Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
7,801–7,850 of 14,261
- Webprocessing s.r.o
xvideos.red
Media · Czech Republic
76Low
NIS2 2 · GDPR 65
NIS2 2 · GDPR 65
XVIDEOS.RED is a premium adult entertainment website affiliated with the well-known XVIDEOS brand, offering ad-free, exclusive, and high-definition adult video content including 4K downloads. The platform targets adult users seeking premium subscription-based access to a large catalog of adult videos and supports content creators through membership revenue sharing. The website is professionally designed with consistent branding and clear navigation, optimized for desktop and mobile devices. Technical infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and RequireJS, hosted likely under Identity Digital services. Security posture is solid with HTTPS enforced and session management, though explicit security headers and incident response policies are not publicly disclosed. Privacy and terms of service are comprehensive and GDPR compliant, reflecting good privacy practices. WHOIS data is unavailable due to privacy protection, which is typical for adult content sites but reduces transparency. Overall, the site demonstrates a mature digital presence with moderate risk primarily due to limited public registrant information and lack of explicit security disclosures.
- Free Porn Videos - XVIDEOS.COM
xvideos.com
Media
82Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
XVIDEOS.COM is a globally recognized adult entertainment platform specializing in free pornographic video streaming and premium membership services. The site targets adult users exclusively, providing a wide range of adult content categories and leveraging advertising and premium subscriptions as its primary revenue streams. Technically, the site employs modern web technologies including JavaScript frameworks, HLS streaming, and CDN-based content delivery to ensure performance and scalability. The site is mobile-optimized and features a clear navigation structure with multilingual support. Security-wise, HTTPS is enforced, and age disclaimers are prominently displayed; however, explicit security headers and incident response contacts are absent, indicating room for improvement in security posture. WHOIS data is not publicly available, which is typical for adult sites to protect registrant privacy. Overall, the site is functional, professional, and well-positioned in the adult media industry but could enhance transparency and security practices.
CarDekhocardekho.com
Transportation · India
83Low
NIS2 29 · GDPR 58
NIS2 29 · GDPR 58
CarDekho is a leading Indian online automotive marketplace specializing in new and used car sales, price comparisons, and automotive news. The platform targets car buyers and sellers across India, offering comprehensive services including 360-degree car views and detailed comparisons. Owned by GirnarSoft, CarDekho maintains a strong market position with a large user base and consistent branding. Technically, the website employs modern web technologies such as React, JSON-LD structured data, and Google Tag Manager, ensuring good SEO and mobile optimization. Security-wise, the site enforces HTTPS, uses security headers, and avoids exposing sensitive data, reflecting a mature security posture. However, the absence of visible privacy and cookie policies indicates room for improvement in compliance. Overall, CarDekho presents a professional, trustworthy, and well-structured digital presence suitable for general audiences.
Gupshupgupshup.io
Technology
81Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Gupshup is a leading Conversational Engagement Platform that empowers businesses to engage customers across marketing, commerce, and support through AI-powered chatbots and messaging APIs. Positioned as a major CX player by Gartner in 2023, Gupshup offers a comprehensive suite of services including AI Agents, multi-channel messaging APIs (WhatsApp, SMS, Voice, Instagram, RCS), conversation builders, campaign management, and agent assist tools. The platform targets enterprises and medium to large businesses seeking to enhance customer engagement and automate workflows. Technically, the website is built on modern frameworks such as Next.js and integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, Facebook Pixel, and Taboola. The site is mobile-optimized, SEO-friendly, and employs strong security practices including HTTPS, security headers, and cookie consent mechanisms. The digital maturity is high, reflecting a professional and scalable infrastructure. From a security perspective, Gupshup demonstrates good practices with enterprise-grade security offerings linked on the site, secure forms, and no visible vulnerabilities or exposed sensitive data. However, explicit incident response and vulnerability disclosure policies are not publicly found, which could be improved. Privacy compliance is strong with comprehensive privacy and cookie policies and GDPR indicators. Overall, Gupshup presents a low-risk profile with a high degree of professionalism, trustworthiness, and technical sophistication. Strategic recommendations include enhancing transparency on security certifications, publishing incident response policies, and providing data protection officer contact details to further strengthen trust and compliance.
- Automation Anywhere, Inc.
automationanywhere.com
Technology · United States
85Low
NIS2 35 · GDPR 58
NIS2 35 · GDPR 58
Automation Anywhere, Inc. is a leading enterprise software company specializing in agentic process automation systems that integrate AI, RPA, and intelligent automation to streamline mission-critical workflows. Founded in 2003 and headquartered in California, USA, the company holds a strong market position as a Gartner Magic Quadrant Leader and is trusted by top global enterprises across finance, healthcare, manufacturing, and banking sectors. Their cloud-native platform offers a comprehensive suite of automation tools including AI Agent Studio, Process Reasoning Engine, and Automation Co-Pilot, enabling organizations to enhance productivity and operational efficiency. Technically, the website is built on Drupal CMS with modern JavaScript libraries and integrates advanced tracking and consent management tools such as Google Tag Manager and OneTrust. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. Hosting is managed via Akamai, ensuring robust performance and security. From a security perspective, the site enforces HTTPS, implements key security headers, and utilizes cookie consent mechanisms, indicating a strong security posture. However, the absence of a dedicated security policy page and vulnerability disclosure mechanism suggests areas for improvement in transparency and incident response readiness. No vulnerabilities or exposed sensitive data were detected. Overall, Automation Anywhere's website reflects a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. The domain registration data aligns well with the company's identity and history, supporting legitimacy. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to further enhance trust and security posture.
HOVERhover.to
Technology · United States
78Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Hover is a technology company specializing in providing an all-in-one software platform for construction, renovation, and insurance claims processing. Their SaaS solution enables contractors, builders, insurance professionals, and homeowners to measure, design, estimate, and manage projects efficiently using 3D modeling and AI-powered tools. The company holds a strong market position supported by partnerships with leading industry players and a large user base. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the website is built on the HubSpot CMS platform, leveraging modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Hotjar, Segment, and Intercom. It is well-optimized for performance, mobile responsiveness, and SEO. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the security maturity is good, though the site lacks a dedicated security policy or incident response contact information. There are no detected vulnerabilities or suspicious patterns in WHOIS data, which aligns well with the business claims. The website is safe for general audiences and professionally maintained. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, and considering a vulnerability disclosure program to enhance trust and compliance further.
Confluentconfluent.io
Technology
77Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Confluent, Inc. is a leading enterprise technology company specializing in data streaming platforms built on Apache Kafka and Apache Flink. Their platform enables organizations to stream, connect, process, and govern data in real-time, supporting modern event-driven architectures. The company targets enterprise customers and technology professionals seeking scalable and unified data streaming solutions. Their market position is strong, leveraging open-source heritage and providing comprehensive services around data integration and governance. Technically, the website is built on modern frameworks such as Gatsby and React, with integrations of marketing and analytics tools like Google Tag Manager, Segment, and Marketo. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security best practices are observed with HTTPS enforcement and security headers, although explicit security policy and incident response information are not publicly detailed. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms and GDPR compliance indicators. Business credibility is high, supported by professional content, clear contact channels, and trust signals such as testimonials and social media presence. Overall, Confluent's website and domain present a low-risk profile with strong professionalism and security hygiene. Strategic recommendations include publishing explicit security policies, vulnerability disclosure mechanisms, and data protection officer contacts to enhance transparency and trust further.
- Palantir Technologies Inc.
palantir.com
Technology · United States
78Low
NIS2 47 · GDPR 35
NIS2 47 · GDPR 35
Palantir Technologies Inc. operates a sophisticated enterprise software platform that empowers organizations across multiple sectors including energy, defense, healthcare, and finance to integrate data, make informed decisions, and optimize operations. The company is recognized as a leader in AI, data science, and machine learning, with top rankings from independent research firms and industry studies. Their key platforms include Foundry, Gotham, Apollo, and AIP, which serve as operating systems for enterprises and governments worldwide. The website reflects a mature digital presence with comprehensive content, multi-language support, and strong branding consistency. Technically, the website leverages modern web technologies such as React and Next.js, with Contentful as the CMS, and integrates marketing and analytics tools like Marketo and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Security is robust, with HTTPS enforced, multiple security headers, and compliance with stringent certifications such as FedRamp and IL5. However, the absence of publicly available WHOIS data reduces transparency slightly, though this is likely due to privacy or registry policies rather than malicious intent. Overall, Palantir's website demonstrates a strong security posture, professional business credibility, and compliance with privacy regulations including GDPR. The lack of direct contact emails or phone numbers is mitigated by contact forms and extensive policy documentation. Strategic recommendations include publishing explicit incident response contacts, adding a vulnerability disclosure policy, and enhancing transparency around data protection officer contacts to further strengthen trust and compliance.
Badoo Media Limitedbumble.com
Technology · Cyprus
76Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Bumble, operated by Badoo Media Limited, is a leading technology company specializing in online dating and social networking platforms. The company emphasizes empowering women to make the first move, offering services such as Bumble Date, Bumble BFF, and Bumble Bizz. The website is professionally designed, mobile-optimized, and localized in multiple languages, targeting a mature general audience globally. Bumble maintains a strong market position with a large user base and a consistent brand identity. Technically, the website leverages modern web technologies including React and Next.js, supported by Google Analytics and Tag Manager for data insights. The site demonstrates fast performance, good SEO, and accessibility features. Consent management is implemented via a dedicated platform, ensuring compliance with GDPR and other privacy regulations. From a security perspective, the site enforces HTTPS with strong domain registration protections. However, explicit security policies and incident response contacts are not published, and DNSSEC is not enabled, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. Overall, Bumble presents a trustworthy and professional online presence with strong privacy and compliance practices. Strategic recommendations include enabling DNSSEC, publishing security policies, and establishing a vulnerability disclosure program to enhance security posture and user trust.
Omega 365omega.no
Energy · Norway
78Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Omega 365 is a well-established global corporation founded in 2007, specializing in project personnel provision, software development, engineering, architecture, design, communication, and IT consulting primarily for the energy, infrastructure, and technology sectors. The company offers a SaaS platform for project and asset management, enhanced by AI innovations and digital twin technology, positioning itself as an innovator in construction management software. The website reflects a mature digital presence with professional design, clear navigation, and rich multimedia content. Technically, the site uses modern frameworks and libraries such as Bootstrap, Froala, and Google Analytics configured to avoid cookie storage, indicating privacy-conscious implementation. Security posture is good with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and security headers are missing. Privacy compliance is supported by clear privacy and cookie policies, though no explicit consent mechanism is present. Business credibility is high with multiple subsidiaries linked, certifications, and customer stories. Overall, the site is trustworthy and professional with minor areas for security and compliance improvement.
Crassulacrassula.io
Finance · United States
84Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Crassula is a fintech company specializing in white label banking software and financial technology solutions that enable businesses to rapidly launch neobanks, e-wallets, and embedded financial services. Their platform offers a comprehensive suite of services including core banking, mobile banking, merchant payments, crypto exchange, card issuing, compliance, and API integrations. The company targets fintech startups, challenger banks, SMEs, and businesses seeking to embed financial services with a scalable and flexible infrastructure. The website is professionally designed, mobile-optimized, and provides clear navigation, reflecting a mature digital presence. Technically, the website leverages modern frontend technologies such as Bootstrap, Boxicons, Swiper.js, and integrates Google Analytics and Tag Manager for analytics. Cookiebot is used for cookie consent management, indicating awareness of privacy regulations. The domain is hosted with reputable DNS providers and uses HTTPS with good SSL configuration. However, no explicit privacy policy, terms of service, or security policy documents are found, which are important for compliance and trust. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible security headers and published incident response or vulnerability disclosure information. The WHOIS data shows privacy protection typical for fintech businesses, with domain age consistent with a legitimate operation. No suspicious patterns or exposed sensitive data were detected. Overall, the security posture is good but can be improved by adding formal policies and security headers. The overall risk assessment is moderate-low with recommendations to publish privacy and terms policies, enhance security headers, and provide clear contact information to improve trust and compliance. The website quality and business credibility are high, supporting a strong market position in the fintech sector.
- DDealroom.co
dealroom.co
Technology · United States
80Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Dealroom.co is a mature technology company founded in 2013, specializing in providing a comprehensive data and analytics platform focused on startups, venture capital, and global tech ecosystems. The company serves a professional audience including investors, corporates, governments, universities, and founders, positioning itself as a leading source of intelligence in the innovation economy. Their business model centers on SaaS offerings, data APIs, and insightful reports to empower data-driven decision making in the tech sector. Technically, the website is built on a WordPress CMS enhanced with modern technologies such as Cloudflare CDN, Imgix for image optimization, and Google Tag Manager for analytics. The site demonstrates excellent performance, mobile responsiveness, and SEO optimization, reflecting a high level of digital maturity and user experience design. From a security perspective, the site enforces HTTPS with a strong SSL configuration and employs domain transfer protections. A cookie consent mechanism is implemented, and privacy policies are comprehensive and GDPR compliant. However, explicit security policies, incident response contacts, and vulnerability disclosure information are absent, representing areas for improvement to enhance transparency and trust. Overall, Dealroom.co presents a professional, trustworthy, and well-structured online presence with strong business credibility and technical implementation. The absence of critical security issues and the presence of privacy compliance measures contribute to a favorable risk profile. Strategic recommendations include enabling DNSSEC, publishing security policies, and enhancing security headers to further strengthen their security posture.
Avoavo.app
Technology
87Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Avo is a technology company specializing in upstream event data quality and schema management solutions for data and product teams. Their SaaS platform offers collaborative schema change management, data observability, and analytics implementation tools designed to improve data accuracy and governance. The website demonstrates a strong market position with enterprise customers and positive trust signals such as testimonials and case studies. Technically, the site is built on modern web technologies including Webflow CMS, Google Analytics, Mixpanel, and Segment, ensuring fast performance and good mobile optimization. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a credible digital presence for the company.
- Tradeling
tradeling.com
E-commerce · United Arab Emirates
79Low
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Tradeling is a leading B2B e-commerce marketplace serving business buyers across the MENA region. It offers a vast catalog of over 7 million products with services including bulk buying, express delivery, and enterprise solutions. The platform is positioned as the largest wholesale marketplace in the region, supported by its parent company Tradeling Group. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as Next.js, React, and integrates multiple analytics and marketing tools to optimize user experience and business intelligence. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like reCAPTCHA. However, the absence of WHOIS domain registration data introduces some uncertainty about domain legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant, but incident response and vulnerability disclosure information are not publicly available. Overall, Tradeling presents a professional and trustworthy platform with room for improvement in transparency and domain registration clarity.
Wooden Smilewoodensmile.com
E-commerce
78Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Wooden Smile is an e-commerce retailer specializing in handcrafted wooden figurines, keychains, pens, and custom wooden products. The website is built on the Shopify platform, leveraging its CDN and payment infrastructure, and integrates customer reviews through Judge.me. The business targets general consumers interested in unique wooden gifts. The site demonstrates good design quality, clear navigation, and mobile optimization, supporting a positive user experience. However, the absence of visible privacy, cookie, and terms of service policies indicates gaps in compliance and transparency. The lack of WHOIS registration data raises questions about domain legitimacy, although the operational website and Shopify hosting suggest a legitimate business. Security posture is strong with HTTPS and no exposed sensitive data, but security headers could be improved.
- 诚联电源股份有限公司
czchenglian.com
Energy · China
77Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
诚联电源股份有限公司是一家成立于2001年的专业开关电源研发、制造与销售企业,专注于AC/DC和DC/DC系列产品,服务于工业自动化及相关领域。公司拥有400余名员工,注重技术研发和品质管理,具备行业协会会员资格,体现其专业性和市场认可度。网站内容丰富,涵盖产品展示、客户案例及新闻中心,体现良好的业务覆盖和客户服务能力。技术基础采用较为传统的JavaScript库和自研CMS,网站性能和移动优化表现良好,但存在部分技术更新空间。安全方面,网站启用HTTPS,未发现明显漏洞,但缺少安全头和隐私合规文档,存在合规风险。整体风险适中,建议加强隐私政策建设和安全防护措施以提升信任度和合规性。
江苏南方精工股份有限公司nf-precision.com
Manufacturing · China
79Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
江苏南方精工股份有限公司 is a well-established manufacturing company specializing in needle roller bearings, one-way clutches, and precision machining parts primarily for automotive and industrial sectors. Founded in 1988 and headquartered in Changzhou, China, the company has built a strong reputation with global partnerships including Fortune 500 companies. The website reflects a professional digital presence with multilingual support and showcases certifications such as IATF16949, ISO14001, and ISO45001, indicating a mature quality and environmental management system. Technically, the site uses established JavaScript libraries and analytics tools, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, though security headers and explicit privacy policies are lacking. WHOIS data is missing or inaccessible, which raises some concerns about domain registration legitimacy, but the overall business credibility remains high based on content and certifications. Strategic improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.
Other
77Low
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website shinmadrying.com is currently non-functional, displaying a PHP fatal error caused by a missing required file. This prevents access to any meaningful content or business information. The domain is registered with Xin Net Technology Corporation since 2016, indicating a legitimate registration with a long expiry date. However, the lack of accessible content, metadata, or structured data severely limits the ability to assess the business, its services, or its market position. Technically, the site suffers from critical errors and lacks basic security features such as DNSSEC and security headers. No privacy or cookie policies are present, and no contact information is available on the site. Overall, the website's digital maturity is very low, with poor content quality and technical implementation.
江苏轩盛塑业塑料托盘有限公司jsxuansheng.com
Manufacturing · China
76Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
江苏轩盛塑业塑料托盘有限公司 is a well-established Chinese manufacturing company specializing in plastic pallets, turnover boxes, and folding boxes with over 20 years of industry experience. The company offers a wide range of industrial plastic products and provides comprehensive logistics and storage solutions targeting various sectors including new energy, food, chemical, mining, and more. The website is professionally designed, mobile-optimized, and rich in product information, supporting the company's market position as a leading plastic product manufacturer in China. Technically, the site uses common JavaScript libraries and tracking tools such as Baidu Analytics and 360.cn, but lacks advanced security headers and explicit privacy policies, which are areas for improvement. The security posture is moderate with HTTPS usage but missing some best practices. The WHOIS data is missing, which raises concerns about domain registration transparency, though the website content and business information appear legitimate. Overall, the site presents a credible business presence but should enhance privacy compliance and security measures.
江苏山由帝奥节能新材股份有限公司czsanyou.com
Manufacturing · China
76Low
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
江苏山由帝奥节能新材股份有限公司 is a Chinese high-tech manufacturing company specializing in the research, production, and sales of insulation materials and products, including vacuum insulation panels, cold boxes, fiberglass products, and rubber products. The company targets industrial and manufacturing clients requiring advanced thermal insulation solutions, with a focus on quality and environmental standards. The website is professionally designed, mobile-optimized, and provides comprehensive product and company information, although it lacks explicit privacy and cookie policies. Technically, the site uses a mix of modern and legacy JavaScript libraries, with HTTPS enabled and Baidu Analytics integrated for user tracking. Security posture is moderate with room for improvement in security headers and compliance documentation. The domain WHOIS data is missing, which raises concerns about domain registration legitimacy despite the active website presence. Contact information is clearly provided, enhancing business credibility.
Cedar Lake Ventures, Incvectorizer.ai
Technology · United States
77Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Vectorizer.AI is a specialized technology service operated by Cedar Lake Ventures, Inc, offering advanced AI-powered raster to vector image conversion. The platform leverages proprietary deep learning models and computational geometry to deliver high-quality vector outputs in multiple formats, targeting graphic designers, printing professionals, and digital artists. The service is positioned as a superior alternative to traditional vectorization tools, emphasizing automation, accuracy, and ease of use. Technically, the website is modern, fast, and mobile-optimized, hosted on AWS infrastructure with a CDN for performance. Security posture is solid with HTTPS and domain transfer protection, though some security headers and explicit policies could be improved. Privacy compliance is adequate with clear privacy and terms pages, but lacks cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business goals.
Cedar Lake Ventures, Incpixian.ai
Technology · United States
78Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Pixian.AI is a technology company specializing in AI-powered image background removal services, targeting e-commerce businesses, marketers, and developers. The company offers a freemium model with free limited usage and paid plans supporting higher resolution images and unlimited use. It also provides an API and migration guides to facilitate integration and switching from competitors. The business is positioned as a cost-effective alternative in the image processing market, emphasizing quality and affordability. Technically, the website leverages modern JavaScript libraries, AWS hosting, and CDN services to deliver fast and responsive user experiences. The site is mobile optimized and includes SEO best practices. Security posture is solid with HTTPS enforced and domain transfer protections, though some improvements like DNSSEC and security headers could be added. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms. No direct contact emails or phone numbers are published, which may impact user trust. Overall, the website is professional, trustworthy, and safe for general audiences.
CEDAR LAKE VENTURES, INC.pixspy.com
Technology
77Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Pix Spy is a specialized web-based image inspection tool developed and operated by Cedar Lake Ventures, Inc. Founded in 2018, the company offers a free, ad-free, and fully client-side image analysis platform targeting professionals and enthusiasts in graphic design and digital imaging. The tool provides advanced pixel-level inspection features including measurement, color picking, cropping, redaction, and multi-image comparison, positioning itself as a niche utility in the image editing ecosystem. The website is well-structured, multilingual, and integrates with several companion services enhancing its utility.
CEDAR LAKE VENTURES, INC.pixfix.com
Technology
77Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Pix Fix is a specialized online tool designed to clean up noisy and degraded images, particularly those affected by JPEG compression artifacts. The service is free, ad-free, and processes images entirely within the user's browser, ensuring privacy and security. Operated by Cedar Lake Ventures, Inc., the website targets general users seeking image enhancement without complex software. The business model focuses on providing a niche utility with no direct monetization or API access currently available. Technically, the site leverages modern JavaScript, AWS CloudFront CDN for hosting, and Google Analytics for user tracking. The website is well-optimized for performance and mobile use, with a clean and professional design. Security posture is adequate with HTTPS enabled and client-side processing, but lacks some security headers and formal security policies. Privacy compliance is basic, with privacy and terms pages present but no cookie consent mechanism. Overall, the site is trustworthy and functional, with room for improvement in security and privacy transparency.
CEDAR LAKE VENTURES, INC.recompressor.com
Technology
77Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Recompressor.com is a specialized online tool offering optimized image compression for PNG, JPG, and SVG formats. The service emphasizes privacy by performing all image processing client-side within the user's browser, ensuring that no images are uploaded or stored externally. The platform is free to use, ad-free, and supports multiple languages, targeting general users who require efficient image optimization without compromising privacy. The business is operated by Cedar Lake Ventures, Inc., with the domain registered in 2018, reflecting a mature and stable online presence. Technically, the website leverages modern JavaScript libraries and is hosted on Amazon AWS CloudFront CDN, ensuring fast performance and good mobile optimization. The site uses Google Analytics and Google Tag Manager for minimal user tracking but lacks a cookie consent mechanism. The absence of security headers and explicit contact information are areas for improvement. The website's design is professional, with clear navigation and relevant content, supporting a positive user experience. From a security perspective, the site benefits from HTTPS encryption and privacy-by-design principles by processing images locally. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. The domain registration is consistent and trustworthy, with no suspicious patterns detected. Overall, the security posture is good but could be enhanced by implementing additional security headers and transparency measures. The overall risk assessment is low, with no critical vulnerabilities or compliance gaps identified. Strategic recommendations include enabling DNSSEC, adding cookie consent, publishing security and incident response policies, and improving security headers to strengthen trust and compliance.
Hostifyhostify.com
Real Estate
84Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
Hostify is a well-established SaaS company specializing in property management software tailored for Airbnb and vacation rental managers. The company offers a comprehensive suite of tools including channel management, unified inbox, booking websites, payment processing, and automation features. Positioned as a Booking.com Premier Partner and integrated with major platforms like Airbnb, Vrbo, and Expedia, Hostify targets vacation rental owners and property managers seeking to streamline operations and maximize bookings. The website demonstrates strong branding, professional content, and clear calls to action, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor, hosted on Kinsta, and leverages modern marketing and analytics tools such as HubSpot and Google Tag Manager. Security posture is solid with HTTPS, security headers, and domain protection, though DNSSEC is not enabled. Privacy compliance is addressed with a cookie consent mechanism and a comprehensive privacy policy. Overall, Hostify presents a credible, professional, and secure online presence suitable for its target market.
Hyperlinehyperline.co
Technology
80Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Hyperline is a SaaS company specializing in revenue management solutions, offering a unified platform for CPQ, billing automation, usage-based billing, payments, and revenue recognition. Positioned as a modern and flexible alternative for fast-growing SaaS companies, Hyperline integrates with major tools like Stripe Billing and provides a comprehensive system of record for finance, sales, engineering, and founders. The website demonstrates a high level of digital maturity with a modern tech stack including Webflow CMS, Segment, Posthog, and Snitcher analytics, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS and recognized certifications such as SOC2, ISO27001, and GDPR compliance, though explicit security policies and vulnerability disclosures are not publicly available. Overall, the site is professional, trustworthy, and well-structured, supporting a medium-sized technology business with a clear focus on billing and revenue automation.
- Fever
feverup.com
Other
85Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Fever is a global event discovery and ticket booking platform founded in 2011, offering users access to concerts, art, festivals, tours, and immersive experiences worldwide. The website is professionally designed with excellent multilingual support, targeting a broad general audience interested in entertainment and cultural events. The business model centers on providing a seamless digital platform for event discovery and ticket purchasing, positioning Fever as a significant player in the online event marketplace. Technically, the website leverages modern web technologies including Astro framework, AWS hosting, and integrates analytics tools such as Google Tag Manager and Mixpanel. The site demonstrates good performance, mobile optimization, and SEO practices, contributing to a positive user experience. The domain is well-established with a consistent registration history and reputable hosting. From a security perspective, the site uses HTTPS and domain status protections but lacks DNSSEC and explicit security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service found in the analyzed content. Overall, Fever presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic improvements in privacy disclosures, security policy transparency, and DNS security would enhance the platform's compliance and security posture.
Feedlyfeedly.com
Technology
84Low
NIS2 57 · GDPR 73
NIS2 57 · GDPR 73
Feedly is a mature technology company founded in 2008, offering a SaaS platform that aggregates and delivers news, market intelligence, and threat intelligence to cybersecurity teams, market analysts, and individual users. The company positions itself as a market leader with a strong brand presence and a clear focus on delivering actionable insights through its three main services: Threat Intelligence, Market Intelligence, and News Reader. The website reflects a professional, well-structured, and user-friendly design optimized for both desktop and mobile users. Technically, Feedly employs modern web technologies including React with Next.js, and integrates multiple marketing and analytics tools such as HubSpot, Google Tag Manager, and Trendemon, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS with a stable domain registration and clientTransferProhibited status, though it lacks DNSSEC and publicly available security policies or incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Feedly demonstrates a high level of business credibility and digital maturity, with minor recommendations to enhance DNS security and publish explicit security policies.
Cedar Lake Ventures, Inc.cedarlakeventures.com
Technology
78Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Cedar Lake Ventures, Inc. operates a portfolio of web properties primarily focused on image processing, data visualization, and location-based services. The main website serves as a centralized billing and account management platform for these properties, providing users with a unified login and payment experience. The company has established a stable market presence since its domain registration in 2013 and maintains a consistent brand identity across its subsidiaries. Technically, the website is hosted on Amazon AWS CloudFront CDN, employs modern web technologies such as JavaScript and SVG, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain status protections, though there is room for improvement in implementing security headers and explicit incident response policies. Privacy compliance is basic, with privacy and terms pages present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences.
Invopop Ltd.invopop.com
Technology
77Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Invopop Ltd. is a technology company specializing in global electronic invoicing solutions. Their platform offers a single API to automate invoice compliance across multiple countries, simplifying tax reporting and invoice issuance for businesses operating internationally. The company positions itself as a trusted partner for fast-growing global companies, providing scalable invoicing and tax compliance services. Their key offerings include invoice validation, tax calculation, workflow customization, and a centralized console for invoice management. Technically, Invopop leverages modern web technologies including Webflow CMS, Google Tag Manager, and Plausible Analytics, ensuring a fast, mobile-optimized, and accessible website experience. Security-wise, the company demonstrates a strong posture with ISO 27001 certification, GDPR compliance, HTTPS enforcement, and cookie consent mechanisms. However, the absence of WHOIS registration data introduces minor uncertainty about domain registration details. Overall, Invopop presents a professional, secure, and trustworthy digital presence aligned with its business objectives.
Looka Inc.looka.com
Technology · Canada
76Low
NIS2 20 · GDPR 73
NIS2 20 · GDPR 73
Looka Inc. is a Canadian technology company specializing in AI-powered logo design and brand identity solutions for entrepreneurs and small to medium businesses. The company offers a SaaS platform that enables users to create logos, brand kits, and marketing materials with ease, leveraging artificial intelligence to simplify graphic design. The website is professionally designed, highly accessible, and optimized for SEO and mobile devices, reflecting a mature digital presence. The platform integrates multiple marketing and analytics tools, including Google Analytics, Facebook Pixel, and Bing Ads, supporting a data-driven approach to customer engagement and advertising. Security practices are solid with HTTPS enforcement and domain registration protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with user consent mechanisms aligned with GDPR requirements. Overall, Looka presents a trustworthy and professional online presence with a strong market position in the AI-driven branding space.
Clipping Magicclippingmagic.com
E-commerce · United States
78Low
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
Clipping Magic is a specialized SaaS platform focused on automatic and manual image background removal, primarily serving e-commerce sellers, graphic designers, and businesses requiring professional product photos. The company leverages advanced AI trained on millions of real-world images combined with a smart editor offering precision tools such as keep/remove markers, hair separation, and scalpel cuts. Their market position is strong within the niche of background removal, supported by bulk processing capabilities and API access for integration. The parent company, Cedar Lake Ventures, manages the platform and related services. Technically, the website is hosted on Amazon AWS with a modern tech stack including JavaScript frameworks and CDN delivery via Cloudfront. Performance is fast, mobile optimized, and SEO friendly. Security posture is solid with HTTPS, multiple security headers, and domain registration protections, though DNSSEC is not enabled, representing an area for improvement. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Contact is primarily via support forms, with no direct emails or phone numbers publicly listed. The site integrates Google Analytics and Tag Manager for tracking, balanced with good privacy compliance. Overall, the website is professional, trustworthy, and well-positioned in its market niche.
Looka Inc.logojoy.com
Technology · Canada
76Low
NIS2 35 · GDPR 73
NIS2 35 · GDPR 73
Looka Inc. operates a leading AI-powered logo maker platform trusted by over 20 million businesses worldwide. The company provides an easy-to-use online service that enables small businesses and entrepreneurs to create professional logos and comprehensive brand kits without needing design expertise. Their market position is strong, supported by high customer satisfaction and extensive media coverage. Technically, the website is built on WordPress with modern SEO and analytics tools, hosted behind Cloudflare for performance and security. Security posture is solid with HTTPS, anti-clickjacking measures, and cookie consent mechanisms, although explicit security headers could be improved. Overall, the site is professional, fast, and user-friendly, with clear business credibility and compliance with privacy regulations. Strategic recommendations include enhancing security header implementation, publishing a dedicated security policy, and improving incident response transparency.
Lunaweb GmbHcloudconvert.org
Technology · Germany
80Low
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
CloudConvert, operated by Lunaweb GmbH, is a well-established online file conversion service supporting over 200 file formats across audio, video, document, ebook, archive, image, spreadsheet, and presentation types. The company offers both a user-friendly web interface and a powerful API for integration, targeting a broad audience including individual users and developers. Their business model is primarily pay-per-use API access, positioning them as a key player in the file conversion technology market. The company is based in Germany and founded in 2012, with a medium-sized operational scale. Technically, CloudConvert employs a modern technology stack including JavaScript and Vue.js frameworks, hosted on AWS infrastructure with OVH as the domain registrar. The website demonstrates good performance, mobile optimization, and SEO practices. Analytics are handled via Plausible, indicating a privacy-conscious approach with minimal user tracking. The site lacks a visible cookie consent mechanism despite having a privacy policy, which could be improved. From a security perspective, CloudConvert maintains a strong posture with ISO 27001 certification, HTTPS enforcement, and secure handling of user files. No critical vulnerabilities or exposed sensitive data were detected. However, DNSSEC is not enabled, and security headers are not explicitly observed in the provided data. Incident response contact details and vulnerability disclosure mechanisms are not publicly evident, representing areas for enhancement. Overall, CloudConvert presents a trustworthy, professional, and secure online service with a solid business foundation and technical maturity. Strategic improvements in cookie consent, DNSSEC deployment, and incident response transparency would further strengthen their security and compliance profile.
ManyPixelsmanypixels.co
Technology
76Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
ManyPixels is a subscription-based creative service provider specializing in unlimited graphic and web design solutions for businesses. Their platform offers access to vetted designers for a flat monthly fee, targeting businesses seeking fast, affordable, and reliable design services. The company has completed over 150,000 designs and served more than 3,000 customers, indicating a strong market presence and trust among clients. Technically, the website is built on Webflow and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, and PostHog, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs standard security headers, and provides cookie consent mechanisms, though it lacks a publicly detailed security policy or incident response information. Overall, the site is professional, well-structured, and trustworthy, with no signs of malicious activity or content blocking.
- My Modern Met
mymodernmet.com
Media
77Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
My Modern Met is a well-established online media platform founded in 2008, focusing on creative arts, design, photography, architecture, technology, and environmental issues. It serves a general audience interested in inspiring and thought-provoking content. The business model includes advertising revenue, a membership program, an online academy, and an e-commerce store. The website demonstrates a mature digital presence with consistent branding and high-quality content. Technically, it is built on WordPress, uses modern advertising and analytics technologies, and is hosted with reputable providers including GoDaddy and Cloudflare. Security posture is solid with HTTPS enforced and multiple security best practices, though improvements such as enabling DNSSEC and adding security headers could enhance protection. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in the media industry.
- 常常州医疗器材总厂股份有限公司
lelun.com
Healthcare · China
77Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
常州医疗器材总厂股份有限公司 is a specialized manufacturer of disposable sterile medical devices including infusion sets, syringes, surgical staplers, and hernia repair materials. Established in 1988, the company has a strong market presence domestically and exports to Europe, Africa, and Southeast Asia. The website reflects a medium-sized enterprise with a focus on healthcare manufacturing and direct sales. The company emphasizes product sterility and quality, supported by certifications such as being recognized as a trustworthy contract-abiding enterprise for 16 consecutive years. Technically, the website uses legacy technologies like jQuery 1.8.3 and Baidu Analytics for tracking. It supports both PC and mobile platforms, redirecting mobile users to a dedicated mobile site. While the site is functional and professionally designed, it lacks modern security headers and up-to-date libraries, which could pose security risks. Privacy and cookie policies are absent, indicating a gap in compliance with modern data protection standards. Security posture is moderate with HTTPS usage implied but no explicit security headers detected. The WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional business presence. No WAF or blocking mechanisms were detected, and the site content is safe and appropriate for general audiences. Overall, the website is a credible business platform with room for improvement in security, privacy compliance, and technical modernization to enhance trust and protect user data.
Madhappymadhappy.com
Retail
83Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Madhappy is an e-commerce clothing brand established in 2017, targeting a community of optimists with lifestyle apparel. The website is professionally designed and hosted on Shopify, leveraging modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Microsoft Clarity. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and a consent banner. However, the absence of WHOIS data for the domain www.madhappy.com raises questions about domain registration transparency, although the website itself appears legitimate and secure. Security posture is solid with HTTPS and standard security headers, but lacks explicit security policy and incident response documentation. Overall, the site presents a trustworthy and professional e-commerce platform with room for improvement in transparency and security documentation.
Campercamper.com
Retail · Finland
82Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Camper is a well-established footwear brand operating a professional e-commerce platform targeting the Finnish market. The website offers a wide range of shoes and accessories for women, men, kids, and first walkers, including customization options and sustainability initiatives. The site is well-designed, mobile-optimized, and provides a rich user experience with clear navigation and branding consistency. Technically, the site uses modern frameworks such as React and Next.js, integrates Google Tag Manager for analytics, and employs Cookiebot for privacy compliance. Security posture is good with HTTPS enforced and privacy-conscious cookie settings, though explicit security headers and incident response information are not found. WHOIS data is unavailable, which slightly reduces trust but does not outweigh the strong brand presence and professional site implementation. Overall, Camper's website is a secure, privacy-aware, and user-friendly retail platform with room for improvement in transparency and contact information.
NORR11norr11.com
E-commerce · Denmark
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
NORR11 is a Denmark-based design company specializing in furniture and lighting, founded in 2011. The company operates an e-commerce platform powered by Shopify, targeting consumers interested in high-quality design products. The website demonstrates a mature digital infrastructure with modern technologies including Shopify Pay, Klaviyo marketing tools, and comprehensive cookie consent mechanisms, reflecting good digital maturity and compliance with GDPR requirements. Security posture is strong with HTTPS enforced and domain registration consistent with business claims, although some security headers could be explicitly added and a vulnerability disclosure policy published to enhance trust. Overall, the website is professional, user-friendly, and trustworthy, with moderate user tracking primarily for marketing and analytics purposes.
- Song for the Mute
songforthemute.com
Retail
79Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Song for the Mute is a niche fashion brand that presents its collections as long-form stories, targeting discerning fashion consumers interested in artistic and narrative-driven apparel. The website showcases seasonal collections for menswear, womenswear, and accessories, including special releases and collaborations such as with Adidas. The brand positions itself as a high-end, storytelling-driven retailer with a strong emphasis on design and fabric experimentation. Technically, the website is built using modern frameworks like Gatsby and React, with integrations for analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Klaviyo. The site is mobile optimized and provides a smooth user experience with clear navigation and professional design. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and detailed security policies. The absence of WHOIS data reduces transparency and business credibility, though the website content and branding appear professional and trustworthy. Overall, the site is well-constructed but would benefit from improved security disclosures and more transparent business contact information.
Fleerackersfleerackers.com
E-commerce · Belgium
77Low
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Fleerackers is a small-scale e-commerce business specializing in designer jewelry, offering a curated selection of rings, earrings, bracelets, and necklaces. The website is built on the Shopify platform, leveraging modern web technologies and providing a smooth user experience with good mobile optimization and fast performance. The business targets consumers interested in artistic and high-quality jewelry pieces. Despite the lack of WHOIS data, the website maintains a professional appearance with privacy and cookie policies in place, and social media presence on Instagram. Security posture is solid with HTTPS enforced and use of CAPTCHA for forms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy and well-constructed but would benefit from enhanced transparency and contact information.
- Urbanears
urbanears.com
Retail · Finland
77Low
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
Urbanears operates a professional e-commerce website specializing in headphones and true wireless earbuds, targeting a general consumer audience primarily in Finland and other international markets. The site is built on Salesforce Commerce Cloud, leveraging modern web technologies and integrations such as Google Tag Manager, Yotpo for reviews, and Usercentrics for cookie consent management. The business emphasizes sustainability with carbon-neutral shipping and offers customer-friendly policies like 30-day returns. Despite the lack of publicly available WHOIS data, the website's technical maturity and content quality suggest a legitimate and established retail operation. Security measures include HTTPS, reCAPTCHA, and cookie consent, though some HTTP security headers could be improved. Overall, the site presents a trustworthy and professional front for Urbanears' retail business.
Wrensilvawrensilva.com
E-commerce · United States
82Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Wrensilva is a specialized e-commerce business focused on premium modern record players and HiFi stereo consoles, targeting design and audio connoisseurs. The company operates on the Shopify Plus platform, leveraging modern web technologies and marketing tools such as Klaviyo and GSAP for animations. The website is professionally designed with good user experience and clear navigation, supporting its premium market positioning. Security posture is solid with HTTPS enforced and domain locking, though improvements like DNSSEC and advanced security headers are recommended. Privacy compliance is lacking due to absence of visible privacy and cookie policies. Overall, the site is trustworthy and functional with room for enhanced compliance and security maturity.
- Sandisk - US
sandisk.com
Technology · United States
82Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
SanDisk is a well-established enterprise-level technology company specializing in high-performance digital storage solutions including SSDs, memory cards, and USB flash drives. The company targets gamers, digital photography enthusiasts, and everyday users, positioning itself as a leading brand in the storage industry. The website reflects a mature digital presence with professional design, comprehensive content, and consistent branding aligned with its corporate identity under Western Digital Corporation. Technically, the site leverages modern web technologies such as Adobe Experience Manager, Adobe Launch, Vimeo, and YouTube integrations, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly disclosed. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates high professionalism and trustworthiness, with no indications of malicious or suspicious activity.
Atomlaunch.watch
Technology
83Low
NIS2 17 · GDPR 68
NIS2 17 · GDPR 68
The website represents a premium domain marketplace operated by Atom, focusing on the sale of the domain Launch.watch. The business model centers on domain brokerage and branding services, targeting startups and entrepreneurs in technology and related sectors. The site is professionally designed with good user experience and mobile optimization, leveraging modern JavaScript libraries and monitoring tools such as New Relic and Google Tag Manager. However, the absence of WHOIS data for the domain Launch.watch limits the ability to fully verify domain legitimacy and ownership. Security posture is adequate with HTTPS and monitoring in place, but lacks explicit security headers and privacy compliance documentation. Overall, the site is functional and trustworthy for domain sales but would benefit from enhanced transparency and compliance features.
Better Stack, Inc.logtail.com
Technology · United States
76Low
NIS2 29 · GDPR 65
NIS2 29 · GDPR 65
Better Stack, Inc. operates a mature and reputable SaaS platform focused on observability, log management, and incident response. The company offers a comprehensive suite of services including log aggregation, uptime monitoring, incident management, and AI-driven incident silencing, targeting engineering teams and enterprises. Their market position is strengthened by cost-effective solutions leveraging advanced technologies like Clickhouse and OpenTelemetry. The website demonstrates a high level of digital maturity with modern frameworks such as Vue.js and Ruby on Rails, supported by extensive analytics and marketing integrations. Security posture is strong with HTTPS, CSRF protection, and error monitoring via Sentry, though some improvements in privacy compliance and vulnerability disclosure are recommended. Overall, the domain registration and WHOIS data confirm the legitimacy and consistency of the business, supporting a high trust level.
MCP Routermcp-router.net
Technology
81Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
MCP Router is a technology-focused application designed to simplify the management of Model Context Protocol (MCP) servers, which extend AI capabilities. The website presents a modern, well-structured interface built with React and Next.js, targeting developers and organizations managing MCP servers. It offers features such as one-click server addition, request logging, security controls, and local API access, positioning itself as a niche tool in the AI infrastructure space. The business appears to be newly founded in 2025, consistent with the domain registration date, and operates with a small team or entity given the scale and scope of the offering. Technically, the website leverages modern web technologies including Next.js and Mantine UI, hosted with Cloudflare DNS services. The site is performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism or GDPR explicit compliance indicators. From a security perspective, the site shows good foundational practices but could improve by enabling DNSSEC, adding security headers, and publishing a vulnerability disclosure or security.txt file. No incident response or data protection officer contacts are found, which may be a gap for compliance and trust. The absence of direct contact emails or phone numbers limits immediate user support channels, relying instead on a contact form link. Overall, MCP Router presents a credible and professional web presence for a specialized technology product. The risk profile is moderate with no critical vulnerabilities detected, but improvements in security policies and privacy compliance would enhance trust and reduce potential risks. Strategic recommendations include enhancing security headers, implementing cookie consent, and providing clearer contact and incident response information.
—
76Low
NIS2 55 · GDPR 35
NIS2 55 · GDPR 35