-messen.ch
Hospitality · Switzerland
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Olma Messen St.Gallen operates as a major event organizer and venue manager in Eastern Switzerland, hosting trade fairs, congresses, and cultural events that attract over 600,000 visitors annually. The website reflects a mature digital presence with a Drupal CMS backend, integration of modern consent management via Usercentrics, and analytics through Google Tag Manager. The site offers comprehensive navigation for various events and user roles, including visitor and exhibitor login portals. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.
Landqart AGlandqart.com
Manufacturing · Switzerland
70Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Landqart AG is a Swiss-based manufacturer specializing in security paper products such as banknote substrates and passport papers, serving clients in over 50 countries. The company positions itself as a leader in the security paper manufacturing industry, emphasizing Swiss quality, security, and innovation. The website is professionally designed, multilingual (German primary), and includes comprehensive business contact information and cookie consent mechanisms, reflecting a mature digital presence. Technically, the site uses modern JavaScript, cookie management tools, and Google Analytics with IP anonymization, hosted likely behind Cloudflare. Security posture is good with HTTPS and consent compliance, though explicit security headers and incident response policies are absent. WHOIS data is missing, which raises some legitimacy concerns but the website content and business information strongly indicate a legitimate enterprise. Overall, the site is trustworthy and well-maintained with room for security policy enhancements.
Huus Brauihuus-braui.ch
Hospitality · Switzerland
55Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Huus Braui is a small local bar located in Roggwil, Switzerland, offering a cozy social venue primarily focused on hospitality services. The website presents a professional design with good content quality and clear navigation, targeting a mature audience interested in nightlife and bar services. Technically, the site uses modern web fonts, Google Analytics, and Tag Manager for tracking, with HTTPS enabled ensuring secure connections. However, the absence of privacy and cookie policies, lack of security headers, and missing contact information indicate compliance and security gaps that should be addressed to improve trust and regulatory adherence. Overall, the website is functional and moderately secure but requires enhancements in privacy compliance and security best practices.
Schweizerische Bodensee-Schifffahrt AGbodensee-schiffe.ch
Transportation · Switzerland
60Medium
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Schweizerische Bodensee-Schifffahrt AG operates a regional transportation and tourism service on Lake Constance, offering ferry and cruise ship services, experience trips, event hosting, and gastronomy. The company maintains a professional website built on WordPress with Elementor, integrating multiple plugins for booking and event management. The site is well-structured with good SEO practices and modern technology usage, including Google Analytics and Tag Manager for tracking. However, the absence of explicit privacy and cookie policies, as well as lack of visible security headers, indicates gaps in compliance and security posture. No contact emails or phone numbers were found in the provided content, which may affect user trust and support accessibility. Overall, the website is legitimate, consistent with the business claims, and provides a good user experience for its target audience.
Blumer Lehmannblumer-lehmann.com
Manufacturing · Switzerland
75Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Blumer Lehmann is a leading Swiss company specializing in wood construction and wood industry products, offering a wide range of services including planning, development, construction, and sales of wood products and silo/plant construction. The company targets professionals and businesses in the construction and sustainable building sectors, positioning itself as an international leader in its industry. The website is professionally designed with multilingual support and detailed navigation, reflecting a mature digital presence. Technically, the site uses modern analytics and tracking tools such as Google Tag Manager, Hotjar, TikTok Analytics, and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and some best practices observed, though explicit security headers and privacy policies are missing. The absence of WHOIS data raises some concerns about domain registration transparency, but the website content and branding suggest a legitimate business. Overall, the site is trustworthy but would benefit from enhanced privacy compliance and clearer security disclosures.
- AAppenzellerland Tourismus AR
appenzellerland.ch
Hospitality · Switzerland
65Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Appenzellerland Tourismus AR operates a regional tourism website focused on promoting activities, accommodation, and restaurants in the Appenzellerland region of Switzerland. The website targets tourists and visitors seeking information and inspiration for their stay. The business model centers on tourism promotion and providing comprehensive regional information, positioning itself as a key regional tourism authority. Technically, the site is built on the Contao Open Source CMS, leveraging modern web technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and Plausible Analytics for privacy-friendly analytics. The site is well-optimized for mobile devices and includes good SEO practices. Security-wise, the website enforces HTTPS, implements cookie consent with granular controls, and uses reputable third-party services, reflecting a mature security posture. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Overall, the site is professional, trustworthy, and compliant with GDPR through Cookiebot integration, but could improve transparency by adding terms of service and contact information.
- The Current
thecurrent.com
Media
73Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The Current is a professional news resource and community platform focused on marketing, advertising, and media industry trends. Owned by The Trade Desk, it offers high-quality content including articles, opinion pieces, podcasts, and videos targeted at marketers and advertising professionals. The website demonstrates a mature digital infrastructure using modern web technologies such as React, Next.js, and Google Tag Manager, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, although explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain is a notable gap but does not detract significantly from the site's credibility given its professional presentation and clear association with The Trade Desk. Overall, The Current is a trustworthy and well-maintained digital publication serving a specialized audience in the marketing sector.
Boomy Web Companyboomy.co.uk
Technology · United Kingdom
67Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Boomy Web Company is a small UK-based web design and marketing agency specializing in custom WordPress websites, eCommerce solutions, and digital marketing services. The company targets businesses and individuals seeking modern, mobile-responsive, and Google-friendly websites, primarily serving the Newport and Shropshire areas. Their market position is that of a local specialist with a focus on quality and customer experience. Technically, the website is built on WordPress using the Genesis Framework and Yoast SEO plugin, incorporating modern JavaScript libraries such as jQuery and ScrollMagic. The site is mobile-optimized and demonstrates good SEO practices, though performance is moderate. HTTPS is properly configured, but some security headers are missing, and there is no cookie consent mechanism, which impacts privacy compliance. From a security perspective, the site shows a solid baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of security policies, incident response information, and terms of service pages indicates room for improvement in governance and compliance. The WHOIS lookup failed due to domain naming issues, which slightly reduces trustworthiness but does not negate the legitimacy of the business as evidenced by the professional website. Overall, Boomy presents a professional and trustworthy web presence with minor gaps in privacy compliance and security best practices. Strategic improvements in cookie consent, security headers, and publishing governance documents would enhance their security posture and compliance standing.
Other · Canada
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website bzuco.cloud is currently inaccessible, returning a minimal 'File not found.' message indicative of a 404 error or blocked content. There is no visible content, metadata, or business information available on the site. The domain is registered through Tucows Domains Inc. with privacy protection enabled, registered in Canada since 2019. Due to the lack of accessible content, no meaningful assessment of the business, its services, or market position can be made. Technically, the site lacks HTTPS and security headers, and no privacy or cookie policies are present, indicating a very low digital maturity level. Security posture is weak with no visible safeguards or compliance indicators. Overall, the site presents a high risk due to lack of transparency and accessibility, and it is recommended to verify the domain's purpose and ownership before engagement.
- Bzuco
bzuco.cz
Technology · Czech Republic
56Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Bzuco is a Czech-based technology company specializing in modern ticketing and event management solutions. Their platform enables event organizers to sell tickets directly, manage entry control via mobile apps, integrate e-shops, and implement cashless payment systems. The company positions itself as a cost-saving alternative to traditional ticketing providers, emphasizing data ownership and reduced commission fees. The website reflects a professional and consistent brand image with clear contact channels and client trust indicators. Technically, the site uses modern web technologies including Google Analytics, Typekit fonts, and AJAX powered by the Nette PHP framework. The site is mobile-optimized and provides a cookie consent mechanism aligned with GDPR requirements. Security posture is adequate with HTTPS enforced and form validation, but lacks visible security headers and dedicated security policies. WHOIS data is unavailable, which reduces transparency and trustworthiness, but the website content and contact information suggest a legitimate business. Overall, the site scores well on content quality, business credibility, and privacy compliance, with room for improvement in security best practices and WHOIS transparency.
- eclair design s.r.o.
eclair.cz
Technology · Czech Republic
62Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
eclair design s.r.o. is a Czech Republic-based company specializing in custom website development and web design services. With over 15 years of market presence and more than 250 completed projects, the company targets businesses, government offices, and organizations seeking tailored web solutions. Their offerings include modern cloud-based hosting using Amazon Web Services and a proprietary CMS called Pagebuilder, which supports comprehensive website management. The company also provides graphic design services to complement web development projects. Technically, the website leverages modern web technologies such as Bootstrap for responsive design, Google Fonts for typography, Google Analytics for visitor tracking, and Google Maps API for location display. The use of a proprietary CMS indicates a degree of digital maturity and control over content management. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site uses HTTPS, but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance and user trust. No WHOIS data is available, which limits domain legitimacy verification and slightly reduces trustworthiness. The site does not show signs of WAF blocking or malware, and contact information is clearly presented with company registration details. Overall, the website is professional and trustworthy, but improvements in privacy compliance and security best practices are recommended to enhance user trust and regulatory adherence.
Dan Vojtěchdanvojtech.cz
Media · Czech Republic
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Dan Vojtěch is a professional photographer based in Prague, Czech Republic, specializing in action sports, lifestyle, commercial, automotive photography, and video production. The website showcases a comprehensive portfolio with notable brand associations including Red Bull, Nikon, and Maxim, positioning the business as a niche player in the media and photography sector. The digital infrastructure is built on WordPress with common plugins such as WPML for multilingual support and Google Analytics for visitor tracking. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and professional content presentation. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and privacy compliance documentation. The absence of privacy and cookie policies, as well as contact phone numbers and physical addresses, represents compliance and trust gaps. Overall, the website is legitimate and professional but would benefit from enhanced security and privacy measures.
Other · Switzerland
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Bioaktuell.ch is a well-established Swiss platform dedicated to supporting organic farmers by providing comprehensive information, advisory services, and educational content. Affiliated with the Forschungsinstitut für biologischen Landbau FiBL and Bio Suisse, it holds a leading position in the Swiss organic agriculture sector. The website targets Swiss organic farmers and stakeholders, offering multilingual content in German, French, and Italian to serve the diverse Swiss population. The business model focuses on information dissemination and community support rather than direct commercial transactions. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including JavaScript and CSS, with integrations for push notifications via Signalize and analytics through eTracker. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Performance is moderate, with a clean and professional design that supports user experience and navigation clarity. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security headers and a published security or incident response policy suggests room for improvement in security posture. The WHOIS data is consistent with the website's claims, showing transparent registration without privacy protection, which is appropriate for this type of organization. Overall, Bioaktuell.ch presents a trustworthy, professional, and compliant platform with a strong focus on organic farming in Switzerland. Strategic enhancements in security policies, accessibility, and transparency around incident response would further strengthen its position and trustworthiness.
Animals lifeanimalslife.net
Non-profit · Latvia
71Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Animals Life NET is a small non-profit organization based in Latvia that operates a global platform for live streaming animal shelters to support animal welfare. The website facilitates donations and purchases of supplies for shelters worldwide, targeting animal lovers and donors. The platform is technically built on WordPress with integrations for live chat, push notifications, and analytics. While the site is professionally designed and content-rich, some security best practices such as advanced headers and cookie consent are missing. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the site presents a trustworthy and functional platform for its niche audience.
Feathr™feathr.com
Retail
72Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Feathr™ is a small retail business specializing in artisan wallpaper, wall murals, and fabrics created in collaboration with independent artists globally. The company emphasizes eco-friendly inks and modern designs, targeting consumers and interior design enthusiasts who value originality and craftsmanship. The website is built on WordPress with WooCommerce, integrating modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Cookiebot for privacy compliance. The technical infrastructure is solid, with good mobile optimization and SEO practices. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS registration data raises concerns about domain legitimacy, but the website content and branding suggest a genuine business. Privacy policy and terms of service are not explicitly found, indicating room for compliance improvement.
Vertical Aviation Internationalverticalavi.org
Transportation · United States
73Medium
NIS2 25 · GDPR 65
NIS2 25 · GDPR 65
Vertical Aviation International (VAI) is a well-established membership organization dedicated to advocating for the vertical flight industry globally. With over 75 years of history, VAI serves as a leading voice providing safety initiatives, education, advocacy, and community engagement for professionals in vertical aviation. The website reflects a professional and comprehensive digital presence, leveraging WordPress CMS with modern SEO and analytics tools. The technical infrastructure is solid, hosted via reputable providers, and includes standard security practices such as HTTPS and domain status protections. However, there are opportunities to enhance security by enabling DNSSEC and implementing additional security headers. Privacy compliance is addressed with visible privacy and cookie policies, though GDPR compliance could be improved with more explicit statements. Overall, VAI's website demonstrates a strong market position and trustworthy online presence suitable for its industry and audience.
Flight Safety Foundationaviation-safety.net
Transportation · United States
67Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Aviation Safety Network (ASN) is a specialized information service focused on aircraft accidents and civil aviation safety issues. It operates as an exclusive service of the Flight Safety Foundation, a reputable organization in the aviation safety sector. ASN provides comprehensive accident databases, investigation details, safety statistics, and monthly email digests, targeting aviation professionals, researchers, and safety analysts worldwide. The website demonstrates a consistent brand identity aligned with its parent organization and maintains a professional presence with active social media channels. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and Google Charts for data visualization. It integrates Google Analytics for user tracking and offers a moderate level of mobile optimization and accessibility. While the site is functional and well-structured, it lacks some modern security headers and explicit cookie consent mechanisms, which are important for compliance and user trust. From a security perspective, the site uses HTTPS, ensuring encrypted communication, but does not visibly implement advanced security headers or publish detailed security policies. The absence of WHOIS registrant data limits domain trust assessment, though the affiliation with Flight Safety Foundation and the quality of content provide strong legitimacy signals. No critical vulnerabilities or exposed sensitive data were detected. Overall, ASN presents a trustworthy and authoritative resource in the aviation safety domain with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.
Other
58Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website browsiprod.com is currently inaccessible, presenting only a minimal HTML page with an error message indicating a missing required HTTP header 'X-API-Key'. This suggests the site is either an API endpoint or protected resource rather than a public-facing website. Due to the lack of accessible content, no metadata, structured data, or business information could be extracted. The absence of privacy policies, contact information, or terms of service further limits the ability to assess the company's business model or compliance posture. Technically, no technologies, scripts, or hosting details are identifiable from the provided content. Security posture cannot be evaluated properly as no HTTPS or security headers were detected, and the WHOIS data is privacy protected, limiting trust assessment. Overall, the site appears to be in a restricted or development state, with significant gaps in public-facing information and security best practices.
testmadlove.cz
Media · Czech Republic
56Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Madlove is a small creative agency based in Prague specializing in design and advertising services. The website presents a professional portfolio showcasing various projects, targeting businesses and organizations seeking creative agency solutions. The company positions itself as a local creative service provider with a focus on quality design and effective advertising. Technically, the website uses modern JavaScript frameworks, Google Analytics, and Google Tag Manager for tracking and marketing purposes. The site is mobile optimized and accessible with good SEO practices. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and published privacy or security policies. WHOIS data is missing, which reduces domain transparency and trustworthiness. Overall, the website is functional and professional but would benefit from improved compliance documentation and enhanced security practices.
Plastenco design s.r.o.plastenco.cz
Manufacturing · Czech Republic
71Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Plastenco design s.r.o. is a Czech-based eco-design studio specializing in transforming local plastic waste into innovative design products using advanced 3D printing technology. The company targets exceptional firms and architects interested in sustainable design and circular economy principles. Their business model revolves around product design, custom projects, workshops, and collaboration with academic and technological partners. The website demonstrates a professional and modern digital presence built on SvelteKit, with multimedia content and active social media integration. Security posture is adequate with HTTPS and cookie consent, but lacks some security headers and formal privacy documentation. The absence of WHOIS data limits domain trust assessment, though the website content and partnerships support legitimacy. Overall, the site is well-designed, content-rich, and aligned with the company's sustainability mission.
PEYTON legalpeytonlegal.cz
Real Estate · Czech Republic
51Medium
NIS2 7 · GDPR 73
NIS2 7 · GDPR 73
PEYTON legal is a Czech Republic-based legal services provider specializing in comprehensive corporate housekeeping and transactional legal advisory services. The firm aims to be a reliable partner to its clients, focusing on corporate law and real estate legal matters. The website reflects a professional and consistent brand image with clear navigation and relevant content targeting business clients and corporate entities. Technically, the site is built on WordPress with modern libraries such as jQuery and Slick Carousel, and integrates Google Analytics and CookieHub for analytics and cookie consent management. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers could enhance protection. The absence of WHOIS data limits domain legitimacy verification, but the website's professional presentation and trust signals mitigate some concerns. Contact is primarily via a web form, with no explicit emails or phone numbers found. Overall, the site is well-structured, GDPR compliant, and suitable for its target audience.
- White Circus catering
whitecircus.cz
Hospitality · Czech Republic
65Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
White Circus catering is a small hospitality business based in Prague, Czech Republic, specializing in catering and event hosting services. The company positions itself as a local provider focused on creating memorable experiences for clients and their guests. The website is professionally designed using the Wix platform, featuring clear branding and relevant business information such as contact phone number and physical address. Structured data is implemented to enhance search engine understanding of the business. Technically, the site uses modern web technologies including Google Tag Manager and CookieHub for analytics and cookie consent management. HTTPS is enabled ensuring secure communication, though some security headers are missing which could improve the site's security posture. Privacy compliance is basic with a cookie consent mechanism present but no dedicated privacy policy or terms of service pages found. Overall, the website presents a trustworthy and professional image suitable for its business sector.
Virtuplexvirtuplex.cz
Technology
72Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Virtuplex operates the world's largest commercial virtual reality labs with locations in Dubai, Bratislava, and Prague. The company specializes in providing immersive VR solutions for industries such as real estate, urban planning, retail, manufacturing, defense, and emergency services. Their offerings include concept validation, spatial optimization, interactive 3D presentations, live remote collaboration, and training simulations. The website reflects a mature digital presence with professional design, comprehensive content, and strong SEO practices. However, the lack of WHOIS data raises questions about domain registration transparency. Technically, the site uses WordPress with modern plugins and libraries, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms but could be improved by adding explicit security headers and publishing security policies. Overall, the site is trustworthy and business credible but would benefit from enhanced transparency and security documentation.
SUPERKODERS s.r.o.superkoders.com
Technology · Czech Republic
59Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
SUPERKODERS s.r.o. is a Czech technology company specializing in the development of custom websites, e-commerce platforms, and web/mobile applications. Founded in 2009, the company has established a strong market presence with hundreds of successful projects and a portfolio of notable clients. Their services include tailored e-shop development, advanced web portals, accessibility audits, and coding of components and email templates. The company targets businesses seeking high-quality, scalable, and user-friendly digital solutions. Technically, SUPERKODERS employs a modern technology stack including Next.js, React, TypeScript, Node.js, and cloud platforms like AWS and Vercel, ensuring fast performance and mobile optimization. The website demonstrates excellent design quality, clear navigation, and comprehensive content relevant to their business domain. Security-wise, the site uses HTTPS and domain transfer protections but lacks DNSSEC and formal security policies or incident response disclosures. Privacy compliance is strong with a GDPR policy and detailed cookie consent mechanisms. Overall, the company exhibits a high level of professionalism and trustworthiness, though improvements in security documentation and DNS security are recommended.
- KKartoons Studio, s.r.o.
kartoons.cz
Manufacturing · Czech Republic
52Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Kartoons Studio, s.r.o. operates a professional website focused on sustainable design and custom manufacturing of cardboard products including packaging, furniture, lighting, and accessories. The company targets environmentally conscious businesses and consumers primarily in the Czech Republic. Their business model includes design services, custom production, workshops, and an e-commerce platform. The website is built on WordPress using the Divi theme, enhanced with SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. Security measures include HTTPS and Google reCAPTCHA v3 for form protection. However, the absence of a cookie consent mechanism and missing WHOIS data limit full compliance and trust evaluation. Overall, the site presents a professional and trustworthy digital presence with room for improvement in privacy compliance and security headers.
- Indep s.r.o.
indep.cz
Other · Czech Republic
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Indep s.r.o. is an independent production agency based in Prague, Czechia, specializing in event management and audiovisual production. The company offers a range of services including corporate events, public space events, and professional audiovisual and photography production. Their business model focuses on personalized client relationships and creative, high-quality event execution. The website is professionally designed using the Squarespace platform, with good mobile optimization and clear navigation. Technical infrastructure is modern but lacks some security headers and privacy policy documentation. Security posture is generally good with HTTPS enabled and cookie consent implemented, though improvements are recommended in security headers and privacy transparency. Overall, the website presents a trustworthy and professional image consistent with a small, specialized service provider in the event production industry.
Attenduattendu.cz
Technology
68Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Attendu is a technology company offering a SaaS platform for seamless event management, including invitations, ticket sales, event websites, and guest management. The platform targets event organizers and attendees globally, serving hundreds of thousands of guests annually. The website is professionally designed using the Framer CMS platform and incorporates modern tracking technologies such as Google Tag Manager and Leady.com. However, the absence of WHOIS registration data raises concerns about domain legitimacy. The site lacks visible privacy, cookie, and terms of service policies, as well as contact information, which impacts trust and compliance. Security headers and SSL configuration details are not evident, suggesting room for improvement in security posture. Overall, the website is functional and well-designed but requires enhancements in transparency, security, and compliance to improve trustworthiness and reduce risk.
Ekonewsekonews.cz
Media · Czech Republic
64Medium
NIS2 25 · GDPR 40
NIS2 25 · GDPR 40
Ekonews is a Czech Republic-based media platform focused on sustainability, business, and ESG topics. The website provides news, interviews, reports, and inspirational stories aimed at both businesses and households interested in sustainable practices. The platform positions itself as a niche media outlet with a professional and consistent brand presence. Technically, the site is built on WordPress using the Avada theme and incorporates modern SEO and analytics tools such as Yoast SEO Premium, Google Tag Manager, and Matomo. The site is mobile-optimized and demonstrates good performance and SEO practices. Security-wise, the site uses HTTPS with a good SSL configuration but lacks some advanced security headers and explicit security policies. No WHOIS data was found, which reduces domain transparency and trustworthiness, though the website content and social media presence support legitimacy. Privacy and terms policies are not clearly linked, but a cookie consent mechanism is present. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.
- Nakup na Dobro
nakupnadobro.cz
E-commerce · Czech Republic
61Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Nakup na Dobro is a Czech Republic-based e-commerce business specializing in sustainable and meaningful gifts. The website offers a variety of eco-friendly products, including gift packages, food items, fashion, and household goods, targeting consumers interested in socially responsible shopping. The business positions itself as a niche leader in sustainable gifts within its regional market. Technically, the website is built on the Shoptet e-commerce platform, utilizing common web technologies such as JavaScript, jQuery, and integrates marketing and analytics tools like Google Analytics, Facebook SDK, and LinkedIn Insight Tag. The site demonstrates good digital maturity with responsive design and cookie consent mechanisms, reflecting GDPR compliance. Security posture is solid with HTTPS enforced and CSRF protections in forms, though some security headers are missing and some libraries are outdated, suggesting room for improvement. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract significantly from the site's legitimacy. Overall, Nakup na Dobro presents a professional, trustworthy online retail presence with a focus on sustainability and social impact.
Aramarkaramark.cz
Hospitality · Czech Republic
75Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Aramark.cz is the website of Aramark, the largest provider of corporate catering and facility management services in the Czech Republic. The company serves a diverse clientele including industrial leaders, event organizers, healthcare institutions, armed forces, and regional businesses. The website is professionally designed, primarily in Czech language, and targets corporate clients seeking quality employee catering and facility services. Technically, the site is built using modern frameworks such as React and integrates Adobe marketing and analytics tools, indicating a mature digital infrastructure. However, the absence of visible privacy and cookie policies, as well as missing WHOIS data, suggests areas for improvement in transparency and compliance. Security posture is moderate with no evident blocking or WAF challenges, but lacks explicit security headers and vulnerability disclosures. Overall, the site presents a professional and trustworthy front for a large enterprise in the hospitality sector, but should enhance privacy compliance and security best practices to strengthen user trust and regulatory adherence.
Other
57Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
The website www.etincelle.cz is a basic Wix-hosted site with minimal accessible content and no visible business or contact information. The WHOIS data for the domain is unavailable, indicating privacy protection or potential registration issues, which limits the ability to verify the legitimacy and history of the domain. The site lacks essential compliance documents such as privacy and cookie policies, and no terms of service or security policies are present. Technically, the site uses standard Wix scripts and polyfills but does not demonstrate advanced SEO, accessibility, or security configurations. Security posture is weak due to missing security headers and lack of HTTPS verification. Overall, the site appears to be a small-scale or personal project with limited digital maturity and business credibility.
Rekáva s.r.o.rekava.cz
Other · Czech Republic
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Rekáva s.r.o. is a small Czech company focused on environmental sustainability by repurposing coffee grounds. Their business model includes providing a collection service for coffee grounds to cafes and organizations, as well as educating individuals and households on cultivating oyster mushrooms using coffee grounds. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard web technologies and some error monitoring via Sentry. While the site is well-designed and mobile-optimized, it lacks explicit privacy and cookie policies, as well as security headers, which are important for compliance and security posture. The absence of WHOIS data reduces domain trustworthiness, though the website content and structured data suggest a legitimate business. Overall, the security posture is moderate but could be improved with better policy disclosures and technical security enhancements.
- proFem
profem.cz
Non-profit · Czech Republic
52Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
proFem is a Czech Republic-based non-profit organization with over 30 years of experience dedicated to supporting victims of domestic and sexual violence. The organization provides direct empathetic assistance, educational programs, and legislative advocacy to create safer environments for victims. Their key services include a crisis accommodation center named PORT and a client helpline. The website reflects a mature and professional presence with clear calls to action for donations and volunteering, targeting victims and the general public seeking help. Technically, the website uses modern tracking and analytics tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, and is built on the Fenomio Flow CMS platform. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, and the site employs HTTPS with a cookie consent mechanism, indicating a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS but lacks visible security headers and does not provide a privacy policy or terms of service pages, which are compliance gaps. No contact email for security or incident response is found, limiting incident handling readiness. The absence of WHOIS data reduces domain trust slightly, but the website's content quality and social media presence support its legitimacy. Overall, proFem presents a trustworthy and professional online presence aligned with its mission. Strategic improvements in privacy disclosures, security headers, and contact transparency would enhance compliance and security posture, reducing risk and increasing stakeholder trust.