Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
6,351–6,400 of 14,261
- Colorlines
colorlines.com
Media · United States
80Low
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
Colorlines is a well-established media organization focused on racial justice and social equity, operating since 1999. The website serves activists and the general public interested in social justice through news, analysis, and commentary. The business model aligns with non-profit media, targeting a niche audience with consistent branding and good content quality. Technically, the site uses WordPress CMS with Bootstrap framework, Cloudflare for DNS and CDN, and Google Tag Manager for analytics. The site is mobile optimized and performs moderately well. Security posture is solid with HTTPS and Cloudflare protection, but lacks some security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data supports the legitimacy and trustworthiness of the site.
HG Insightshginsights.com
Technology · United States
79Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
HG Insights is a technology intelligence company specializing in AI-powered revenue growth intelligence for B2B markets. The company provides data-driven insights to help businesses accurately size markets, prioritize accounts, and optimize go-to-market strategies. Their platform integrates technographics and market sizing data to empower sales and marketing teams. The website reflects a mature digital presence with professional design, structured data, and active marketing technologies. Hosting is on Amazon AWS with WordPress CMS and Elementor framework, indicating a modern and scalable infrastructure. Security posture is solid with HTTPS and domain locking, though DNSSEC is not enabled and no explicit security or privacy policies are published. The site uses multiple tracking and marketing tools, reflecting a data-driven marketing approach. Overall, HG Insights presents as a credible and authoritative player in the technology intelligence sector with a strong brand and digital footprint.
- ITU/UNESCO Broadband Commission for Sustainable Development
broadbandcommission.org
Telecommunications · Switzerland
76Low
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The ITU/UNESCO Broadband Commission for Sustainable Development is a globally recognized non-profit organization advocating for universal broadband connectivity since 2010. It operates at the intersection of government, private sector, and civil society to develop policy recommendations and advocacy targets aligned with the UN 2030 Agenda. The website reflects a mature digital presence with comprehensive content including reports, working groups, and news updates, targeting broadband stakeholders worldwide. Technically, the site is built on WordPress with Elementor and employs modern SEO and analytics tools, though some security headers and DNSSEC are missing. Security posture is solid with HTTPS and domain transfer protections, but lacks published security policies or incident response contacts. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-positioned in its sector, with room for improvement in privacy and security transparency.
Notion Labs Inc.notion.com
Technology · United States
77Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Notion Labs Inc. operates www.notion.com, a leading AI-powered workspace platform designed to enhance team productivity by integrating AI agents, enterprise search, and collaboration tools. The company targets teams and businesses seeking to streamline workflows and automate busywork through a SaaS subscription model with free and enterprise tiers. The website showcases a modern, multimedia-rich experience with strong branding and customer trust signals from major partners like OpenAI and Figma. Technically, the site leverages modern web technologies including React and Next.js, delivering fast performance and excellent mobile optimization. Security is robust with HTTPS enforcement and comprehensive security headers, although explicit incident response and vulnerability disclosure information are not publicly available. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the security posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data is likely due to privacy protection, which is justified for a company of this size and nature. The website is professional, trustworthy, and safe for general audiences, with no adult or questionable content detected.
Radweb Ltdradweb.co.uk
Technology · United Kingdom
82Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Radweb Ltd is a UK-based technology company specializing in web and mobile application development, cloud technology consulting, and eCommerce solutions. Established since at least 2014, the company offers both bespoke development services and flagship products such as InventoryBase, serving clients locally and globally. Their market position is that of a trusted small business with a consistent brand and a clear focus on technology innovation in sectors like PropTech and FinTech. Technically, the website is built on WordPress with modern JavaScript libraries and integrates cloud services, indicating a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is basic with a privacy policy and cookie banner but lacks explicit GDPR statements or terms of service. Overall, the website is professional, trustworthy, and well-structured, supporting Radweb's credibility as a technology service provider.
Property Inspectpropertyinspect.com
Real Estate
82Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Property Inspect is a mature and established SaaS company specializing in property inspection and operations software, serving real estate professionals globally. The company offers a comprehensive platform including mobile inspection apps, maintenance modules, invoicing, and client portals, positioning itself as a trusted solution with a strong user base and industry recognition. Technically, the website is built on WordPress with modern performance optimizations such as NitroPack and integrates multiple marketing and analytics tools including Google Analytics, Google Ads, LinkedIn Insight, and Intercom. Security posture is solid with HTTPS and reCAPTCHA protections, though lacks explicit security headers and published security policies. Privacy compliance is partially addressed with cookie consent but lacks visible privacy and terms of service pages. Overall, the website is professional, well-branded, and trustworthy, with a domain age and WHOIS data supporting legitimacy.
- Zendesk
zendesk.com
Technology · United States
83Low
NIS2 25 · GDPR 95
NIS2 25 · GDPR 95
Zendesk is a leading enterprise SaaS company specializing in AI-powered customer service solutions. Their platform supports multiple communication channels including text, mobile, phone, email, live chat, and social media, serving over 200,000 customers globally. The company targets businesses of all sizes, from startups to large enterprises, offering a comprehensive suite of customer support tools enhanced with AI capabilities. Technically, Zendesk employs modern web technologies such as React and Next.js, hosted on AWS Cloudfront, ensuring fast performance and excellent mobile optimization. Their security posture is strong, with HTTPS enforced, security headers present, and compliance with privacy regulations including GDPR. While WHOIS data is privacy protected, the website's professional content, certifications, and trust indicators support its legitimacy. Overall, Zendesk demonstrates a mature digital presence with robust security and privacy practices, positioning it well in the competitive customer service software market.
VeriSign, Inc.namestudio.com
Technology · United States
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
NameStudio is an AI-powered domain name generator service operated under the VeriSign brand, a well-established company in domain registry and internet infrastructure. The website offers users an intuitive interface to generate domain name suggestions using AI technology, targeting individuals and businesses seeking domain names. The technical infrastructure leverages modern JavaScript and web components, with integration of Adobe DTM for tag management and OneTrust for cookie consent, indicating a mature digital presence. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are absent, suggesting room for improvement. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in its niche.
African Network Information Centreafrinic.net
Technology · Mauritius
85Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
AFRINIC is the Regional Internet Registry (RIR) for Africa, responsible for the allocation and management of Internet number resources including IPv4, IPv6, and ASNs. Established in 1999, AFRINIC serves a critical role in supporting the African internet community, including ISPs, network operators, governments, and other stakeholders. The organization offers a range of services such as resource management, DNS support, routing security, training, and policy development, positioning itself as a key infrastructure entity in the African internet ecosystem. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap and Helix3, incorporating various third-party libraries such as jQuery and Font Awesome. It integrates analytics tools including Google Analytics and Matomo, and employs a comprehensive cookie consent mechanism via OneTrust, demonstrating a mature digital presence. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. From a security perspective, AFRINIC enforces HTTPS and demonstrates good security practices including the use of DNSSEC and RPKI programs. However, explicit security headers are not fully confirmed, and no dedicated security policy or incident response contacts are published, indicating areas for improvement. The WHOIS data is consistent with the organization's identity and history, reinforcing trustworthiness. Overall, AFRINIC's website reflects a professional, credible, and secure platform aligned with its mission. Strategic recommendations include enhancing security header implementation, publishing a formal security policy and incident response contacts, and improving accessibility features to further strengthen compliance and user experience.
Chief Marketerchiefmarketer.com
Media · United States
81Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Chief Marketer is a well-established media brand focused on delivering marketing strategies, insights, and resources to marketing professionals and businesses. The website serves as a global information portal for modern marketers, providing expert advice, industry trends, and actionable tips. It operates under Access Intelligence LLC, a recognized media company, and maintains a consistent brand presence with active social media channels and a professional website design. The business model primarily revolves around media content and advertising revenue, targeting marketing professionals globally. Technically, the website is built on WordPress CMS, leveraging modern web technologies such as Bootstrap for responsive design, Google Tag Manager for analytics, and Osano for cookie consent management. The site is hosted behind Cloudflare CDN and DNS services, ensuring good performance and availability. The website demonstrates good mobile optimization and SEO practices, with comprehensive metadata and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS with a valid SSL certificate and integrates a cookie consent mechanism compliant with GDPR. While no explicit security policies or incident response information are published, the site follows best practices by not exposing sensitive data and using reputable third-party services for analytics and consent management. No vulnerabilities or suspicious activities were detected during analysis. Overall, Chief Marketer presents a trustworthy and professional online presence with strong content quality and technical implementation. Strategic recommendations include publishing terms of service, security policies, and incident response contacts to enhance transparency and trust further.
Okta, Inc.okta.com
Technology · United States
91Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Okta, Inc. is a leading enterprise identity and access management company providing secure authentication, authorization, and automation services primarily to businesses and developers. Their platform integrates identity at the core of business security and growth, serving a global enterprise audience. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with a large technology company. Technically, the site leverages Adobe Experience Manager CMS, modern JavaScript frameworks, and integrates marketing and analytics tools such as Marketo and Google Tag Manager, indicating a sophisticated infrastructure. Security posture is strong with HTTPS enforcement, modern security headers, and compliance with industry standards including ISO 27001 and SOC 2. Privacy and cookie policies are comprehensive and GDPR compliant, with clear mechanisms for user consent. Overall, the site demonstrates high trustworthiness and professionalism, supporting Okta's market position as a leader in identity management.
TinyURL LLCtinyurl.com
Technology
83Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
TinyURL LLC operates a well-established URL shortening service since 2002, offering free and paid plans with advanced features such as branded domains and detailed analytics. The company targets a broad audience including general internet users, marketers, and businesses seeking link management solutions. The website demonstrates a mature digital presence with modern technologies like Vue.js and secure payment integrations via Stripe and Paddle. Advertising is integrated through reputable networks with moderate tracking. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is robust with clear policies and consent mechanisms. Overall, TinyURL presents a trustworthy and professional service with a solid market position.
- Qualtrics
qualtrics.com
Technology · United States
84Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Qualtrics is a leading enterprise software company specializing in experience management solutions that leverage AI to optimize customer, employee, and market research experiences. The company offers a SaaS platform widely recognized for its comprehensive suite of tools designed to improve business outcomes through actionable insights. The website reflects a mature digital presence with excellent content quality, clear navigation, and strong branding consistency. Technically, the site is built on Drupal 10 with modern JavaScript frameworks and integrates advanced personalization and consent management technologies, ensuring a fast and responsive user experience across devices. Security posture is robust, with HTTPS enforced, multiple security headers, and compliance with major standards such as ISO 27001 and HIPAA. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, Qualtrics demonstrates high business credibility and trustworthiness, supported by certifications and active community engagement.
- SurveyMonkey
surveymonkey.com
Technology · United States
88Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
SurveyMonkey, operated by Momentive, is a leading SaaS platform founded in 1999 that specializes in online survey and form creation tools. It serves a broad audience including businesses and individual users seeking to gather employee and customer feedback, conduct market research, and manage event registrations. The company holds a strong market position as the world's most popular survey platform, offering a comprehensive suite of services that enable customization, distribution, and analysis of surveys with ease. The website reflects a mature digital presence with excellent content quality, clear navigation, and professional branding.
Fundraising Regulatorfundraisingregulator.org.uk
Non-profit · United Kingdom
83Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The Fundraising Regulator is an independent UK regulatory body overseeing charity fundraising standards across England, Wales, and Northern Ireland. It aims to improve fundraising practices and restore public trust, offering services such as complaint handling, registration, and proactive regulation. The website is professionally designed, well-structured, and targets charitable organizations, fundraisers, and the general public interested in ethical fundraising. Technically, the site is built on Drupal 10, uses Google Tag Manager for analytics, and implements cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though additional security headers and a public security policy could enhance trust. Overall, the site is trustworthy, compliant with privacy regulations, and provides comprehensive information relevant to its sector.
UserWay Incuserway.org
Technology · United States
80Low
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
UserWay Inc is a US-based technology company founded in 2016 specializing in web accessibility solutions to help businesses comply with ADA and WCAG standards. Their offerings include an accessibility widget, scanner, audit services, and PDF remediation tools aimed at making websites accessible to all users. The company positions itself as a leading provider in the web accessibility compliance market, targeting businesses and organizations seeking to improve their digital inclusivity. Technically, the website is built using modern frameworks such as React and Gatsby, hosted on AWS infrastructure, and demonstrates excellent performance and mobile optimization. Security-wise, the site enforces HTTPS, implements key security headers, and follows best practices, though it lacks a published security policy or incident response contact. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.
Routerouteapp.io
Technology · United States
77Low
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
Route is a well-established technology company specializing in post-purchase solutions for e-commerce merchants and shoppers. Their platform offers shipping protection, package tracking, issue resolution, product recommendations, and carbon neutral shipping, serving over 13,000 merchants. The company is positioned as a trusted leader in the post-purchase experience market with a strong brand presence and customer testimonials. Technically, the website is built on WordPress hosted on AWS infrastructure, leveraging modern analytics and marketing tools such as HubSpot, Amplitude, mParticle, and Hotjar. The site is well-optimized for SEO, mobile-friendly, and provides a professional user experience. Security posture is strong with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved and DNSSEC is not enabled. Privacy compliance is good with clear policies and consent mechanisms. Overall, the domain registration is consistent and legitimate, supporting the business credibility. The website is safe for general audiences with no adult or questionable content detected.
- Rise-AI eCommerce Solutions Ltd.
rise-ai.com
E-commerce · Israel
78Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Rise.ai is a specialized eCommerce technology company providing automated gift card and store credit solutions primarily for Shopify merchants. Positioned as a market leader, it offers a comprehensive suite of services including cashback, refunds, memberships, loyalty programs, and employee recognition to enhance customer retention and sales. The company targets online retailers seeking to optimize customer engagement and maximize revenue through innovative store credit mechanisms. Technically, the website is built on WordPress with Elementor, integrating modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and HubSpot forms. The site demonstrates good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and consent management, though lacks a dedicated security policy or incident response page. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence suitable for its business domain.
Extendhelloextend.com
Technology
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Extend is a technology company specializing in AI-driven post-purchase solutions for merchants and customers, focusing on product protection, shipping protection, claims management, fraud detection, and returns. The company positions itself as a leading platform trusted by major brands, offering a comprehensive suite of services to enhance customer experience and reduce operational risks. The website is professionally designed, mobile-optimized, and integrates modern analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and bot protection, though explicit security headers and incident response information are lacking. The absence of WHOIS data introduces some uncertainty about domain registration legitimacy, but the overall business credibility remains high due to strong branding and market presence. Strategic recommendations include enhancing security headers, publishing security policies, and improving transparency in contact information.
Affirmaffirm.com
Finance · United States
76Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Affirm is a leading financial technology company specializing in buy now, pay later (BNPL) services that allow consumers to pay over time without late fees or compounding interest. The company partners with numerous major brands to provide flexible payment options, positioning itself as a responsible alternative to traditional credit. The website reflects a mature digital presence with a clear focus on user experience and brand consistency. Technically, Affirm employs modern web technologies including React and Gatsby, ensuring fast performance and mobile optimization. Security is robust with HTTPS enforcement, comprehensive security headers, and adherence to industry certifications such as SOC 2 Type II and PCI DSS. Privacy and cookie policies are comprehensive and GDPR compliant, with clear contact channels for privacy concerns. Overall, Affirm's website and digital infrastructure demonstrate a high level of professionalism and trustworthiness, supporting its market position as a reputable BNPL provider.
Northbeamnorthbeam.io
Technology
78Low
NIS2 47 · GDPR 80
NIS2 47 · GDPR 80
Northbeam is a marketing intelligence platform specializing in multi-touch attribution and media mix modeling, leveraging advanced machine learning to help marketers optimize ad spend and drive profitable growth. The company serves a broad audience of marketing professionals and agencies, positioning itself as an industry leader with over 800 clients. The website is professionally designed, mobile-optimized, and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, and Hotjar. Privacy and cookie compliance are well addressed with clear policies and consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy and incident response information are absent. Overall, the site reflects a mature, trustworthy business with a solid technical foundation and good privacy practices.
AvantLinkavantlink.com
Technology · United States
78Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
AvantLink operates a mature and reputable affiliate marketing platform, serving advertisers and publishers with advanced tracking, reporting, and a quality-focused network. The company has a strong market position supported by over 20 years of operation and a commitment to customer service. Technically, the website is built on WordPress with modern SEO and analytics integrations, hosted on AWS infrastructure. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC and security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, AvantLink presents a trustworthy and professional digital presence with room for minor security enhancements.
Lensabllensabl.com
E-commerce · United States
76Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Lensabl operates as an e-commerce platform specializing in online lens replacement services and eyewear products. The company targets consumers seeking affordable and convenient options for updating their glasses lenses and purchasing frames or contact lenses. Positioned as a specialized retailer, Lensabl offers services such as free shipping, made in the USA products, and free anti-reflective coating, enhancing its market appeal. The website is built on Shopify, leveraging modern web technologies and multiple marketing and analytics integrations to support its digital presence. Technically, the site demonstrates good performance, mobile optimization, and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and use of CAPTCHA for form protection, but lacks explicit security headers and published security policies. The absence of WHOIS registration data and lack of visible privacy or cookie policies reduce trust and compliance confidence. Overall, Lensabl presents a professional and functional online retail experience with room for improvement in transparency and security documentation.
Cookie Informationcookieinformation.com
Technology · Denmark
77Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Cookie Information is a Denmark-based technology company specializing in privacy and cookie consent management solutions. Positioned as a market leader for marketers, the company offers a SaaS platform that enables websites and mobile apps to comply with GDPR, CCPA, and other privacy regulations while maintaining privacy-friendly analytics. Their services include cookie banners, automated compliance scans, and integration with Google Consent Mode v2, hosted on EU servers to ensure data sovereignty. The website is professionally designed, multilingual, and optimized for performance and accessibility.
Other
76Low
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website dynamicyield.com is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. As a result, no business, privacy, or security policies are publicly available for analysis. The domain is registered since 2011 with a reputable registrar and has a long-term expiry date, indicating a legitimate business presence. Hosting appears to be on Amazon AWS. However, the lack of accessible content and absence of metadata or contact information severely limits the ability to assess the company's business model, technical infrastructure, or security posture. The site does not expose any scripts, analytics, or tracking technologies in the accessible content. Overall, the website is effectively blocked, resulting in a very low AI score and inability to provide comprehensive insights.
Rebuyrebuyengine.com
E-commerce
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Rebuy is a specialized ecommerce personalization platform focused on Shopify merchants, offering AI-driven tools to enhance customer experience, increase average order value, and reduce churn. The company positions itself as a leader in ecommerce personalization with a comprehensive suite of products including smart carts, merchandising widgets, dynamic bundles, checkout extensions, and post-purchase offers. Their platform integrates with major ecommerce and marketing tools, leveraging data-driven insights to optimize shopping journeys. Technically, the website is built on HubSpot CMS and employs modern web technologies including JavaScript, SVG graphics, and integrates with Google Analytics, Facebook Ads Pixel, and HubSpot analytics for marketing and tracking. The site is well-optimized for mobile devices, has good SEO practices, and provides a smooth user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and cookie consent mechanisms, indicating a baseline of privacy compliance. However, explicit security headers and incident response information are not clearly documented. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, though the website content and branding appear legitimate and professional. Overall, Rebuy demonstrates a mature digital presence with strong business credibility and technical implementation. Strategic improvements in security transparency and domain registration clarity would further enhance trust and compliance.
Rechargeelectricsms.com
Technology
78Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Recharge is a well-established technology company specializing in subscription management solutions for e-commerce businesses. Their SMS product automates customer notifications and provides AI-powered concierge services to enhance subscription experiences. The company demonstrates a strong market position as a leading subscription platform with a mature digital presence dating back to 2007. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, HubSpot, and various advertising pixels, ensuring robust marketing and analytics capabilities. The site is well-optimized for SEO, mobile, and accessibility, reflecting high digital maturity. Security-wise, the website enforces HTTPS, employs URL parameter sanitization, and uses cookie consent mechanisms, though it lacks published security policies and vulnerability disclosure information. The domain registration data is consistent and transparent, supporting the company's legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, making it a trustworthy platform for its target audience.
YouTubeyoutu.be
Technology · United States
83Low
NIS2 25 · GDPR 58
NIS2 25 · GDPR 58
YouTube is a globally recognized online video sharing and social media platform owned by Google LLC. It provides users with the ability to watch, upload, and share videos across a wide range of categories including entertainment, education, and music. As a market leader in video streaming, YouTube operates an advertising-based business model supplemented by premium subscription services. The platform targets a general audience worldwide and maintains a strong brand presence with consistent and professional content delivery. Technically, YouTube employs modern web technologies such as Polymer and Web Components, hosted on Google Cloud Platform, ensuring fast performance and excellent mobile optimization. The website demonstrates good SEO and accessibility practices, contributing to a high-quality user experience. Security measures are robust, including HTTPS enforcement and comprehensive security headers, alongside bot protection mechanisms. From a security and compliance perspective, YouTube maintains comprehensive privacy and cookie policies with GDPR compliance. However, explicit contact information and dedicated security policies or vulnerability disclosure pages are not publicly visible on the homepage. The domain is well-established and consistent with the business history, owned by a reputable parent company. Overall, YouTube exhibits a strong security posture and high business credibility. The overall risk assessment is low, with recommendations focusing on enhancing transparency around incident response and vulnerability disclosure to further strengthen trust and compliance. Continued maintenance of security best practices and regular audits are advised to sustain the platform's security and privacy standards.
IPinfoipinfo.io
Technology · United States
77Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
IPinfo is a leading provider of IP address data and intelligence, serving developers and enterprises worldwide. The company offers a comprehensive suite of IP-related data services including geolocation, privacy detection, ASN data, and more, positioning itself as a trusted global leader with a large developer base and notable enterprise clients. Their website reflects a mature, professional business with clear product offerings and strong branding. Technically, the site is built on modern frameworks like Next.js, optimized for performance and mobile use, and hosted on their own CDN infrastructure. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are not publicly disclosed. Privacy compliance is limited on the main site, lacking visible privacy and cookie policies or consent mechanisms. Overall, IPinfo demonstrates high business credibility and technical maturity, with room for improvement in privacy and security transparency.
Shopshop.app
E-commerce
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Shop.app is a large-scale e-commerce platform operated by Shopify Inc., offering users a seamless shopping experience from top brands with integrated rewards and package tracking. The website is well-designed, mobile-optimized, and leverages modern web technologies such as React and Shopify's CDN infrastructure. Security posture is strong with HTTPS and security headers properly configured, though explicit privacy and cookie policies are not found in the provided content. The absence of direct contact information and formal security policies suggests areas for improvement in transparency and compliance. Overall, the site demonstrates high professionalism and trustworthiness consistent with Shopify's brand.
Shopifyshopify.com
E-commerce
77Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Shopify is a leading global ecommerce platform that enables entrepreneurs and enterprises to start, grow, and manage online and in-person businesses. The platform offers a comprehensive suite of tools including online store creation, point-of-sale hardware and software, multichannel selling, marketing, analytics, and B2B commerce solutions. Shopify's market position is strong, supported by a large merchant base and a rich ecosystem of apps and developer tools. Technically, the website is built on modern web technologies such as React and is hosted on Shopify's own infrastructure, delivering fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement, strong security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, Shopify demonstrates a mature digital presence with high trustworthiness and compliance with privacy regulations like GDPR.
Dripdrip.com
Technology · United States
76Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Drip is a marketing automation platform focused on empowering B2C brands to enhance their email marketing strategies through an easy-to-use and affordable SaaS solution. The company offers a suite of services including email marketing, segmentation, embedded forms, marketing automation, onsite pop-ups, and customer insights. The website reflects a professional and consistent brand presence with strong social media integration and a clear focus on marketing technology. Technically, the site leverages HubSpot CMS, Google Analytics, and various marketing and tracking tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, bot detection, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly visible. Overall, the site is well designed, accessible, and optimized for SEO, targeting medium-sized businesses in the technology and e-commerce sectors. The absence of WHOIS data slightly reduces trust but does not detract significantly from the site's credibility.
- GGoogle
feedburner.com
Technology · United States
77Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
FeedBurner is a web feed management service operated as a subdomain under Google LLC. The website content is not publicly accessible and requires Google account authentication, indicating a secure and controlled access environment. The service targets content publishers such as bloggers and podcasters, providing RSS feed management and analytics. The technical infrastructure leverages Google's identity platform and cloud hosting, ensuring robust performance and security. However, the landing page analyzed is primarily a sign-in gateway with minimal content and no visible privacy or cookie policies, limiting comprehensive public assessment. The security posture is strong due to enforced HTTPS and Google authentication, but the lack of publicly accessible policies and contact information reduces transparency. Overall, the domain and service are legitimate and trustworthy, but the analyzed page is a gated access point rather than a full website.
Sunskisunski.com
E-commerce · United States
79Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Sunski is an established e-commerce retailer specializing in polarized sunglasses for men and women, combining modern style with outdoor performance. The company leverages advanced digital technologies such as virtual try-on and integrates multiple marketing and analytics platforms to enhance customer engagement and conversion. The website is built on Shopify, ensuring a robust and scalable infrastructure with fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and domain locking, though there is room for improvement in explicit cookie consent and published security policies. Overall, Sunski presents a professional and trustworthy online presence with a mature domain and consistent branding.
- MegaFood
megafood.com
Healthcare · United States
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
MegaFood is a well-established company specializing in the production and e-commerce retail of whole food-based vitamins and supplements. Founded in 1997, the company positions itself as a trusted brand emphasizing organic, non-GMO, and sustainable products, supported by certifications such as B Corporation and Plastic Neutral Product. The website targets health-conscious consumers seeking natural and effective nutritional supplements. The business model is primarily direct-to-consumer e-commerce with subscription options and educational content to support customer engagement. Technically, the website is built on the Shopify platform, leveraging a modern tech stack including Google Tag Manager, Google Analytics, Yottaa for performance monitoring, and various marketing and customer engagement tools such as Klaviyo, Yotpo, and Octane AI. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Accessibility features are basic but present. From a security perspective, the site enforces HTTPS, uses domain locking statuses to prevent unauthorized transfers or updates, and employs a cookie consent mechanism via OneTrust. However, DNSSEC is not enabled, and explicit security policies or incident response contacts are not found. The site uses extensive tracking and marketing scripts, indicating a high level of user data collection, with moderate privacy compliance. Overall, MegaFood's website is professional, trustworthy, and well-positioned in its market segment. Security and privacy practices could be enhanced by publishing clear policies and enabling DNSSEC. The site is safe for general audiences with no adult or explicit content detected.
Avocado Green Mattressavocadogreenmattress.com
Retail · United States
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Avocado Green Mattress is a leading e-commerce retailer specializing in certified organic mattresses, bedding, and wood furniture. The company positions itself as a sustainable and eco-friendly brand, emphasizing certifications such as MADE SAFE®, EWG Verified®, OEKO-TEX®, and GREENGUARD Gold. Their business model focuses on direct-to-consumer sales via a Shopify-powered online store, offering a 1-year trial and 25-year warranty to enhance customer trust. The target audience includes environmentally conscious consumers seeking non-toxic and organic sleep products. The brand enjoys a strong market position in the US with consistent branding and comprehensive product information.
OXOoxo.com
Retail · United States
81Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
OXO is a well-established consumer goods company specializing in kitchenware and household products, offering a broad range of thoughtfully designed items aimed at simplifying everyday tasks. The company operates a professional e-commerce website built on the Magento platform with the Hyva theme, indicating a mature and modern digital presence. The website targets general consumers and maintains consistent branding and good content quality, supporting its market position as a trusted retail brand. Technically, the website employs advanced performance optimization tools such as Yottaa and monitoring services like RapidSpike. It integrates multiple marketing and analytics platforms including Google Analytics, TikTok, and Facebook, demonstrating a sophisticated approach to user engagement and data collection. The site is mobile-optimized and implements standard SEO and accessibility features, though accessibility could be further enhanced. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers such as Content-Security-Policy and X-Frame-Options. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. However, there is no explicit security policy or incident response contact information published, which could be improved to enhance transparency and trust. Overall, the website presents a low-risk profile with no detected vulnerabilities or suspicious content. The lack of public WHOIS data is likely due to privacy protection, which is justified for a retail brand. Strategic recommendations include publishing a vulnerability disclosure policy, enhancing accessibility, and maintaining regular audits of third-party scripts to sustain security and compliance.
GambleAwarebegambleaware.org
Non-profit · United Kingdom
82Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
GambleAware is a UK-based non-profit organization dedicated to providing free, confidential advice and support for individuals concerned about gambling addiction. The website offers tools and resources aimed at helping those affected by gambling-related issues. It holds a recognized position in the gambling awareness sector within the UK, targeting individuals and families seeking help. Technically, the website employs modern web technologies including jQuery, Google Tag Manager, and Cookiebot for consent management, ensuring a compliant and user-friendly experience. The site is well-structured with good mobile optimization and SEO practices, although some accessibility features could be enhanced. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms effectively but lacks visible security headers and explicit incident response policies. The WHOIS data is unavailable due to privacy protection, which is justified given the sensitive nature of the services provided. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, making it a trustworthy resource for its audience.
The National Online Self Exclusion Scheme Limitedgamstop.co.uk
Government · United Kingdom
79Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
GAMSTOP operates as a national self-exclusion scheme in Great Britain, providing a free service that enables individuals to restrict their online gambling activities across licensed operators. The organization is identified as The National Online Self Exclusion Scheme Limited, a registered entity in the UK. The website serves as the primary portal for registration, account management, and information dissemination, targeting individuals seeking to control gambling behavior. The service is positioned as a trusted and socially responsible initiative within the gambling regulatory framework. Technically, the website employs modern web technologies including JavaScript, Google Fonts, and Google Analytics for user experience and analytics. The site is mobile-optimized, accessible, and uses HTTPS to secure communications. While no advanced frameworks or CMS were detected, the site demonstrates good technical implementation and SEO practices. Cookie consent mechanisms and privacy policies are clearly presented, supporting GDPR compliance. From a security perspective, the site enforces HTTPS and uses CSRF tokens in scripts, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS query on the subdomain 'www.gamstop.co.uk' failed due to domain naming rules, but this does not impact the legitimacy of the main domain 'gamstop.co.uk', which is well-established. Overall, GAMSTOP's website presents a secure, professional, and trustworthy platform for its critical social service. Strategic improvements include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.
GamCaregamcare.org.uk
Non-profit · United Kingdom
80Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
GamCare is a well-established UK non-profit organization dedicated to providing support and treatment services for individuals affected by gambling harms. It operates the National Gambling Helpline and offers multiple support channels including phone, live chat, email, and an online community. The organization maintains a strong market position as a leading provider in Great Britain, supported by comprehensive resources and outreach programs. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to its target audience. Technically, the website is built on WordPress with modern plugins and analytics tools such as Google Tag Manager, Microsoft Clarity, and TikTok Pixel. It uses Amazon CloudFront CDN for hosting and delivers a mobile-optimized, accessible user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers should be verified. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data query failed due to a domain naming rules error, but this is a known issue when querying 'www.gamcare.org.uk' instead of the registered 'gamcare.org.uk'. This does not impact the legitimacy of the domain or organization. Overall, the site demonstrates high trustworthiness, compliance with GDPR, and transparency in privacy and cookie policies. Strategic recommendations include verifying and enhancing security headers, establishing a public vulnerability disclosure policy, and continuing to maintain transparency and user trust through clear communication and compliance adherence.
Infograminfogram.com
Technology
88Low
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
Infogram is a mature technology company specializing in AI-powered data visualization tools, enabling users to create interactive infographics, charts, dashboards, and maps. The platform targets a broad audience including businesses, marketers, educators, media, government, and nonprofits, offering a SaaS model with team collaboration and API integration capabilities. The website demonstrates a high level of digital maturity with modern frameworks like React, integration of analytics and user engagement tools, and a responsive design optimized for mobile and accessibility. Security posture is strong with HTTPS enforcement, domain registration protections, and cookie consent mechanisms, though DNSSEC is not enabled and explicit privacy and terms policies are not clearly linked. Overall, the site is professional, trustworthy, and well-positioned in the data visualization market.
Notion Labs Inc.notion.so
Technology · United States
77Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Notion Labs Inc. operates a leading AI-powered workspace platform designed to enhance team productivity by integrating AI agents, enterprise search, and collaboration tools into a unified environment. The company targets teams and enterprises seeking to automate busywork and streamline workflows, offering a SaaS model with freemium and enterprise tiers. The website reflects a mature digital presence with rich multimedia content, multi-language support, and strong branding consistency. Technically, the site leverages modern frameworks such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS enforcement, security headers, and comprehensive privacy policies, although explicit incident response and vulnerability disclosure information are not publicly available. Overall, the platform demonstrates high professionalism and trustworthiness, supported by endorsements from major clients like OpenAI and Toyota.
- Apollo.io
apollo.io
Technology
79Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Apollo.io is a leading AI-powered outbound sales platform designed to help B2B sales professionals find leads, enrich data, and automate sales campaigns efficiently. The company targets sales leaders, account executives, sales development representatives, revenue operations, marketers, and founders, offering a comprehensive suite of tools including prospecting data, multichannel outreach, AI assistants, call assistance, meeting scheduling, and data enrichment. The platform is widely adopted, with over 500,000 businesses leveraging its capabilities. Technically, Apollo.io employs modern web technologies such as React and Next.js, supported by robust analytics tools like Amplitude and Google Tag Manager. The website demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. Security is well addressed with HTTPS enforcement and multiple security headers, although explicit security policies and incident response contacts are not prominently published. The security posture is strong, with no evident vulnerabilities or exposed sensitive data. Privacy compliance is good, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. However, the absence of direct contact information and WHOIS data due to privacy protection slightly impacts transparency. Overall, Apollo.io presents a professional, trustworthy, and technically sound web presence suitable for its business domain. Strategic recommendations include publishing dedicated security and incident response policies and enhancing transparency around company contact details to further strengthen trust and compliance.
Telecommunications · Switzerland
76Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
The International Telecommunication Union (ITU) is a United Nations specialized agency responsible for issues concerning information and communication technologies. The website serves as the official digital presence of ITU, providing comprehensive information about its mission, events, publications, and initiatives in the telecommunications and digital technology sectors. ITU holds a leading position globally as a standard-setting and development organization, targeting governments, industry stakeholders, and the global digital community. Technically, the website is built on Microsoft SharePoint, leveraging modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Hotjar for analytics and user experience insights. The site is well-structured, mobile-optimized, and accessible, with multi-language support implemented via machine translation services. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, uses secure forms with anti-forgery tokens, and includes standard security headers, although explicit Content-Security-Policy headers and a vulnerability disclosure mechanism are absent. Privacy compliance is good with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, the ITU website demonstrates a high level of professionalism, trustworthiness, and compliance appropriate for an international governmental organization. Strategic recommendations include enhancing privacy consent mechanisms, adding explicit security headers, and implementing a vulnerability disclosure policy to further strengthen security posture and user trust.
Matomoinnocraft.cloud
Technology
89Low
NIS2 55 · GDPR 95
NIS2 55 · GDPR 95
Matomo is a privacy-focused analytics platform offering cloud-hosted web analytics services that emphasize full data ownership and GDPR compliance. The company positions itself as a strong alternative to Google Analytics, targeting businesses and organizations that prioritize ethical data collection and privacy. Their cloud service provides easy setup, automatic updates, and comprehensive support, making it accessible for a wide range of users. The website reflects a mature digital presence with professional design, clear navigation, and strong SEO optimization. Technically, the site is built on WordPress with Elementor and uses modern web technologies, hosted under a reputable registrar with AWS DNS services. Security posture is solid with HTTPS enforced and domain protections in place, although DNSSEC is not enabled and some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.
Finance
85Low
NIS2 55 · GDPR 88
NIS2 55 · GDPR 88
The website represents the Association of International Certified Professional Accountants, a globally recognized professional body combining AICPA and CIMA. It offers certifications, professional development, resources, and advocacy for accounting and finance professionals worldwide. The site is well-designed, content-rich, and targets finance professionals, students, and organizations. The technical infrastructure leverages modern web technologies including React and multiple analytics and marketing tools, with a strong emphasis on user consent and privacy compliance. Security posture is generally good with HTTPS and consent management, though explicit security policies and incident response information are absent. The domain WHOIS data is missing or unregistered, which is a concern for domain legitimacy but the website content and branding strongly suggest a legitimate organization. Overall, the site is professional, trustworthy, and compliant with privacy regulations, but domain registration verification is recommended.
Enzuzoenzuzo.com
Technology
90Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Enzuzo is a technology company specializing in data privacy compliance and consent management software. Positioned as an official Google Consent Mode partner, it offers a suite of SaaS products including privacy policy generators, cookie banner tools, DSAR management, and vendor risk management solutions. The website targets businesses seeking to comply with global privacy regulations such as GDPR, CCPA, and others. The company demonstrates a strong market position with comprehensive product offerings and integrations with platforms like Shopify and Webflow. Technically, the website is built on the HubSpot CMS platform, leveraging modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and PostHog. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security best practices are observed, including HTTPS enforcement and security headers, though explicit security policies and incident response information are not publicly available. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS registrant data and direct contact information slightly reduces business credibility. Overall, the site is professional, trustworthy, and well-positioned in the privacy compliance software market.
- Hoefler&Co.
typography.com
Technology
76Low
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Hoefler&Co. is a specialized font foundry that designs and licenses fonts for print, web, and mobile environments. The company has an established market presence since 1996, targeting designers and creative professionals. Their website reflects a professional brand with a focus on typography and font services. Technically, the site uses a modern React-based frontend hosted on AWS infrastructure, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.
- Salesforce
pardot.com
Technology · United States
82Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Salesforce is a leading enterprise technology company specializing in CRM and marketing automation solutions. The analyzed webpage focuses on their B2B Marketing Automation Platform, Marketing Cloud Account Engagement, which integrates AI and CRM data to align marketing, sales, and service teams for efficient revenue growth. Salesforce holds a dominant market position with a comprehensive suite of cloud-based services and a strong global presence. The website demonstrates a mature digital infrastructure leveraging modern web technologies, advanced analytics, and consent management tools to ensure compliance and user experience excellence. Security posture is robust with HTTPS, security headers, and adherence to industry standards such as ISO 27001 and SOC 2. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. Overall, the site reflects a professional, trustworthy, and secure enterprise platform.
AdMonstersadmonsters.com
Media
83Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
AdMonsters is a well-established media platform specializing in ad operations news, conferences, and community engagement. Founded in 1999, it serves a niche audience of ad operations professionals and industry stakeholders. The website is professionally designed, with consistent branding and a clear focus on delivering relevant content and events to its target market. The presence of social media channels and partnership with Chief Marketer further solidify its market position. Technically, the website is built on WordPress and leverages modern technologies including Google Tag Manager, Google Publisher Tags, Osano for consent management, and UserWay for accessibility. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site demonstrates good SEO practices and mobile optimization, providing a positive user experience. From a security perspective, the site enforces HTTPS and uses a consent management platform to comply with privacy regulations. While some security headers are not explicitly detected, the overall posture is good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place. Overall, AdMonsters presents a trustworthy and professional online presence with a solid technical foundation and compliance posture. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and expanding contact and incident response information to further improve trust and security.