Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,189001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
64,251–64,300 of 99,067
Tady je Přeškovo s.r.o.pivovarprestice.cz
Hospitality · Czech Republic
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Tady je Přeškovo s.r.o. operates a restaurant and brewery located in Přeštice, Czech Republic, with a focus on serving modern Czech cuisine and their own brewed beers. The business reopened in early 2025 in a historically significant location, targeting local residents, families, and visitors including cyclists. The website reflects a small hospitality business with clear contact details, social media presence, and a menu showcasing their offerings. Technically, the site is built on Drupal 7 with common web technologies and includes Google Analytics for visitor tracking. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. The domain registration is recent but aligns with the business launch timeline, supporting legitimacy. Overall, the site is professional and trustworthy but could improve privacy and security disclosures.
- GGerber
gerber.com
Retail
73Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.gerber.com is currently inaccessible and displays a maintenance/unavailability message served by Incapsula WAF, indicating the site is blocked or undergoing technical issues. Gerber is a well-known infant nutrition brand owned by Nestlé, but the website content is not accessible for detailed analysis. The WHOIS query for the domain returned no data, suggesting the domain may be unregistered, privacy protected, or the WHOIS server is restricting access. Due to the lack of accessible content, no privacy, cookie, or security policies are available, and no contact information or business details can be verified from the site itself. The technical infrastructure appears to use Incapsula for security, but no further technical or security details are available.
VODNÍ DÍLA - TBD a.s.vdtbd.eu
Energy · Czech Republic
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
VODNÍ DÍLA - TBD a.s. is a specialized Czech engineering company focused on dam safety, design, and flood protection with over 20 years of expertise. The company provides a range of engineering services including dam safety supervision, flood protection, expert opinions, and geodetic measurements. It holds a reputable position in the industry, being a founding member of the CREA Hydro&Energy cluster and represented in the International Committee On Large Dams (ICOLD). The website reflects a professional and consistent brand image targeting engineering professionals and water management stakeholders. Technically, the website uses Bootstrap and jQuery, offers good mobile optimization, and moderate performance. Security posture is moderate with HTTPS implied but lacks explicit security headers and privacy policy documentation. WHOIS data is privacy protected by EURid, which is common for EU domains but limits transparency. Contact information is clearly presented with company emails and phone numbers, and social media presence on LinkedIn and YouTube is established.
Online Casinaminimuzeum.com
Other · Czech Republic
63Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Online Casina operates a Czech-language informational website focused on online gambling, providing casino reviews, bonus offers, and guides tailored for Czech players. The site positions itself as a trusted resource for legal and licensed online casinos in the Czech Republic, emphasizing compliance with local regulations and offering detailed content about payment methods, game types, and legal frameworks. Technically, the site is built on WordPress with modern SEO plugins and standard web technologies, delivering a good user experience with mobile optimization and structured data for enhanced search visibility. Security posture is solid with HTTPS and security headers, though the absence of a dedicated security policy and incident response information suggests room for improvement. The lack of WHOIS data for the domain is a notable transparency gap, slightly impacting trust. Overall, the site serves its niche well but should enhance privacy and security disclosures to strengthen credibility.
- My Blog
ceskecasino.best
Other · Czech Republic
73Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
CeskeCasino.best is an affiliate and review platform focused on online casinos targeting Czech players. The website provides detailed casino reviews, bonus offers, and game listings tailored for the Czech market. It operates primarily as an informational and affiliate marketing site, helping users find licensed and legal online casinos in the Czech Republic. The site is built on WordPress and uses common web technologies such as jQuery and D3.js, with hosting provided by Hosting Concepts B.V. The domain is relatively new, registered in 2022, and the registrant is located in Ukraine, which is a common pattern for affiliate sites but may raise minor trust concerns. Security posture is moderate with HTTPS enabled but lacks advanced security headers and privacy compliance features. No privacy or cookie policies were found, and no direct contact information is provided, which impacts trust and compliance. Overall, the site is professionally designed, mobile-optimized, and provides relevant content for its target audience but should improve privacy and security practices.
mostbet-aze45.commostbet-aze-45.com
Other · Azerbaijan
62Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Mostbet-aze45.com is an online gambling and sports betting platform licensed in Curacao and operated by Bizbon N.V. The website targets Azerbaijani users and international customers, offering a wide range of betting services including sports, eSports, live casino, slots, poker, and fantasy sports. The platform supports multiple languages and currencies, providing a comprehensive gambling experience with bonuses and loyalty programs. Technically, the site is built on WordPress using the OceanWP theme and common plugins, hosted behind Cloudflare DNS. Security posture is moderate with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Business credibility is supported by licensing and detailed service descriptions, though direct contact details are limited. Overall, the site is functional and professional but would benefit from improved security and compliance measures.
Online Casino Cz - Nová Kasina 2025 | Nejlepší Online Casinoceskeonlinekasina.cz
Other · Czech Republic
75Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
The website ceskeonlinekasina.cz is a recently established online platform (created in November 2023) focused on providing comprehensive information, reviews, and ratings about online casinos targeting Czech Republic residents. It offers detailed casino listings, bonus offers, and game guides, positioning itself as a niche affiliate and informational site within the online gambling industry. The site is professionally designed with good navigation and mobile optimization, leveraging structured data and SEO best practices to enhance visibility. Technically, it uses standard web technologies and Cloudflare DNS services, with Google Analytics and Tag Manager integrated for user tracking. However, the site lacks visible privacy, cookie, and terms of service policies, and does not provide direct contact information or security policies, which impacts its privacy compliance and security posture. The domain registration is transparent and consistent with the business focus, though its recent creation may affect user trust. Overall, the site is functional and relevant but requires improvements in privacy, security, and contact transparency to enhance credibility and compliance.
Плинко - игра на деньги 1winmostbetaze.com
Other · Azerbaijan
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Mostbetaze.com is a regional Azerbaijani online gambling and sports betting platform operated under the international Mostbet brand. The business offers a wide range of betting services including sports, esports, live casino, slots, and fantasy sports. It operates under a Curacao license and targets Azerbaijani users with localized language and payment options. The website is professionally designed with good content quality and mobile optimization, supporting Android and iOS apps. Technical infrastructure includes HTTPS and Cloudflare DNS, but lacks DNSSEC and some security headers. Contact information and business registration details are provided, enhancing credibility. However, privacy and cookie policies are missing, representing compliance gaps.
Plinko Game Onlineplinkogambling.games
Other · Iceland
59Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Plinko-Gambling.game is a professionally designed online gambling website specializing in Plinko casino games. It offers a comprehensive range of services including real money gameplay, mobile app downloads, demo versions, cryptocurrency support, and detailed casino reviews. The site targets adult users interested in online gambling and positions itself as a trusted source for Plinko gaming with a focus on transparency and fairness through provably fair technology. Technically, the site is built on WordPress with modern plugins for SEO and performance optimization, hosted behind Cloudflare DNS. Security posture is good with SSL encryption and 2FA mentioned, but lacks explicit published privacy and cookie policies. The domain is newly registered with privacy protection, which is typical for gambling sites but reduces registrant transparency. Overall, the website is well-structured, mobile-optimized, and content-rich, but could improve privacy compliance and contact transparency.
Plinko Spribeplinkospribe.com
Other
56Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Plinko Spribe is an online platform dedicated to promoting and providing access to the Plinko game developed by Spribe, a provably fair crypto gambling game with a 97% RTP. The website serves primarily as an affiliate and informational resource, offering demo gameplay and directing users to crypto casinos for real money play. The site is built on WordPress with SEO optimizations and multi-language support, targeting crypto casino players seeking transparent and entertaining gambling experiences. Technically, the site uses modern web technologies and Cloudflare DNS, but lacks some advanced security headers and formal privacy or cookie policies. Security posture is moderate with HTTPS enabled and no obvious vulnerabilities, but privacy compliance is weak due to missing policies and contact information. Overall, the site is functional and professional but would benefit from enhanced compliance and security transparency.
Bellona N.V.grandwin-cz.cz
Hospitality
56Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Grandwin CZ is an international online casino operated by Bellona N.V., licensed under Curacao eGaming, targeting Czech players with a comprehensive offering of casino games and sports betting. The website is professionally designed, mobile-optimized, and provides a rich user experience with detailed information on games, bonuses, and payment methods. Technically, it is built on WordPress with modern libraries and uses Cloudflare for DNS and security. Security posture is good with HTTPS and CSP headers, though additional security headers and privacy compliance mechanisms could be improved. The domain is recently registered but consistent with the business operator. Overall, Grandwin CZ presents a trustworthy and competitive online gambling platform for its target market.
Plinko Xplinkox.com
Other
56Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Plinko X is a niche online gaming review and affiliate website dedicated to the Plinko X slot game by Smartsoft Gaming. The site offers detailed game reviews, demo access, strategies, and affiliate links to online casinos. It targets online casino players and gaming enthusiasts interested in this specific game. The website is built on WordPress with SEO optimizations and uses Cloudflare DNS services. While the site is well-structured and content-rich, it lacks key privacy and cookie policies, as well as direct contact information, which impacts compliance and trust. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. Overall, the domain registration is consistent and legitimate for the business type and age.
Romix Limitedyoyo-casino-se.com
Other · Sweden
61Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
YoYo Casino is an online gambling platform targeting Swedish players, offering a wide range of casino games including slots, live casino, and table games. The business operates under Romix Limited, a Malta-registered company licensed by the Swedish Gambling Authority (Spelinspektionen). The website is professionally designed, mobile-optimized, and provides clear information about bonuses, payment methods, and responsible gaming. Technically, the site is built on WordPress with modern web technologies and uses Cloudflare DNS services. Security posture is good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. The domain is newly registered with privacy protection, which is typical for the industry but introduces minor trust considerations. Overall, the site is credible, compliant, and well-positioned in the Swedish online casino market.
1win-casino.md1winbet.md
Other · Moldova
58Medium
NIS2 27 · GDPR 35
NIS2 27 · GDPR 35
1Win Moldova operates as an online gambling platform licensed under Curaçao jurisdiction, offering a wide range of betting and casino games to players primarily in Moldova and other multilingual regions. The platform provides sports betting, casino slots, live dealer games, and virtual sports, supported by mobile applications for Android, iOS (via mobile web), and Windows. The website is professionally designed with clear navigation and rich content, targeting adult users interested in gambling and sports betting. Technically, the site is built on WordPress, uses Cloudflare for DNS and CDN, and integrates analytics tools like Google Tag Manager and Yandex Metrika. Security measures include HTTPS and SSL encryption, but explicit security policies and incident response contacts are not published. The domain WHOIS data shows a suspicious future creation date, which raises some concerns about domain legitimacy. Overall, the site is functional, secure, and professional but lacks some privacy and compliance documentation.
Media
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Znaki FM is an online multilingual news and media platform founded in 2016, providing up-to-date news on politics, economy, sports, culture, music, and more. The website targets a general global audience interested in diverse topical news coverage. Technically, the site uses Cloudflare for DNS and hosting, and Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices, with good SEO practices and a consistent branding approach. Security-wise, the site enforces HTTPS and has domain transfer protection enabled, but lacks DNSSEC and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, and no contact or incident response information is provided. Overall, the site is accessible and safe for general audiences, but improvements in privacy and security transparency are recommended.
RocketPlay Casinorocketplay.com
Hospitality · Canada
65Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
RocketPlay Casino is an established online casino platform targeting Canadian players, offering a variety of casino games including slots, live casino, tournaments, and loyalty programs. The website positions itself as the best online casino in Canada for 2025, emphasizing bonuses and cashback offers to attract users. The business model revolves around online gambling services with a focus on user engagement through promotions and VIP clubs. Technically, the website employs modern JavaScript frameworks such as Vue.js, integrates analytics tools like Google Analytics and FullStory, and uses Cloudflare DNS services. The site is mobile optimized and demonstrates good SEO practices, although accessibility features are basic. Security-wise, the domain is well protected with registrar-level client protection statuses, uses HTTPS, and includes Google site verification. However, it lacks visible security headers and formal privacy or cookie policies, which are critical for compliance and user trust. No incident response or vulnerability disclosure information is provided, which could be a gap in security readiness. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices.
Verde Casinoverde-casino-hu.com
Hospitality · Hungary
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Verde Casino is a newly established online gambling platform launched in 2024, targeting primarily Hungarian players but also serving an international audience. It offers a comprehensive suite of services including casino games, sports betting, live casino, bingo, poker, and virtual sports. The platform supports multiple languages and provides mobile applications for Android and iOS, enhancing accessibility and user experience. The business is operated by Briantie Limited, a Cyprus-registered company, and holds a Curacao gambling license, ensuring regulatory compliance. The website is professionally designed with consistent branding and rich content, supporting a strong market position in the Hungarian online gambling sector. Technically, the website is built on WordPress with modern optimizations such as schema.org structured data and uses Cloudflare for DNS services. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS enforced and domain lock statuses set, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is partial, with a clear privacy policy present but no visible cookie consent mechanism. Overall, Verde Casino demonstrates a solid business and technical foundation with a trustworthy domain registration and legitimate licensing. The platform offers a wide range of gambling services with user-friendly features and 24/7 customer support. Strategic improvements in security headers, cookie consent, and expanded contact options would further strengthen its security and compliance profile.
CARLETTA NVpinupcasinos-az.com
Other · Azerbaijan
56Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Pin Up Casino Azerbaycan is an established online gambling platform targeting Azerbaijani players aged 18 and above. The business operates under the legal entity CARLETTA NV and holds a Curacao license (OGL/2024/580/0570), offering a wide range of casino games including slots, live casino, and sports betting. The website is built on WordPress and integrates modern tracking tools such as Google Tag Manager. It provides multiple payment options including local and cryptocurrency methods. The content is rich and professionally presented in Azerbaijani, with clear navigation and promotional offers. However, privacy compliance mechanisms such as cookie consent are lacking, and no explicit security policies or incident response contacts are publicly available.
Marathon Studiomarathonstudio.eu
Other · Czech Republic
59Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Marathon Studio is a Czech creative agency specializing in visual communication, branding, and web design services. The company emphasizes strategic, information-based design solutions aimed at long-term brand development rather than short-term effects. Their service portfolio includes brand strategy, web design, creative campaign ideation, graphic design, consulting, and project management. The website presents a professional and consistent brand image, targeting businesses seeking comprehensive visual identity solutions. Technically, the website is built on the Webflow platform, utilizing modern JavaScript libraries such as jQuery and tracking tools including Google Tag Manager, Facebook Pixel, Hotjar, and LinkedIn Insight Tag. The site is well-optimized for mobile devices, loads quickly, and includes a cookie consent mechanism compliant with GDPR requirements. However, no explicit security headers were detected, and WHOIS data for the domain is unavailable, limiting domain trust verification. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks visible security policies, incident response contacts, or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found. The absence of WHOIS data reduces confidence in domain legitimacy, though the professional website content and social media presence support the business's credibility. Overall, Marathon Studio's website demonstrates strong content quality, technical implementation, and privacy compliance, with moderate business credibility due to missing WHOIS information. Strategic recommendations include enhancing security headers, publishing security policies, and improving domain registration transparency to strengthen trust and compliance.
Non-profit · Czech Republic
68Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
The Prague Quadrennial website represents a well-established international cultural event focused on scenography, performance design, and space. It is organized by the Czech Cultural Institute under the auspices of the Ministry of Culture of the Czech Republic. The event has a strong market position as the largest in its field, attracting participants from over 80 countries. The website content is professionally presented, targeting professionals and enthusiasts in the arts and cultural sectors. Technically, the site uses modern frameworks such as Vue.js and includes media players like Plyr, indicating a moderate level of digital maturity. However, there is room for improvement in performance optimization and accessibility. Security posture is moderate; while HTTPS is presumably enabled, no security headers or explicit security policies are detected, and there is a lack of vulnerability disclosure or incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is safe and trustworthy but would benefit from enhanced security and compliance measures.
- NNárodní institut pro kulturu
czechmobility.info
Government · Czech Republic
61Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
CzechMobility.Info is a Czech government-affiliated information portal dedicated to supporting international artistic cooperation. It provides practical guidance on mobility issues such as taxation, visas, insurance, and copyright for cultural professionals and artists. The portal is bilingual (Czech and English) and serves both domestic and international users collaborating with the Czech cultural scene. The project is supported by the National Institute for Culture and partners including the Ministry of Culture and international cultural networks. Technically, the website employs modern tracking tools like Google Tag Manager and Microsoft Clarity, with a cookie consent mechanism ensuring GDPR compliance. The site is well-structured, mobile-optimized, and professionally designed, though some security headers and explicit SSL configuration details are not evident from the data provided. No WHOIS data was retrievable, likely due to privacy protection, but the website's content and partner affiliations strongly indicate legitimacy. Overall, the site presents a trustworthy and valuable resource for its target audience.
Perform Czechperformczech.cz
Media · Czech Republic
55Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Perform Czech is a cultural organization dedicated to bridging Czech performing arts with international audiences and professionals. The website serves as a platform to showcase Czech theatre projects, provide educational content, and promote events and podcasts related to performing arts. The organization targets artists, cultural professionals, and enthusiasts globally, positioning itself as a niche intermediary in the cultural media sector. The business model revolves around cultural promotion and facilitation rather than commercial sales. Technically, the website is built on WordPress CMS with a modern tech stack including Bootstrap, jQuery, Google Analytics, Algolia Search, and GDPR compliance plugins. The site demonstrates good mobile optimization, SEO practices, and moderate performance. The infrastructure supports multimedia content and interactive features such as search and newsletter subscription. From a security perspective, the site uses HTTPS with an excellent SSL configuration and implements cookie consent mechanisms aligned with GDPR. However, explicit security headers are not detected, and there is no visible incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not raise immediate concerns given the site's nature and content. Overall, the website presents a professional, trustworthy, and compliant digital presence for a cultural organization. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date third-party components to further strengthen security posture and trust.
Media · Czech Republic
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
SoundCzech is a Czech cultural institution dedicated to supporting and promoting the Czech music scene both locally and internationally. It operates under the Institut umění – Divadelní ústav, which is transitioning to the Národní institut pro kulturu (NIK). The website provides news, event calendars, artist directories, workshops, and funding challenges, targeting music professionals and enthusiasts. The organization is positioned as a key player in the Czech cultural sector with a non-profit business model focused on cultural promotion and education. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Typekit fonts, with good mobile optimization and moderate performance. The site uses HTTPS and implements a cookie consent mechanism compliant with GDPR, reflecting a mature digital presence. However, the absence of WHOIS data and lack of explicit security headers indicate areas for improvement in transparency and security hardening. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent with granular controls. No vulnerabilities or exposed sensitive data were detected. The lack of a published security policy or vulnerability disclosure mechanism suggests room for enhancing incident response readiness. Overall, the security posture is solid but could benefit from additional security headers and formal policies. The overall risk assessment is moderate with a good trust level based on content and institutional affiliation, but the missing WHOIS data and limited direct contact information slightly reduce credibility. Strategic recommendations include improving domain registration transparency, enhancing security headers, publishing security policies, and expanding contact options to strengthen trust and compliance.
Government · Czech Republic
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Národní institut pro kulturu (NIK) operates as a Czech national cultural institution focusing on arts disciplines such as theater, music, dance, literature, and visual arts. The website serves as a comprehensive portal offering research resources, databases, publications, and professional development services targeted at cultural professionals, researchers, and the general public interested in Czech culture. The institute maintains a strong online presence with multiple partner portals and active social media channels. Technically, the website is built on the Pimcore CMS platform, uses modern web technologies including Google Analytics and Tag Manager, and provides a responsive, accessible user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response information are absent. The lack of WHOIS data for the domain is a notable gap in trust verification but does not detract from the professional presentation and content quality of the site.
SUDOP GROUP a.s.sudop-group.cz
Transportation · Czech Republic
66Medium
NIS2 47 · GDPR 25
NIS2 47 · GDPR 25
SUDOP GROUP a.s. is a large, well-established company based in the Czech Republic specializing in design, consulting, and IT services primarily for the construction, transportation, energy, and water management sectors. The company positions itself as the largest group of such companies in Central Europe, offering services including Construction and BIM, Consulting & IT, and Research & Development. Their business model focuses on digitalizing construction processes and providing engineering preparation for infrastructure projects. The website content is professional and targeted at business clients in relevant industries. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Google Maps API. It is mobile-optimized with good SEO and accessibility features, though some accessibility improvements could be made. Performance is moderate with efficient use of scripts and stylesheets. The site uses HTTPS with an excellent SSL configuration but lacks explicit security headers such as CSP or HSTS. From a security perspective, the site demonstrates good practices including HTTPS enforcement and a comprehensive cookie consent mechanism with granular user controls. No exposed sensitive data or vulnerable libraries were detected. However, the absence of WHOIS data and security.txt or incident response contacts slightly reduces trust. There are no visible forms collecting user data on the homepage, reducing attack surface. Overall, the security posture is solid but could be enhanced with additional headers and published incident response policies. The domain WHOIS data is unavailable, which is a concern for trust but may be due to privacy protection or registry issues. The website content and business information appear legitimate and professional, mitigating some concerns. The overall risk is moderate with recommendations to improve transparency and security headers to enhance trust and compliance.
SmartHead Co.besmarthead.com
Technology
73Medium
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
SmartHead Co. operates an advanced ESG reporting platform accessible via explore.besmarthead.com, targeting companies needing to comply with CSRD and related sustainability regulations. The platform offers comprehensive ESG data management, CO2 emissions calculation, stakeholder engagement, and reporting aligned with European standards. The company maintains strong partnerships with major consulting firms and holds recognized certifications such as ISO 27001 and GRI, positioning itself as a trusted solution in the ESG reporting market. Technically, the website is built on the Solidpixels CMS platform, leveraging modern JavaScript libraries and APIs including Google Fonts, Leaflet maps, and Swiper sliders. The site is mobile-optimized, accessible, and performs moderately well with good SEO practices. Security is robust with HTTPS enforced, CAPTCHA on forms, and cookie consent mechanisms, though some security headers could be improved. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent, and GDPR alignment. The WHOIS data for the subdomain is unavailable, which is typical, but the overall domain and website content support legitimacy and trustworthiness. Overall, SmartHead presents a professional, secure, and user-friendly platform for ESG reporting, with strategic partnerships and certifications enhancing its market credibility.
Arc Networkarc-network.com
Media · United States
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Arc Network is a professional business networking and media company that connects business communities globally through live events, digital platforms, and content delivery. The company operates internationally with multiple brands and offices in the United States, United Kingdom, Netherlands, and Singapore. Their market position is strong within the media and events sector, targeting business professionals and organizations seeking networking opportunities. The website reflects a mature digital presence built on WordPress with modern SEO and analytics integrations. Security posture is solid with HTTPS and reCAPTCHA implemented, though explicit security headers and incident response information are absent. WHOIS data is unavailable, which slightly impacts trust but the overall professional presentation and business information support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response policies, and improving accessibility features.
IHRIMediaihrimedia.com
Technology
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
IHRIMedia is a specialized online platform serving the global HR technology community by providing a curated library of HR technology resources, including the Weekly Software Report (WSR), archives, and membership benefits. The website targets HR professionals and organizations interested in HR tech insights and updates. The business model appears to be subscription and membership-based, focusing on delivering trusted and independent content. Technically, the website is built on WordPress, utilizing popular plugins such as All in One SEO Pro and NitroPack for SEO and performance optimization. The site loads external resources like Google Tag Manager and Google Fonts, indicating a modern tech stack. Mobile optimization and SEO practices are good, though accessibility features are basic. From a security perspective, the site uses HTTPS, which is a positive indicator. However, no explicit security headers or published security policies were detected. The absence of privacy and cookie policies, as well as contact information for security incidents, suggests gaps in compliance and transparency. The WHOIS data is missing or indicates the domain is unregistered, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is functional and professional but lacks critical compliance and transparency elements. Strategic improvements in privacy policies, contact information, and domain registration verification are recommended to enhance trust and security posture.
SelectSoftware Reviewsselectsoftwarereviews.com
Technology · United States
65Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
SelectSoftware Reviews is a specialized platform dedicated to assisting HR and recruiting teams in identifying and purchasing the best HR and recruiting software through expert research and detailed reviews. The company, legally known as STRAZZULLA, LLC, operates primarily in the technology sector with a focus on B2B software solutions. Founded in 2018 and based in Cambridge, Massachusetts, the business maintains a professional online presence with consistent branding and active social media channels. Their website is designed to provide clear, relevant content tailored to HR professionals and recruiters seeking software solutions.
Culture Renovationculturerenovation.com
Other
55Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Culture Renovation is a niche business focused on organizational culture transformation through a research-backed book and associated services such as assessments, workshops, and advisory. The website serves as the official platform for the book by Kevin Oakes and offers resources and solutions to business leaders and HR professionals. The technical infrastructure is based on WordPress with Elementor and Bootstrap, hosted on A2 Hosting, and includes standard analytics tools like Google Analytics and Tag Manager. The site is well designed, mobile optimized, and provides a professional user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is legitimate, trustworthy, and serves its business purpose effectively.
Culture Ampwhereshouldwebeginatwork.com
Other
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website 'At Work - Esther Perel x Culture Amp' presents a collaborative product combining Esther Perel's relational expertise with Culture Amp's workplace research to offer a 100-question game aimed at transforming workplace culture. The site targets team leaders and managers seeking to foster meaningful relationships at work. Technically, the site is built with modern frameworks such as Next.js and React, hosted on Vercel, and uses Sanity CMS for content management. It includes marketing and analytics tools like Facebook Pixel and LinkedIn Insight Tag, indicating moderate user tracking. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers, and no explicit security or privacy policies are published. The WHOIS data shows inconsistencies, notably a future domain creation date, which raises trust concerns despite the professional and consistent branding on the site. Overall, the site is functional and professionally designed but would benefit from improved transparency in privacy, security policies, and domain registration details.
ADP Research Instituteadpresearch.com
Other · United States
66Medium
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
ADP Research Institute operates as a data-driven research entity providing exclusive insights into the labor market and workforce trends. Affiliated with ADP, a leading payroll and HR services provider, the institute leverages extensive payroll data and surveys to deliver comprehensive reports such as the National Employment Report and Today at Work. The website targets business leaders, economists, policymakers, and HR professionals, positioning itself as a trusted source for workforce analytics. Technically, the website is built on WordPress with modern SEO and analytics integrations including Google Analytics, Google Tag Manager, and Eloqua marketing automation. The site is mobile-optimized, accessible, and employs cookie consent mechanisms aligned with GDPR compliance. The use of structured data enhances search engine visibility and content discoverability. From a security perspective, the site enforces HTTPS, implements security headers, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. The absence of WHOIS data for the domain is notable but does not detract significantly from the site's legitimacy given the strong brand association and professional content. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in transparency around security policies and direct contact information would further strengthen its security posture and user trust.
Ligerligerpartners.com
Other
73Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Liger Marketing is a specialized B2B digital marketing agency focused on delivering integrated marketing strategies that drive lead generation and revenue growth for companies with complex sales cycles. The company positions itself as a top-tier agency with award-winning client service and a strong emphasis on brand positioning, SEO, content marketing, and full-service execution. The website reflects a mature digital presence with professional design, consistent branding, and clear messaging tailored to B2B buyers. Technically, the site is built on WordPress, leveraging modern analytics and marketing tools including Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel, supported by Cloudflare DNS and registrar services. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and no explicit security policies or incident response contacts are published. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a visible privacy policy or terms of service. Overall, the site demonstrates a high level of professionalism and business credibility, with room for improvement in privacy and security transparency.
- WONDER IDEA TECHNOLOGY LIMITED
flipbuilder.com
Technology
75Medium
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
FlipBuilder.com is a professional digital publishing company specializing in HTML5 flipbook software that converts PDFs and other documents into interactive digital flipbooks. Their flagship product, Flip PDF Plus Pro, offers offline creation capabilities, multimedia integration, and optional online hosting services. The company targets businesses and individuals seeking to enhance their digital publications with engaging multimedia content and marketing tools. The website demonstrates a mature digital presence with multilingual support, user testimonials, and clear product offerings. Technically, the site employs modern web technologies including JavaScript libraries, cookie consent management, and analytics tools such as Google Analytics and Visual Website Optimizer. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high based on website content and branding. Strategic recommendations include publishing security policies, improving WHOIS transparency, and enhancing HTTP security headers.
LabRulez s.r.o.gcms.cz
Technology · Czech Republic
62Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
LabRulez GCMS is a specialized Czech online portal dedicated to the field of gas chromatography and mass spectrometry, offering a comprehensive range of resources including news, scientific articles, webinars, job listings, and a marketplace for analytical instruments. The portal serves a niche audience of analytical chemists, researchers, and laboratory professionals, positioning itself as a trusted information and commerce hub within the analytical chemistry community. The business operates under LabRulez s.r.o., established in 2012, and maintains a consistent brand presence across related domains such as lcms.cz and icpms.cz. Technically, the website is built using modern web technologies including React and Next.js, hosted and secured via Cloudflare CDN. It employs advanced tracking and analytics tools such as Google Tag Manager, Fathom Analytics, and Leady for user behavior insights while maintaining GDPR-compliant cookie consent mechanisms. The site demonstrates good performance, mobile optimization, and accessibility standards, supported by structured data for enhanced SEO. From a security perspective, the site enforces HTTPS with strong SSL configuration and benefits from Cloudflare's security headers. However, explicit security policies and incident response information are not publicly disclosed, representing an area for improvement. No vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, LabRulez GCMS presents a professional, trustworthy, and well-maintained digital presence with strong business credibility and technical maturity. Strategic enhancements in security transparency and incident response readiness could further strengthen its security posture and user trust.
LabRulez s.r.o.lcms.cz
Technology · Czech Republic
64Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
LabRulez s.r.o. operates the LabRulez LCMS portal, a specialized online platform dedicated to the field of liquid chromatography and mass spectrometry. The website serves as a comprehensive resource offering news, scientific articles, webinars, job listings, and a marketplace for analytical instruments. It targets professionals and researchers in analytical chemistry, particularly those focused on chromatography and mass spectrometry technologies. The company has established itself as a niche leader in this domain with a consistent brand presence and a content-rich platform that supports the scientific community in the Czech Republic and neighboring regions. Technically, the website is built on modern web technologies including React and Next.js, leveraging Cloudflare for DNS and CDN services. It integrates analytics and marketing tools such as Google Tag Manager, Fathom Analytics, and Leady tracking. The site demonstrates good performance, mobile optimization, and accessibility standards. SEO practices are well implemented with comprehensive metadata, Open Graph tags, and structured data (JSON-LD) to enhance search engine visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. It provides cookie consent mechanisms aligned with GDPR requirements and maintains privacy and terms of service documentation. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. No vulnerabilities or suspicious activities were detected in the analysis. Overall, LabRulez LCMS presents a professional, trustworthy, and well-maintained online presence with a strong focus on its scientific niche. The site supports its users with valuable content and services while maintaining good technical and security standards. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.
LabRulez s.r.o.icpms.cz
Technology · Czech Republic
61Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
LabRulez s.r.o. operates the icpms.cz website, a specialized online portal dedicated to the field of inductively coupled plasma mass spectrometry and related analytical chemistry disciplines. The site offers a comprehensive range of content including news articles, scientific publications, webinars, product and service listings, job offers, and a marketplace for laboratory instruments. The business targets analytical chemists, researchers, and laboratory professionals primarily in the Czech Republic but with international reach through partnerships and content. The company has been established since 2012, reflecting a mature presence in its niche market. Technically, the website is built on modern web technologies including React and Next.js, hosted behind Cloudflare for performance and security. It employs various analytics and tracking tools such as Google Tag Manager, Fathom Analytics, and Leady, with a cookie consent mechanism in place. The site demonstrates good SEO, mobile optimization, and accessibility standards, providing a positive user experience. From a security perspective, the site enforces HTTPS, uses standard security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response contact information, which could be improved to enhance trust and compliance. Privacy policies and terms of service are present but could be expanded to better address GDPR requirements. Overall, icpms.cz presents as a professional, trustworthy, and content-rich portal serving a specialized scientific community. Strategic improvements in privacy compliance and security transparency would further strengthen its position and user confidence.
Other
58Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.academymuseum.org appears to represent a museum or cultural institution, likely related to an academy or art exhibitions. However, the provided HTML content is minimal, lacking visible business descriptions, contact information, or detailed content. The site uses modern web technologies such as Next.js and React, with Stripe.js integrated for payment processing, indicating some e-commerce or ticketing functionality. Despite this, the site lacks visible privacy, cookie, or terms of service policies, and no contact details or social media links are present in the analyzed content. The WHOIS data is unavailable due to a malformed request, preventing verification of domain registration details and reducing trustworthiness. Security posture is weak, with no detected security headers or SSL configuration details, and no forms or user input fields are visible to assess data protection practices. Overall, the site is accessible without WAF or security challenges but provides limited information for a comprehensive security and compliance assessment.
Energy · Germany
64Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The Deutsche Vereinigung für Wasserwirtschaft, Abwasser und Abfall e. V. (DWA) is a large, politically and economically independent association focused on sustainable water management, wastewater, and waste. It serves as a leading expert network in Europe, providing education, publications, policy advice, and events to professionals and organizations in the water and environmental sectors. The website is well-structured, professionally designed, and offers comprehensive content in German with English language support. The technical infrastructure is based on the Contao CMS platform, utilizing modern JavaScript libraries and ensuring good mobile optimization and accessibility. Security posture is strong with HTTPS, CSRF protection, and cookie consent mechanisms, although some security headers could be improved. The domain registration is consistent with the organization's profile, and no blocking or WAF challenges were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.
- EEWA European Water Association
ewa-online.eu
Other · Germany
71Medium
NIS2 25 · GDPR 28
NIS2 25 · GDPR 28
The European Water Association (EWA) is a well-established non-profit organization focused on the management and improvement of the water environment across Europe. It serves a diverse audience including national member associations, corporate members, research members, and sponsors. The association provides key services such as membership management, organizing conferences and events, publishing reports and newsletters, and advocating for water quality, safety, and sustainability policies at the European level. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as Tiny Slider for interactive content. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security best practices are partially implemented, including HTTPS enforcement and cookie consent mechanisms, though some security headers and explicit security policies are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner, indicating GDPR awareness. However, incident response and vulnerability disclosure information are missing, which could be improved to enhance trust. Overall, the website and organization present a low-risk profile with strong business credibility and a good technical foundation. Strategic recommendations include enhancing security headers, publishing a security policy, and adding incident response contacts to further strengthen the security posture and compliance.
Energy · Slovakia
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Slovenská asociácia vodárenských expertov (SAVE) operates as a professional non-profit association focused on water supply, water management, and protection in Slovakia. The website serves as an information hub for water experts, providing news, expert articles, event announcements, and membership information. The association targets professionals, scientific institutions, and governmental bodies involved in water supply and management. Technically, the website is built on WordPress using Elementor and the OceanWP theme, hosted on WebSupport with DNSSEC and HTTPS enabled, indicating a modern and secure infrastructure. However, the site lacks privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for compliance and security maturity. Overall, the site is professional, trustworthy, and well-positioned within its niche but would benefit from enhanced privacy and security practices.
Energy · Slovakia
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website acesr.sk represents the Asociácia čistiarenských expertov SR, a Slovak professional association focused on water treatment expertise. Established in 2003, the association facilitates knowledge exchange, professional education, and organizes events and publications for experts in water treatment and environmental sectors. The site targets professionals from water companies, consulting firms, academia, and government bodies. The association maintains a modest but consistent presence with over 120 individual and 20 corporate members, positioning itself as a key non-profit entity in Slovakia's water treatment industry. Technically, the website is built on WordPress 6.8.1 with common plugins such as SiteOrigin Panels and SO Widgets Bundle, leveraging Google Fonts and Font Awesome for styling. The site is hosted likely via Websupport.sk, consistent with the registrar and nameservers. Performance and mobile optimization are good, though accessibility and SEO are basic. The site uses HTTPS with no visible security warnings, but lacks advanced security headers and explicit privacy or cookie policies. From a security perspective, the site shows a moderate security posture with HTTPS enabled and no exposed sensitive data. However, it lacks privacy and cookie policies, consent mechanisms, and vulnerability disclosure information, which are critical for GDPR compliance and user trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The site does not appear to use analytics or advertising scripts, indicating minimal user tracking. Overall, the website is a professional and trustworthy platform for its niche audience but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and regulatory adherence.
Pražské vodovody a kanalizace (PVK)kohoutkova.cz
Energy · Czech Republic
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website www.kohoutkova.cz serves as an information and community engagement platform focused on promoting tap water quality, sustainability, and environmental awareness in the Czech Republic. It is closely associated with Pražské vodovody a kanalizace (PVK) and the parent company Veolia, indicating a strong market position in the water utility sector. The site offers educational content, blog posts, recipes, and news related to water and sustainability, targeting a general audience interested in environmental topics. Technically, the site is built on WordPress using the Fox theme and Elementor page builder, leveraging modern web technologies such as jQuery and Google reCAPTCHA for form security. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Security posture is strong with HTTPS enforced and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response information. No WHOIS data was available, which slightly reduces trustworthiness, but the website's content and association with Veolia and PVK support its legitimacy. Privacy and cookie policies are present and GDPR compliant, with user consent mechanisms implemented. No suspicious or malicious content was detected, and the site is safe for general audiences. Overall, the website demonstrates a mature digital presence with a focus on sustainability and community engagement, backed by a reputable utility company. Strategic improvements in transparency around security policies and incident response could further enhance trust and compliance.
Nicolet CZ s.r.o.nicoletcz.cz
Technology · Czech Republic
64Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Nicolet CZ s.r.o. is a Czech-based company specializing in molecular spectroscopy, providing a comprehensive range of scientific instruments including FT-IR, NIR, and Raman spectrometers, along with application support, training, and scientific project collaboration. The company has a well-established market presence since 2001, targeting scientific researchers, industrial clients, and educational institutions. Their business model focuses on B2B sales and service of specialized spectroscopy equipment. Technically, the website is built on WordPress with Elementor, utilizing modern web technologies and analytics tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and offers good navigation and content quality. Security-wise, the website enforces HTTPS, uses reCAPTCHA for forms, and includes some security headers, though there is room for improvement in header completeness and form security. Privacy compliance is strong with a comprehensive GDPR policy, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.
Liechtensteinische Landesverwaltungopendata.li
Government · Liechtenstein
62Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The website www.opendata.li is the official open data portal of the Liechtenstein National Administration, providing public access to various government data sets. It serves private individuals, businesses, and national administration entities, positioning itself as a trusted government data provider. The portal offers multilingual support and clear navigation, reflecting a professional and consistent brand image aligned with government standards. Technically, the site employs modern web technologies including HTTPS, Matomo analytics with opt-out capabilities, and security headers, indicating a mature digital infrastructure. However, it lacks explicit cookie consent mechanisms and a dedicated security policy page, which are areas for improvement. Security posture is strong with no detected vulnerabilities or exposed sensitive data. Overall, the site is trustworthy, well-maintained, and compliant with GDPR principles, though enhancements in privacy transparency and incident response readiness are recommended.
- LLandespolizei des Fürstentums Liechtenstein
landespolizei.li
Government · Liechtenstein
62Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The Landespolizei des Fürstentums Liechtenstein is the official national police authority of Liechtenstein, providing comprehensive law enforcement and public safety services. Their website serves as a central hub for citizens and visitors to access police news, digital reporting services, prevention campaigns, and contact information. The site targets the general public and government stakeholders, positioning itself as a trusted government entity with a clear mission to ensure safety and security within the principality. Technically, the website employs a modern technology stack including Vue.js, Axios, and the concrete5 CMS platform, ensuring a responsive and user-friendly experience. The site is mobile optimized and includes accessibility features, although some improvements could be made. Performance is moderate, with good SEO and structured navigation. From a security perspective, the site enforces HTTPS and uses obfuscated email addresses to protect contact information. However, it lacks some security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy of the domain as a government entity with consistent registration details. Overall, the website demonstrates a strong security posture and professional presentation suitable for a government institution. Strategic improvements in privacy compliance and security headers would further enhance trust and regulatory adherence.
Datenschutzstelle Fürstentum Liechtensteindatenschutzstelle.li
Government · Liechtenstein
66Medium
NIS2 2 · GDPR 70
NIS2 2 · GDPR 70
The Datenschutzstelle Fürstentum Liechtenstein is the official data protection authority for the Principality of Liechtenstein. The website serves as a comprehensive resource for citizens, businesses, and associations, providing information, guidance, complaint forms, and event details related to data privacy and protection. It positions itself as a trusted government entity with a clear focus on GDPR compliance and data protection education. Technically, the website is built on Concrete CMS and leverages modern web technologies including jQuery, FontAwesome, and the Foundation framework. It uses Matomo analytics, which aligns with privacy-conscious data collection practices. The site is mobile-optimized and demonstrates good SEO and accessibility basics, though there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security or incident response policy. No vulnerabilities or suspicious patterns were detected. The WHOIS data confirms the domain's legitimacy as a government entity, enhancing trust. Overall, the website is professional, trustworthy, and well-suited for its governmental role. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance standing.
13 Comme Une13commeune.fr
Government · France
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
13 Comme Une is the official web magazine of the Communauté d'agglomération de Cergy-Pontoise, providing local news, cultural events, and community information to residents of the Cergy-Pontoise area in France. The website serves as a digital platform to engage citizens with relevant news, event agendas, and newsletters, supporting community involvement and local culture. It is positioned as a trusted government information source with a clear focus on public service and local engagement. Technically, the website is built on WordPress CMS, leveraging common web technologies such as jQuery and Slick Slider for UI components, and integrates third-party services like Sendinblue for newsletter subscriptions and Google Tag Manager for analytics. The site demonstrates moderate performance and good mobile optimization, with a consistent and professional design that supports user experience and accessibility at a basic level. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting compliance with GDPR requirements. However, explicit security headers and incident response policies are not evident, suggesting room for improvement in security hardening and transparency. No vulnerabilities or suspicious content were detected, and the domain registration details align well with the website's governmental purpose, indicating high legitimacy. Overall, 13 Comme Une presents a secure, professional, and user-friendly platform for local government communication, with recommendations to enhance security policies and headers to further strengthen its security posture and trustworthiness.
EPF Île-de-France (EPFIF)grigny2.fr
Government · France
56Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website www.grigny2.fr represents a French government-backed urban renewal project focused on the Grigny 2 area. Managed by EPF Île-de-France (EPFIF), the project aims to improve living conditions through social housing solutions, property acquisition, and community engagement. The site targets residents, property owners, and local stakeholders, providing information and support related to the transformation of the neighborhood. The website is well-structured, professionally designed, and optimized for SEO and mobile use, reflecting a moderate to high level of digital maturity. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Bootstrap for responsive design. It uses Google Analytics for visitor tracking and implements a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected and no dedicated security or incident response pages are present. The WHOIS data is notably missing, which reduces trustworthiness from a domain registration perspective. However, the website content and contact information strongly indicate legitimacy as a government project. Overall, the site presents a low risk profile but would benefit from enhanced transparency regarding domain registration and security policies. Strategic recommendations include implementing security headers, publishing explicit security and incident response policies, and verifying domain registration details to improve trust and compliance.
- AAccueil - Projet Coeur de Ville Clichy-sous-Bois
clichycoeurdeville.fr
—
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25