Medium-risk security reports
99,067 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,187001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
68,251–68,300 of 99,067
Rocket.netonrocket.site
Technology
56Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Rocket.net is a managed WordPress hosting provider targeting agencies, creatives, bloggers, enterprises, and WooCommerce store owners. The company positions itself as a premium hosting platform delivering fast, secure, and easy-to-use WordPress hosting solutions with enterprise-grade features such as CDN, WAF, malware protection, and VIP support. The website is professionally designed, content-rich, and optimized for SEO, reflecting a mature and credible business with a domain age dating back to 1997. Technically, the site leverages WordPress CMS, Cloudflare CDN, HubSpot analytics, and modern web technologies ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, firewall, malware protection, and automatic updates, though some security headers and explicit security policies could be improved. Privacy and cookie policies are present and compliant with GDPR, and contact is primarily via forms and social media. Overall, Rocket.net demonstrates a high level of digital maturity, business credibility, and security awareness, making it a trustworthy hosting provider in its market segment.
Groovegroovehq.com
Technology
66Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Groove is a SaaS company providing a simple yet powerful help desk software solution targeted primarily at small and growing businesses. Positioned as a top-rated alternative to enterprise tools like Zendesk, Groove offers key services including a shared inbox, knowledge base, live chat, reporting, and integrations. The website demonstrates a strong market presence with over 2,000 customers and 12,500+ support agents using the platform daily. Technically, the site employs modern analytics tools such as PostHog and Google Tag Manager, and is well-optimized for performance and mobile devices. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and incident response information suggests room for improvement. The lack of WHOIS data transparency slightly reduces trust but does not negate the professional and credible business presentation. Overall, Groove presents a mature digital presence with solid business credibility and technical implementation.
Hotel St. Brunohotelstbruno.pl
Hospitality · Poland
60Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Hotel St. Bruno is a medium-sized hospitality business located in Giżycko, Poland, offering luxury accommodation, spa, wellness, culinary services, and event hosting. The website is professionally designed with a clear focus on user experience and online booking capabilities. The technical infrastructure leverages modern JavaScript libraries, Google Tag Manager, and Profitroom's booking platform, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit privacy policies and terms of service are missing, which could be improved for compliance. Overall, the domain registration and website content are consistent and legitimate, supporting a trustworthy online presence.
Art of fiberartoffiber.com
Technology
71Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Art of Fiber is a technology company specializing in innovative exhibitor management solutions for the event servicing industry. Their platform offers a full-service marketplace enabling venues, organizers, and exhibitors to digitize, simplify, and automate the process of designing and ordering exhibition stands. The company positions itself as an innovative leader, trusted by leading venues and contractors globally, with a focus on improving exhibitor experiences and operational efficiency. Technically, the website is built on WordPress using Elementor and Yoast SEO, with integrations for Google Analytics and Tag Manager, hosted behind Cloudflare DNS. The site demonstrates good digital maturity with modern design and mobile optimization. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and public security policies. Privacy compliance is basic, with cookie consent implemented but no explicit privacy or terms of service pages found. Overall, the website is professional and trustworthy, though improvements in security transparency and privacy documentation are recommended.
- Trade Show News Network
tsnn.com
Media
72Medium
NIS2 25 · GDPR 88
NIS2 25 · GDPR 88
Trade Show News Network (TSNN) is a specialized media organization focused on providing news, insights, and information about the trade show industry. Established in 1996, TSNN serves trade show professionals, event organizers, exhibitors, and industry stakeholders by delivering reliable content on show business, venues, technology, marketing, and leadership. The website demonstrates a professional and consistent brand presence with comprehensive content tailored to its niche audience. Technically, the site employs modern JavaScript libraries and analytics tools, including Google Tag Manager, Microsoft Clarity, and Facebook SDK, ensuring robust tracking and marketing capabilities. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and incident response information are not publicly available. Overall, TSNN presents a trustworthy and professional digital presence with room for improvement in transparency around security and domain registration details.
Meetings Panamameetingspanama.com
Hospitality · Panama
56Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Meetings Panama is a specialized platform promoting Panama as a premier destination for meetings, incentives, conferences, and exhibitions (MICE). The website offers a comprehensive directory of venues, transport options, MICE providers, and tourism activities, targeting event planners and corporate clients. The business operates in the hospitality and tourism sectors with a focus on Panama's event industry. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics for tracking. It uses Cloudflare DNS and GoDaddy as registrar, with SSL enabled ensuring secure connections. However, DNSSEC is not enabled and no advanced security headers were detected, indicating room for security improvements. Privacy and cookie policies are not explicitly present, which is a compliance gap. The site shows good content quality, branding consistency, and professional design, with active social media presence enhancing trust. Overall, the security posture is moderate, and the business credibility is high given the clear focus and partnerships with recognized hotel brands and tourism organizations.
Exhibition News | The trade for shows.exhibitionworld.co.uk
Media · United Kingdom
61Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Exhibition News is a specialized media publication focused on delivering the latest news, insights, and sponsored content related to the exhibition and events industry. Founded in 2015 and operated under Mash Media Group Limited, the website targets professionals and stakeholders within the exhibition sector, providing industry news, educational content, job listings, and event promotion. The site maintains a consistent brand presence with active social media channels and a professional design optimized for desktop and mobile users. Technically, the website is built on WordPress using the Divi theme and incorporates modern web technologies such as jQuery, FontAwesome, and Yoast SEO for search engine optimization. It employs HTTPS with a strong SSL configuration and integrates Google Analytics and Google Tag Manager for analytics and tracking. Security measures include the use of Google reCAPTCHA v3 to protect forms and AJAX endpoints, although some security headers are missing, which could be improved. From a security and compliance perspective, the site lacks explicit privacy and terms of service pages, which are critical for GDPR compliance and user trust. Cookie consent is implemented with a clear mechanism, but no detailed privacy policy or incident response contacts are provided. The WHOIS data is consistent with the website's business claims, showing a domain registered since 2015 with a reputable registrar. No suspicious patterns or vulnerabilities were detected in the content or technical setup. Overall, Exhibition News presents a professional and trustworthy online presence for its niche market. However, it should enhance its privacy and security posture by publishing comprehensive policies, adding security headers, and improving accessibility features to meet higher compliance standards and user expectations.
Exhibitor Groupexhibitoronline.com
Other · United States
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Exhibitor Group operates Exhibitor Online, a comprehensive resource dedicated to trade show and corporate event marketing professionals. The website offers a variety of services including EXHIBITOR magazine, professional certification through the Certified Trade Show Marketer (CTSM) program, and educational events such as EXHIBITORLive and eTrak. The company positions itself as a leader in trade show and event marketing education, targeting marketers and event professionals seeking best practices and industry insights. Technically, the website employs a mature digital infrastructure with modern analytics and advertising technologies including Google Tag Manager, Google Analytics GA4, Facebook Pixel, and Bing UET. The site is served over HTTPS and features a structured layout with good content quality and navigation. However, mobile optimization and accessibility are basic, and explicit privacy and cookie policies are not readily found, indicating room for improvement in compliance and user trust. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data but lacks visible security headers and published security policies. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, though the website content and branding suggest legitimacy. Overall, the site maintains a good security posture but should enhance privacy compliance and transparency. The overall risk assessment is moderate with recommendations to implement explicit privacy and cookie policies, improve mobile and accessibility features, publish security and incident response policies, and clarify domain registration information to strengthen trust and compliance.
Eventos Latinoamericanoseventoslatam.com
Media · Costa Rica
52Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Eventos Latinoamericanos is a specialized media portal and digital magazine serving the meetings and incentives industry across Latin America and the Caribbean. Founded in 2018, it provides industry news, trends, event coverage, and digital editions targeting professionals and companies involved in corporate events. The website is built on WordPress using popular page builders and integrates tracking tools such as Google Tag Manager and Facebook Pixel. While the site demonstrates good SEO and content quality, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. No incident response or vulnerability disclosure information is published. Overall, the site is professional and trustworthy within its niche but should improve privacy and security transparency to enhance compliance and user trust.
Punto Micepuntomice.com
Media · Spain
69Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Punto Mice operates as a leading Spanish-language media publication dedicated to the MICE (Meetings, Incentives, Conferences, and Exhibitions) sector, primarily serving Spain and Latin America. The website offers industry news, event calendars, directories, and newsletters, positioning itself as a key communication platform within this niche market. The company has an established online presence since 2013, reflecting maturity and consistent content delivery. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and marketing tools like Sendinblue and Brevo. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. Hosting is provided by HOSTINGER operations, UAB, a reputable provider. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is basic, with no explicit cookie or privacy policies detected, indicating room for improvement in GDPR adherence. Contact information is limited to forms, with no direct emails or phone numbers publicly available. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user trust.
UFI, The Global Association of the Exhibition Industryuficongress.org
Hospitality
59Medium
NIS2 10 · GDPR 70
NIS2 10 · GDPR 70
The website www.uficongress.org represents the 92nd UFI Global Congress 2025, a major event organized by UFI, The Global Association of the Exhibition Industry. The event is positioned as a premier global gathering for exhibition industry leaders, scheduled to take place in Hong Kong at AsiaWorld-Expo. The site provides detailed information about the event, its significance marking UFI's 100-year anniversary, and highlights from previous congresses. The target audience includes exhibition professionals and industry leaders worldwide. Technically, the website employs a modern tech stack including Google Tag Manager, Hotjar, Facebook Pixel, and a consent management platform (Didomi). It is built on the Eventmaker CMS platform and shows good mobile optimization and SEO practices. The site uses HTTPS and implements cookie consent mechanisms, indicating a reasonable level of privacy compliance. However, explicit privacy policy and terms of service pages are not clearly found. From a security perspective, the site uses HTTPS and consent management but lacks explicit security headers and visible incident response or security policy documentation. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable due to a malformed request, but the domain and content appear legitimate and consistent with a reputable global association event. Overall, the website is professional, content-rich, and trustworthy, with moderate to good technical and security posture. Recommendations include adding explicit privacy and security policy pages, enhancing security headers, and providing clear contact information for incident response and data protection inquiries.
Maspexmaspex.ro
Retail · Romania
58Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Maspex is a large food manufacturing and distribution company operating in Central and Eastern Europe, with a strong market position and a broad portfolio of food products. The website reflects a professional corporate presence with clear branding and relevant business content. The technical infrastructure is based on WordPress CMS with common web technologies such as jQuery and Google Tag Manager, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although there is room for improvement in security headers and incident response transparency. Overall, the website is compliant with GDPR and provides a good user experience with moderate performance and mobile optimization.
Вода Велинградvelingradvoda.bg
Other · Bulgaria
57Medium
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
The website velingradvoda.bg represents a small Bulgarian business specializing in the production and sale of natural mineral water sourced from the Velinrad region. The site emphasizes the purity, alkalinity, and deep origin of the water, targeting health-conscious consumers and general mineral water buyers. The company maintains a local/regional market position with a clear focus on product quality and natural origin. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for GDPR-compliant cookie consent, and YouTube embedded videos for rich media content. Hosting is provided by a Bulgarian hosting provider, ensuring regional relevance and performance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and policies could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed through Cookiebot integration, though explicit privacy and security policies on the domain are limited. Overall, the website is professional, trustworthy, and well-optimized for its purpose.
GRUPA MASPEX Sp. z o.o.akademiapuchatka.pl
Education · Poland
71Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Akademia Bezpiecznego Puchatka is a well-established Polish educational program focused on child safety, targeting first-grade primary school students and preschool children. It is operated under the parent company GRUPA MASPEX Sp. z o.o., a reputable entity in Poland. The program offers free educational materials, certification, and testing to schools and preschools, supported by official patronages including the Polish Police and regional education authorities. The website is professionally designed, content-rich, and highly relevant to its audience, with strong trust indicators such as testimonials and official endorsements. Technically, the website is built on WordPress and uses modern JavaScript libraries like jQuery and Owl Carousel. It is mobile-optimized and includes cookie consent mechanisms compliant with GDPR. While HTTPS is properly implemented, the site could improve its security posture by adding HTTP security headers and publishing a security policy or incident response contacts. Analytics are managed via Google Tag Manager, with moderate user tracking balanced by privacy compliance. Security-wise, the site shows good practices with secure forms and no visible vulnerabilities or exposed sensitive data. However, the absence of a security.txt file and explicit incident response information suggests room for maturity. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness. The risk profile is low, with no adult or questionable content detected. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen the website's security and compliance posture.
Grupa Maspex Sp. z o.o.przyjacielenatury.pl
Education · Poland
63Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Kubusiowi Przyjaciele Natury is a large-scale Polish educational program focused on ecological awareness for preschool children, parents, and teachers. Operated by Grupa Maspex Sp. z o.o., the program offers educational materials, activities, and surveys to promote environmental responsibility. The website serves as a central hub for program information, resources, and registration. It enjoys strong market positioning as one of the largest ecological education initiatives in Poland, supported by reputable partners such as Rekopol and GRID.
Plussszplusssz.pl
Retail · Poland
69Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Plusssz is a Polish vitamin supplement brand offering products that cover 100% of daily vitamin requirements with a focus on natural ingredients and no added sugar. The website positions the brand as an innovative leader in the vitamin complex market in Poland, targeting general consumers interested in health and wellness. The site is built on WordPress with popular plugins for SEO, multilingual support, and performance optimization. Structured data and metadata are well implemented, supporting good SEO and user experience. Security posture is adequate with HTTPS and some best practices, but lacks explicit security headers and formal privacy and cookie policies. Contact information is not explicitly presented in the analyzed content, which may affect user trust and compliance. Overall, the site is professional and functional but could improve privacy compliance and security transparency.
Polski Lek Sp. z o. o.polskilek.pl
Healthcare · Poland
70Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Polski Lek Sp. z o. o. is a well-established Polish manufacturer of dietary supplements, operating since 2000 and part of the Maspex group since 2003. The company targets sensitive consumer groups such as pregnant women, infants, children, and adults, offering a broad portfolio of products and contract manufacturing services. The website reflects a mature digital presence with multilingual support and clear brand positioning. Technically, the site is built on WordPress with modern plugins and libraries, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though it lacks visible cookie consent and formal security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in privacy transparency and incident response documentation are recommended.
GRUPA MASPEX Sp. z o.o.krakus.pl
Retail · Poland
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Krakus.pl is the official website for Krakus, a brand under GRUPA MASPEX Sp. z o.o., specializing in traditional Polish food products such as soups, concentrates, pickles, and condiments. The website presents a professional and well-structured digital presence, showcasing product details, nutritional information, and company contact data. The brand targets consumers seeking authentic, high-quality Polish culinary products, leveraging traditional recipes and trusted ingredients. The site is built on WordPress with Elementor, integrating modern web technologies and tracking tools like Google Tag Manager and Facebook Pixel. Privacy and cookie policies are clearly stated and GDPR compliant, with a dedicated data protection officer contact provided. Security posture is good with HTTPS enforced and reCAPTCHA on forms, though additional security headers and a vulnerability disclosure page could enhance trust. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, Krakus.pl is a credible, secure, and user-friendly website supporting a large, established food manufacturing business.
DrWittdrwitt.pl
Retail · Poland
53Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
DrWitt is a Polish retail brand specializing in isotonic and functional beverages, targeting health-conscious consumers. The website presents a professional and consistent brand image with a focus on hydration products free of preservatives. The company leverages WordPress CMS with common marketing and analytics tools, including Google Analytics and Facebook Pixel, to engage and track visitors. While the site is well-structured and mobile-optimized, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is solid with HTTPS and reCAPTCHA integration, but could be improved with additional security headers and formal policies. Overall, the domain registration and WHOIS data align well with the business profile, indicating legitimacy and consistency.
Maspexwloclawekketchup.pl
Retail · Poland
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Włocławek Ketchup is a traditional Polish ketchup brand with a long-standing heritage, promoted through a WordPress-based website that emphasizes its original recipe and cultural significance. The site targets consumers interested in authentic Polish food products and brand history, leveraging storytelling and digital marketing tools to engage its audience. Technically, the website employs modern web technologies including WordPress 6.2.6, jQuery, Google Tag Manager, Facebook Pixel, and Google reCAPTCHA, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and uses reCAPTCHA for form protection but lacks comprehensive security headers and published security policies, which could be improved to enhance trust and compliance. Overall, the domain registration aligns well with the business claims, supporting the legitimacy of the site.
Maspexmojlowicz.pl
Retail · Poland
68Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website mojlowicz.pl represents the Łowicz brand, a well-established family of fruit and vegetable products including jams, sauces, and ready meals, operated under the Maspex group. The site targets general consumers interested in food products and recipes, offering a professional and consistent brand experience. The business model focuses on manufacturing and retail within the food sector, with a strong market position in Poland. Technically, the website is built on WordPress, utilizing common libraries such as jQuery and Owl Carousel, and integrates Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented, but there is room for improvement in security headers and incident response transparency. Overall, the site is legitimate, trustworthy, and compliant with GDPR requirements, though it lacks explicit contact emails and phone numbers on the homepage.
- Maspex
malma.com
Retail · Poland
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Malma.com is the official website for Makarony Malma, a pasta brand under the Maspex group, a large Polish food manufacturing and retail company. The website presents a professional and consistent brand image focused on food products, particularly pasta with fresh herbs and seafood flavors. The domain age of over 20 years aligns with the established presence of the Maspex group, reinforcing business credibility. The site is primarily targeted at the Polish market and general consumers interested in food products. Technically, the website uses a custom CMS with legacy JavaScript libraries such as jQuery 1.8.2 and various jQuery plugins. Hosting DNS is managed via Amazon AWS nameservers, and Google Tag Manager is used for analytics and tracking. The site is served over HTTPS with a valid SSL certificate but lacks modern security headers and DNSSEC, indicating room for improvement in security hardening. Mobile optimization and accessibility are basic but functional. From a security perspective, the site benefits from HTTPS and domain transfer protection but suffers from outdated JavaScript libraries with known vulnerabilities and missing security headers. No explicit security policies or incident response contacts are provided, which could be a compliance gap. Privacy and cookie policies are present and appear GDPR compliant, with a cookie consent mechanism implemented via a third-party script. Overall, the website is moderately secure and professionally presented but would benefit from technical modernization, enhanced security controls, and more transparent contact and security information. The risk level is moderate with no critical vulnerabilities detected, but improvements are recommended to strengthen security posture and user trust.
Grupa Maspex sp. z o.o sp. Kpuchatek.pl
Retail · Poland
56Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.puchatek.pl serves as a comprehensive portal targeting parents, children, and educators, primarily promoting a children's cocoa drink product line alongside educational content and interactive games. It is operated by Grupa Maspex sp. z o.o sp. K, a well-established entity in Poland. The site integrates educational programs such as the 'Akademia Bezpiecznego Puchatka' which enjoys official patronage, enhancing its market credibility. Technically, the site is built on WordPress with common plugins for SEO, forms, and popups, and employs Google Analytics and Tag Manager for tracking. While the site is mobile-optimized and SEO-friendly, some outdated JavaScript libraries pose potential security risks. Security posture is generally good with HTTPS enforced and secure forms, but lacks explicit security headers and a published security policy or incident response contacts. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. Overall, the site is trustworthy, professional, and well-positioned in its niche.
DecoMorrenodecomorreno.pl
Retail · Poland
60Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
DecoMorreno is a Polish brand specializing in premium cocoa powder products, emphasizing quality sourcing from global plantations and rigorous production standards. The website serves as a marketing and informational platform, targeting consumers interested in high-quality cocoa products. It is affiliated with the Maspex Group, a significant player in the food and beverage sector in Poland. Technically, the site is built on WordPress with integrations such as Google Tag Manager and OneTrust for cookie compliance, hosted likely on AWS infrastructure. The site is well-structured, mobile-optimized, and includes comprehensive privacy and cookie policies compliant with GDPR. Security-wise, the site uses HTTPS and cookie consent mechanisms but runs an outdated WordPress version, which could expose it to vulnerabilities. No explicit security or incident response policies are published, which could be improved. Overall, the website is professional, trustworthy, and compliant, with moderate technical and security maturity.
- TTiger Energy Drink
tigerpower.pl
Energy · Poland
56Medium
NIS2 2 · GDPR 0
NIS2 2 · GDPR 0
Tiger Energy Drink's website is a minimalistic landing page primarily focused on brand presence and social media engagement. The site offers limited content beyond linking to Instagram, Facebook, and YouTube profiles, indicating a marketing-centric approach without detailed business or product information. The technical infrastructure is basic, relying on standard HTML and CSS with no detected CMS or advanced frameworks. Mobile optimization is present but minimal, and no analytics or tracking scripts are embedded. Security posture is weak due to absence of HTTPS confirmation, security headers, and privacy policies. No contact or compliance information is provided, limiting trust and credibility. Overall, the site serves as a simple brand touchpoint rather than a comprehensive business platform.
- Lubella
lubella.pl
Retail · Poland
52Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Lubella.pl is the official website of the Lubella brand, a well-established Polish food manufacturer specializing in pasta, cereals, and snacks. The site reflects a mature brand presence supported by its parent company Maspex, with a focus on family-oriented food products and recipes. The website is professionally designed with consistent branding and clear navigation, targeting general consumers and families in Poland. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and a custom CMS, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. Privacy compliance is well addressed with accessible privacy and cookie policies. Overall, the site presents a trustworthy and professional digital presence for the Lubella brand.
Alcaliaalcalia.pl
Retail · Poland
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Alcalia is a Polish brand specializing in naturally alkaline mineral water with a high pH level, marketed as a health-enhancing product. The website positions Alcalia as a premium water brand and official partner of Polish basketball, targeting health-conscious consumers. The business model focuses on retail sales supported by informational content about the water's properties and research. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, and uses Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the site is professional and trustworthy but could improve transparency and security documentation.
Tymbarktymbark.com
Retail · Poland
65Medium
NIS2 17 · GDPR 65
NIS2 17 · GDPR 65
Tymbark is a well-established Polish beverage and food brand with over 80 years of market presence. The company operates a professional website primarily targeting Polish consumers, offering product information, recipes, and e-commerce links through partners like Allegro. The website is built on WordPress with modern SEO and marketing tools integrated, including Google Tag Manager and Facebook Pixel. The technical infrastructure is solid, with Cloudflare DNS and HTTPS enforced, although DNSSEC is not enabled. Security posture is good with standard best practices observed, but there is room for improvement in DNS security and HTTP headers. Privacy compliance is strong, featuring a comprehensive privacy policy and cookie consent mechanism. No critical security or privacy issues were detected. Overall, Tymbark's digital presence reflects a mature and trustworthy brand with good technical and security standards.
Maspexkubus.pl
Retail · Poland
64Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Kubuś.pl is a professionally developed website representing the Kubuś brand, a leading children's beverage line in Poland owned by Maspex. The site targets parents and children, offering product information, interactive games, audiobooks, and printable content to engage its audience. The brand holds a strong market position as the number one in its category in Poland. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Google Tag Manager, ensuring good performance and mobile optimization. Security measures include HTTPS and Google reCAPTCHA, though explicit security headers and privacy policies are missing. Overall, the site demonstrates a solid security posture and business credibility, with room for improvement in privacy compliance and security transparency.
- MMailerLite Inc
subscribepage.io
Technology · United States
62Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website subscribepage.io is associated with MailerLite Inc, a US-based company founded in 2021 that provides email marketing and landing page services. The current accessible content is an error page indicating the landing page is not found, which limits the ability to fully assess the website's offerings and policies. The technical infrastructure includes Bootstrap 4.1.3 and Cloudflare DNS, but lacks advanced security headers and DNSSEC. No privacy or cookie policies are present, and no contact or incident response information is available on the page. The domain registration data is consistent with the business identity and shows no suspicious patterns, supporting legitimacy. Overall, the website is currently in a minimal state with poor content quality and limited user engagement features.
Oktawave S.A.oktawave.com
Technology · Poland
74Medium
NIS2 55 · GDPR 35
NIS2 55 · GDPR 35
Oktawave S.A. is a leading Polish public cloud provider established in 2011, offering enterprise-grade cloud infrastructure and services including cloud servers, storage solutions, managed Kubernetes, and disaster recovery. The company targets businesses, public institutions, and financial organizations, positioning itself as the largest Polish cloud platform with a strong focus on secure and scalable cloud deployments. The website reflects a professional and consistent brand image with comprehensive service descriptions and multiple contact channels. Technically, the site uses GravCMS and integrates modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain registration consistent with the business identity, though improvements like enabling DNSSEC and publishing incident response policies are recommended. Overall, Oktawave demonstrates a mature digital presence with good privacy compliance and business credibility.
DummyTicket247dummyticket247.com
Transportation
64Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
DummyTicket247 is a niche e-commerce website specializing in providing dummy flight tickets primarily used for visa applications or as proof of onward travel. The business operates a WordPress-based platform with integrations for payment processing via Stripe and PayPal, and uses Gravity Forms for data collection. The website targets travelers needing quick and affordable proof of travel arrangements, positioning itself as a fast and valid service provider in this specialized market. The company appears to be recently established in 2023, aligning with the domain registration date. From a technical perspective, the website employs modern web technologies including Elementor for page building, Google Tag Manager for analytics, and Google reCAPTCHA for bot protection. Hosting and domain registration are managed through Cloudflare, providing a reliable infrastructure. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement in speed and security headers. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks DNSSEC and explicit security headers such as Content-Security-Policy. No privacy or cookie policies were found, indicating gaps in compliance with GDPR and other privacy regulations. Contact information and incident response details are absent, which may affect user trust and regulatory compliance. Overall, the website is functional and professionally presented but would benefit from enhanced privacy compliance, improved security configurations, and clearer contact and policy disclosures to strengthen trust and regulatory adherence.
- Czater
chater.app
Technology · Poland
68Medium
NIS2 10 · GDPR 68
NIS2 10 · GDPR 68
Chater is a Polish-based technology company offering a comprehensive SaaS platform that integrates multiple customer communication and marketing automation tools such as live chat, callback, video chat, chatbot, e-assistant, and e-calendar. The platform targets businesses seeking to streamline customer engagement and improve sales and service efficiency. With over 25,000 customers, Chater positions itself as a trusted all-in-one solution provider in the customer service technology market. The website is professionally designed, mobile-optimized, and SEO-friendly, leveraging WordPress and modern web technologies. Security posture is solid with HTTPS, cookie consent, and spam protection on forms, though explicit security and privacy policies are not found in the provided content. WHOIS data confirms legitimacy with consistent registrant information matching the business location and branding.
Aftermarket.pl Limitedantycovidexpo.pl
Technology · Poland
68Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Aftermarket.pl Limited operates the largest domain marketplace in Poland, offering domain registration, sales, auctions, hosting, email, SSL certificates, and website creation services. The platform targets domain investors, businesses, and individuals seeking domain names and related services. The website is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it uses modern JavaScript technologies, integrates with Facebook SDK, Google Analytics, and Google Sign-In, and employs service workers for enhanced performance. Security posture is strong with HTTPS enforced, CSRF protection, and cookie consent mechanisms, though it lacks a dedicated security policy or vulnerability disclosure page. Privacy compliance is robust, with a comprehensive privacy policy and GDPR adherence. Overall, the site is trustworthy and well-positioned in the domain marketplace sector.
- IIndustrymeeting
industrymeeting.pl
Manufacturing · Poland
50Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Industrymeeting.pl is a Polish language niche blog focused on the intersection of business and technology, providing industry news, insights, and articles primarily targeting business professionals and technology enthusiasts. The website uses WordPress CMS with the Yoast SEO plugin, indicating a moderate level of digital maturity and SEO optimization. The site is mobile optimized and presents a consistent branding experience with good content quality and navigation clarity. However, it lacks critical compliance documents such as privacy and cookie policies, and no direct contact information is provided, which may affect user trust and regulatory compliance. Security posture is moderate with HTTPS enabled but missing important security headers and incident response information.
TOUR SALON targi turystyczne | Poznańtour-salon.pl
—
71Medium
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
เว็บแทงบอลน่าเชื่อถือ สมัครเว็บแทงบอลออนไลน์ มั่นใจได้ผลตอบแทนสูงinfrastruktura.info
Other · United States
60Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website infrastruktura.info is a Thai language online sports betting platform offering direct and agent-based access to football betting, casino games, and other gambling services. It targets Thai-speaking mature audiences interested in online gambling, providing a modern and secure user experience with automated deposit and withdrawal systems and promotional offers. The site is built on WordPress with common plugins and integrates Google Tag Manager for analytics. The domain is registered via Dynadot Inc with privacy protection, and DNS is managed through Cloudflare, but DNSSEC is not enabled. Security headers are not explicitly present in the HTML, and no privacy or cookie policies are found, indicating compliance gaps. No direct contact information or incident response contacts are provided, limiting transparency and trust. The site is accessible without WAF blocking or security challenges.
Izba Gospodarcza „Wodociągi Polskie”targi-wod-kan.pl
Energy · Poland
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website targi-wod-kan.pl represents the official platform for the XXXI edition of the International Trade Fair for Water Supply and Sewage Machinery and Equipment (WOD-KAN) scheduled for May 2025 in Bydgoszcz, Poland. Organized by the Izba Gospodarcza „Wodociągi Polskie”, it serves as a key event in the European water and sewage industry, attracting manufacturers, experts, and innovators. The site provides detailed event information, schedules, exhibitor lists, and contact details, targeting industry professionals and stakeholders. Technically, the website is built on WordPress using Elementor and Yoast SEO, integrating Google Analytics and Tag Manager for tracking. It employs modern web fonts and is mobile optimized with good SEO practices. However, some accessibility and security headers could be enhanced. The site uses HTTPS with a good SSL configuration, but lacks explicit security policies and vulnerability disclosure mechanisms. From a security perspective, the site shows a moderate security posture with no critical vulnerabilities detected. The absence of privacy and cookie policies is a compliance gap, especially under GDPR. Contact information is clearly provided, but no dedicated security or incident response contacts are found. Overall, the domain registration aligns well with the business, supporting legitimacy. Strategically, the site is well-positioned in its niche with strong business credibility and professional presentation. To improve, the organization should implement comprehensive privacy and cookie policies, enhance security headers, and publish incident response information to strengthen trust and compliance.
- OOferta domeny rodzinnehotele.pl
rodzinnehotele.pl
Other · Poland
50Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website rodzinnehotele.pl is a domain sale landing page primarily targeting potential buyers interested in acquiring the domain. It offers a simple, clean interface with a contact form to submit offers starting from 5000 PLN net. The site does not represent an active business or service but functions as a marketplace offer page. Technically, the site uses basic HTML5 and CSS3 with Google Fonts and a POST form submission mechanism. The hosting and domain registration appear linked to ddregistrar.pl, a domain registrar service. Security posture is minimal with no visible security headers or HTTPS enforcement details in the provided data, though a CSRF token and consent checkboxes are implemented in the contact form. Privacy policy is linked externally but no cookie policy or terms of service are present on the site. Overall, the site is functional but basic, with moderate trustworthiness given the professional presentation but limited business information.
- Smarthost sp. z o.o.
smarthost.pl
Technology · Poland
50Medium
NIS2 25 · GDPR 25
NIS2 25 · GDPR 25
Smarthost sp. z o.o. is a Polish hosting provider specializing in professional hosting services for businesses, including shared hosting, VPS, dedicated servers, and domain registration. The company operates its own data center in Poland, emphasizing local infrastructure and high-quality customer support. Their market position is solid within Poland and neighboring European countries, supported by multiple regional partner sites. The website is well-structured, multilingual, and targets business customers seeking reliable hosting solutions. Technically, the site uses modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics 4, Microsoft Clarity, and Facebook Pixel. Security posture is strong with HTTPS, anti-exploit systems, and free SSL certificates, although explicit security policies and incident response information are not publicly detailed. Overall, the website demonstrates good professionalism, trustworthiness, and compliance with GDPR regulations.
Studio Wyposażenia Wnętrzstudioww.pl
Retail · Poland
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Studio Wyposażenia Wnętrz is a small, established Polish company based in Płock, specializing in custom office and school furniture since 1996. The company offers a broad range of furniture solutions including ergonomic chairs, metal cabinets, and window coverings, targeting businesses and institutions in the local region. Their market position is supported by long-term experience and authorized distributor status. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google APIs, providing a responsive and user-friendly experience. However, some accessibility and security best practices could be improved. Security posture is moderate with HTTPS enabled but lacking explicit security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security measures.
balsamstudio. Total Brand Experiencebalsamstudio.com
—
65Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Nutricia Polskanutricia.pl
Healthcare · Poland
75Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Nutricia Polska is a well-established healthcare nutrition company operating in Poland since 1998. The website presents a professional and content-rich platform focused on medical nutrition, infant and child nutrition, and specialized dietary solutions. The company targets both consumers and healthcare professionals, positioning itself as a trusted provider in the healthcare sector. The digital infrastructure leverages modern technologies such as Bootstrap, jQuery, and New Relic for monitoring, hosted by cyber_Folks S.A. The website is mobile-optimized and provides clear navigation and cookie consent mechanisms aligned with GDPR requirements. Security posture is good with HTTPS enforced, though DNSSEC is not enabled and security headers are not explicitly detected. No critical vulnerabilities or suspicious content were found. Overall, the website reflects a mature digital presence consistent with a large healthcare business.
- Fondation Roi Baudouin
patrimoine-frb.be
Non-profit · Belgium
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website www.patrimoine-frb.be represents the Fondation Roi Baudouin's heritage division, focusing on the preservation, acquisition, and promotion of Belgian cultural heritage. It serves as an informational and resource platform for cultural institutions, artists, and philanthropists, providing access to collections, funding opportunities, and news. The site is professionally designed with clear navigation and content relevant to its non-profit mission. Technically, the site is built on Drupal 7 with common JavaScript libraries and integrates Google Analytics and Tag Manager for visitor tracking. While the site is functional and moderately optimized, the use of an outdated CMS version poses potential security risks. The absence of a cookie consent mechanism is a GDPR compliance gap. Privacy and terms policies are present and comprehensive, supporting legal compliance. Security posture is adequate with HTTPS enforced and no visible vulnerabilities in the HTML content. However, the lack of security headers and incident response information suggests room for improvement. WHOIS data is unavailable due to registry restrictions, which reduces transparency but does not contradict the site's legitimacy given the strong branding and external references. Overall, the site is a credible, well-maintained resource for cultural heritage philanthropy in Belgium but should address technical and privacy compliance improvements to enhance security and user trust.
- Koning Boudewijnstichting
erfgoed-kbs.be
Non-profit · Belgium
63Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website www.erfgoed-kbs.be represents the Koning Boudewijnstichting's heritage program, focusing on preservation and promotion of Belgian cultural heritage. It serves as an information portal for heritage projects, funding opportunities, collections, and news. The site targets cultural stakeholders, philanthropists, and the general public interested in arts and history. The business model is non-profit, supporting heritage through funding and public engagement. The website is built on Drupal 7 with a moderate technical infrastructure including jQuery and Google Analytics integration. Content quality is good with clear navigation and relevant information, though mobile optimization and accessibility are basic. Security posture is moderate with HTTPS usage but lacks visible security headers and cookie consent mechanisms. WHOIS data is unavailable due to registry restrictions, which impacts transparency but the site content and branding align with a legitimate foundation. Overall, the site is professional, trustworthy, and serves its non-profit mission effectively.
Carlsberg Groupcarlsberg.com
Manufacturing · Denmark
71Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Carlsberg Group is a globally recognized brewing company with a long history dating back to 1847. The website reflects a mature enterprise with a strong brand presence, focusing on beer production, sustainability, and innovation. The site targets adult consumers and stakeholders interested in the company's products and initiatives. Technically, the website employs modern web technologies including lazy loading, custom fonts, and Google Tag Manager for analytics, delivering a responsive and well-structured user experience. Security posture is strong with HTTPS enforced, security headers present, and an age verification gate to comply with alcohol regulations. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.
- FERRO Spółka Akcyjna
ferro-group.pl
Manufacturing · Poland
70Medium
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
FERRO Spółka Akcyjna is a leading Polish manufacturer specializing in sanitary, installation, and heating fittings. The company holds a strong market position with a presence on the Warsaw Stock Exchange since 2010, reflecting its established business history and credibility. The website targets business customers, investors, media, and potential employees, providing comprehensive corporate and investor relations information. The business model focuses on manufacturing and distribution within the plumbing and heating sectors, supported by subsidiaries in Poland and neighboring countries. Technically, the website is built on a modern WordPress platform with up-to-date plugins such as Yoast SEO and Contact Form 7, ensuring good SEO and user experience. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms, reflecting a mature digital infrastructure. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and employs cookie consent best practices but lacks publicly available formal security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy and consistency of the domain registration with the company's profile. Overall, FERRO Group's website demonstrates a professional, secure, and compliant online presence suitable for its industry and audience. Strategic improvements in security transparency and accessibility could further enhance trust and compliance.
Mits sp. z o.o.mits.pl
Technology · Poland
58Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Mits sp. z o.o. is a Polish software house based in Lublin, specializing in custom web and mobile application development, e-commerce solutions, IT consulting, and digital marketing support. Established in 2017, the company serves a diverse clientele including startups, mature global firms, public administration, and agencies. The website presents a professional and comprehensive overview of their services, supported by client testimonials and industry awards, positioning Mits as a trusted regional technology provider with global reach. Technically, the site employs modern frameworks and technologies such as Symfony, Laravel, VueJS, Docker, and Redis, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though the absence of explicit cookie consent and security policies suggests room for improvement in compliance and transparency. Overall, Mits demonstrates a mature digital presence with solid business credibility and technical infrastructure.
CBC (Poland) sp. z o.o.ganzsecurity.pl
Technology · Poland
63Medium
NIS2 22 · GDPR 25
NIS2 22 · GDPR 25
GANZ Security, operated by CBC (Poland) sp. z o.o., is a well-established provider of intelligent video monitoring and automated security systems, serving various industries including public facilities, transport, logistics, and retail. The company benefits from over 25 years of experience in Poland and is part of the international CBC Group Ltd., enhancing its market credibility and reach. The website reflects a professional and comprehensive business presence with detailed product offerings, case studies, and customer support.
CBC株式会社global-cbc.com
Other · Japan
75Medium
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
CBC Co., Ltd. is a Japanese trading company specializing in a broad range of sectors including chemicals, resins, electronic materials, pharmaceuticals, agricultural chemicals, optical information devices, security, mobile phones, and solar power generation. The company positions itself as a forward-looking enterprise aiming to shape the future through its diversified trading activities. The website content reflects a professional business presence targeting general audiences and industry partners. Technically, the website is built on WordPress and incorporates modern web technologies such as jQuery and Google Analytics for tracking. It employs a cookie consent mechanism via OneTrust, indicating awareness of privacy compliance requirements. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with no significant issues detected in the provided content. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and explicit security policies or incident response information. No forms or contact details were found in the analyzed content, which limits direct user engagement and support transparency. The absence of WHOIS data reduces confidence in domain legitimacy, although the website itself appears professional and trustworthy. Overall, CBC Co., Ltd.'s website presents a credible business front with room for improvement in security best practices and transparency of contact and compliance information.