Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,189001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
64,301–64,350 of 99,067
- WWordPress > Erreur
luttecontrelesmarchandsdesommeil.fr
Other
53Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.luttecontrelesmarchandsdesommeil.fr is currently inaccessible and displays a WordPress error page indicating that the site is no longer available. There is no meaningful content, metadata, or business information present on the site. The WHOIS lookup returned a 'NOT FOUND' status, suggesting the domain may be inactive, unregistered, or expired. This severely limits the ability to analyze the business or technical infrastructure. The site appears to be protected or blocked by a WordPress security plugin such as Wordfence, further restricting access. Overall, the digital maturity and security posture of this web presence are very poor, with no visible security headers, HTTPS, or compliance policies.
Other
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at sanity.build is currently inaccessible, serving a 404 error page indicating that the deployment cannot be found. This prevents any meaningful analysis of the business, its services, or its digital presence. The page is hosted on the Vercel platform, as evidenced by the error message and link to Vercel documentation. Due to the lack of accessible content, no metadata, structured data, or contact information is available. The absence of privacy, cookie, or terms of service policies further limits compliance assessment. Technically, the site shows no evidence of security headers or SSL configuration details. Overall, the site is non-functional in its current state, resulting in a very low AI score and limited insights.
Sanitysanity.work
Technology
67Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Sanity is a technology company providing a comprehensive content operating system designed for developers, content creators, and business leaders. Their platform offers a fully customizable backend for AI, automations, and content applications, positioning them as an innovative leader in the headless CMS and content management space. The website reflects a mature digital presence with a strong focus on developer tools, enterprise solutions, and AI-powered content workflows. Technically, the site leverages modern frameworks such as React, Next.js, and TypeScript, hosted on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, complemented by comprehensive privacy and cookie policies indicating GDPR compliance. The absence of WHOIS data suggests privacy protection, which is typical for SaaS companies. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity.
SASU Sleedefab-manager.com
Technology · France
58Medium
NIS2 35 · GDPR 65
NIS2 35 · GDPR 65
Fab Manager is a specialized software solution designed to simplify the management of Fablabs and third places, offering both open source and cloud-hosted versions. The company behind it, SASU Sleede, positions itself as a small but professional technology provider focused on community-driven innovation and compliance with French regulations. The website is well-designed, mobile-optimized, and rich in content, targeting Fablabs, makerspaces, and developers seeking flexible management tools. Technically, the site leverages modern frameworks like Next.js and React, ensuring fast performance and good SEO. Security posture is strong with HTTPS and compliance certifications, though there is room for improvement in security headers and cookie consent mechanisms. The absence of WHOIS registration data slightly reduces trust but is mitigated by transparent business information and active community engagement. Overall, Fab Manager presents a credible, professional, and secure offering in its niche market.
Cap Enfantscapenfants.com
Education · France
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Cap Enfants operates a network of corporate and micro-crèches in France, specializing in a unique pedagogical approach that integrates music and multisensorial activities to foster early childhood development. The company targets parents, enterprises, and childcare managers, positioning itself as a socially innovative childcare provider with over 18 years of experience. The website reflects a professional and consistent brand image with comprehensive content and strong trust signals such as testimonials and media coverage. Technically, the site is built on WordPress with modern libraries like Bootstrap and jQuery, and integrates Google Analytics, Facebook Pixel, and reCAPTCHA for security and marketing purposes. Security posture is solid with HTTPS and form protections, though it lacks explicit security headers and public incident response policies. The absence of WHOIS domain registration data is a notable concern, potentially impacting trustworthiness despite the professional online presence. Overall, the site is well-optimized for SEO, mobile-friendly, and compliant with GDPR through clear privacy and cookie policies.
Home | CY - ecole de designcy-ecolededesign.fr
Education
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
The website en.cy-ecolededesign.fr represents an educational institution focused on design, hosted on the Wix platform. The site uses multiple analytics tools including Google Analytics, Microsoft Clarity, LinkedIn Insight, and Matomo, indicating a moderate level of digital maturity. The technical infrastructure is standard for Wix-hosted sites, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and Wix's built-in security hardening, but lacks explicit security headers and visible privacy or cookie policies. The absence of WHOIS data suggests domain privacy protection, which is common for small educational websites but limits transparency. Overall, the site is functional and professional but could improve in privacy compliance and contact transparency.
Roissy Pays de Franceroissypaysdefrance.fr
Government · France
59Medium
NIS2 25 · GDPR 33
NIS2 25 · GDPR 33
Roissy Pays de France is the official website of the local government community agglomeration serving 42 communes in the Roissy area of France. The site provides comprehensive information and services related to local governance, culture, sports, employment, sustainable development, and community life. It targets residents and stakeholders within the region, offering news, event agendas, interactive maps, and support for entrepreneurship and local economy initiatives. The website is built on TYPO3 CMS and uses modern web technologies including jQuery, Foundation CSS, and privacy-respecting analytics via Matomo. It demonstrates good digital maturity with mobile optimization, accessibility features, and a clear navigation structure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain reduces transparency and trust slightly, but the official nature and content quality support legitimacy. Overall, the website is a well-maintained government portal with good privacy compliance and user experience.
Université de Cergy-Pontoise / Faclabfaclab.org
Education · France
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Faclab is an educational FabLab affiliated with the Université de Cergy-Pontoise, located in Gennevilliers, France. It provides a range of services including workshops, professional training, documentation, and community maker residencies. The website targets students, makers, and professionals interested in digital fabrication and collaborative making. The business model is focused on education and community engagement within the maker ecosystem. The website is professionally designed, consistent in branding, and includes trust indicators such as university affiliation and GDPR compliance. Technically, the website is built on WordPress 6.8.1 with modern technologies including jQuery, Flowplayer, Google reCAPTCHA, and GDPR cookie consent management via the Complianz plugin. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, no explicit security headers were detected, and there is no published security policy or incident response contact information. The absence of WHOIS data limits the ability to fully assess domain registration trustworthiness, though the university affiliation and professional presentation suggest legitimacy. Overall, the website presents a low risk profile with good privacy compliance and a solid technical foundation. Strategic improvements include adding security headers, publishing a security policy, and improving domain registration transparency.
Big Districtbigdistrict.com
Technology · France
69Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Big District is a French digital agency specializing in bespoke digital solutions including websites, event platforms, business applications, and contest games since 2012. The company targets businesses seeking digital transformation and user-centric digital products. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Webflow CMS, Google Tag Manager, and CAPTCHA services to enhance user experience and security. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is generally good with HTTPS and bot protection, but lacks explicit security headers and formal privacy/cookie policies, indicating room for compliance improvement. Overall, the website presents a credible and trustworthy digital agency, but domain registration verification and enhanced privacy compliance are recommended.
Education · France
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
CY Cergy Paris Université is a prominent French higher education institution formed by the merger of Université de Cergy-Pontoise and EISTI, serving over 25,000 students and engaging in extensive research and academic programs. The university emphasizes sustainable development, academic excellence, and student experience, partnering strategically with ESSEC Business School. The website reflects a mature digital presence with comprehensive academic and research information, clear navigation, and modern analytics tools. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is unavailable, which slightly impacts domain trustworthiness but does not detract from the institution's legitimacy given its public nature and .fr domain. Overall, the website is professional, accessible, and trustworthy for its target audience.
- Oval Systems Limited T/A AwardStage
awardstage.com
Technology · United Kingdom
72Medium
NIS2 57 · GDPR 85
NIS2 57 · GDPR 85
AwardStage, operated by Oval Systems Limited, is a UK-based SaaS platform specializing in awards management software. The platform targets awards managers, entrants, and judges, providing a streamlined, user-friendly solution for managing, entering, and judging awards. The company positions itself as a niche provider with a professional and consistent brand presence. Technically, the website is built on Squarespace, leveraging modern web technologies including Google Analytics, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is well-optimized for performance, mobile responsiveness, and SEO, with a good user experience and clear navigation. Security-wise, the site enforces HTTPS with HSTS and includes cookie consent mechanisms, though it lacks some advanced security headers and a dedicated security policy page. The WHOIS data is missing or unavailable, which slightly impacts trust but the website content and company information are consistent and professional. Overall, AwardStage presents a credible and secure online presence suitable for its business model.
National Football Foundation - Official Athletics Websitefootballfoundation.org
—
74Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Bad Flash Bar Karlínbadflash-karlin.cz
Hospitality · Czech Republic
68Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Bad Flash Bar Karlín is a small hospitality business specializing in craft beers from its own brewery and partner breweries, located in Karlín, Czechia. The website provides a comprehensive digital presence with detailed information about the bar, its offerings, and reservation services. The technical infrastructure is modern, leveraging Next.js and React frameworks, hosted likely by Active24, with integrations for payment and mapping services. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although no explicit security or incident response policies are published. Privacy and cookie policies are present and GDPR compliant, with user consent mechanisms implemented. Overall, the website is professional, user-friendly, and trustworthy, targeting mature audiences interested in craft beer and bar experiences.
Bad Flash Bar Krymskábadflash-krymska.cz
Hospitality · Czech Republic
68Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Bad Flash Bar Krymská is a local hospitality business operating a bar located in Prague 10, Czechia, specializing in a diverse selection of draft and bottled beers. The business targets local customers and beer enthusiasts, offering a stylish and welcoming atmosphere with 12 draft beers on tap and a variety of domestic and international bottled beers. The website is built on a modern tech stack including Next.js and React, hosted with reputable providers and utilizing Cloudflare for CDN and security. It features good performance, mobile optimization, and clear navigation. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with GDPR. The domain is recently registered but consistent with the business's online presence. Overall, the website is professional, trustworthy, and well-maintained, supporting the business's local market position.
TukuToi Co Ltdtukutoi.com
Technology
67Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
TukuToi Co Ltd is a specialized technology service provider focusing on custom WordPress development and PHP programming, emphasizing Swiss quality standards. The company offers tailored solutions including custom themes, plugins, strategic consulting, and comprehensive maintenance services. Their market position is that of a niche provider targeting businesses and professionals seeking high-quality web development services. The website demonstrates a professional and consistent brand presence with clear service offerings and recent project showcases. Technically, the website is built on WordPress 6.7.2 with modern technologies such as Bootstrap, jQuery, and advanced plugins like Toolset and ACF. The site is mobile-optimized, fast-loading, and SEO-friendly, reflecting a mature digital infrastructure. However, some technical improvements are recommended, including the addition of security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and secure forms but lacks explicit security headers and an incident response policy. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern, reducing trustworthiness and suggesting the need for verification of domain registration status. Overall, the website is professional, trustworthy, and well-constructed, but improvements in privacy compliance and security transparency are advised to strengthen the security posture and regulatory adherence.
BrinkmanIT Webhosting & Designbrinkhost.nl
Technology · Netherlands
66Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
BrinkmanIT Webhosting & Design is a well-established Dutch company specializing in affordable and environmentally friendly web hosting and web design services, primarily targeting small and medium-sized businesses, independent professionals, and local organizations in Groningen and the Netherlands. With over 25 years of experience, the company offers a comprehensive range of services including domain registration, VPS and dedicated servers, and support for popular CMS platforms such as WordPress, Joomla, and Drupal. Their commitment to green hosting is validated by certification from the Green Web Foundation, positioning them as a responsible and sustainable provider in the market. Technically, the website is built on a modern WordPress platform with a solid technology stack including PHP, MySQL/MariaDB, and DirectAdmin for hosting management. The site demonstrates good SEO practices, mobile optimization, and accessibility features. Integration with Cloudflare enhances performance and security, while the use of Wordfence indicates active security management. Cookie consent mechanisms and a privacy policy reflect compliance with GDPR requirements. From a security perspective, the site benefits from HTTPS encryption and basic security best practices, though it lacks explicit security policies and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, showing a consistent and legitimate presence with no privacy protection masking ownership. Overall, BrinkmanIT presents a trustworthy and professional online presence with a strong focus on customer service, sustainability, and technical competence. Strategic improvements could include publishing detailed security policies and enhancing security headers to further strengthen their security posture.
Pahamont | Pojďme stavět!pahamont.cz
Other · Czech Republic
58Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Pahamont.cz is a Czech website focused on construction or building services, as suggested by its slogan 'Pojďme stavět!'. The domain is well-established, created in 2008, and hosted on reputable Hetzner servers. The site uses WordPress with the Divi theme, indicating a standard CMS-based infrastructure. Cookiebot is implemented, showing attention to cookie consent and GDPR compliance. However, the site lacks explicit privacy policy, terms of service, and contact information in the analyzed content, which are important for trust and compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response details. Overall, the website is functional and moderately professional but would benefit from enhanced privacy, security, and contact transparency.
Sitewalksitewalk.com
Technology · Liechtenstein
68Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Sitewalk is a Liechtenstein-based web development and online marketing company specializing in creating modern websites and web applications primarily for small and medium-sized enterprises, associations, organizations, and government entities. With nearly 30 years of experience, they position themselves as pioneers in the web space, offering services that include website development, online marketing consulting, SEO, and social media strategy. The website is professionally designed, content-rich, and targets German-speaking audiences in the DACH region. Technically, the site uses Concrete5 CMS, integrates privacy-friendly Matomo analytics alongside Google Tag Manager, and employs Usercentrics for consent management, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and anti-spam measures on contact forms, though explicit security headers are not detected and could be improved. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the website's professional content, client references, and clear contact information mitigate trust issues. Overall, Sitewalk demonstrates a strong business and technical foundation with room for security enhancements.
Government · Liechtenstein
70Medium
NIS2 57 · GDPR 53
NIS2 57 · GDPR 53
The website www.llv.li serves as the official digital portal for the Liechtenstein National Administration, providing extensive information and services to private individuals, businesses, and government entities. It is positioned as the authoritative source for national administrative matters in Liechtenstein, offering a broad range of public service content including legal, educational, tax, and mobility information. The site targets residents, businesses, and officials within Liechtenstein, facilitating access to government resources and digital identity services such as eID.li. Technically, the website employs modern web technologies including JavaScript and CSS, with Matomo analytics integrated for user tracking and privacy-conscious opt-out options. The content is well-structured and optimized for mobile devices, indicating a mature digital infrastructure likely managed via a CMS such as Pimcore. Performance is moderate with good accessibility and SEO practices. From a security perspective, the site uses HTTPS and includes some privacy-aware analytics. However, explicit privacy and cookie policies are not detected in the provided content, and security headers are not evident, suggesting room for improvement in security hardening. No vulnerability disclosure or incident response contacts are published, which could be enhanced to improve trust and compliance. Overall, the website is a trustworthy and professional government portal with excellent content quality and business credibility. Strategic improvements in privacy transparency, security headers, and incident response information would further strengthen its security posture and compliance standing.
Stjórnarráð Íslandsstjornarradid.is
Government · Iceland
70Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Stjórnarráðið is the official website of the Icelandic government, providing comprehensive information about ministries, government projects, news, and public services. The site serves Icelandic citizens, government officials, and media by offering authoritative content and official communication channels. The website is well-branded with consistent government logos and symbols, reinforcing its official status. Technically, the site uses a custom CMS with ASP.NET backend, leveraging common web technologies such as jQuery, Bootstrap, and lazy loading for images. It integrates accessibility tools like ReadSpeaker and analytics via Siteimprove. The site is mobile-optimized and features a clear navigation structure, ensuring a good user experience. From a security perspective, the site enforces HTTPS and includes CAPTCHA on its contact form to prevent spam. Cookie consent is managed via CookieHub, indicating compliance with privacy regulations. However, explicit security policies and incident response contacts are not found, suggesting room for improvement in transparency and security governance. Overall, the website is trustworthy, professionally maintained, and serves as a critical information hub for Iceland's government. Strategic enhancements in security policy publication and vulnerability disclosure would further strengthen its security posture.
Griffith Foodsgriffithfoods.com
Manufacturing
67Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Griffith Foods is a global leader in food product development and innovation, specializing in creating delicious, healthy, sustainable, and nutritious food solutions for top brands worldwide. Their website reflects a mature and professional business with a clear focus on culinary craftsmanship and sustainability. The company targets food industry professionals and partners seeking customized product development services. Technically, the website is built on WordPress with a modern tech stack including analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Cookiebot, ensuring good digital maturity and user experience. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though there is room for improvement in security headers and explicit security policies. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-branded, and professionally maintained.
Ligerligermarketing.com
Other
73Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Liger Marketing is a specialized B2B digital marketing agency focused on delivering integrated marketing strategies and execution for companies with complex sales cycles. The company emphasizes lead generation, brand positioning, and full-service marketing execution, positioning itself as a trusted partner with award-winning client service and a strong referral base. The website reflects a mature digital presence built on WordPress with modern marketing and analytics tools integrated, including Google Analytics, Microsoft Clarity, and OneTrust for cookie consent. Security posture is solid with HTTPS enforced and domain registration consistent with the business age and branding. However, the absence of explicit privacy and terms of service policies is a compliance gap. Overall, the site is professional, well-branded, and trustworthy, targeting B2B clients seeking growth-driven marketing solutions.
Other
72Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.paychex.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents retrieval of any meaningful content or metadata. The WHOIS lookup for the domain failed, returning no registration data, which raises concerns about the domain's registration status or privacy protection. Due to these access restrictions, no business, contact, or security policy information could be extracted or verified. The technical infrastructure appears to rely on Cloudflare for security and hosting, but the blocking event severely limits any further analysis. The security posture cannot be assessed beyond the presence of a WAF block, and no vulnerabilities or best practices can be identified from the available data. Overall, the site is currently non-functional for external users, resulting in a very low trust and credibility score.
- FFidelity Investments
fidelity.com
Finance · United States
71Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Fidelity Investments operates as a leading diversified financial services company based in the United States, offering investment management, financial advisory, and retirement planning services. The website content reflects a mature, enterprise-level business with a strong market position and a clear focus on serving U.S. individuals, while restricting international access through an explicit usage agreement. Technically, the site employs modern JavaScript libraries and analytics tools, though some areas such as mobile optimization and accessibility could be improved. Security posture is solid with HTTPS usage and security overview references, but lacks visible advanced security headers and explicit incident response disclosures. Overall, the site is professional, trustworthy, and compliant with privacy and cookie policies, though WHOIS data is unavailable, likely due to privacy protections.
Eightfold Talent Intelligenceeightfold.ai
Technology · United States
70Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Eightfold.ai is an enterprise-focused AI talent intelligence platform founded in 2018, providing advanced AI-driven solutions for talent acquisition, workforce planning, and diversity analytics. The company positions itself as a leader in AI-powered HR technology with a strong market presence and FedRAMP Moderate authorization, indicating suitability for government and enterprise clients. The website is built on a modern WordPress CMS with Elementor and hosted on AWS infrastructure, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS and domain transfer protections, but lacks some advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and security documentation.
- CChime
chime.com
Finance · United States
74Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Chime is a fintech company providing banking services through partnerships with established banks, focusing on fee-free banking, overdraft protection, and credit building. The website positions Chime as a technology-driven financial service provider targeting consumers seeking modern, accessible banking solutions. The site is well-designed, mobile-optimized, and uses advanced analytics and consent management technologies, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly available. Overall, the website presents a trustworthy and professional front with minor gaps in transparency regarding domain registration and security disclosures.
Benifexbenifex.com
Technology
74Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Benifex is a technology company specializing in employee experience software, notably their OneHub platform which focuses on employee benefits, rewards, and recognition. The company targets employers and HR professionals seeking comprehensive employee benefits solutions. The website reflects a mature business with a domain registered since 2009, indicating an established market presence. Technically, the site is built on WordPress using Elementor and integrates modern marketing and analytics tools such as Google Tag Manager, Microsoft Clarity, and Demandbase. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. Security posture is adequate with HTTPS enabled and domain locks in place, but lacks DNSSEC and explicit security headers. Privacy compliance is partially addressed with a OneTrust cookie consent mechanism, though no explicit privacy policy or terms of service were found in the provided content. Overall, the website is professional, well-branded, and trustworthy, but could improve transparency and security practices.
Radancyradancy.com
Technology
72Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Radancy is a global technology company specializing in digital talent acquisition through a cloud-based SaaS platform. The company focuses on delivering branded candidate experiences and optimizing hiring processes for enterprise clients. With over 675 platform customers, Radancy positions itself as a leader in the talent acquisition technology market. The website demonstrates a mature digital infrastructure leveraging WordPress CMS, advanced SEO plugins, and marketing automation tools such as Pardot and Google Tag Manager. Privacy compliance is well addressed with OneTrust cookie consent mechanisms and a comprehensive privacy policy. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are not publicly available. The domain WHOIS data is not publicly accessible, which slightly reduces transparency but is common for enterprise businesses. Overall, Radancy presents a professional, trustworthy, and technically sound online presence suitable for its enterprise audience.
Paradoxparadox.ai
Technology
74Medium
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
Paradox is a technology company specializing in conversational hiring software that automates recruiting tasks such as screening, interview scheduling, and onboarding. Positioned as a leader in recruitment automation, Paradox targets hiring teams and enterprises seeking to streamline their hiring processes through AI-driven conversational interfaces. The website reflects a mature SaaS business model with strong partner integrations including Workday, SAP SuccessFactors, and Indeed, enhancing its market reach and credibility. Technically, the website is built on Webflow and leverages a modern technology stack including Google Tag Manager, Facebook Pixel, Microsoft Clarity, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized, accessible, and performs moderately well, with comprehensive SEO and privacy compliance features such as GDPR-aligned cookie consent mechanisms. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements cookie consent banners. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found in the analysis. The WHOIS data is privacy protected, which is common for tech companies, and does not raise immediate trust concerns given the website's professional presentation and partner ecosystem. Overall, Paradox demonstrates a strong digital presence with good security hygiene and privacy compliance. The absence of direct contact emails or phone numbers is mitigated by a contact form. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and maintaining regular audits of third-party scripts to sustain security posture.
Technology
62Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
The International Association for Human Resources Information Management (IHRIM) is a well-established professional association focused on developing HR technology leaders through vendor-neutral education and certification programs. The website reflects a mature organization with a global reach, targeting HR practitioners, educators, technology developers, analysts, and executives. The digital infrastructure is built on WordPress with modern optimization and analytics tools, providing a fast and responsive user experience. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are not explicitly presented, indicating room for compliance improvement. WHOIS data is unavailable, likely due to privacy protection, which is common but slightly impacts trust. Overall, the site is professional, content-rich, and trustworthy, serving its niche audience effectively.
ICAgileicagile.com
Education
75Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
ICAgile is a globally recognized accreditation body specializing in agile education and certification. The organization offers a comprehensive catalog of agile certifications and micro-credentials tailored for individuals and organizations seeking to advance their agile capabilities. With over 300,000 certifications awarded and backing from more than 50 industry thought leaders, ICAgile holds a strong market position in the agile education sector. The website reflects a professional and user-friendly design, targeting both individual learners and enterprise clients with clear calls to action and resources. Technically, the website leverages modern marketing and analytics technologies including HubSpot, Google Analytics, Hotjar, and Mailchimp, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with proper use of meta tags and structured data. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers are not explicitly detected. No direct contact emails or phone numbers are published, relying instead on contact forms. The WHOIS data is unavailable or not publicly accessible, which limits transparency regarding domain registration details. Despite this, the website's professional appearance, extensive content, and strong trust indicators suggest legitimacy. Privacy policies and cookie consent are comprehensive and GDPR compliant. No security incident response or vulnerability disclosure information is found, representing an area for potential improvement. Overall, ICAgile's website demonstrates a high level of professionalism, technical maturity, and business credibility, with minor gaps in domain transparency and published security policies. The risk profile is low, and the site is suitable for its educational and certification purposes.
Personify Inc.smallworldlabs.com
Technology
62Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Personify Inc. operates The Loop, a community platform designed to connect and engage its clients, supporters, members, and volunteers. The platform facilitates sharing best practices, digital transformation, and constituent engagement, positioning Personify as a provider of enterprise community solutions. The website reflects a professional and consistent brand image aligned with Personify's corporate identity. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Google Analytics, New Relic, and marketing tools like Marketo and Drift chat, indicating a mature digital infrastructure. Performance and mobile optimization are adequate, though accessibility could be improved. Security posture is solid with HTTPS enforced and client-side password hashing, but lacks some security headers and explicit privacy consent mechanisms. No WHOIS data is available for the subdomain, which is expected as it is a subdomain of personifycorp.com, a legitimate corporate domain. Overall, the site is trustworthy and well-maintained, serving an enterprise audience effectively.
LRP Media Grouphrexecutive.com
Media
75Medium
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
HR Executive is an established online magazine focused on human resource news, analysis, and insights, targeting HR leaders and decision-makers. The website is operated by LRP Media Group, a recognized media company with a domain dating back to 1998, indicating a mature and stable presence in the HR media sector. The business model centers on providing strategic content and research to HR professionals, supported by advertising and subscription services.
- International Canoe Federation
canoeicf.com
Non-profit
62Medium
NIS2 29 · GDPR 65
NIS2 29 · GDPR 65
The International Canoe Federation (ICF) operates a comprehensive and professionally designed website serving as the global governing body for canoeing sports. The site offers extensive information on disciplines, events, athlete profiles, governance, and live media coverage, targeting athletes, federations, and fans worldwide. Technically, the site is built on Drupal 7 with a modern JavaScript stack, integrated with Google Analytics, Tag Manager, and YouTube for multimedia content. The website demonstrates good performance, mobile optimization, and accessibility standards. Security posture is strong with HTTPS and security headers, though the absence of a published security policy and incident response details suggests room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the WHOIS data is missing, which slightly impacts trust but does not detract significantly given the professional content and external validation. Overall, the site is a reliable and authoritative resource for the canoeing community.
Český rozhlasradiozurnal.cz
Media · Czech Republic
75Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Český rozhlas Radiožurnál is a prominent Czech public radio station offering live online broadcasting, news, interviews, podcasts, and video content. It serves a broad Czech-speaking audience interested in current affairs, culture, and sports. The website is professionally designed with rich multimedia content and consistent branding, reflecting its position as a leading media entity in the Czech Republic. Technically, the site is built on Drupal 7 CMS with modern JavaScript libraries and integrates Google Tag Manager and YouTube's privacy-enhanced embeds. While the site uses HTTPS and standard security practices, the use of an outdated CMS version poses potential security risks if not regularly updated. Privacy compliance is partially addressed with a cookie consent mechanism, but explicit privacy and terms of service pages are not clearly found, which could be improved. The absence of WHOIS data limits domain trust assessment, but the site's affiliation with Český rozhlas supports its legitimacy. Overall, the site demonstrates a mature digital presence with room for security and compliance enhancements.
- LLabe Aréna
labearena.cz
Government · Czech Republic
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Labe Aréna Ústeckého kraje is a regional national Olympic center for water sports in the Czech Republic, focusing on rowing and related aquatic sports. The website serves as an information portal for sports events, projects like 'Česko vesluje', and regional sports development initiatives. It targets athletes, sports clubs, schools, and the general public interested in water sports. The business model revolves around managing sports facilities, organizing competitions, and promoting rowing activities regionally. Technically, the website uses an older jQuery version and is built on the Fonio CMS platform. While the site is functional and provides relevant content, it lacks modern security headers and advanced privacy compliance features. The site is moderately optimized for mobile and accessibility but could benefit from performance and SEO improvements. From a security perspective, the absence of WHOIS data and missing privacy/cookie policies are notable gaps. The site does not show signs of advanced security measures or incident response readiness. No critical vulnerabilities were detected, but outdated libraries and lack of security headers pose potential risks. Overall, the website is moderately trustworthy and serves its informational purpose well but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and resilience against threats.
BUSHMANbushman.bg
Retail · Bulgaria
64Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
BUSHMAN is a regional e-commerce retailer specializing in outdoor clothing and accessories for men and women who enjoy outdoor activities and adventures. The company operates multiple localized websites targeting different European markets, indicating a mature regional presence. Their business model focuses on direct online sales via the Shopify platform, supported by seasonal collections and promotional campaigns. The website content is professionally presented, with consistent branding and clear navigation, targeting a general audience interested in outdoor apparel. Technically, the website leverages Shopify's robust e-commerce infrastructure, integrating modern technologies such as jQuery, Facebook Pixel, Google Tag Manager, and GDPR compliance tools like Pandectes. The site is hosted on Shopify's CDN, ensuring fast performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While explicit security headers are not fully visible, the use of reputable third-party services and absence of exposed sensitive data indicate a solid security posture. However, the site lacks published security policies or incident response contacts, which could be improved to enhance trust. Overall, the domain WHOIS data is privacy protected, which is common for European businesses under GDPR. The domain is active with Cloudflare nameservers, supporting legitimacy. No suspicious patterns or vulnerabilities were detected. The website scores well across content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional online retailer.
BUSHMANbushman.ro
Retail · Romania
66Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
BUSHMAN is a regional e-commerce retailer specializing in outdoor clothing and accessories for men and women. Established in 2011, the company operates a multi-lingual Shopify-based online store targeting customers in Romania and neighboring countries. The website demonstrates a mature digital infrastructure with integrations for marketing, analytics, and GDPR compliance, reflecting a solid digital maturity level. The business positions itself as a quality outdoor apparel brand with trust signals such as official supplier status for Prague Zoo and use of organic materials. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are lacking. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a medium-sized retail business model.
BUSHMANbushman.hu
Retail · Hungary
69Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
BUSHMAN is a regional e-commerce retailer specializing in clothing and accessories for men and women who appreciate nature and quality apparel. The company operates multiple localized domains across Central and Eastern Europe, indicating a well-established market presence since its domain registration in 2018. The website is built on the Shopify platform, leveraging a mature technical infrastructure with integrations for marketing, analytics, and customer engagement. The site demonstrates good design quality, clear navigation, and mobile optimization, supporting a positive user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policy and incident response contacts are not found. Overall, the website reflects a professional and trustworthy retail brand with compliance to GDPR and privacy standards.
BUSHMANbushman.si
Retail · Slovenia
61Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
BUSHMAN.si is an e-commerce retailer specializing in quality outdoor clothing for men, women, and children, targeting nature enthusiasts primarily in Slovenia and surrounding European markets. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Google Analytics, Facebook Pixel, and Judge.me for customer reviews. The business appears to be a medium-sized regional player founded in 2020, with a consistent brand presence and multiple regional partner sites. Technically, the site is well-structured, mobile-optimized, and uses HTTPS with strong security headers, indicating a mature digital infrastructure. However, privacy compliance could be improved by implementing explicit cookie consent mechanisms and publishing dedicated security policies. Overall, the site demonstrates a good security posture with no critical vulnerabilities detected, but could enhance transparency and user trust by adding incident response contacts and vulnerability disclosure information.
- BBushman company a. s.
bushman.eu
Retail · Czech Republic
62Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Bushman company a. s. operates a regional retail business specializing in outdoor and leisure wear for men and women who appreciate nature and quality clothing. The website bushman.eu serves as a multilingual landing page directing users to localized country-specific sites, indicating a structured regional market presence across several European countries. The business model focuses on retail sales of outdoor apparel, targeting consumers interested in comfort and nature-oriented lifestyles. The company appears to be medium-sized with consistent branding and a clear market niche in retail clothing. Technically, the website uses the Shopsys framework and standard web technologies such as HTML5, CSS, and JavaScript. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. Security posture is basic with no visible security headers or published policies, and no HTTPS enforcement details were found in the provided content. Privacy and cookie policies are absent, which impacts compliance and user trust. No contact information or forms are present on this landing page, limiting direct user engagement. Overall, the website is functional but minimalistic, with room for improvement in security, privacy, and user experience.
—
70Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
VRVvrv.cz
Energy · Czech Republic
74Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
VRV is a Czech Republic based company focused on modern water management and environmental sustainability. The website presents a professional image with a clear business focus on water-related services and protection of the environment. The company targets stakeholders in the water management sector within the Czech Republic. The website is built using Webflow, leveraging modern web technologies and fonts, and includes a cookie consent mechanism indicating some privacy awareness. However, the absence of WHOIS data and lack of explicit privacy and security policies limit the overall trust and compliance posture. Security headers and advanced security practices are not evident, and no direct contact information or social media links were found in the analyzed content. Overall, the website is functional and professional but could improve in transparency and security compliance.
Energy · Czech Republic
52Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
MORAVSKÁ VODÁRENSKÁ, a.s. is a regional water utility company operating primarily in the Moravian region of the Czech Republic. The company provides essential water supply and wastewater management services, supported by a customer portal and accredited laboratory testing for water quality. It is part of the larger Veolia group, indicating a strong market position within the energy and utilities sector. The website reflects a professional and consistent brand image with relevant content targeted at residential and commercial customers. Technically, the website is built on the Vizus CMS platform and employs modern web technologies including JavaScript, CSS, and HTML5. It integrates analytics tools such as Google Analytics and Matomo for traffic and user behavior tracking. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy page was found in the provided content. From a security perspective, the site uses HTTPS and implements cookie consent controls, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain is a concern for domain legitimacy verification, although the website content and affiliation with Veolia support its credibility. Overall, the website is functional, professional, and trustworthy for its intended audience, but improvements in transparency around privacy policies, security headers, and domain registration information are recommended to enhance trust and compliance.
Media · Germany
72Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
DAE Dachverband Europäischer Dokumentarfilm / Documentary Association of Europe e.V. is a non-profit membership association serving documentary professionals primarily in Europe but also globally. Founded in 2019, it offers a collaborative network, expert advice, curated resources, discounts, and advocacy grounded in progressive social principles. The association positions itself as a fast-growing community with over 700 members, emphasizing inclusivity and sustainability. Technically, the website is built on WordPress with modern frameworks like Bootstrap 5, supporting good mobile responsiveness and user experience. The site employs standard plugins for cookie consent, analytics, and email marketing, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses domain locking statuses, and provides cookie consent mechanisms, though it lacks DNSSEC and explicit security policies or incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, with moderate tracking via Google Analytics and Mailchimp. The absence of phone contact and physical address is noted but common for such associations. Strategic recommendations include enabling DNSSEC, publishing security and incident response policies, and implementing a security.txt file to enhance transparency and trust.
CFPE Europecfp-e.com
Media
59Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
CFPE Europe is a federation representing commercial film producers associations across 21 European countries, encompassing over 900 independent production companies. The organization serves as a collective voice and support network for the advertising production industry in Europe, providing resources, advocacy, and organizing industry events such as summits. The website reflects a professional and consistent brand image, targeting industry stakeholders and members of national associations. Technically, the site is built on WordPress and employs modern web technologies including jQuery, Slick Carousel, and Google Analytics for tracking. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. Security-wise, the website enforces HTTPS and avoids exposing sensitive data, but lacks some recommended security headers and visible privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is missing or unavailable, which is inconsistent with the active and professional nature of the website and reduces domain trustworthiness. Overall, the site is functional, professional, and serves its business purpose well, but could enhance privacy compliance and security posture.
Turnitinturnitin.tw
Education · Taiwan
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Turnitin is a globally recognized enterprise specializing in academic integrity and assessment solutions, founded in 1998. The company offers a suite of products including Feedback Studio, Originality, Gradescope, ExamSoft, Similarity, and iThenticate, targeting educators, academic institutions, and researchers. The website is professionally designed, localized for multiple regions, and provides comprehensive information about its services and customer success stories. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates Google Tag Manager and OneTrust for analytics and privacy compliance, and uses Google reCAPTCHA for bot protection. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. Overall, the site demonstrates a mature digital presence with good SEO, accessibility, and user experience.
Turnitinturnitin.pt
Education · Portugal
72Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Turnitin is a leading enterprise in the education sector specializing in academic integrity solutions, including plagiarism detection and grading tools. The company operates globally with localized websites, including the Portuguese site analyzed here. Their market position is strong, supported by a long operational history since 1998 and a reputable parent company, Turnitin, LLC. The website targets educational institutions, educators, and students, offering SaaS-based services to promote originality and integrity in academic work. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, ensuring a responsive and secure user experience. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence.
Turnitinturnitin.me
Education
71Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Turnitin.me is the Arabic localized website of Turnitin, a globally recognized provider of academic integrity solutions. The company offers services that enhance academic honesty, simplify grading and feedback, detect plagiarism, and improve learning outcomes. The website targets educational institutions and students, providing localized content to support their academic needs. The business model is primarily B2B SaaS, positioning Turnitin as a leader in the education technology sector. The website demonstrates a professional design with consistent branding and relevant content tailored for its audience. Technically, the site employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and reCAPTCHA, ensuring a responsive and interactive user experience. The presence of a cookie consent banner indicates attention to privacy compliance, although explicit privacy and terms of service pages were not detected in the provided content. Performance and mobile optimization are good, with basic accessibility features implemented. From a security perspective, the site uses HTTPS with an excellent SSL configuration and employs reCAPTCHA to mitigate automated abuse. However, security headers are not explicitly detected, and there is no visible security policy or incident response information. WHOIS data is privacy protected, which is justified for a large enterprise brand. No vulnerabilities or suspicious indicators were found, and the site is accessible without WAF blocking. Overall, Turnitin.me presents a trustworthy and professional online presence consistent with a major education technology provider. Strategic recommendations include enhancing transparency by publishing privacy and security policies, implementing security headers, and providing clear contact information for security incidents to further strengthen trust and compliance.
Turnitinturnitin.com.mx
Education · Mexico
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Turnitin is a well-established enterprise in the education technology sector, specializing in academic integrity and assessment solutions. Their website targets educators, academic institutions, and researchers primarily in Mexico, offering a suite of products such as Feedback Studio, Originality, Gradescope, and iThenticate. The company positions itself as a leader in plagiarism detection and academic integrity, with a strong brand presence and comprehensive product offerings. Technically, the website employs modern web technologies including Bootstrap, jQuery, Brightcove video player, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly with good accessibility features. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some security headers could be improved. Privacy compliance is robust with clear privacy and cookie policies and GDPR considerations. Overall, the website reflects a professional, trustworthy, and user-friendly platform aligned with enterprise standards.