Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,188001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
65,901–65,950 of 99,067
Bundesamt für Familie und zivilgesellschaftliche Aufgabenausschuss-fuer-mutterschutz.de
Government · Germany
63Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
The Ausschuss für Mutterschutz website serves as the official online presence of a German federal government committee dedicated to maternity protection. It provides authoritative information, guidelines, and resources to support employers and pregnant or breastfeeding women in complying with maternity protection laws. The site is well-structured, professionally designed, and targets a specialized audience including government bodies, employers, and affected individuals. Technically, the site is built on TYPO3 CMS, hosted by a reputable German provider, and employs Matomo analytics configured for privacy compliance. Security posture is strong with HTTPS enforced and privacy-respecting analytics, though some security headers could be improved. Overall, the site demonstrates high trustworthiness and compliance with GDPR, with clear contact information and cookie consent mechanisms.
- Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMFSFJ)
informationsportal-kinderwunsch.de
Government · Germany
65Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
The website www.informationsportal-kinderwunsch.de is an official information portal operated by the German Federal Ministry for Education, Family, Seniors, Women and Youth (BMFSFJ). It provides comprehensive information and resources related to infertility, including causes, diagnostics, treatment options, psychosocial counseling, and financial support. The portal targets individuals and couples facing challenges with conception, offering trusted, government-backed content and services. The site is well-positioned as a reliable public sector resource in the healthcare and family support domain within Germany. Technically, the website employs a modern and accessible design with responsive layouts, SVG icons, and progressive enhancement techniques. It uses jQuery UI and Matomo for analytics, with strong privacy controls including IP pseudonymization and explicit cookie consent mechanisms. The site is hosted on servers using ns14.net name servers, with HTTPS enforced and no visible blocking or WAF interference. SEO and accessibility are well implemented, supporting a broad user base including those requiring easy language and sign language options. From a security perspective, the site demonstrates good practices such as encrypted connections, privacy-respecting analytics, and cookie consent. However, it lacks explicit security headers and published security policies or incident response contacts, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. Overall, the security posture is solid for a government informational site. The overall risk is low given the official nature, quality content, and privacy compliance. Strategic recommendations include adding security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to further strengthen security culture and transparency.
- Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend
serviceportal-zuhause-im-alter.de
Government · Germany
69Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
The website www.serviceportal-zuhause-im-alter.de is an official German government service portal managed by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend. It provides comprehensive information, programs, and resources related to age-appropriate housing, social services, neighborhood help, and funding projects for older adults. The portal targets seniors, caregivers, municipalities, and community organizations, positioning itself as a trusted and authoritative source in the social services sector. The content is well-structured, professionally designed, and accessible, supporting a broad audience with clear navigation and accessibility tools such as ReadSpeaker.
- Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend
wegweiser-demenz.de
Government · Germany
66Medium
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
Wegweiser Demenz is an official German government website operated by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend. It serves as a comprehensive informational portal focused on dementia, providing resources for affected individuals, caregivers, families, and professionals. The site offers detailed guidance on medical, legal, and everyday care topics, alongside community engagement tools such as forums and local alliance maps. The platform is well-positioned as a trusted government resource in the healthcare and social support sector in Germany. Technically, the website employs a modern and privacy-conscious infrastructure, including the use of Matomo analytics configured for GDPR compliance with IP pseudonymization and no cookies without consent. The site uses common JavaScript libraries like jQuery UI and mapping tools such as OpenLayers, and integrates FriendlyCaptcha for form security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, uses privacy-respecting analytics, and implements cookie consent mechanisms. However, it lacks publicly available formal security policies and incident response contacts, which could enhance transparency and trust. No vulnerabilities or suspicious elements were detected in the content or domain registration data. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable source for dementia-related information. Strategic improvements could include publishing explicit security and incident response policies to further strengthen user confidence and compliance posture.
- Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend
demokratie-leben.de
Government · Germany
70Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
The website www.demokratie-leben.de represents the German federal government program "Demokratie leben!", operated by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMFSFJ). It focuses on promoting democracy, diversity, and combating extremism through funding and supporting civil society projects across Germany. The site is well-branded with official ministry logos and provides comprehensive information about the program, funding opportunities, project practices, and related events. It targets civil society actors, municipalities, educational institutions, and the general public interested in democratic engagement. Technically, the website employs modern web standards with responsive design, accessibility features, and uses Matomo analytics configured for privacy compliance, including IP pseudonymization and cookie consent mechanisms. The hosting and analytics are managed by a German technical service provider, ensuring data residency within Germany. The site shows good SEO and user experience practices with clear navigation and structured content. From a security perspective, the site uses HTTPS with strong SSL configuration and respects privacy regulations such as GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, which could be improved. No critical vulnerabilities or suspicious content were detected. The domain registration is consistent with a government entity, though WHOIS details are minimal. Overall, the website demonstrates a strong commitment to privacy, accessibility, and professional presentation, making it a trustworthy source for its target audience. Strategic improvements in security transparency and incident response readiness would further enhance its security posture.
Conterganstiftungcontergan-infoportal.de
Government · Germany
56Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
The Contergan Infoportal website serves as the official online presence of the Conterganstiftung, a German government foundation dedicated to supporting individuals affected by thalidomide-related disabilities. The foundation provides statutory benefits including pensions, specific needs payments, advisory services, and research funding to improve the quality of life and societal participation of affected persons. The website is professionally designed using TYPO3 CMS and Bootstrap, offering a responsive and accessible user experience primarily in German. It features comprehensive content about the foundation's mission, services, news, and contact information, targeting affected individuals, their families, and professionals. Technically, the site is hosted on Schlund Technologies infrastructure with secure HTTPS and cookie consent mechanisms in place, reflecting good digital maturity. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site demonstrates a strong security posture with no detected vulnerabilities or suspicious elements, and complies well with GDPR requirements. The domain registration and hosting details align with the foundation's official status, supporting high legitimacy and trustworthiness.
- Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend
programm-altersbilder.de
Government · Germany
68Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
The website www.programm-altersbilder.de is an official German government platform managed by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend. It focuses on promoting new and realistic societal images of aging through various programs, exhibitions, publications, and competitions. The site targets a broad audience including seniors, families, and social stakeholders. Technically, it is built on TYPO3 CMS with jQuery and uses Matomo analytics configured to respect user privacy with anonymized IP tracking and consent-based data collection. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS and privacy-conscious analytics, though it lacks explicit security headers and incident response disclosures. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.
Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugendpflegeausbildung.net
Government · Germany
58Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
The website pflegeausbildung.net is an official German government portal managed by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend. It provides comprehensive information about nursing education, career opportunities, and training programs in Germany. The site targets prospective nursing students, career changers, and educational institutions, positioning itself as a trusted and authoritative resource in the healthcare education sector. The content is well-structured, professionally presented, and supported by official government branding and social media channels. Technically, the site is built on TYPO3 CMS and uses Matomo analytics with privacy-conscious configurations, including IP anonymization and cookie consent mechanisms compliant with GDPR. The website demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. However, the WHOIS data for the domain is missing or inaccessible, which is unusual for a government domain and slightly reduces trustworthiness from a domain registration perspective. Security-wise, the site enforces HTTPS and employs cookie consent for tracking, but lacks visible security headers in the HTML content. No vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie management are comprehensive and transparent, aligning with GDPR requirements. Overall, the site maintains a strong security posture appropriate for a government informational platform. The main risk factor is the absence of WHOIS registration data, which may be due to privacy protection or technical issues but warrants monitoring. Strategic recommendations include implementing security headers, publishing incident response policies, and adding a security.txt file to enhance transparency and trust.
- Bundesprogramm Mehrgenerationenhaus
mehrgenerationenhaeuser.de
Government · Germany
64Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website www.mehrgenerationenhaeuser.de represents the Bundesprogramm Mehrgenerationenhaus, a German federal program supporting over 530 community centers that foster intergenerational interaction and social cohesion. The site provides extensive information about the program's goals, activities, and news updates, targeting a broad audience including families, seniors, and volunteers. The site is professionally designed using TYPO3 CMS and modern web technologies, with good mobile optimization and accessibility. It employs Matomo analytics configured to disable cookies, reflecting privacy-conscious practices. However, explicit privacy and cookie policies are not found, representing a compliance gap. Security posture is solid with HTTPS enforced but lacks visible security headers and incident response contacts. WHOIS data is minimal but consistent with the hosting provider, Schlundtech, and the domain appears legitimate for a government program. Overall, the site is trustworthy, content-rich, and professionally maintained, but could improve privacy compliance and security transparency.
- Boys'Day
boys-day.de
Education · Germany
54Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Boys'Day is a well-established non-profit initiative in Germany focused on career orientation and life planning for boys starting from the 5th grade. The website serves as a comprehensive platform providing information, educational materials, and event coordination for boys, schools, and participating companies. It enjoys a strong market position as a nationwide recognized event with government ministry involvement and active social media presence. Technically, the website employs modern JavaScript technologies, uses Matomo for privacy-conscious analytics, and implements cookie consent mechanisms. The site is hosted via DomainControl (GoDaddy) and demonstrates good mobile optimization, accessibility, and SEO practices. The design is professional and user-friendly, supporting a positive user experience. From a security perspective, the site enforces HTTPS, uses standard security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response contact page, which could be improved. No vulnerabilities or suspicious domains were detected, and the WHOIS data is consistent and transparent. Overall, Boys'Day presents a low-risk profile with strong privacy compliance and business credibility. Strategic recommendations include publishing explicit security policies, enhancing incident response transparency, and maintaining regular security audits to uphold trust and compliance.
Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugendaktion-zusammen-wachsen.de
Government · Germany
63Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
The website 'Aktion zusammen wachsen' is an official German government initiative managed by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend. It focuses on supporting and coordinating mentoring and patenschaft projects aimed at children and youth with refugee backgrounds. The platform provides project databases, informational materials, event announcements, and resources for both project coordinators and interested volunteers. The site is well-positioned as a credible and authoritative source within the social integration and education sector in Germany. Technically, the website is built on TYPO3 CMS, a robust and widely used content management system, and employs Matomo analytics with strong privacy controls including IP anonymization and explicit user consent mechanisms. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Hosting appears professional with domain control via domaincontrol.com nameservers. From a security perspective, the site uses HTTPS and enforces cookie consent, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or suspicious content were detected. Privacy compliance is strong, with GDPR-aligned policies and transparent data handling. Overall, the security posture is solid but could be improved with additional headers and formal policies. The overall risk assessment is low, with the site representing a trustworthy government resource. Strategic recommendations include enhancing security headers, publishing incident response contacts, and considering a vulnerability disclosure policy to further strengthen trust and security culture.
- Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend
wege-zur-pflege.de
Government · Germany
70Medium
NIS2 17 · GDPR 55
NIS2 17 · GDPR 55
The website 'Wege zur Pflege' is an official German government portal managed by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend. It provides comprehensive information and support resources for family caregivers, employers, and care recipients, focusing on caregiving laws, financial support, and counseling services. The site is well-positioned as an authoritative source in the caregiving sector within Germany, targeting a broad audience including caregivers and employers. Technically, the site employs modern web technologies with a privacy-respecting Matomo analytics setup, hosted likely on German infrastructure, and demonstrates good mobile optimization and accessibility features. Security posture is solid with HTTPS and privacy controls, though explicit security headers and incident response policies are not publicly documented. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its users.
- Bundesamt für Familie und zivilgesellschaftliche Aufgaben
esf-regiestelle.de
Government · Germany
63Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
The website www.esf-regiestelle.de is an official German federal government portal operated by the Bundesamt für Familie und zivilgesellschaftliche Aufgaben. It serves as the ESF-Regiestelle, managing and coordinating European Social Fund programs on behalf of the Federal Ministry for Education, Family, Seniors, Women and Youth. The site provides comprehensive information about current and past ESF funding periods, programs, and related news targeted at public administration, social organizations, families, and municipalities. The business model is centered on public administration and program management within the government sector, positioning the Bundesamt as a key facilitator of EU social funding in Germany. Technically, the website is built on TYPO3 CMS, a mature open-source content management system, and uses Matomo analytics hosted locally in Germany to ensure privacy compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices. The cookie consent mechanism is implemented with GDPR compliance, including anonymized IP tracking and opt-in/out options. No WAF or blocking mechanisms were detected, and the site is fully accessible. From a security perspective, the site follows good privacy practices, including anonymizing analytics data and requiring consent before setting cookies. However, no explicit security policy, incident response contacts, or vulnerability disclosure information is published, which could be improved. The WHOIS data is limited but consistent with the official nature of the site. Overall, the site is trustworthy, professional, and compliant with relevant privacy regulations. The overall risk is low, with recommendations focusing on enhancing transparency around security policies and incident response, adding security headers, and publishing vulnerability disclosure information to further strengthen trust and security posture.
Bundesamt für Familie und zivilgesellschaftliche Aufgabenbundesfreiwilligendienst.de
Government · Germany
66Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
The Bundesfreiwilligendienst.de website is an official German government platform managed by the Bundesamt für Familie und zivilgesellschaftliche Aufgaben. It provides comprehensive information and services related to the Bundesfreiwilligendienst (Federal Volunteer Service), targeting volunteers, deployment sites, and educational centers. The site offers resources such as placement searches, educational seminars, event information, and downloadable materials, positioning itself as a key informational hub for voluntary civic engagement in Germany. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies including jQuery, Bootstrap, CKEditor, and Leaflet.js for interactive maps. It employs Matomo for privacy-conscious analytics with IP anonymization and cookie consent mechanisms, reflecting a mature digital infrastructure with good mobile optimization and accessibility features. From a security perspective, the site enforces HTTPS, uses cookie consent banners compliant with GDPR, and anonymizes user data in analytics. However, it lacks explicit published security policies, incident response contacts, and security headers, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website demonstrates a high level of trustworthiness and professionalism appropriate for a government service. It complies well with privacy regulations and provides clear contact channels, though it could improve transparency around security policies and incident handling.
Telecommunications · Czech Republic
59Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.rop.cz serves as a minimal landing or redirect page for a regional internet service provider targeting cities in the Czech Republic such as Plzeň, Rokycany, Klatovy, and Příbram. The business offers customized internet connectivity solutions including ADSL, SHDSL, mobile and wireless internet, along with related services like corporate servers, email, VPN, VoIP telephony, and webcams. The website content is basic and primarily informational with no interactive elements or contact details. Technically, the site uses simple HTML and CSS with no detected modern frameworks or CMS, and lacks mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present, indicating non-compliance with GDPR standards. WHOIS data is unavailable, suggesting privacy protection or domain non-registration, which impacts trustworthiness. Overall, the site appears legitimate but minimal and outdated, requiring significant improvements in security, privacy, and user engagement to enhance credibility and compliance.
Pivovar Nová Paka a.s.novopackepivo.cz
Other · Czech Republic
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Pivovar Nová Paka a.s. is a medium-sized independent brewery based in the Czech Republic with a long-standing tradition dating back to 1872. The company produces traditional bottom-fermented beers (lagers) with a characteristic full bread-like taste and offers brewery tours including tastings of specialty beers. The website reflects a well-established business with a focus on heritage and quality. Technically, the site is built on WordPress with WooCommerce for e-commerce capabilities, enhanced by popular plugins such as WPBakery and Slider Revolution. The site is mobile-optimized and uses HTTPS with Google Analytics and reCAPTCHA for security and tracking. However, explicit privacy and cookie policies are not clearly found, and WHOIS data is unavailable, limiting transparency. Security headers are not detected, suggesting room for improvement in security hardening. Overall, the site presents a professional and trustworthy image but could enhance compliance and security posture.
PONATURE s.r.o.kilpi.cz
Retail · Czech Republic
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Kilpi.cz is the official e-commerce website for the Kilpi brand, specializing in outdoor and sports clothing. The company operates a direct-to-consumer retail model with both online and physical store presence in the Czech Republic. The website offers a broad range of products targeting outdoor enthusiasts and general consumers interested in sportswear. The business is positioned as a medium-sized retail entity with a focus on quality, customer loyalty, and competitive pricing. Technically, the site employs a modern tech stack including JavaScript frameworks, Google Analytics, Microsoft Clarity, and other marketing tools, ensuring good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and asynchronous loading of scripts, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is addressed with visible cookie consent mechanisms and privacy policies, though GDPR compliance indicators could be more explicit. The absence of WHOIS registration data reduces trust slightly but does not negate the legitimacy indicated by the website content and business operations. Overall, Kilpi.cz presents a professional and trustworthy online retail platform with room for improvement in security transparency and WHOIS data availability.
- Skiareál Červenohorské sedlo
cervenohorskesedlo.eu
Hospitality · Czech Republic
51Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Skiareál Červenohorské sedlo is a Czech ski resort business offering winter sports facilities, hotel accommodation, parking, ski school, and related services. The website targets tourists and skiing enthusiasts primarily in the Czech Republic region. The business model integrates hospitality and recreational services with online skipass sales and gift vouchers, positioning itself as a regional ski resort with a comprehensive service offering. Technically, the website is built on October CMS using modern web technologies including Bootstrap, jQuery, and various third-party analytics and marketing scripts. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, it lacks advanced security headers and explicit security or incident response policies. Privacy compliance is basic with presence of privacy and cookie policies but no explicit consent mechanism. Overall, the website is professional and trustworthy with moderate tracking practices and clear business contact information.
- Praděd Vysílač s.r.o.
hotelpradedvysilac.cz
Hospitality · Czech Republic
50Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Hotel Praděd Vysílač is a small hospitality business operating the highest located hotel and restaurant in the Czech Republic, situated at the summit of the Jeseníky mountains. The website offers comprehensive information about accommodation, dining, an observation tower, and seasonal activities, targeting tourists and visitors interested in mountain experiences. The business maintains clear contact channels and provides gift vouchers and reservation options online. Technically, the website uses a traditional jQuery-based stack with several plugins for UI and multimedia, including Google Maps and Google Analytics for location and visitor tracking. The site is mobile optimized and presents a good user experience with clear navigation and multimedia content. However, some technical improvements could be made, such as updating libraries and enhancing accessibility. From a security perspective, the site uses HTTPS and implements a cookie consent banner compliant with GDPR requirements. No advanced security headers were detected, and no vulnerability disclosure or incident response policies are publicly available. The WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses. Overall, the security posture is moderate but could be improved with additional headers and policies. The overall risk assessment is low to moderate, with recommendations to enhance security headers, update libraries, and publish privacy and security policies to increase trust and compliance. The website is safe for general audiences and does not contain adult or questionable content.
Moravian-Silesian Tourism, s.r.o.industrialnepogranicze.pl
Other · Czech Republic
55Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Industrial Frontier is a regional tourism project operated by Moravian-Silesian Tourism, s.r.o., focusing on promoting industrial heritage and attractions in the Moravian-Silesian borderlands. The website serves as an informational platform showcasing mapped attractions and cultural heritage trails related to coal and steel industries. The target audience includes tourists interested in industrial history and regional cultural experiences. The business model centers on regional tourism promotion through digital content and partnerships with local organizations. Technically, the website is built on WordPress with a modern tech stack including Bootstrap for responsive design, jQuery, and various plugins for SEO, GDPR compliance, and user interaction. The site uses Google Tag Manager and Adform for analytics and advertising tracking. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed with proper meta tags and structured data. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration data is consistent with the website's regional focus and business claims, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital presence for a niche regional tourism project. Strategic improvements could include adding explicit security policies, incident response contacts, and enhancing security headers to strengthen the security posture further.

Government · Czech Republic
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website 'Přeshraniční semafor' serves as a regional public information portal focused on cross-border travel and situational awareness between the Czech Republic and Poland within the Euroregion Těšínské Slezsko – Śląsk Cieszyński. It provides timely data on COVID-19, air quality, health, public holidays, and border crossing conditions, aiming to facilitate travel and inform residents and visitors. The site is supported by European regional development funds, as indicated by the presence of official logos and regional cooperation branding. Technically, the site is built on WordPress using the Divi theme, with modern web technologies and responsive design, ensuring good user experience across devices. Security posture is adequate with HTTPS enabled, but lacks some security headers and formal privacy and cookie policies, which are compliance gaps. The domain WHOIS data is not publicly available due to EURid privacy policies, but the website content and branding suggest legitimacy and a trustworthy regional public service. Overall, the site is a valuable resource for its target audience but would benefit from enhanced privacy compliance and security best practices.
Transfrontiertransfrontier.eu
Education
56Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
The Transfrontier Euro-Institut Network (TEIN) is a non-profit organization established in 2010 that unites 20 partners from 12 European border regions. Its mission is to strengthen European integration through specialized training, research, and support services focused on cross-border cooperation. The network targets universities, research institutes, and stakeholders involved in European territorial cooperation. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the site is built on WordPress with modern plugins and libraries, including Yoast SEO and Google Analytics, ensuring good SEO and accessibility compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the domain registration is consistent with the organization's history and purpose, indicating a trustworthy online presence.
- Euro-Institut
euroinstitut.org
Education · Germany
58Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Euro-Institut is a well-established German-French institution founded in 1993, specializing in supporting and facilitating cross-border cooperation in the Upper Rhine region. The organization offers practical training, project support, and tailored studies to public administrations, associations, and businesses involved in cross-border activities. Their website reflects a professional and consistent brand image, targeting regional stakeholders interested in cross-border collaboration. Technically, the site is built on TYPO3 CMS with modern frameworks like Bootstrap and includes essential features such as cookie consent and multilingual support. Security posture is moderate with HTTPS implied but lacks visible advanced security headers or published security policies. Contact information is clearly presented, including phone, email, and physical address, enhancing business credibility. Overall, the website is trustworthy and well-maintained, though WHOIS data is unavailable, limiting domain registration verification.
Other · Poland
66Medium
NIS2 2 · GDPR 15
NIS2 2 · GDPR 15
The website 9silfestiwal.pl currently returns a 403 Forbidden error page, indicating that access to the content is denied. Due to this, no meaningful business or content information is available for analysis. The domain is registered with OVH SAS since 2022 and appears legitimate, but the lack of accessible content severely limits evaluation of the website's business model, services, or technical infrastructure. No metadata, forms, or contact information are present, and no security policies or compliance indicators are found. The security posture cannot be assessed beyond the fact that the site is inaccessible, which itself is a critical issue. Overall, the website is effectively non-functional from a user perspective, resulting in a very low AI score and high risk for trust and credibility.
Other
57Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
The website adakits.com is primarily a parked domain with minimal content focused on advertising through Google Adsense and Bodis domain parking services. There is no substantive business information, contact details, or user engagement features. The domain was registered in 2021 via NameCheap and shows no signs of active business operations or branding. Technically, the site uses basic HTML, CSS, and JavaScript with embedded advertising iframes but lacks modern frameworks or CMS platforms. Security posture is weak with no DNSSEC, no security headers, and no visible incident response or privacy compliance mechanisms. Overall, the site presents a low trust profile with limited content quality and poor user experience.
BurdaMedia Extra s.r.o.burdastore.cz
Media · Czech Republic
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Burdastore.cz is an e-commerce platform operated by BurdaMedia Extra s.r.o., specializing in magazine subscriptions and related products for the Czech market. The website showcases a variety of well-known magazine brands such as Elle, Marianne, and Apetit, positioning itself as a niche leader in media subscription sales. The business model focuses on direct-to-consumer sales of print and digital magazine subscriptions, supplemented by gift vouchers and collectible items. The site targets consumers interested in lifestyle, home, and entertainment magazines within the Czech Republic.
Template Sherpabootstraptemple.com
Technology
65Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Template Sherpa is a small technology-focused business offering premium website templates, themes, and customizable code snippets to help businesses establish a strong online presence quickly. The website is built using the Framer platform and integrates Google Analytics for visitor tracking. The site demonstrates good design quality and user experience with clear navigation and mobile optimization. However, the security posture is moderate due to the absence of security headers and lack of DNSSEC. Privacy compliance is poor as no privacy or cookie policies are present, and no contact or incident response information is provided. The WHOIS data raises concerns due to an anomalous future creation date, which impacts the domain's legitimacy assessment. Overall, the website is functional and professional but requires improvements in security, privacy, and transparency to enhance trust and compliance.
VELKÁ DOBRODRUŽSTVÍvelkadobrodruzstvi.cz
Other · Czech Republic
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Velká dobrodružství is a small Czech company specializing in family-oriented outdoor adventure experiences, including themed fairy tale forests and puzzle-based trips. The website is built on Drupal 11 and incorporates modern web technologies such as Google Analytics and CookiesJSR for cookie consent management. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content for its target audience of families and tourists. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and documented incident response or security policies. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, though the website content and social media presence support its authenticity. Overall, the site is functional and trustworthy but could improve transparency and security documentation.
- NNárodní galerie Praha
ngprague.cz
Government · Czech Republic
61Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Národní galerie Praha is the official national art gallery of Prague, serving as a cultural institution that offers art exhibitions, cultural events, and educational programs. The website reflects a professional and consistent branding aligned with its role as a government-related entity in the Czech Republic. The target audience is general public interested in art and culture. Technically, the website uses standard web technologies including HTML5, CSS3, and external libraries like Animate.css, with moderate performance and good mobile optimization. However, there is no evidence of a CMS or advanced frameworks from the provided data. Security posture is moderate but lacks visible security headers and privacy compliance mechanisms such as cookie consent or privacy policies. The absence of WHOIS data reduces domain trustworthiness, though the website content itself appears legitimate and professional. Overall, the site is functional and trustworthy for general users but would benefit from enhanced security and privacy features.
Simpleamojesimplea.cz
Finance · Czech Republic
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Moje Simplea is an online client portal operated by Simplea, a Czech Republic-based insurance service provider. The portal offers clients access to their insurance contract overviews, personal data management, and claims reporting functionalities. The website is professionally designed with a clear focus on user self-service and client engagement. The technical infrastructure leverages modern frontend technologies such as jQuery, Bootstrap, and Font Awesome, ensuring a responsive and user-friendly experience. However, the absence of WHOIS data and lack of visible security headers indicate areas for improvement in transparency and security. The portal uses HTTPS and secure login forms, but additional security measures and privacy compliance documentation are recommended to enhance trust and regulatory adherence.
- BBot Verification
updateland.com
Other
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.updateland.com currently presents only a bot verification page utilizing Google's invisible reCAPTCHA, indicating that direct access to content is blocked by a security mechanism likely a Web Application Firewall (WAF). No substantive business content, contact information, or policies are accessible, severely limiting the ability to assess the company's operations or market position. The lack of WHOIS data further complicates legitimacy verification, suggesting the domain may be unregistered, expired, or privacy-protected beyond normal means. From a technical perspective, the site uses reCAPTCHA for bot mitigation but lacks visible security headers, SSL configuration details, or modern CMS indicators. The minimal content and blocking mechanism result in poor user experience and low trustworthiness. Privacy compliance is absent, with no visible privacy or cookie policies. Security posture is weak due to the lack of visible security headers and absence of business contact or incident response information. The bot verification challenge, while providing some protection against automated abuse, also restricts legitimate access and analysis. Overall, the site scores very low on content quality, business credibility, and privacy compliance, with a high risk of being non-legitimate or inactive. Strategic recommendations include establishing a publicly accessible website with clear business and contact information, implementing comprehensive privacy and cookie policies, improving security headers and SSL configuration, and ensuring WHOIS data is accurate and publicly available to enhance trust and compliance.
- eBool
ebool.com
Technology
69Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
eBool is an online platform focused on helping businesses and professionals find software, apps, and digital solutions across a wide range of categories. It offers product search, reviews, and alternative product suggestions, positioning itself as a niche software discovery and comparison site. The website is designed with modern web technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. However, the technical infrastructure lacks advanced security headers and comprehensive privacy compliance mechanisms, which are areas for improvement. The absence of WHOIS registration data raises some concerns about domain legitimacy, although the website content and design appear professional and trustworthy. Overall, eBool serves its target audience effectively but should enhance its security posture and transparency to build greater trust.
- Crowd Reviews
crowdreviews.com
Technology · United States
73Medium
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
CrowdReviews.com is an online platform specializing in ranking and reviewing software and service providers across over 600 categories. The site positions itself as an unbiased alternative to fee-driven review platforms, targeting businesses and consumers seeking trustworthy user opinions to inform purchasing decisions. The platform offers extensive rankings and user reviews, supported by structured data to enhance search engine visibility. Contact information including phone, email, and a physical address in the United States is clearly provided, supporting business credibility. Technically, the website employs a modern tech stack including Bootstrap, jQuery UI, Font Awesome, and Google Analytics for tracking. The site is mobile-optimized with good SEO practices and uses HTTPS with basic security headers. However, there is room for improvement in security headers and explicit privacy and cookie policy disclosures. The site integrates advertising and retargeting through Google Ads and SearchAtlas dynamic optimization. From a security perspective, the site benefits from HTTPS and CSRF protections on forms but lacks published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data for the domain is a notable concern, potentially indicating an unregistered or privacy-protected domain, which impacts trustworthiness. Overall, CrowdReviews.com presents as a professional and content-rich platform with moderate technical maturity and security posture. The primary risk lies in the unclear domain registration status, which should be verified. Strategic recommendations include publishing privacy and cookie policies, enhancing security headers, and establishing clear security and incident response disclosures to improve trust and compliance.
Talk Grouptalk-group.com
Technology · Austria
58Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Talk Group is a multinational digital data collection company specializing in high-quality online panels, behavioral data, and offline data collection services primarily across Europe. Established in 2008 and operating under the parent company Tito & Friends Holding, Talk Group serves a diverse clientele including research consultants, marketing departments, and retail corporations. Their offerings include panel services, passive metering data, campaign measurement tools, and software development for data collection. The company demonstrates strong market positioning with over 1.3 million panel members in 24 countries and holds ISO 20252 certification, underscoring their commitment to quality and compliance. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. The site is mobile-optimized, SEO-friendly, and integrates consent-based analytics tracking. Security posture is solid with HTTPS enforced and domain transfer protections, though there is room for improvement in security headers and incident response transparency. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. The business credibility is high, supported by certifications and industry memberships. The website content is professional and relevant, targeting a general audience interested in market research and data collection. Strategically, Talk Group should enhance DNS security by enabling DNSSEC, publish incident response contacts, and implement additional security headers to further strengthen their security posture and trustworthiness.
Other · Czech Republic
68Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
STEM/MARK is a well-established Czech market research agency founded in 1997, specializing in marketing and public opinion research across diverse sectors including media, finance, transportation, energy, retail, and government. The company leverages recognized industry certifications such as ESOMAR and SIMAR, and maintains partnerships with national and international research organizations. Their website reflects a professional and comprehensive digital presence, offering detailed service descriptions, case studies, and multi-language support. The company targets businesses and organizations seeking data-driven insights to support growth and decision-making.
SC&Cscac.cz
Other · Czech Republic
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
SC&C is a well-established Czech marketing and sociological research agency founded in 1998, offering a broad range of research services including quantitative and qualitative methods, consulting, and demographic studies. The company targets businesses and municipalities in the Czech Republic, leveraging over 30 years of experience and a strong market presence. Their website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Ultimate Social Media Icons. It uses modern analytics and marketing tools including Google Analytics, Google Tag Manager, Facebook Pixel, and Smartlook. The site is mobile optimized and performs moderately well, though accessibility could be improved. No hosting provider details were identified. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks security headers and a published privacy or security policy. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy with consistent registration details and a domain age appropriate for the business claims. Overall, SC&C presents a trustworthy and professional online presence with room for improvement in privacy disclosures and security hardening. Strategic recommendations include adding security headers, publishing privacy and security policies, and enhancing accessibility to strengthen compliance and user trust.
ResSOLUTION Group – Výzkumná řešení pro všechnyressolution.cz
—
68Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
response:nowresponsenow.in
Other · India
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
response:now is a Czech-language market research service provider offering innovative and cost-effective research solutions with a focus on speed and quality. The website presents a professional and engaging digital presence with video content and interactive tools, targeting business clients seeking market insights. The technical infrastructure includes modern JavaScript libraries, Google Tag Manager for analytics, and Cookiebot for cookie consent management, indicating a mature digital setup. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, well-designed, and compliant with privacy regulations, suitable for its business audience.
Nielsen Admosphere, a.s.nielsen-admosphere.cz
Media · Czech Republic
72Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Nielsen Admosphere, a.s. is a well-established research agency operating primarily in the Czech Republic, specializing in media market research, TV audience measurement, advertising monitoring, and marketing data analysis. The company is part of the global Nielsen network, leveraging international expertise while providing localized solutions. Their services cater to media companies, advertisers, and marketing professionals seeking detailed and reliable data insights. The website reflects a mature business with a professional digital presence, offering comprehensive product information and client testimonials that reinforce their market position. Technically, the website is built on the Webflow platform, utilizing modern web technologies including Google Analytics and Tag Manager for analytics and tracking. The site is mobile-optimized, accessible, and performs moderately well. Cookie consent mechanisms and privacy policies indicate good compliance with GDPR requirements. However, some security best practices such as additional HTTP security headers and explicit security policies are missing. From a security perspective, the site uses HTTPS with strong encryption and anonymizes IP addresses in analytics, which is positive. The absence of WHOIS data for the domain is a concern, reducing trustworthiness and suggesting the need for further verification of domain registration legitimacy. No critical vulnerabilities or malicious content were detected on the site. Overall, Nielsen Admosphere presents a credible and professional business with a solid digital footprint. Strategic improvements in security transparency and domain registration clarity would enhance trust and compliance posture.
NMS Market Researchnms.cz
Other · Czech Republic
61Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
NMS Market Research is a Czech-based market research agency founded in 2019, providing comprehensive market research services including customer experience management, brand and market analysis, product development, and political and social research. The company leverages proprietary digital platforms and advanced technologies to collect and analyze data, helping clients grow and make informed decisions. The website is professionally designed, SEO optimized, and multilingual, targeting businesses and organizations seeking market insights primarily in the Czech Republic and surrounding regions. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Google reCAPTCHA, and integrates marketing tools like Facebook Pixel and HubSpot. The site is mobile optimized and performs moderately well, though some improvements in accessibility and security headers are recommended. The domain is registered transparently with consistent WHOIS data matching the business identity. Security posture is good with HTTPS enforced and anti-bot measures in place, but lacks some advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found on the site. No incident response or vulnerability disclosure information is available. Overall, the website and business present a trustworthy and professional image with room for improvement in privacy transparency and security hardening to enhance compliance and user trust.
Data Collectdatacollect.cz
Other · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Data Collect is an established market research agency based in the Czech Republic with a strong international background, specializing in online and telephone data collection methods. The company is part of the Talk Online Panel group since 2018 and offers proprietary research software tools. Their target audience includes businesses and organizations requiring market research services primarily in the Czech and Slovak markets. The website presents a professional image with client testimonials and references to industry memberships such as SIMAR and ESOMAR, enhancing credibility. Technically, the website is built on WordPress using the Divi theme, incorporating modern analytics and tracking tools like Google Analytics, Google Tag Manager, and Smartlook. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS and reCAPTCHA implemented, but lacks some security headers and explicit privacy and terms of service pages. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in publishing clear privacy policies, enhancing security headers, and providing explicit incident response contacts. The absence of WHOIS data limits domain trust analysis, but the website content and business affiliations indicate legitimacy. The site is free from adult or questionable content and is fully accessible without WAF or blocking mechanisms.
Other
69Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website provokemedia.com is currently inaccessible due to a Cloudflare Turnstile CAPTCHA security challenge page, which blocks direct access to content. As a result, no business descriptive content, contact information, or policies are available for analysis. The domain is registered since 2015 with GoDaddy and uses Cloudflare DNS and security services, indicating a stable and legitimate registration. However, the lack of accessible content and policies limits the ability to assess the company's market position or services. Technically, the site uses modern security mechanisms but lacks visible security headers or SSL configuration details. The overall security posture cannot be fully evaluated due to content blocking. The site does not expose any adult or explicit content and is rated safe in content safety. The AI overall score is low due to content inaccessibility and missing compliance information.
Travesti Modellerankaratravestimodeller.com
Other · Turkey
57Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website 'Travesti Modeller' serves as a niche content portal focused on showcasing travesti models and related community content in Ankara, Turkey. It targets an adult audience interested in this specific cultural and social segment. The site is built on WordPress with common SEO and UI plugins, indicating a moderate level of digital maturity. It uses Google Analytics for visitor tracking but lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing advanced security headers and incident response information. The domain WHOIS data is missing, raising concerns about domain legitimacy and trustworthiness. Overall, the site is functional and content-rich but requires improvements in privacy, security, and business transparency to enhance trust and compliance.
Kadıköy Travestikadikoy-travesti.com
Other · Turkey
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Kadıköy Travesti is a niche online community platform serving the travesti and LGBTİ+ individuals primarily in the Kadıköy district of Istanbul, Turkey. The website offers a digital space for social networking, event announcements, and safe communication, emphasizing real profiles and community solidarity. The platform operates on WordPress with modern plugins such as Elementor and Yoast SEO, and integrates Google Analytics for visitor tracking. While the site is well-structured and content-rich, it lacks explicit privacy and cookie policies, and no WHOIS registration data is available for the domain, which raises concerns about domain legitimacy. The platform provides a phone contact and physical address, enhancing business credibility.
İstanbul Travesti Portalıistanbultravestii.com
Other · Turkey
61Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
İstanbul Travesti Portalı is a niche community website dedicated to the travesti community in Istanbul, providing profiles, cultural articles, event information, and support resources. The platform positions itself as a safe and inclusive space for travesti individuals to connect and share experiences. Technically, the site is built on WordPress with common SEO and analytics tools, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy/cookie policies, which are areas for improvement. The absence of WHOIS registrant data reduces domain trustworthiness, though the site content and contact information support its legitimacy. Overall, the site serves a specialized community with a focus on cultural and social engagement.
Retexretex-kariera.cz
Manufacturing · Czech Republic
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Retex is a manufacturing company specializing in the production and development of nonwoven textiles, operating a career-focused website targeting job seekers in the Czech Republic. The company positions itself as a major regional employer offering diverse job opportunities and employee benefits, emphasizing talent development and a positive work environment. The website is professionally designed using WordPress CMS with modern technologies such as Bootstrap, jQuery, and Gravity Forms, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and GDPR compliance evident through privacy policies and consent mechanisms in forms, though cookie consent is missing. Contact information is comprehensive, including emails, phone numbers, physical address, and social media presence on Facebook and LinkedIn. Overall, the site is trustworthy, well-maintained, and aligned with the company's business objectives.
Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugendregenbogenportal.de
Government · Germany
70Medium
NIS2 17 · GDPR 60
NIS2 17 · GDPR 60
The Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMFSFJ) is a German federal government ministry dedicated to policies and programs supporting families, seniors, women, youth, and equality issues including sexual and gender diversity. The website provides comprehensive information on queer politics and gender diversity, including policy plans, legal frameworks, and public awareness initiatives. It targets a broad audience including citizens, policymakers, and the LSBTIQ* community. The site is professionally designed with clear navigation and strong branding consistent with government standards. Technically, the website uses a custom or proprietary CMS with a modern tech stack including JavaScript and CSS, and employs Matomo for privacy-conscious analytics. Hosting is provided by a German technical service provider, ensuring data residency compliance. The site is mobile-optimized and accessible, with good SEO practices and privacy compliance including GDPR-aligned cookie consent mechanisms. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though explicit security headers and incident response information are not publicly detailed. No vulnerabilities or suspicious elements were detected. WHOIS data confirms the domain's legitimacy and consistency with a government entity. Overall, the website is a trustworthy, professional government resource with strong privacy and content quality, suitable for general audiences seeking information on equality and diversity policies in Germany.
Government · Germany
66Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The Bundeszentrale für Kinder- und Jugendmedienschutz (BzKJ) is a German federal government agency dedicated to protecting children and youth in media and digital environments. It provides regulatory oversight, educational resources, and enforcement mechanisms related to youth media protection. The website serves as an authoritative source for information, legal frameworks, and public communication on these topics, targeting parents, educators, media providers, and policymakers. Technically, the website employs standard web technologies including jQuery UI and custom CSS/JS, with a responsive and accessible design. It demonstrates good SEO and accessibility practices, although some modern security headers are missing. The site is served over HTTPS with no detected blocking or WAF interference, ensuring secure and reliable access. From a security perspective, the site shows a solid posture with encrypted connections and no exposed sensitive data. However, it lacks explicit incident response contacts and a security.txt file, which could enhance transparency and vulnerability management. Privacy compliance is strong, with a comprehensive privacy policy and GDPR adherence, though no cookie consent mechanism was detected. Overall, the website is a trustworthy and professional government resource with high content quality and business credibility. Strategic improvements in security headers and incident response disclosures would further strengthen its security posture.
Government · Germany
60Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
The Bundesamt für Familie und zivilgesellschaftliche Aufgaben (BAFzA) is a German federal government agency dedicated to supporting families and civil society through various programs, services, and initiatives. The website serves as an official portal providing information, resources, and contact points for citizens, social organizations, and professionals. It holds a strong market position as a trusted government entity with a broad scope of social engagement and support services. The site features comprehensive content, clear navigation, and professional design consistent with government standards. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Matomo for privacy-conscious analytics. The infrastructure is hosted by domainfactory in Germany, ensuring data residency compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Privacy and cookie consent mechanisms are well implemented, reflecting GDPR compliance. From a security perspective, the site employs best practices such as IP anonymization in analytics and cookie consent enforcement. However, explicit security headers and incident response policies are not evident, suggesting room for improvement in security posture. No vulnerabilities or suspicious content were detected, and the domain registration appears legitimate with no privacy protection masking ownership. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and resilience.
Flying Bisonspublicplatforms.com
Government
71Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
The website www.publicplatforms.com is a professionally designed platform offering an exclusive report benchmarking customer experience (CX) in top global e-government platforms. Developed and powered by Flying Bisons, a reputable digital consultancy, the site targets C-level executives and project teams in government sectors aiming to improve citizen-centric digital services. The business model revolves around consultancy and research report sales, positioning itself as a specialized provider in the government and technology sectors. Technically, the site leverages modern technologies including Webflow CMS, Google Tag Manager, HubSpot forms, PostHog analytics, and comprehensive cookie consent management, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is solid with HTTPS enforced and reCAPTCHA Enterprise protecting forms, though explicit security headers and incident response information are absent. Privacy compliance is strong with GDPR, CCPA, and LGPD considerations evident. However, the WHOIS data is missing, which is unusual and reduces domain trustworthiness, though the professional content and partner association mitigate concerns. Overall, the site is credible, secure, and well-positioned to serve its niche audience.