Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
6,551–6,600 of 14,261
Cookiebotcookiebot.eu
Technology · Denmark
84Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Cookiebot, a product by Usercentrics, offers a comprehensive Consent Management Platform (CMP) designed to help small and medium businesses achieve effortless GDPR compliance. Positioned as a leading CMP provider, Cookiebot integrates with major advertising platforms and supports multiple privacy regulations globally. The website demonstrates a strong market presence with clear messaging, professional design, and multilingual support, targeting SMBs and website owners seeking privacy compliance solutions. Technically, the site leverages modern web technologies including WordPress CMS, Google Tag Manager, and asynchronous JavaScript loading, ensuring fast performance and mobile optimization. Security-wise, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data, reflecting a mature security posture. However, the absence of a public WHOIS record and explicit security or incident response policies slightly reduce trust scores. Overall, Cookiebot's website is professional, secure, and privacy-compliant, with recommendations to enhance transparency around security policies and incident response.
- Salesforce
force.com
Technology · United States
82Low
NIS2 55 · GDPR 58
NIS2 55 · GDPR 58
Salesforce is a leading enterprise technology company specializing in cloud-based CRM and application development platforms. Their Salesforce Platform integrates data, AI, CRM, security, and automation into a unified environment enabling businesses to build and customize applications efficiently. The company holds a strong market position as a pioneer and leader in cloud software solutions, serving a broad enterprise audience globally. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, strong performance, and excellent mobile optimization. Security posture is robust, supported by industry-standard certifications such as ISO 27001 and SOC 2, with comprehensive privacy and cookie policies aligned with GDPR compliance. No critical vulnerabilities or suspicious indicators were found, reflecting a high level of trustworthiness and professionalism. Overall, Salesforce's digital presence aligns well with its enterprise stature and business model, offering a secure, compliant, and user-friendly platform.
Feedbacklyfeedbackly.com
Technology
76Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
Feedbackly is a technology company specializing in customer experience (CX) software that uniquely integrates emotional analytics through its Emotional Value Index (EVI®). The company offers a SaaS platform combined with consulting and training services to help businesses improve customer satisfaction and increase sales. The website demonstrates a mature digital presence with modern technologies such as WordPress, Elementor, and integrations with HubSpot and Google Tag Manager. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is limited due to missing privacy and cookie policies. The domain WHOIS data is missing, which raises concerns about registration transparency but does not detract from the professional business presentation. Overall, Feedbackly presents as a credible mid-sized technology business with a strong focus on CX innovation.
New Relic, Inc.newrelic.com
Technology
82Low
NIS2 29 · GDPR 100
NIS2 29 · GDPR 100
New Relic, Inc. is a well-established enterprise technology company founded in 2006, specializing in providing an all-in-one observability platform for engineers and enterprises to monitor, debug, and improve their entire technology stack. The company holds a strong market position with a comprehensive suite of services including application performance monitoring, cloud cost intelligence, security risk management, and digital experience monitoring. Their website reflects a mature digital presence with professional design, rich multimedia content, and extensive use of modern analytics and marketing tools. Technically, the site is built on Drupal 11 and integrates multiple third-party services such as Segment, Google Tag Manager, VWO, and Sentry for analytics and error tracking. Security posture is generally good with HTTPS enforced and domain registration protections in place, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is limited on the homepage with no visible privacy or cookie policies, which is a notable gap given GDPR considerations. Overall, New Relic demonstrates a high level of business credibility and technical sophistication, but could improve transparency around privacy and security policies.
VWOvisualwebsiteoptimizer.com
Technology · United States
81Low
NIS2 57 · GDPR 100
NIS2 57 · GDPR 100
VWO is a well-established enterprise SaaS company specializing in digital experience optimization, experimentation, and conversion rate optimization. Founded in 2000, it holds a market-leading position serving fast-growing companies with a comprehensive suite of services. The website reflects a mature digital presence with excellent content quality, professional design, and strong SEO practices. Technically, the site is built on WordPress with integrations of advanced analytics and marketing tools such as Google Analytics, Matomo, Marketo, and Cloudflare DNS services, ensuring robust performance and scalability. Security posture is strong with HTTPS enforcement, domain locking, and use of security monitoring tools, although DNSSEC is not enabled. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website and domain data indicate a trustworthy and credible business with a high level of digital maturity.
Discorddiscord.com
Technology · United States
82Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Discord is a leading technology company specializing in group chat and communication services primarily targeted at gamers and online communities. The platform offers voice, video, and text chat capabilities, enabling users to build and customize their own spaces for social interaction. With a strong market position and a large user base, Discord operates a freemium business model supplemented by its Nitro subscription service. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, Discord leverages modern web technologies including Webflow CMS, Cloudflare hosting, and Google Tag Manager for analytics, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, multiple security headers, and domain registration protections, although DNSSEC is not enabled. Privacy compliance is well addressed with clear privacy and cookie policies and an active consent mechanism. Overall, Discord demonstrates a high level of business credibility and digital maturity.
- Cloudflare, Inc.
cloudflare.tv
Technology · United States
81Low
NIS2 55 · GDPR 68
NIS2 55 · GDPR 68
Cloudflare TV is a professional streaming platform operated by Cloudflare, Inc., providing continuous live and on-demand content focused on internet technology, security, and developer education. The platform leverages Cloudflare's own streaming technology and integrates modern web frameworks such as React, ensuring a high-quality user experience optimized for performance and accessibility. The website demonstrates strong branding consistency and aligns with Cloudflare's corporate identity. Security posture is robust with HTTPS enforced and multiple security headers present, although DNSSEC is not enabled, representing a minor area for improvement. Privacy and terms policies are linked to Cloudflare's main corporate site, indicating compliance with GDPR and other regulations. However, explicit security policies and incident response contacts are not found on this site. Overall, the platform serves as a credible and valuable resource for Cloudflare's developer and technology audience.
- MMSC Group
mscgroup.com
Transportation
77Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
MSC Group is a private family-owned global leader in the transport and logistics sector, providing comprehensive shipping and logistics services worldwide. The company maintains a professional and well-structured website that reflects its market position and service offerings. The technical infrastructure leverages modern web technologies such as Angular and integrates performance monitoring tools like Boomerang, hosted on a robust Akamai CDN infrastructure, ensuring fast and responsive user experience across devices. Security posture is strong with HTTPS enforced and multiple security headers present, although the absence of a public security policy and incident response contact details suggests room for improvement in transparency and preparedness. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism in place. However, the lack of WHOIS data and registrant information raises concerns about domain registration transparency, slightly impacting overall trustworthiness. Strategic recommendations include publishing detailed security and incident response policies and verifying domain registration details to enhance credibility and trust.
HyperInhyperin.com
Real Estate
82Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
HyperIn operates as a specialized SaaS provider offering an all-in-one management platform tailored for commercial real estate sectors including shopping malls, mixed-use properties, and business parks. The platform focuses on streamlining operations and enhancing tenant engagement, positioning itself as a niche player in the CRE software market. The website presents a professional and consistent brand image with clear messaging targeting property managers and CRE professionals. Technically, the site is built on the Liferay CMS platform with React components, leveraging modern web technologies and integrating Google Tag Manager for analytics and Cookiebot for cookie consent management. Performance and mobile optimization are moderate to good, with basic accessibility features implemented. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place; however, the absence of security headers and visible privacy policies indicates room for improvement. The WHOIS data is missing or indicates the domain may be unregistered or very new, which raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices to improve trust and compliance.
B Labbimpactassessment.net
Other
76Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
B Lab operates the B Impact platform, a comprehensive digital solution for businesses to measure, manage, and improve their social and environmental impact. The platform supports companies pursuing B Corp Certification and aligns with sustainability goals, positioning B Lab as a leader in impact assessment and certification. The website is professionally designed, mobile-optimized, and provides clear navigation to various tools and resources. Technically, the site leverages modern frameworks such as Next.js and React, with integration of third-party widgets like Freshworks for customer support. Security posture is solid with HTTPS and privacy policies in place, though some security headers and incident response details could be enhanced. The absence of WHOIS data for the domain is a notable anomaly that warrants further verification to confirm domain legitimacy. Overall, the site demonstrates a mature digital presence with strong business credibility and user trust.
Usercentricsusercentrics.eu
Technology · Germany
78Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Usercentrics is an established enterprise software company founded in 2013, specializing in data privacy and regulatory compliance solutions. Their core offering is a Consent Management Platform (CMP) that helps businesses meet privacy requirements, manage user consent, and secure monetization. The company positions itself as a leader in the data privacy technology market, targeting businesses that require compliance with GDPR and other regulations. The website reflects a mature SaaS business model with a focus on privacy and compliance technology. Technically, the website is built on WordPress and leverages modern web technologies including Google Tag Manager and Usercentrics' own CMP scripts. The site is well optimized for performance, mobile responsiveness, and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforced and consent mechanisms implemented, although some improvements such as enabling DNSSEC and adding security headers could enhance security further. Privacy compliance is good but could be improved by explicitly linking privacy policies and terms of service. Overall, the website and domain registration data indicate a trustworthy and professional enterprise with a strong market presence in the privacy compliance sector.
Usercentricsusercentrics.com
Technology · Germany
78Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Usercentrics is a leading enterprise SaaS company specializing in data privacy and regulatory compliance solutions, primarily through its Consent Management Platform (CMP). Founded in 2013 and headquartered in Germany, the company targets businesses needing to meet GDPR and other privacy regulations. Their market position is strong, supported by ISO 27001 certification and a professional digital presence. Technically, the website is built on WordPress with modern JavaScript frameworks and integrates Google Tag Manager for analytics and consent management. The site is fast, mobile-optimized, and SEO-friendly. Security posture is robust with HTTPS, consent mechanisms, and no detected vulnerabilities, though DNSSEC is not enabled. Privacy compliance is well addressed with clear policies and consent banners. Overall, the website reflects a mature, trustworthy business with a strong focus on privacy and compliance.
Securitas ABsecuritas.com
Other · Sweden
86Low
NIS2 40 · GDPR 88
NIS2 40 · GDPR 88
Securitas AB is a global leader in security services, offering a broad range of intelligent security solutions leveraging technology and expertise. With a history spanning over nine decades, the company serves a diverse international clientele across multiple sectors including transportation, energy, and government. Their business model integrates traditional guarding services with advanced intelligence, advisory, and technology-driven security offerings. The website reflects a mature digital presence with comprehensive content, multi-language support, and a consistent global brand image. Technically, the site employs modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are not publicly visible. Overall, the site demonstrates high professionalism and trustworthiness, supporting the company's enterprise status.
- Workplace from Meta
workplace.com
Technology
86Low
NIS2 35 · GDPR 100
NIS2 35 · GDPR 100
Workplace from Meta is a comprehensive business communication platform that integrates chat, video, groups, and intranet tools to enhance organizational collaboration. Positioned as an enterprise-grade SaaS solution, it targets businesses and organizations seeking secure and integrated communication tools. The platform is backed by Meta's infrastructure, ensuring scalability and reliability. The website clearly communicates the upcoming closure of the Workplace service in 2026, providing users with timelines and data export instructions to facilitate a smooth transition. Technically, the website leverages modern web technologies including React and Facebook's proprietary frameworks, ensuring a fast, responsive, and accessible user experience. The presence of advanced tracking and analytics tools indicates a mature digital infrastructure focused on performance and user engagement insights. From a security perspective, the site demonstrates strong adherence to best practices with HTTPS enforcement, comprehensive security and governance documentation, and a public bug bounty program. However, explicit incident response contacts and a security.txt file are not found, representing areas for improvement. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the site presents a professional, trustworthy, and well-maintained digital presence consistent with a major technology enterprise. The lack of publicly available WHOIS data is typical for large brands employing privacy protection. The risk profile is low, with no detected vulnerabilities or suspicious content. Strategic recommendations include enhancing transparency around incident response and security certifications to further build user trust.
- Google LLC
withgoogle.com
Technology · United States
79Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Google LLC operates the world's leading search engine and a broad portfolio of internet-related services and products, including advertising technologies, cloud computing, and software. As a subsidiary of Alphabet Inc., Google holds a dominant market position globally, serving a diverse audience with a comprehensive suite of digital tools and platforms. The website reflects Google's brand consistency and professionalism, offering localized content and robust privacy and cookie policies compliant with GDPR standards. Technically, the website leverages modern web technologies including JavaScript, SVG, and Google Fonts, hosted on Google Cloud Platform infrastructure. The site demonstrates excellent performance, mobile optimization, and accessibility, ensuring a seamless user experience across devices. Security is robust with HTTPS enforced, comprehensive security headers, and no detected vulnerabilities or exposed sensitive data. Overall, Google's security posture is strong, with best practices in place for data protection and privacy compliance. The absence of direct contact information on the homepage is consistent with Google's global scale and centralized support channels. The domain is well-established and legitimate, despite the lack of publicly available WHOIS data due to registry policies. The website is safe for general audiences with no adult or questionable content. Strategic recommendations include maintaining current security measures, continuous monitoring for emerging threats, and enhancing transparency around data retention and user privacy to further strengthen user trust.
- European Union
europa.eu
Government
79Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
The European Union's official website serves as a comprehensive portal providing detailed information about the EU's functions, principles, priorities, history, and member states. It targets a broad audience including EU citizens, researchers, policymakers, and the general public. The site is authoritative and well-positioned as the primary source of EU-related information, offering multilingual content and extensive contact options. Technically, the website is built on Drupal 10, leveraging modern web technologies and EU-specific webtools services. It demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a high-quality user experience. Hosting is likely managed by European Commission infrastructure, ensuring reliability and performance. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, reflecting good privacy compliance aligned with GDPR. While some standard security headers are present, there is room for improvement by adding additional headers like Content-Security-Policy. No vulnerabilities or exposed sensitive data were detected, indicating a strong security posture. Overall, the website is highly trustworthy and professional, with a strong focus on transparency, user privacy, and accessibility. The lack of WHOIS data is typical for EU subdomains and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure mechanism to further strengthen trust and security.
- Microsoft
office.com
Technology
88Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
The website www.office.com is the official Microsoft portal for Microsoft 365 Copilot and Office Online services. It provides cloud-based productivity tools including Word, Excel, PowerPoint, and OneNote, integrated with OneDrive for online collaboration. The site targets both individual users and businesses, positioning Microsoft as a market leader in productivity software and cloud services. The business model is subscription-based, leveraging Microsoft's extensive cloud infrastructure and brand recognition. Technically, the site is well-constructed using modern web technologies, hosted on Microsoft Azure and CDN networks, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is robust, featuring clear privacy and cookie policies with user consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity, consistent with Microsoft's enterprise-grade standards.
Tumblrtumblr.com
Technology
82Low
NIS2 2 · GDPR 70
NIS2 2 · GDPR 70
Tumblr is a prominent social media and blogging platform that enables users to explore trending topics, share multimedia content, and engage with diverse communities. Owned by Automattic Inc., it holds a significant position in the social media landscape, targeting a broad audience interested in content sharing and community interaction. The platform's business model primarily revolves around advertising and content promotion. Technically, Tumblr employs modern web technologies including JavaScript frameworks, web fonts, and progressive web app features, ensuring a fast, mobile-optimized, and accessible user experience. Security-wise, the site enforces HTTPS, implements GDPR-compliant consent mechanisms, and maintains good security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, Tumblr presents a high level of professionalism, trustworthiness, and compliance, with no detected blocking or WAF interference.
Threadsthreads.net
Technology
85Low
NIS2 22 · GDPR 88
NIS2 22 · GDPR 88
Threads is a social media platform designed to facilitate idea sharing, community engagement, and content posting, tightly integrated with Instagram and operated under Meta Platforms' infrastructure. The website demonstrates a modern, responsive design optimized for mobile and desktop platforms, leveraging React and JavaScript technologies. Security posture is strong with HTTPS enforcement and comprehensive security headers, although explicit privacy and cookie policies are not detected in the provided content. The absence of WHOIS data suggests domain privacy protection, common for large technology companies, and does not detract from the platform's legitimacy. Overall, Threads presents a professional and trustworthy digital presence with room for improvement in privacy transparency and contact availability.
WordPress.comwp.com
Technology · United States
80Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
WordPress.com is a leading web platform offering managed WordPress hosting, website building tools, domain registration, and related services. As part of Automattic, it holds a dominant market position with a broad target audience ranging from individual bloggers to large enterprises. The website demonstrates a mature digital presence with excellent content quality, multilingual support, and strong branding consistency. Technically, it leverages WordPress CMS, modern web technologies, and robust hosting infrastructure to deliver fast and mobile-optimized experiences. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though DNSSEC is not enabled. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, WordPress.com presents a trustworthy and professional online presence.
- Google LLC
google.de
Technology · United States
79Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Google LLC operates as a global leader in internet-related services and products, including its flagship search engine, advertising platforms, cloud computing, and software solutions. The company holds a dominant market position with a diversified business model centered on advertising revenue and technology innovation. The website reflects a mature digital infrastructure with fast performance, mobile optimization, and strong SEO practices. Security posture is robust, featuring HTTPS enforcement, comprehensive security headers, and secure form handling. Privacy compliance is well addressed with clear policies and consent mechanisms aligned with GDPR standards. Overall, Google demonstrates high business credibility and trustworthiness, supported by its global brand recognition and enterprise scale.
Industrie- und Handelskammer zu Koblenz (IHK Koblenz)ihk-koblenz.de
Government · Germany
85Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
The Industrie- und Handelskammer zu Koblenz (IHK Koblenz) is a public law corporation serving as the regional chamber of commerce for northern Rhineland-Palatinate, Germany. It represents the interests of over 95,000 member businesses, providing regulatory oversight, vocational examination services, and business support. The website reflects a professional and authoritative presence with comprehensive content tailored to its business audience. Technically, the site is built on CoreMedia CMS, employs modern JavaScript and CSS, and integrates multiple analytics and marketing tools such as eTracker, LinkedIn Insight, and Facebook Pixel. The site is well-optimized for mobile and accessibility, with clear navigation and consistent branding. Security posture is solid with HTTPS, CSRF protection, and cookie consent management, though additional security headers and incident response information could enhance trust. Overall, the site is trustworthy, compliant with GDPR, and serves its public mandate effectively.
MyFontsmyfonts.com
E-commerce · United States
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
MyFonts is a leading e-commerce platform specializing in the sale and licensing of fonts, serving designers, typographers, and businesses worldwide. Owned by Monotype, it offers a vast catalog of classic and contemporary fonts with a strong market position as a trusted font marketplace. The website is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies, reflecting a mature digital presence. Technically, the site leverages Shopify as its CMS and e-commerce platform, integrating advanced search (Algolia), analytics (Google Analytics, Datadog, VWO), and marketing tools (Adobe Launch, Sailthru). Security posture is strong with HTTPS enforced and reputable third-party services, though explicit security headers could be verified and a public vulnerability disclosure policy added. The absence of WHOIS data for the domain is unusual but does not detract significantly from the site's legitimacy given the brand and operational evidence. Overall, MyFonts demonstrates a robust, secure, and user-friendly online presence with extensive tracking and marketing integrations.
Oracleoracle.com
Technology
78Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website www.oracle.com currently displays a technical difficulty error page indicating that the site is inaccessible or experiencing issues. Oracle is a major global technology company specializing in database software, cloud infrastructure, and enterprise software solutions. However, the current website content is minimal and does not provide typical business or product information. The WHOIS lookup failed to retrieve domain registration details, which is unusual for a company of Oracle's stature and may indicate temporary domain registration or privacy protection issues. Technically, the site lacks metadata, security headers, and visible SSL configuration, which combined with the error page suggests a temporary outage or blocking mechanism. Security posture is weak due to lack of visible HTTPS and security best practices. Overall, the site is currently not operational for analysis, resulting in a low trust and quality score.
OptiMonkoptimonk.com
Technology
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
OptiMonk is a technology company specializing in website personalization and conversion optimization tools, primarily offering a professional popup builder platform. Their services target e-commerce businesses and marketers aiming to increase conversions through popups, email and SMS marketing integrations, product recommendations, and A/B testing. The company has established a strong market presence since at least 2018, supported by a professional and well-branded website. Technically, the website is built on WordPress using Elementor and integrates multiple modern analytics and marketing technologies such as Google Tag Manager, Facebook Pixel, TikTok Pixel, Heap Analytics, and Microsoft Clarity. The site is optimized for performance, mobile responsiveness, and SEO, with comprehensive metadata and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS, includes important security headers, and employs cookie consent mechanisms indicating GDPR compliance. However, there is no publicly available security policy or incident response contact information, and the domain WHOIS data is unavailable, which slightly reduces transparency and trust. Overall, the website demonstrates a mature digital infrastructure and a strong business model, but could improve trust and security posture by publishing detailed security policies and incident response contacts, and by enhancing domain registration transparency.
Heapheap.io
Technology · United States
79Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Heap is a leading SaaS company specializing in digital insights and product analytics platforms. Their technology captures comprehensive user interactions across websites and mobile apps, enabling businesses to uncover hidden user behaviors and optimize digital experiences. Positioned strongly in the technology sector, Heap serves product managers, marketers, and data analysts with AI-powered analytics tools including session replay, heatmaps, and journey mapping. The company emphasizes data-driven decision making and seamless integration with other marketing and analytics platforms. Technically, Heap employs modern web frameworks such as React and Next.js, and integrates with marketing tools like Marketo and Optimizely, reflecting a mature and scalable digital infrastructure. The website is well-designed, mobile-optimized, and accessible, supporting a professional user experience. Security-wise, Heap demonstrates a robust posture with HTTPS enforcement, multiple security headers, and recognized certifications like SOC 2 and ISO 27001. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR requirements. Overall, Heap presents a trustworthy and credible online presence with extensive analytics capabilities and a clear commitment to security and privacy.
#1 Platform for Salesforceformtitan.com
Technology
76Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Titan DXP operates as a technology platform specializing in Salesforce digital experience solutions, targeting enterprises and Salesforce users. The website positions itself as a leading platform for Salesforce enhancements, offering B2B services. The technical infrastructure is built on WordPress CMS with multiple marketing and analytics integrations, including Google Analytics, Hotjar, and Crazy Egg, indicating a mature digital marketing approach. The domain is registered since 2019, consistent with a medium-sized technology business. Security posture is adequate with HTTPS and domain protections but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and functional but requires improvements in privacy and security transparency.
Mozilla Corporationmozilla.org
Technology · United States
84Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Mozilla Corporation is a globally recognized non-profit organization dedicated to promoting an open and privacy-respecting internet. Their product portfolio includes the Firefox browser, Thunderbird email client, Mozilla VPN, and various privacy and security tools, positioning them as a leader in open-source internet technology. The website reflects a mature digital presence with excellent content quality, clear navigation, and strong branding consistency. Technically, the site employs modern JavaScript, SVG graphics, and integrates Google Tag Manager and Sentry for analytics and error tracking, ensuring robust performance and monitoring. Security posture is strong with HTTPS enforcement, comprehensive security headers, and privacy compliance evidenced by detailed policies and consent mechanisms. No critical vulnerabilities or suspicious content were detected, and the domain is widely trusted despite the absence of detailed WHOIS data due to privacy protection. Overall, Mozilla.org demonstrates a high level of professionalism, trustworthiness, and commitment to user privacy and open internet principles.
MSC Cruisesmscoceancay.com
Transportation
86Low
NIS2 25 · GDPR 85
NIS2 25 · GDPR 85
MSC Cruises operates a comprehensive cruise line business with a strong digital presence promoting its private island destination, Ocean Cay MSC Marine Reserve in the Bahamas. The website provides detailed information about the island, excursions, amenities, and cruise itineraries, targeting cruise tourism customers globally. The site is well-structured with rich content, FAQ schema, and localized versions for multiple countries, reflecting a mature digital marketing strategy. Technically, the site uses modern JavaScript frameworks, consent management tools, and integrates marketing and analytics platforms such as Marketo and Google Tag Manager. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response details are not publicly available. The absence of WHOIS data is a transparency concern but does not detract significantly from the overall legitimacy given the brand recognition and professional site quality. Overall, the website is a reliable and professional digital asset supporting MSC Cruises' business objectives.
- Tripla Mall Ky
malloftripla.fi
Retail · Finland
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Mall of Tripla is a large, award-winning retail shopping center located in Helsinki, Finland, operated by Tripla Mall Ky. The website presents a professional and comprehensive digital presence showcasing nearly 250 shops, restaurants, and cafes, targeting general consumers and visitors seeking shopping and leisure experiences. The business holds a strong market position as a leading Nordic shopping center with a well-established brand and consistent messaging. Technically, the site is built on the Astro framework with modern libraries such as Bootstrap Icons and Font Awesome, hosted on Microsoft Azure DNS infrastructure. The site demonstrates good performance, mobile optimization, and accessibility. Security-wise, the website enforces HTTPS, implements cookie consent via Cookiebot, and uses Google Tag Manager for analytics, reflecting a mature security posture. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, with a low risk profile.
- MMastercard
mastercard.fi
Finance · Finland
76Low
NIS2 47 · GDPR 88
NIS2 47 · GDPR 88
Mastercard.fi is the Finnish localized website of Mastercard, a global leader in payment technology and services. The site offers information about Mastercard's digital payment solutions, travel rewards, and security features targeted at Finnish consumers and businesses. The website is professionally designed with consistent branding and uses modern web technologies including Adobe Experience Manager and OneTrust for cookie consent management. The technical infrastructure leverages Akamai CDN and Adobe Launch for analytics and marketing tag management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers like Content-Security-Policy could be improved. Privacy compliance is supported by a comprehensive cookie consent mechanism, but explicit privacy policy and terms of service links were not found in the provided HTML snippet. Overall, the site reflects a mature digital presence consistent with Mastercard's enterprise stature.
- EElfsight
elfsight.com
Technology
77Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Elfsight is a technology company specializing in providing over 90 customizable website widgets aimed at helping businesses and website owners increase sales, engage visitors, and collect leads. The company has a strong market presence with millions of users and offers a SaaS business model. The website is built on WordPress with modern performance optimizations and integrates multiple analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is generally strong with HTTPS and domain locking, though there are minor gaps such as lack of DNSSEC and missing security headers. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the website is professional and trustworthy but could improve transparency and compliance aspects.
Vercelvercel.link
Technology
79Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Vercel is a mature technology company founded in 1999, providing a platform as a service for developers to build, scale, and deploy web applications with AI cloud integration. The website reflects a professional and modern digital presence, leveraging advanced frameworks such as Next.js and React, hosted on their own Vercel platform. The site is well-optimized for performance and mobile devices, offering a seamless user experience targeted at developers and businesses seeking efficient web deployment solutions. Security measures include HTTPS enforcement and client-side protections on API endpoints, though explicit security policies and headers are not publicly documented. Privacy compliance is limited by the absence of visible privacy and cookie policies. Overall, the domain registration and technical infrastructure support a high level of legitimacy and trustworthiness.
- Wix.com Ltd
wix.com
Technology
81Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Wix.com Ltd operates a leading SaaS platform that enables users to create websites easily using an intuitive drag-and-drop builder, AI tools, and a large selection of templates. The company targets individuals and businesses seeking to establish an online presence quickly and efficiently. Wix holds a strong market position as a top website builder with integrated hosting and business solutions. Technically, the website leverages modern JavaScript frameworks, polyfills for compatibility, and a proprietary platform infrastructure ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, secure cookie handling, and script-level protections, although explicit security policies and incident response contacts are not publicly detailed. Overall, Wix demonstrates a mature digital presence with excellent content quality, SEO, and user experience, supporting its enterprise-scale operations.
Intuition Machines, Inc.hcaptcha.com
Technology
77Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
hCaptcha is an enterprise-grade AI security platform focused on stopping bots and human abuse while preserving user privacy. Positioned as a leader in privacy-first online security, it offers a comprehensive suite of services including bot detection, fraud protection, account defense, private learning, and multi-factor authentication. The platform is widely adopted by major enterprises including e-commerce, fintech, government, telecom, and technology sectors. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, the site leverages modern web technologies such as JavaScript, jQuery, Webflow CMS, and Cloudflare analytics, ensuring fast performance and excellent mobile optimization. The platform supports multiple environments including web and native mobile (iOS and Android). Security best practices are evident with HTTPS enforcement, privacy-preserving machine learning models, and no visible vulnerabilities or exposed sensitive data. However, explicit security headers and a cookie consent mechanism could enhance the security posture further. The security posture is strong, supported by multiple certifications (ISO 27001, PCI DSS, SOC 2) and compliance with global privacy regulations such as GDPR and CCPA. The company provides 24/7 SOC coverage and advanced threat detection capabilities. The absence of WHOIS data is noted but does not detract significantly from the trustworthiness given the professional and transparent nature of the website and business. Overall, hCaptcha presents a low-risk profile with a robust security and privacy focus, making it a credible and trustworthy provider in the AI security and bot mitigation market.
- MSC Cruises Australia
msccruises.com.au
Transportation · Australia
85Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
MSC Cruises Australia operates as a regional branch of the global MSC Cruises S.A., providing cruise holiday services focused on destinations such as the Mediterranean, Caribbean, and worldwide. The website targets general consumers interested in cruise vacations, offering booking, deals, and onboard experience information. The company holds a strong market position as a major international cruise line with a localized Australian presence. Technically, the website employs modern JavaScript frameworks like Vue.js, integrates marketing and analytics tools such as Marketo and Google Tag Manager, and uses Akamai for hosting and CDN services. The site is mobile-optimized and SEO-friendly, with good performance and accessibility features. Security posture is strong with HTTPS enforcement, security headers, and consent management, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the domain shows privacy protection typical for large enterprises, with no suspicious WHOIS data. The site is professional, trustworthy, and compliant with GDPR and cookie regulations.
MSC Crocieremsccrociere.it
Transportation · Italy
83Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
MSC Crociere is a leading cruise line operating primarily in the Mediterranean, Caribbean, and Northern Europe markets. The company offers a comprehensive range of cruise services including bookings, onboard experiences, excursions, and loyalty programs. The website reflects a mature digital presence with strong branding, clear navigation, and extensive content tailored to leisure travelers and families. Technically, the site leverages modern JavaScript frameworks (Vue.js), advanced consent management (Didomi), and enterprise-grade analytics and marketing tools (Marketo, Adobe Launch, Dynatrace). Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well implemented with GDPR consent mechanisms and a comprehensive privacy policy. Overall, the site demonstrates high professionalism and trustworthiness, supporting MSC Crociere's position as a major player in the cruise industry.
Vidyardvidyard.com
Technology · Canada
76Low
NIS2 25 · GDPR 100
NIS2 25 · GDPR 100
Vidyard is a well-established technology company specializing in AI-powered video messaging and hosting solutions tailored for sales and marketing teams. The company positions itself as a leader in the online video platform market, serving over 250,000 go-to-market teams globally. Their platform enables businesses to increase leads, accelerate pipelines, and enhance customer engagement through video communications. Vidyard's digital presence is robust, featuring a professional website with comprehensive content, strong branding, and active social media channels. The technical infrastructure leverages modern web technologies, analytics, and marketing automation tools, indicating a mature digital strategy. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. Overall, Vidyard presents a credible and professional business front with minor gaps in public security documentation.
Discorddiscord.gg
Technology
82Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Discord is a leading technology company specializing in group chat and communication services primarily targeted at gamers and online communities. The platform offers voice, video, and text chat with rich features such as custom emojis, streaming, and community management tools. It operates a freemium business model with paid Nitro subscriptions enhancing user experience. The website reflects a mature, well-established company with a strong market position and a large user base. Technically, Discord's website is built on modern web technologies including Webflow CMS, Google Fonts, jQuery, and integrates cookie consent management via OneTrust. Hosting and DNS services are provided by Cloudflare, ensuring robust performance and security. The site is mobile-optimized, accessible, and SEO-friendly, providing an excellent user experience. From a security perspective, the site enforces HTTPS, implements multiple security headers, and uses cookie consent mechanisms compliant with GDPR. However, DNSSEC is not enabled, and no explicit security.txt or incident response contact information is found, which could be improved. No vulnerabilities or suspicious content were detected. Overall, Discord's website demonstrates high professionalism, strong security posture, and good privacy compliance. It is trustworthy and safe for general audiences, with no adult or questionable content. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and providing clearer incident response contacts to enhance security transparency.
Công Ty Cổ Phần Dịch Vụ Bảo Vệ Long Hảisecuritaslonghai.vn
Other · Vietnam
80Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Công Ty Cổ Phần Dịch Vụ Bảo Vệ Long Hải is a leading security service provider in Vietnam, offering a range of services including on-site guarding, technology-based security solutions, event security, VIP protection, asset transportation, and mobile security. The company positions itself as the first and foremost security provider in the Vietnamese market, combining human expertise with advanced technology to deliver comprehensive security solutions. The website reflects a professional business model targeting corporate and institutional clients within Vietnam. Technically, the site uses EPiServer CMS, integrates Google Tag Manager and Microsoft Application Insights for analytics, and employs OneTrust for cookie consent management, indicating a moderate to advanced digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of explicit security headers and a published security policy suggests room for improvement. Overall, the website is well-designed, mobile-optimized, and provides clear navigation and relevant content, supporting a high trustworthiness rating.
Securitas Uruguaysecuritasuruguay.com
Other · Uruguay
82Low
NIS2 35 · GDPR 65
NIS2 35 · GDPR 65
Securitas Uruguay is a local branch of the global Securitas Group, providing intelligent private security services including guarding, electronic security, remote monitoring, and consulting. The website targets businesses and private customers in Uruguay, offering a broad portfolio of security solutions tailored to various segments such as SMEs, homes, and specialized industries. The site demonstrates a mature digital presence with modern analytics and cookie consent mechanisms, reflecting compliance with privacy regulations such as GDPR. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, though the branding and network of related domains support authenticity. Security posture is solid with HTTPS, script nonce usage, and no visible vulnerabilities, but could be improved by publishing incident response contacts and vulnerability disclosure policies. Overall, the site is professional, accessible, and trustworthy for its intended audience.
Securitassecuritasinc.com
Transportation · United States
85Low
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Securitas is a global leader in customized security and guarding solutions, offering a broad portfolio of services including on-site guarding, mobile patrol, remote guarding, electronic security, fire protection, and corporate risk management. The company operates internationally with localized websites for many countries, reflecting a strong market presence and extensive service coverage. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service information, targeting businesses and organizations seeking security services. Technically, the site uses modern technologies such as EPiServer CMS, Google Tag Manager, Microsoft Application Insights, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though the absence of a public security policy or incident response contact is noted. Privacy compliance is well addressed with cookie consent and a comprehensive privacy policy. However, the WHOIS data for the domain is missing, which raises concerns about domain registration transparency and legitimacy, slightly impacting trust. Overall, the site is reliable and professional but would benefit from improved domain registration transparency and enhanced security disclosures.
Securitassecuritas.ae
Other · United Arab Emirates
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Securitas is a global leader in security services, offering a broad portfolio including on-site guarding, remote monitoring, technology solutions, mobile response, and consulting services. The company operates globally with a strong local presence in the UAE and other countries, supported by a consistent brand and comprehensive service offerings. The website reflects a mature enterprise with professional design, clear navigation, and extensive country-specific domains indicating a wide market reach. Technically, the site uses modern technologies such as EPiServer CMS, Google Tag Manager, Microsoft Application Insights, and OneTrust for cookie consent, demonstrating a good level of digital maturity. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although a dedicated security policy and incident response page are absent. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website and domain registration data indicate a legitimate, trustworthy enterprise with a high level of professionalism and compliance.
Securitassecuritas.es
Other · Spain
78Low
NIS2 35 · GDPR 40
NIS2 35 · GDPR 40
Securitas Spain operates as a leading provider of customized security solutions for businesses, leveraging advanced technology, risk analysis, and continuous monitoring through its Securitas Operation Centre (SOC). The company offers a broad portfolio of services including consulting, mobile security, remote surveillance, digital services, electronic security, and fire protection, targeting enterprises primarily within Spain. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business clients. Technically, the site employs modern technologies such as EPiServer CMS, Google Tag Manager, Microsoft Application Insights, and OneTrust for cookie consent, indicating a well-maintained infrastructure with good performance and accessibility. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring GDPR-aligned privacy and cookie policies with active consent mechanisms. However, the absence of a public security policy or incident response contact details suggests room for improvement in transparency and security communication. Overall, the domain appears legitimate and consistent with the business profile, though WHOIS data is unavailable due to query restrictions. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.
Securitas Koreasecuritas.kr
Other · South Korea
83Low
NIS2 35 · GDPR 88
NIS2 35 · GDPR 88
Securitas Korea is a regional branch of the global Securitas Group, providing professional security services including on-site guarding, mobile patrol, electronic security, and integrated security solutions tailored for businesses in South Korea. The website presents a professional and well-structured digital presence with clear service offerings and contact information. The technical infrastructure leverages modern CMS (EPiServer), analytics (Google Tag Manager, Microsoft Application Insights), and cookie consent management (OneTrust), indicating a mature digital setup. Security posture is generally good with HTTPS enforced and consent mechanisms in place; however, the absence of explicit security headers and lack of published security policies or incident response contacts represent areas for improvement. The WHOIS data is notably missing or indicates the domain is unregistered, which is inconsistent with the active website and raises legitimacy concerns that warrant further investigation. Overall, the site is business-focused, safe for general audiences, and professionally maintained, but domain registration transparency and enhanced security disclosures would strengthen trust and compliance.
Securitas South Africasecuritas-rsa.co.za
Other · South Africa
83Low
NIS2 65 · GDPR 88
NIS2 65 · GDPR 88
Securitas South Africa operates as a significant security services provider in South Africa, with a presence since 2009 and a workforce exceeding 3,800 employees. The company offers a broad range of security solutions including guarding services, electronic security, remote video monitoring, mobile patrols, and corporate risk management. Their market position is strong within the South African security sector, serving over 260 clients and forming part of a larger AMEA division. The website reflects a professional business model targeting corporate and local business clients seeking comprehensive security services. Technically, the website is built on the EPiServer CMS platform and integrates modern analytics and tracking tools such as Google Tag Manager and Microsoft Application Insights. The site is mobile optimized, accessible, and demonstrates good SEO practices. Cookie consent is managed through OneTrust, indicating a baseline level of privacy compliance, although explicit privacy and terms of service pages are not clearly identified. From a security perspective, the site enforces HTTPS and employs consent management, but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data reduces transparency but is likely due to privacy protection, which is common for enterprises in this sector. Overall, the website presents a credible and professional front for Securitas South Africa, with moderate technical maturity and a solid security posture. Enhancements in privacy policy transparency, security header implementation, and public incident response information would strengthen trust and compliance.
Securitas Singaporesecuritas-singapore.com
Other · Singapore
85Low
NIS2 35 · GDPR 88
NIS2 35 · GDPR 88
Securitas Singapore is a regional office and the headquarters for the AMEA division of the global Securitas Group, providing a broad range of security services including guarding, electronic security, remote monitoring, and integrated security solutions. Established since 2010 with over 550 employees, the company targets businesses and organizations in Singapore seeking professional security services. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. The technical infrastructure leverages modern technologies such as EPiServer CMS, Google Tag Manager, Microsoft Application Insights, and OneTrust for cookie consent, indicating a good level of digital maturity. Security posture is strong with HTTPS enforced, security headers present, and privacy compliance mechanisms implemented, although explicit security policies and incident response information are not publicly available. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness but does not negate the overall legitimacy given the brand consistency and content quality. Strategic recommendations include publishing comprehensive security and privacy policies, incident response contacts, and improving transparency around data protection roles.
Securitas Portugalsecuritas.pt
Other · Portugal
77Low
NIS2 35 · GDPR 40
NIS2 35 · GDPR 40
Securitas Portugal is a leading private security company offering a broad range of security services with a strong technological component. The company targets businesses and organizations in Portugal, providing specialized surveillance, remote monitoring, electronic security, and risk management solutions. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, indicating a well-established market position under the global Securitas brand. Technically, the site employs modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Overall, the website demonstrates a high level of professionalism and trustworthiness, supporting the company's credibility in the security sector.
Securitas Polskasecuritas.pl
Other · Poland
78Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Securitas Polska is a large security services provider operating in Poland, offering a comprehensive range of physical and technological security solutions including fixed physical protection, remote monitoring, patrols, and smart security systems. The company positions itself as a worldwide leader in the security industry with over 25 years of experience. Their website is professionally designed, mobile-optimized, and provides clear navigation and relevant content targeted at both business and individual clients. Technically, the site uses modern technologies such as EPiServer CMS, Google Tag Manager, Microsoft Application Insights, and OneTrust for cookie consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR adherence. However, WHOIS data is privacy protected, limiting domain registration transparency. Overall, the website and business appear legitimate and trustworthy with room for improvement in publishing explicit security policies and incident response information.
Securitas Perúsecuritasperu.com
Other · Peru
82Low
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Securitas Perú is a large, well-established security services provider operating in Peru as part of the global Securitas Group. The company offers a comprehensive portfolio of protection services including specialized security, mobile security, remote monitoring, electronic security, fire protection, and corporate risk management. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content in Spanish targeting corporate clients in Peru. The digital infrastructure leverages modern technologies such as EPiServer CMS, Google Tag Manager, Microsoft Application Insights, and FriendlyCaptcha for security and analytics. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Contact information is clearly presented with validated forms and CAPTCHA to prevent spam. However, the WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy, although the website content aligns with a reputable global brand. Security posture is good with HTTPS enforced and secure form handling, but additional security headers and published security policies would enhance trust. Overall, the website is a credible and professional digital presence for Securitas Perú, with recommendations to improve domain transparency and security headers.