Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,187001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
67,301–67,350 of 99,067
- Podnikatel.cz - největší server pro podnikatele v ČR
podnikatel.cz
Media · Czech Republic
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Podnikatel.cz is the largest online portal dedicated to entrepreneurs in the Czech Republic, offering comprehensive news, detailed information, legal advice, forms, calculators, and contracts to support successful business operations. The website targets business professionals and entrepreneurs seeking reliable and up-to-date business content. Technically, the site employs a modern technology stack including Google Analytics, Tag Manager, Sentry for error tracking, and advanced advertising technologies with consent management, ensuring a mature digital infrastructure. Security posture is solid with HTTPS enforcement and error monitoring, though explicit security policies and incident response contacts are not publicly visible. Overall, the site presents a professional and trustworthy business media platform with room for improvement in transparency and privacy documentation.
1·2·3 Veggie !123veggie.fr
Other · France
61Medium
NIS2 17 · GDPR 33
NIS2 17 · GDPR 33
123veggie.fr is a French-language website dedicated to vegetarian and vegan lifestyle content, including recipes and community engagement. The site targets French-speaking consumers interested in plant-based diets and related lifestyle topics. The business model appears content-driven, likely monetized through advertising or affiliate marketing. Technically, the site is built on WordPress using the Divi theme, with SEO optimization via Yoast and tracking through Google Analytics and Google Tag Manager. Hosting is provided by NUXIT, a French hosting provider, consistent with the website's regional focus. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy or security policies. No contact information or incident response details are present, which limits direct communication channels. Overall, the site is professionally designed and functional but could improve privacy compliance and security transparency.
Non-profit · United States
70Medium
NIS2 14 · GDPR 53
NIS2 14 · GDPR 53
People for the Ethical Treatment of Animals (PETA) is a leading global non-profit organization dedicated to animal rights advocacy. The website serves as a comprehensive platform for activism, education, and donor engagement, targeting a broad audience including animal rights supporters, vegans, students, and the general public. PETA maintains a strong market position with multiple subsidiaries focused on youth and children, and offers extensive resources and campaigns to promote ethical treatment of animals. Technically, the website is built on WordPress with modern SEO and analytics tools integrated, including Yoast SEO, Google Tag Manager, and various social media pixels. The site demonstrates good mobile optimization, accessibility, and performance, leveraging push notifications and advanced tracking for user engagement. Security best practices are observed with HTTPS, security headers, and CAPTCHA protections on forms, although some privacy compliance aspects like cookie consent banners could be improved. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of explicit incident response or vulnerability disclosure information suggests room for enhancement in transparency and security culture. Overall, the website is professional, trustworthy, and well-maintained, supporting PETA's mission effectively. Strategically, PETA should focus on enhancing privacy compliance by implementing visible cookie consent mechanisms, publishing clear terms of service, and providing direct contact information for security and general inquiries. These improvements will strengthen user trust and regulatory adherence while maintaining their leadership in animal rights advocacy.
- BUAV
crueltyfreeinternational.org
Non-profit · United Kingdom
75Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Cruelty Free International is a well-established non-profit organization focused on ending animal suffering in laboratories through advocacy, undercover investigations, and the globally recognized Leaping Bunny cruelty-free certification program. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content aimed at educating the public and encouraging donations and activism. Technically, the site is built on Drupal 10, integrates modern analytics and marketing tools, and implements cookie consent mechanisms aligned with GDPR requirements. Security posture is strong with HTTPS enforced and no obvious vulnerabilities, though some security headers could be explicitly confirmed and a security policy published. Overall, the domain registration data aligns well with the organization's identity, supporting high trustworthiness. The site is safe for general audiences and does not contain any adult or explicit content.
Cruelty Free Europe aisblcrueltyfreeeurope.org
Non-profit · United Kingdom
57Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Cruelty Free Europe aisbl is a small non-profit organization dedicated to ending animal testing across Europe. The website serves as a platform to advocate for animal protection, provide news updates, and promote cruelty-free products through partnerships such as the Leaping Bunny program. Their target audience includes animal welfare advocates and consumers seeking cruelty-free alternatives. The organization maintains a clear and consistent brand presence with professional content and a user-friendly website. Technically, the website is built on Drupal 7 with common web technologies including jQuery, Font Awesome, and Typekit fonts. It employs cookie consent mechanisms and tracking pixels from Facebook and Twitter for analytics and marketing. The site is moderately optimized for performance and mobile devices, with good SEO and basic accessibility features. From a security perspective, the site uses HTTPS and cookie consent but lacks advanced security headers and explicit security policies. The domain is privacy protected but shows no suspicious patterns, consistent with a legitimate non-profit entity. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website demonstrates a solid digital presence with good content quality and business credibility. Security posture is adequate but could be improved with additional headers and published policies. Privacy compliance is well addressed with GDPR-aligned cookie controls and a comprehensive privacy policy.
- Open Wing Alliance
openwingalliance.org
Non-profit
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Open Wing Alliance is a medium-sized non-profit coalition initiated by The Humane League, focused on ending the abuse of chickens worldwide by promoting cage-free policies and improving animal welfare. The organization collaborates with over 90 member groups globally, providing campaign resources and grants to support their mission. The website reflects a professional and consistent brand presence with clear messaging and a user-friendly interface. Technically, the site is built on modern frameworks such as Next.js and React, hosted with Cloudflare DNS and AWS S3 resources, and incorporates Google Tag Manager and Osano for analytics and consent management. Security posture is solid with HTTPS enforced and domain protections in place, though there is room for improvement in implementing security headers and incident response disclosures. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website is trustworthy, safe, and well-positioned to serve its advocacy audience.
Česká agentura na podporu obchodu / CzechTradeexportmag.cz
Government · Czech Republic
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
ExportMag.cz is a professional export magazine operated by the CzechTrade agency and the Ministry of Industry and Trade of the Czech Republic. It serves as an authoritative information platform targeting exporters, businesses, and stakeholders interested in international trade. The website offers expert articles, news, and support services related to export and business development. The content is well-structured, professionally presented, and updated regularly, reflecting a mature digital presence. Technically, the website is built on WordPress with modern plugins such as Yoast SEO Premium and Bootstrap for responsive design. It integrates Google Tag Manager for analytics and employs a cookie consent mechanism compliant with GDPR. While the site is mobile-optimized and performs moderately well, there is room for improvement in security headers and analytics configuration. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks several recommended security headers. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS registration data reduces the ability to fully verify domain legitimacy, though the content and business affiliations strongly indicate a legitimate government-backed entity. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers, WHOIS transparency, and contact information completeness would enhance trust and security posture.
- Plus Hosting Grupa d.o.o.
crohost.net
Technology · Croatia
54Medium
NIS2 27 · GDPR 25
NIS2 27 · GDPR 25
Optima Hosting, operated by Plus Hosting Grupa d.o.o., is a well-established Croatian web hosting provider offering a range of services including shared hosting, reseller hosting, VPS cloud hosting, domain registration, and mail hosting. The company targets both individual and business customers, emphasizing security, reliability, and customer support. Their market presence extends to Bosnia and Herzegovina with a dedicated domain. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service descriptions. Technically, the website leverages modern web technologies including SvelteKit framework, FontAwesome icons, and integrates multiple analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. Cookie consent is managed via Cookiebot, indicating a commitment to privacy compliance. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. However, explicit security headers and a dedicated security policy or vulnerability disclosure page are absent. The WHOIS data is privacy protected and unavailable, which is typical for hosting providers but limits domain age verification. Contact information and abuse reporting channels are clearly provided, supporting incident response readiness. Overall, the website demonstrates a solid security posture and business credibility with room for improvement in explicit security policies and headers. The domain's privacy protection is justified given the business type. The site is safe for general audiences with no adult or questionable content detected.
Government · Croatia
62Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Osječko-baranjska županija operates as the official regional government authority for the Osječko-baranjska County in Croatia. The website serves as a comprehensive portal for local government information, public notices, investment projects, social services, and EU fund programs. It targets residents, businesses, and stakeholders within the county, providing transparent access to administrative and developmental resources. The site is well-structured, professionally designed, and consistent with government branding standards. Technically, the website is built on Joomla CMS, leveraging modern JavaScript libraries such as jQuery, Bootstrap, and various sliders for dynamic content presentation. It incorporates accessibility features including the UserWay widget and is optimized for mobile devices. The site uses HTTPS and Google Analytics for visitor tracking, with a cookie consent mechanism ensuring GDPR compliance. From a security perspective, the site demonstrates good practices including ISO 27001 certification, HTTPS enforcement, and cookie consent management. However, WHOIS data is unavailable due to GDPR and rate limiting, which is typical for EU government domains. No critical vulnerabilities or exposed sensitive data were detected. The absence of explicit incident response contact information and security.txt is noted as an area for improvement. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include publishing incident response contacts, enhancing security headers, and maintaining regular audits of third-party scripts to sustain security and trust.
Općina Viljevoviljevo.hr
Government · Croatia
50Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
Općina Viljevo operates as the official local government portal for the municipality of Viljevo in Croatia. The website serves as a primary information hub for residents and visitors, providing official announcements, community news, and local government services. The site is positioned as a trusted source of municipal information, targeting local citizens and stakeholders. Technically, the website is built on WordPress CMS with Elementor page builder and enhanced by Yoast SEO for search optimization. It employs modern web technologies and includes a cookie consent mechanism compliant with GDPR regulations. Google Analytics is integrated for visitor insights, with opt-out options to respect user privacy. Security posture is adequate with HTTPS enforced and basic privacy compliance, though there is room for improvement in security headers and explicit policy disclosures. Overall, the website demonstrates a good balance of usability, compliance, and professionalism appropriate for a government entity.
Općina Magadenovacmagadenovac.hr
Government · Croatia
57Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Općina Magadenovac is a Croatian municipal government entity providing local administration and public services to residents of Magadenovac. The website serves as an official communication channel offering news, public notices, open data, and transparency documents. It targets local citizens and stakeholders, supporting community engagement and information dissemination. The business model is governmental, focusing on public service rather than commercial activities. The domain is well-established since 2008, reflecting a stable local government presence. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, hosted by CARNET, a reputable Croatian academic network. The site is mobile-optimized, accessible, and includes modern web technologies. Google Analytics is integrated with a cookie consent mechanism, indicating moderate user tracking with privacy considerations. The site demonstrates good SEO and usability practices. Security posture is solid with HTTPS enforced and cookie consent implemented. However, explicit security headers like CSP and X-Frame-Options are not evident and could be improved. No vulnerabilities or exposed sensitive data were detected. Incident response and security policy information are not publicly available, suggesting an area for enhancement. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. It effectively serves its purpose as a municipal information portal with good technical and security standards. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining up-to-date software to ensure ongoing protection and compliance.
- OOtevřená společnost,o. p. s.
otevrenaspolecnost.cz
Non-profit · Czech Republic
50Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Otevřená společnost,o. p. s. is a Czech non-profit organization founded in 2005, dedicated to promoting a well-functioning state with equal opportunities for all citizens. Their work includes advocacy, education, and social services focusing on public information rights, gender equality, debt issues, and police-public relations. The organization maintains a professional web presence with clear contact details and partnerships with reputable foundations and institutions. Technically, the website uses a Pimcore CMS with legacy jQuery and integrates Google Analytics, Google Tag Manager, and Facebook Pixel for tracking. While the site is secure with HTTPS, it lacks published privacy and cookie policies, which is a compliance gap. No security headers or vulnerability disclosures are present, and the use of an outdated jQuery version poses potential security risks. Overall, the website is well-designed, trustworthy, and serves its target audience effectively.
- GORDIC spol. s r.o.
gordic.cz
Technology · Czech Republic
71Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
GORDIC spol. s r.o. is a well-established Czech software company specializing in information systems for public administration and private sector clients. With over 30 years of experience, the company offers a broad portfolio including cybersecurity, cloud services, and training. Their market position is strong within the Czech Republic, supported by compliance with GDPR, ISO standards, and ISMS frameworks. The website reflects a mature digital presence with professional design and comprehensive service offerings. Technically, the site leverages modern frameworks such as Liferay and React, integrates multiple analytics and marketing tools, and maintains good performance and accessibility standards. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response contacts could be improved. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy indicated by the website content and compliance programs. Strategic recommendations include enhancing security header implementation, publishing incident response and vulnerability disclosure policies, and increasing transparency on data retention.
- OOnlineFundraising
onlinefundraising.dk
Non-profit · Denmark
54Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
OnlineFundraising is a Danish company specializing in providing comprehensive fundraising payment solutions tailored for non-profit organizations. Their platform supports multiple payment methods including MobilePay, SMS, and payment cards, and integrates with CRM systems and telemarketing services. The company has a strong market presence with over 200 organizations using their services and has been recognized with the Gazelle 2024 award, indicating growth and business success. Technically, the website is built on WordPress using Elementor, with modern JavaScript libraries and integrations such as Google Tag Manager and Mailchimp, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though the absence of a public security policy and incident response details suggests room for improvement. Overall, the website is professional, trustworthy, and well-optimized for its target audience, with no signs of malicious content or blocking mechanisms.
Zubaruszubarus.com
Technology · Norway
65Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Zubarus is a Norwegian-based company providing a comprehensive membership management system tailored for a wide range of associations and organizations. Established in 2012, the company offers a SaaS platform that enables quick onboarding, member registration, communication, payment processing, event management, and accounting functionalities. The website reflects a professional and consistent brand presence with clear service offerings and transparent pricing. Technically, the site is built on Webflow with integrations including Google Tag Manager, reCAPTCHA, and LiveChat, indicating a modern and interactive digital infrastructure. Security posture is solid with HTTPS and form protections, though improvements are recommended in security headers and privacy compliance. Overall, the business appears credible and well-positioned in its niche market, with strong partner relationships and a clear focus on customer satisfaction.
Eco Valley Foundationecovalley.hu
Non-profit · Hungary
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Eco Valley Foundation is a small, established non-profit organization based in Hungary, dedicated to promoting ecological sustainability through education, volunteer programs, and organic farming projects. Their website reflects a clear mission focused on community engagement and environmental awareness, targeting volunteers, students, and supporters of sustainable living. The organization has a consistent brand presence and provides transparent contact information, enhancing trustworthiness. Technically, the website is built on WordPress with common libraries such as jQuery and Bootstrap, offering moderate performance and good mobile optimization. However, it lacks advanced security headers and privacy compliance features such as cookie consent and privacy policies, which are critical for GDPR adherence. The site uses HTTPS, ensuring secure communication. From a security perspective, the site demonstrates basic best practices like HTTPS and CAPTCHA on forms but lacks published security policies or incident response contacts. No vulnerabilities or suspicious domains were detected. The WHOIS data confirms the domain's legitimacy and long-standing presence, supporting the organization's credibility. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security posture improvements to align with modern standards and regulations.
Other
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website energykaszino.hu is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents any content from being loaded or analyzed. The blocking page indicates that the site is protected by Cloudflare's security service and that the visitor has been blocked due to triggering security rules. No business, contact, or policy information is available from the site. The WHOIS data provided is invalid, showing a domain creation date in the future (January 3, 2025), which is inconsistent and suspicious, further reducing trust in the domain's legitimacy. Due to these factors, a comprehensive analysis of the website's content, security posture, and compliance cannot be performed.
- Allyspin Casino
allyspincasino.hu
Other · Hungary
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Allyspin Casino is an online gambling platform targeting Hungarian adult players, offering a wide range of casino games and sports betting options. The site emphasizes a community feel, responsible gaming, and provides various bonuses and VIP benefits. Technically, the site uses modern web technologies including Matomo analytics and Google Fonts, and is optimized for desktop and mobile devices. Security posture is adequate with SSL encryption and responsible gaming policies, but lacks some advanced security headers and explicit incident response contacts. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the site presents a professional and trustworthy gambling service with room for improvement in privacy and security transparency.
Other
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website bassbet-casino.hu is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents any content from being retrieved or analyzed. The domain name suggests it is related to online gambling or casino services, targeting an adult audience. However, no business, contact, or policy information is available due to the block. The technical infrastructure relies on Cloudflare for security and hosting, but no further details can be confirmed. The WHOIS data is suspicious, showing a domain creation date in the future (January 30, 2025), which undermines the legitimacy of the domain registration. Overall, the site’s security posture cannot be fully assessed, but the presence of a WAF block indicates some level of security enforcement. Due to the lack of accessible content, the risk assessment is limited and the site should be treated with caution.
- PPrivate by Design, LLC
yukon-gold.casino
Other · United States
62Medium
NIS2 47 · GDPR 35
NIS2 47 · GDPR 35
Yukon Gold Casino is an established online gambling platform with over 20 years of industry presence, offering a wide range of casino games, bonuses, and a loyalty program. The website serves as a comprehensive review and affiliate portal for the casino, targeting adult players globally except in restricted countries. Technically, the site is built on WordPress with modern SEO plugins and uses Cloudflare DNS services. It is mobile optimized and provides a downloadable app for enhanced user experience. Security posture is solid with SSL encryption, licensing from reputable authorities, and certifications such as eCOGRA and ISO 27001, though some improvements like enabling DNSSEC and security headers are recommended. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is trustworthy and professional but could enhance transparency and technical security.
Lex Casinolex-casino-lv.com
Hospitality · Latvia
66Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Lex Casino is an online gambling platform targeting Latvian players, offering a wide range of casino games including slots and live dealer games. The site promotes a 150% first deposit bonus and supports multiple payment methods including cryptocurrencies. The business model focuses on online casino entertainment with a medium-sized market presence in Latvia. Technically, the site uses standard web technologies with Cloudflare DNS and is moderately optimized for mobile and SEO. However, the security posture is moderate with some best practices like domain transfer protection but lacks DNSSEC and security headers. Privacy and compliance documentation such as privacy policy and cookie policy are missing, reducing GDPR compliance confidence. WHOIS data raises concerns due to a future domain creation date and lack of registrant transparency, impacting trustworthiness. Overall, the site is functional and professional but requires improvements in compliance, transparency, and security to enhance credibility and user trust.
- KKülföldi Kaszinók
kulfoldionlinekaszinok.com
Other · Hungary
62Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Külföldionlinekaszinok.com is a Hungarian language affiliate and review website specializing in international online casinos. It provides detailed casino reviews, bonus offers, and payment method guides targeted primarily at Hungarian players seeking trustworthy and licensed international casino operators. The site positions itself as an independent and reliable source for casino comparisons and player education. Technically, the website is built on WordPress using the GeneratePress theme, integrating modern web technologies such as Google Tag Manager and Microsoft Clarity for analytics and user behavior tracking. The site is hosted behind Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is basic, with a privacy policy present but no explicit cookie consent mechanism detected. Business credibility is supported by transparent WHOIS data and professional content authored by an experienced industry reporter. Overall, the website offers a good user experience with clear navigation, relevant content, and mobile optimization, making it a trustworthy resource for its target audience.
- AArtichoke Media Limited
easyveggieideas.com
Media · United Kingdom
73Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
EasyVeggieIdeas.com is a UK-based media website operated by Artichoke Media Limited, specializing in vegetarian recipes and related lifestyle content such as cruelty-free beauty and eco living. The site offers a large collection of free recipes curated by professional cooks and chefs, targeting vegetarians, vegans, and eco-conscious consumers. The business model is primarily content publishing supported by advertising and newsletter subscriptions, positioning itself as a niche media player in the vegetarian lifestyle market. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, DoubleClick advertising, and jQuery libraries. It features responsive design optimized for mobile devices and includes cookie consent mechanisms compliant with GDPR. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site uses HTTPS and implements CSRF tokens in forms, but lacks explicit security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with clear privacy and cookie policies. However, the absence of WHOIS data for the domain reduces transparency and trustworthiness. Overall, the website is professional, content-rich, and user-friendly with a solid privacy posture. The main risk lies in the lack of domain registration transparency, which should be addressed to improve trust. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clearer direct contact information.
Instruct Studioinstruct.studio
Media · United Kingdom
53Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Instruct Studio is a small, multi-disciplinary design studio based in Manchester, UK, specializing in design, print, and digital services primarily for the architectural, media, and cultural sectors. The company has an established market presence since 2015 and positions itself as a provider of honest and strategic design solutions. Their website reflects a professional and consistent brand image with clear contact information and social media presence. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and integrates third-party services like Vimeo and Google Analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and anti-bot measures in place, but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is a notable gap, as no privacy or cookie policies were found, which could expose the business to regulatory risks. Overall, the website is trustworthy and professional but would benefit from improved privacy and security practices.
- OOH Digital | Manchester Web Development
oh.digital
—
65Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Suzana Stojkovićsuzanastojkovic.com
Other
56Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Suzana Stojković operates a professional creative services website specializing in branding, graphic design, web design, photography, and video/animation services. The website presents a strong market position with a portfolio of satisfied clients and testimonials, targeting businesses and individuals seeking tailored creative solutions. Technically, the site is built on WordPress using Elementor and several modern plugins, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and incident response mechanisms are recommended. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which should be verified to ensure trustworthiness. Overall, the website is professional, user-friendly, and compliant with privacy regulations, making it a credible digital presence for the business.
Challenge 22 - Animals Now, Vegan Izazov 22 - Sloboda za životinjevegan-izazov22.com
Non-profit · Serbia
54Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Vegan Izazov 22 is a Serbian-based non-profit initiative promoting a 22-day vegan challenge aimed at encouraging plant-based diets for animal welfare, environmental sustainability, and personal health. The website serves as an educational and community platform offering free access to recipes, mentorship, and expert advice. It has a significant market presence with over one million participants historically and active social media engagement. Technically, the site is built on WordPress using Elementor and integrates modern analytics and marketing tools such as Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and no explicit security policies are published. Privacy compliance is strong with clear cookie consent and GDPR-aligned policies. Overall, the website is professional, trustworthy, and well-positioned within the non-profit vegan advocacy sector.
Niech Żyją!niechzyja.pl
Non-profit · Poland
59Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Niech Żyją! is a Polish non-profit coalition of NGOs and individuals dedicated to ending bird hunting in Poland. Established in 2012, the campaign focuses on advocacy, public awareness, and mobilizing support through petitions and educational resources. The website serves as a platform for news, campaign information, and engagement with supporters. Technically, the site is built on WordPress, leveraging common plugins and technologies such as Google Analytics and reCAPTCHA for security and analytics. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and spam protection on forms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the domain registration data aligns well with the website's mission and history, indicating a trustworthy and legitimate presence.
Buy Better Foodbuybetterfood.eu
Non-profit
52Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
Buy Better Food is a Europe-wide coalition advocating for sustainable food procurement in public institutions such as schools, hospitals, and elderly care homes. The coalition comprises over 100 members and focuses on promoting healthy, environmentally friendly, and socially responsible food systems by 2030. The website serves as an information hub, campaign platform, and resource center for stakeholders interested in sustainable food policies. Technically, the website is built on Drupal CMS with modern JavaScript libraries such as jQuery and Slick Carousel. It employs privacy-conscious analytics via Matomo with Do Not Track and cookie disabling enabled. The site is mobile-optimized and presents content clearly with good navigation and professional design. From a security perspective, the site uses HTTPS with a good SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for compliance and enhanced security. No incident response or vulnerability disclosure information is published, which could be improved to strengthen trust. Overall, the website is trustworthy, professional, and aligned with its non-profit advocacy mission. It effectively communicates its goals and engages its audience through events, petitions, and media coverage. Strategic improvements in privacy compliance and security policies would further enhance its posture.
- NNAHhaft e.V.
foodsystemchange.org
Non-profit · Germany
51Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website foodsystemchange.org is registered to NAHhaft e.V., a German non-profit organization founded in 2020. The domain and registrant information are consistent and legitimate, indicating a small non-profit entity likely focused on food system change initiatives. However, the website content is currently inaccessible, returning a TYPO3 404 error page with no active site configuration. This prevents any meaningful analysis of business services, audience, or content. The technical infrastructure shows use of TYPO3 CMS hosted by Cronon GmbH in Germany, but lacks DNSSEC and security headers, indicating a basic security posture. No privacy, cookie, or terms of service policies are present, and no contact information or forms are available on the page. No analytics or marketing tools are detected, and no adult or questionable content is present. Overall, the site is non-functional and lacks essential compliance and security features.
True Animal Protein Price Coalitiontappcoalition.eu
Non-profit · Netherlands
70Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The True Animal Protein Price Coalition is a small non-profit organization dedicated to advocating for fair pricing and taxation policies to promote sustainable production and consumption of meat and dairy products. Their market position is niche, targeting policymakers, environmental advocates, and consumers interested in sustainable food systems. The website provides key services such as organizing events, publishing reports, and distributing newsletters to support their advocacy efforts. Technically, the website is built on a modern stack including Bootstrap, FontAwesome, Google reCAPTCHA, and Google Tag Manager, hosted under a reputable registrar. The site is mobile-optimized with good SEO and accessibility basics. From a security perspective, the website enforces HTTPS, uses reCAPTCHA for form protection, and implements a cookie consent mechanism, reflecting a good security posture. However, it lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR compliance indicators are present. Overall, the website is professional, trustworthy, and safe, with no adult or questionable content. The domain registration is consistent with the organization's claims, and no suspicious patterns were found. Strategic recommendations include enhancing security headers, publishing a security policy, and improving incident response transparency to further strengthen trust and compliance.
- Aquatic Animal Alliance
aquaticanimalalliance.org
Non-profit · United States
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Aquatic Animal Alliance is a small US-based non-profit coalition founded in 2020 by the Aquatic Life Institute. It focuses on improving the welfare of aquatic animals exploited in the global food system through advocacy, policy, education, and research. The website is professionally designed using Squarespace, with good mobile optimization and clear navigation. It leverages partner organizations to strengthen its mission and outreach. Technically, the site uses modern web technologies and includes cookie consent mechanisms, but lacks some security headers and formal privacy and terms of service documents. The domain registration is privacy protected but consistent with the organization's profile and age. Overall, the site presents a trustworthy and mission-driven presence with room for improvement in compliance and security practices.
Aicadoaicado.ai
Technology · Iceland
73Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Aicado.ai is a technology startup founded in 2023, offering a no-code AI implementation platform that enables businesses and non-technical users to embed customizable AI models into their websites. The platform supports a wide range of AI functionalities including image generation, editing, speech transcription, chatbots, and more, positioning itself as an accessible AI integration hub. Technically, the website is built on the Bubble.io platform, leveraging modern JavaScript libraries and analytics tools such as Google Tag Manager and Microsoft Clarity. The site is hosted on a CDN with HTTPS enabled, ensuring secure access. However, the absence of explicit privacy, cookie, and terms of service policies, as well as lack of security headers, indicates room for improvement in compliance and security posture. No direct contact information or incident response channels are publicly available, which may impact user trust. Overall, the website presents a professional and functional interface with moderate security and privacy compliance, suitable for its startup stage.
Sherpas, s.r.o. (projekt WebTop100)webtop100.cz
Media · Czech Republic
73Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
WebTop100 is a well-established digital marketing competition platform primarily serving the Czech and Slovak markets. Operated by Sherpas, s.r.o., it offers a comprehensive ecosystem for digital marketing professionals including competitions, conferences, and strategic consultations. The platform targets marketing managers and specialists responsible for corporate digital presentations, positioning itself as a leading authority in the digital marketing space in the region. The website features detailed category descriptions, expert judges, and strong media partnerships, enhancing its market credibility. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and YouTube APIs, ensuring robust tracking and user engagement capabilities. The site is mobile-optimized with good accessibility and SEO practices, providing a positive user experience. However, some security headers are not explicitly detected, and there is no visible privacy policy or terms of service, which are areas for improvement. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms are implemented, indicating attention to privacy compliance, though explicit privacy and terms documents are missing. The absence of WHOIS data reduces transparency and trust assessment, but the professional presentation and structured data suggest legitimacy. Overall, WebTop100 presents a professional, content-rich, and user-friendly platform with strong business credibility. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and clarifying domain registration details to improve trust and compliance.
Sherpassherpas.cz
Technology · Czech Republic
73Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Sherpas is a strategic digital agency based in the Czech Republic specializing in digital design, branding, and marketing services. The company positions itself as a guide to digital success, offering services such as branding, digital design, lead generation, e-commerce marketing, and retention marketing. Their website showcases a professional design with extensive client testimonials and case studies, indicating a strong market presence and trustworthiness. Technically, the website is built on the Webflow platform, utilizing modern web technologies including Google Tag Manager, Facebook Pixel, and other marketing and analytics tools. The site is mobile-optimized, accessible, and performs moderately well. Privacy and cookie policies are implemented with consent mechanisms, reflecting good compliance with GDPR requirements. From a security perspective, the site uses HTTPS and has secure form inputs but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, but the professional web presence and business information suggest a legitimate operation. Overall, Sherpas presents a mature digital footprint with strong business credibility and good technical implementation. Strategic improvements in security headers and incident response transparency are recommended to enhance security posture and trust further.
- Matěj Verhaegen, Tomáš Protiva
autojidelna.cz
Technology · Czech Republic
60Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
Autojídelna is a small technology company offering an open source lunch ordering application called Icanteen. The website serves as a landing page providing information about the app's features such as notifications and automatic login. The business targets users who want a streamlined lunch ordering experience, leveraging open source transparency to build trust. The domain is newly registered in late 2023, consistent with a recent product launch. Technically, the site uses modern frontend technology (VitePress) and is hosted behind Cloudflare DNS, ensuring good performance and security. The website is mobile optimized and accessible with clear navigation and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies are missing. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or terms of service. Contact information is limited to a company email address. Overall, the site is trustworthy and professional but could improve in privacy and security policy transparency.
- BBusiness Media One, s.r.o.
bmone.cz
Media · Czech Republic
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Business Media One, s.r.o. is a well-established Czech media publishing company specializing in architecture and construction-related content. With over 25 years of market presence, it operates multiple award-winning magazines and web portals targeting homeowners, architects, and construction professionals. The company holds a strong market position as a leading publisher in its niche. Technically, the website is built on WordPress with the Divi theme, leveraging common web technologies and Google Analytics for user insights. The site is mobile-optimized and professionally designed, offering a good user experience. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and explicit incident response information. Privacy compliance is partially met with a privacy policy present but no visible cookie consent mechanism. Overall, the business credibility is high with clear contact information and consistent domain registration data.
Business Media s.r.o.rodinnydom.online
Media · Czech Republic
59Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Rodinný dom is a Czech/Slovak media website specializing in family homes, construction, interior design, and related lifestyle content. It operates under Business Media s.r.o., a Czech company, and targets homeowners and enthusiasts in the region. The website uses WordPress with a modern plugin stack including GDPR compliance and push notifications. It maintains a good security posture with HTTPS and cookie consent but lacks explicit security policies or incident response information. The site is content-rich, professionally designed, and well-branded, serving as a trusted media source in its niche.
BUSINESS MEDIA ONE, s. r. o.dumabyt.cz
Media · Czech Republic
57Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Dumabyt.cz is a Czech online magazine specializing in home living, construction, interior design, and gardening. Operated by BUSINESS MEDIA ONE, s. r. o., the site offers a rich collection of articles, news, and inspiration targeted at homeowners, builders, and enthusiasts. The website demonstrates a professional and consistent brand presence with a clear focus on its niche market. Technically, the site runs on WordPress 6.8.1 with modern frontend technologies including jQuery and Typekit fonts, and integrates a consent management platform for GDPR compliance. Security posture is strong with HTTPS enforced and multiple security headers present, though explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, but the website content and business information indicate a legitimate and established media company. Overall, the site is well-designed, content-rich, and compliant with privacy regulations, serving a general audience safely.
BUSINESS MEDIA ONE, s. r. o.mujdum.cz
Media · Czech Republic
57Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Můj Dům is a Czech media company specializing in content related to home building, furnishing, and living. The website serves as an online magazine providing articles, tips, and inspiration for homeowners and builders primarily in the Czech Republic. The company BUSINESS MEDIA ONE, s. r. o. operates the site, which has been active since 2006. The site is well-branded, professionally designed, and targets a medium-sized audience interested in construction and interior design. Technically, the site runs on WordPress 6.8.1 with modern JavaScript libraries and uses Google Tag Manager and Usercentrics for analytics and cookie consent management. The site is mobile optimized and SEO friendly. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. WHOIS data is missing, which reduces domain transparency and trust but the site itself appears legitimate and professionally maintained. No direct contact emails or phone numbers are found on the homepage, which could be improved for business credibility. Overall, the site is safe, suitable for general audiences, and uses standard advertising and tracking services.
Materiály pro stavbuimaterialy.cz
Media · Czech Republic
55Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Materiály pro stavbu is a Czech-language online media platform specializing in construction materials, technologies, and industry news. Established in 2006, it serves construction professionals, architects, engineers, and manufacturers primarily in the Czech Republic. The website offers categorized articles, event information, and product insights, supported by industry partnerships. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is moderate with HTTPS enabled but missing some security headers. Contact information is primarily via forms with no explicit emails or phone numbers displayed. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.
- MMEA Metal Applications
mea.cz
Manufacturing · Czech Republic
63Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
MEA Metal Applications is a Czech Republic based manufacturing company specializing in metal products such as gratings, transport technology, and drainage solutions. It operates as part of the larger MEA Group, with multiple subsidiaries and e-commerce presence. The website serves primarily as a landing page linking to related MEA Group companies and e-shops, targeting industrial and commercial customers. Technically, the site uses basic web technologies including jQuery and is hosted by a Czech provider, Websupport. The site lacks advanced CMS or analytics tools and has minimal interactive features. Security posture is moderate with HTTPS assumed but no visible security headers or policies published. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is functional but basic in design and content quality.
LASSELSBERGER, s.r.o.rako.cz
Manufacturing · Czech Republic
70Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
LASSELSBERGER, s.r.o. operates the RAKO brand, a historic and leading manufacturer of ceramic wall and floor tiles in the Czech Republic and Slovakia, with a legacy spanning nearly 140 years. The company targets construction professionals, architects, distributors, and end customers seeking high-quality ceramic tiles. Their business model focuses on manufacturing and distribution, positioning them as a key player in the regional manufacturing sector. The website reflects a professional and consistent brand image with multilingual support, catering to a broad audience.
Quattro Creative Studiowearequattro.com
Other
55Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Quattro Creative Studio is a small creative agency specializing in ethical and sustainable design solutions, offering services ranging from brand strategy to print and digital design. The company targets businesses seeking to expand their brands with a focus on sustainability and ethical passion. The website reflects a modern and professional design, built using contemporary technologies such as Nuxt.js and Tailwind CSS, hosted by OVH sas. The technical infrastructure is moderately optimized for performance and mobile responsiveness, with basic accessibility features. Security posture is adequate with HTTPS enabled and domain registration protections in place, but lacks advanced security headers and explicit security policies on the site. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the website is trustworthy and professional but could improve transparency and security practices.
- OOrdre des Architectes et des Ingénieurs-conseils (OAI)
unplanpourtonavenir.lu
Government · Luxembourg
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.unplanpourtonavenir.lu serves as an informational platform for the Ordre des Architectes et des Ingénieurs-conseils (OAI) in Luxembourg, focusing on educating and informing students and professionals about the engineering consultancy profession. It provides resources on educational paths, construction projects, and job opportunities, positioning itself as a professional association resource. Technically, the site uses basic HTML, CSS, and older JavaScript libraries such as jQuery 1.7.1 and the jQuery Cycle plugin, indicating a somewhat dated technology stack. The site lacks modern CMS or frameworks and shows basic mobile and accessibility features. Security posture is weak due to missing HTTPS verification, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is unavailable due to a malformed domain name error, limiting domain trust verification. Overall, the site is functional but requires modernization and improved security and privacy compliance to enhance trust and user experience.
Worldsoftworldsoft-support.info
Technology · Switzerland
68Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Worldsoft operates a professional support website dedicated to assisting users of its software products, including website creation tools, email management, and business suite applications. The site offers comprehensive documentation, a ticketing system for support requests, and multiple contact channels such as phone and email. The business targets its existing customer base and users seeking technical assistance, positioning itself as a reliable technology service provider in Switzerland. Technically, the website employs modern web technologies including JavaScript, CSS3, and integrates third-party services like Google Translate and Lordicon animations to enhance user experience. The site is mobile optimized and provides a clear navigation structure, although accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and cookie consent mechanisms indicates room for improvement. WHOIS data is privacy protected, which is typical for technology companies, and does not raise immediate concerns. Overall, the website is trustworthy, professional, and serves its support function effectively.
Venuu.comvenuu.com
Hospitality
72Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Venuu.com operates as a multi-country online platform specializing in venue browsing and booking services, targeting event organizers and individuals seeking event spaces primarily in Spain, Denmark, Finland, Sweden, and international locations. The platform positions itself as a regional and international marketplace within the hospitality sector, leveraging a business model centered on connecting venue providers with customers through an online interface. The website content is basic but functional, with consistent branding and a clear focus on venue services.
Venuuvenuu.se
Hospitality · Sweden
75Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Venuu.se is a Swedish online marketplace specializing in event venue bookings, offering over 1900 venues for various event types including weddings, conferences, and parties. The platform targets event organizers and venue owners, providing a streamlined search and booking experience. The website is professionally designed, mobile-optimized, and supports multiple languages, reflecting a mature digital presence. Technically, the site leverages modern JavaScript frameworks, Ruby on Rails backend, and is hosted on AWS infrastructure, ensuring reliable performance and scalability. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, though there is room for improvement in publishing explicit security policies and enhancing DNS security with DNSSEC. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.
Panoptopanopto.com
Technology
74Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Panopto is an enterprise-grade SaaS company specializing in AI-powered video tools designed to enhance knowledge sharing across teams and educational campuses. Their platform enables secure video creation, sharing, and management, targeting businesses and educational institutions. The website reflects a mature digital presence with comprehensive content, strong branding, and integration of advanced marketing and analytics technologies. The company positions itself as a leader in video knowledge management solutions with a focus on AI enhancements. Technically, the website is built on WordPress with modern SEO practices, including structured data and responsive design. It integrates multiple marketing and analytics tools such as Marketo, Google Tag Manager, and Visual Website Optimizer, indicating a sophisticated approach to user engagement and conversion tracking. Performance and accessibility are good, supporting a positive user experience across devices. From a security perspective, the site enforces HTTPS and implements key security headers, demonstrating adherence to best practices. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. The absence of WHOIS registration data reduces transparency but does not detract significantly from the overall trustworthiness given the professional site presentation. Overall, Panopto's website is a well-executed digital asset supporting its business objectives, with strong content quality and technical implementation. Strategic enhancements in security transparency and domain registration disclosure would further strengthen trust and compliance posture.
Panoptopanopto.eu
Technology
73Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Panopto operates as a leading AI-powered video learning platform targeting educational institutions and enterprises. The company provides a comprehensive suite of video creation, management, and analytics tools designed to enhance knowledge sharing and training effectiveness. Their market position is strong, supported by a large user base and reputable customer logos. Technically, the website is built on WordPress with modern SEO and analytics integrations, delivering a professional and responsive user experience. Security posture is robust with HTTPS and security best practices observed, though explicit security policies and incident response contacts are not publicly visible. The absence of WHOIS data is a notable anomaly, potentially indicating privacy protection or a registry issue, which slightly impacts trust assessment. Overall, the website is professional, secure, and business credible, with room for improvement in privacy transparency and contact information availability.