Low-risk security reports
14,261 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,165001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
7,851–7,900 of 14,261
iMyFoneimyfone.com
Technology
78Low
NIS2 10 · GDPR 83
NIS2 10 · GDPR 83
iMyFone operates as a technology company specializing in software utilities for iOS, Android, Windows, and Mac platforms. Their product suite includes data recovery tools, device unlocking software, system repair utilities, and a growing portfolio of AI-powered applications. The company targets both individual consumers and professionals seeking solutions for device data management and multimedia editing. Their market position is that of an established mid-sized player with a consistent brand presence and a broad product offering. Technically, the website employs modern web technologies including JavaScript frameworks, animation libraries, and multiple analytics and tracking services, indicating a mature digital infrastructure. Security posture is generally strong with HTTPS enforced and encryption libraries in use, though explicit security headers and public security policies are lacking. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of public contact emails and phone numbers, combined with missing WHOIS registration data, introduces some uncertainty regarding domain legitimacy. Overall, the website is professional, user-friendly, and trustworthy, but domain registration status should be monitored for assurance.
Technology
78Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
The website keyword.com provides keyword rank tracking and position monitoring services aimed at SEO professionals and digital marketers. It positions itself as an affordable and accurate tool in the keyword tracking market. The business model appears to be SaaS-based, leveraging a mature domain registered since 1997, indicating a well-established presence. The website uses WordPress CMS with Elementor and JetEngine plugins, integrating multiple marketing and analytics tools such as HubSpot and Google Tag Manager, reflecting a moderate level of digital maturity. Security posture is basic with HTTPS enabled and domain status protections, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and functional but would benefit from enhanced privacy and security disclosures.
Labelboxlabelbox.com
Technology · United States
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Labelbox is a technology company specializing in providing a SaaS platform for AI teams to build, operate, and staff their data factories. The company offers data labeling and management software designed to streamline the creation of training data for machine learning models. Positioned as an established player in the AI data labeling market, Labelbox targets AI teams, data scientists, and enterprises seeking scalable data operations solutions. The website reflects a professional and consistent brand image with good content quality and clear messaging about its services. Technically, the website leverages modern web technologies including React and Next.js frameworks, supported by a robust analytics and marketing stack such as Google Analytics, Marketo, and LinkedIn Insight Tag. Hosting and DNS services are provided by Cloudflare, ensuring reliable performance and security. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site enforces HTTPS with a solid SSL configuration and includes a Content-Security-Policy header. However, DNSSEC is not enabled, and additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including a consent mechanism aligned with GDPR requirements. Overall, Labelbox presents a trustworthy and professional online presence with a mature technical infrastructure and solid security posture. Strategic recommendations include enabling DNSSEC, enhancing security headers, and publishing explicit security and incident response policies to further strengthen trust and compliance.
Timely.comtimelyapp.com
Technology
78Low
NIS2 47 · GDPR 83
NIS2 47 · GDPR 83
Timely.com is a technology company specializing in AI-powered automatic time tracking software designed primarily for consultancies, agencies, and SaaS businesses. Positioned as a leading solution in its market segment, Timely offers comprehensive features including automatic tracking, AI-generated timesheets, project dashboards, and extensive integrations with popular productivity tools. The company emphasizes accurate time data to drive business insights and operational efficiency. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, the website leverages modern web technologies including Webflow CMS, Segment Analytics, HubSpot marketing tools, Google Tag Manager, and VWO for optimization. It supports multiple platforms including web, Windows, Mac OS, iOS, and Android, indicating a broad technical infrastructure. Performance and mobile optimization are excellent, with good SEO and accessibility practices in place. From a security perspective, the site enforces HTTPS, employs multiple security headers, and uses best practices such as rel='noopener noreferrer' on external links and cookie consent mechanisms. However, explicit incident response and vulnerability disclosure policies are not publicly available, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, Timely.com presents a low-risk profile with strong business credibility and technical maturity. The lack of WHOIS domain registration data slightly reduces transparency but does not significantly impact trust given the strong external trust signals and professional web presence. Strategic recommendations include publishing detailed security policies and enhancing transparency around data protection roles.
DeviantArtdreamup.com
Technology · United States
81Low
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
DeviantArt operates as the world's largest online art community, providing a platform for artists and enthusiasts to create, share, and engage with art. The site features DreamUp, an AI-powered image generator that enables users to create high-quality AI art quickly. Owned by Wix.com Ltd., DeviantArt holds a strong market position as a leading creative platform with a large user base and diverse art styles. Technically, the website leverages modern web technologies including React and Wix's hosting infrastructure, ensuring fast performance and mobile optimization. Security practices are robust with HTTPS, security headers, and secure cookie settings, although explicit privacy and cookie policies are not evident in the analyzed content. Overall, DeviantArt demonstrates a mature digital presence with excellent content quality and user experience, but could improve transparency around privacy and security contact information.
- MMidjourney
midjourney.com
Technology
76Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Midjourney is an independent AI research lab focused on exploring new mediums of thought and expanding human imaginative capabilities. The company operates as a small, self-funded team with a strong emphasis on design, human infrastructure, and AI technologies. Their market position is that of a niche but innovative player in the AI creative tools space, supported by a notable advisory board with industry veterans. Technically, the website employs modern web technologies including React, Cloudflare services, and Google Tag Manager, delivering a fast and mobile-optimized user experience. Security posture is solid with HTTPS and bot mitigation via Cloudflare Turnstile, though explicit security headers and incident response policies are absent. Overall, the site is professional and trustworthy, but the lack of WHOIS data and cookie consent mechanisms slightly reduce privacy compliance and trust scores.
- WWelcome To The CILogon Service
cilogon.org
—
81Low
NIS2 47 · GDPR 58
NIS2 47 · GDPR 58
- Unspam Registry Services, Inc
registrycompliance.com
Government · United States
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Registry Compliance operates as a specialized service provider assisting senders in complying with children's protection registry laws specifically in Utah and Michigan. The company, Unspam Registry Services, Inc, has been established since 2004 and maintains a niche position in the compliance and anti-spam legislative consulting market. Their website provides informational resources, account management, and customer support primarily through static content and basic interactive forms. The target audience includes businesses and individuals who send electronic communications subject to these state laws. Technically, the website is built on a simple HTML/CSS/JavaScript stack without modern CMS or frameworks. Hosting is provided by Cloudflare, ensuring basic performance and security benefits. However, the site lacks mobile optimization and advanced accessibility features, indicating room for modernization. SEO and metadata are basic but sufficient for the site's scope. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but it lacks DNSSEC and important security headers. No cookie consent mechanism is present, which may impact privacy compliance. The absence of explicit contact emails and phone numbers reduces direct communication channels. Overall, the security posture is basic but functional for the site's purpose. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in security headers, privacy compliance, and mobile optimization would enhance trust and user experience. The domain registration data aligns well with the business history, supporting legitimacy.
- Comm100
comm100.com
Technology · Canada
85Low
NIS2 17 · GDPR 85
NIS2 17 · GDPR 85
Comm100 is a technology company specializing in AI-powered omnichannel customer service solutions, including live chat, chatbots, ticketing, and knowledge base platforms. Positioned as an established player in the customer service technology market, Comm100 targets businesses seeking to enhance customer engagement and support through SaaS offerings. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business users. Technically, the site leverages WordPress with Divi Builder, integrates modern analytics and marketing tools, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS enforcement and security headers, though explicit incident response and vulnerability disclosure policies are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts business credibility. Overall, the site is trustworthy, professional, and compliant with privacy regulations, serving a general audience safely.
dbt Labsgetdbt.com
Technology
78Low
NIS2 22 · GDPR 70
NIS2 22 · GDPR 70
dbt Labs operates a professional and well-designed website focused on delivering trusted data transformation and analytics engineering solutions. The company positions itself as a leader in the technology sector, providing advanced tools such as the dbt Fusion engine and AI-accelerated features to empower data teams. The website demonstrates a mature digital presence with modern technologies and clear business messaging. However, the absence of WHOIS data and lack of visible privacy and security policies slightly diminish the overall trust and compliance posture. The technical infrastructure is modern and performant, but security best practices such as security headers and incident response information are not publicly evident. Overall, the site is credible and business-focused, with room for improvement in transparency and security disclosures.
dbt Labsdbt.com
Technology
78Low
NIS2 22 · GDPR 70
NIS2 22 · GDPR 70
dbt Labs operates a professional and comprehensive website focused on empowering data teams to build reliable and governed data pipelines, accelerating analytics and AI initiatives. The company positions itself as a leader in the analytics engineering space, offering advanced tools such as the dbt Fusion engine and AI-accelerated features like dbt Copilot. The website content is well-structured, targeting data professionals and enterprises seeking efficient data transformation solutions. Technically, the site leverages modern frameworks including React and Next.js, with integrations for analytics and user behavior tracking via Hotjar and Google Tag Manager. Security posture is strong, with HTTPS enforced and multiple security headers implemented, although explicit incident response and vulnerability disclosure policies are not publicly available. Privacy compliance is evident through the presence of privacy and cookie policies with consent mechanisms, aligning with GDPR standards. The domain WHOIS data is unavailable, likely due to privacy protection or recent registration, but the website's professional quality and trust indicators mitigate concerns. Overall, the site demonstrates a mature digital presence with a solid security foundation and clear business focus.
Termageddontermageddon.com
Technology
82Low
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Termageddon is a specialized technology company offering auto-updating website legal policies such as Privacy Policies, Terms of Service, and Cookie Policies. Founded in 2016 and led by a privacy attorney, it occupies a niche market position providing SaaS solutions to businesses seeking compliance with GDPR, CPRA, CalOPPA, and other regulations. The company targets website owners and businesses requiring legally sound, automatically updated policies to mitigate legal risks. Technically, the website is built on WordPress with modern themes and integrates consent management via Usercentrics and privacy-focused analytics through Fathom. The infrastructure uses Cloudflare DNS and GoDaddy as registrar, with domain locking for security. Security posture is strong with HTTPS enforced and client prohibitions on domain transfers, though DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, the website is professional, well-branded, and trustworthy, with good privacy compliance indicators but lacks direct contact information and formal security disclosures.
Unspam Technologies, Inc.projecthoneypot.org
Technology
77Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Project Honey Pot is an established, community-driven open-source project operated by Unspam Technologies, Inc., focused on tracking and combating online fraud, spam harvesters, and abuse. The website serves as a platform for website administrators and security professionals to monitor and mitigate spam and abuse threats. The project has a long operational history dating back to 2004 and maintains a strong market position as a leading anti-spam community resource. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and is protected by Cloudflare with HTTPS enabled, ensuring secure access. Google Analytics is used for visitor tracking, though privacy compliance could be improved with cookie consent mechanisms. Security posture is solid with HTTPS and Cloudflare protection, but lacks some security headers and formal incident response or vulnerability disclosure policies. Overall, the website is professional, trustworthy, and provides valuable services to its target audience.
- Discord
mainwpinvite.com
Technology
80Low
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Discord is a well-established technology company providing a leading communication platform primarily for gaming and community engagement. The analyzed page is an invite to a specialized Discord server focused on MainWP professionals and WordPress management, indicating a niche community use case within the broader platform. The business operates at an enterprise scale with a mature domain and robust infrastructure supported by Cloudflare services. Technically, the website leverages modern JavaScript frameworks and WebSocket technology to deliver real-time communication features, ensuring fast performance and good mobile optimization. Security posture is strong with domain status protections and HTTPS enforcement, although DNSSEC is not enabled and explicit security headers were not detected in the provided data. Privacy compliance is limited on this invite page, with no visible privacy or cookie policies and no contact information, which slightly reduces the overall compliance score. Overall, the domain and website are trustworthy and professional, with no indications of malicious or adult content.
Writer, Inc.writer.com
Technology · United States
78Low
NIS2 25 · GDPR 73
NIS2 25 · GDPR 73
Writer, Inc. operates a sophisticated end-to-end AI agent builder platform designed to unify IT and business teams within enterprises. The company targets large organizations seeking to leverage AI for faster product launches, financial research, and clinical trials. Their platform enables building, activating, and supervising AI agents powered by enterprise-grade large language models. The website reflects a mature digital presence with professional design, extensive marketing and analytics integrations, and clear contact information. Technically, the site is built on WordPress, hosted likely on Google Cloud infrastructure, and employs modern tracking and personalization tools. Security posture is solid with HTTPS and domain protections, though DNSSEC is not enabled and explicit security policies are absent. Privacy compliance is partial, lacking visible privacy and cookie policies. Overall, the company presents as a credible and established technology provider with room for improvement in transparency and security documentation.
- Xebia
xebia.com
Technology · Netherlands
76Low
NIS2 25 · GDPR 83
NIS2 25 · GDPR 83
Xebia is a well-established global IT consulting and technology services company founded in 2001, specializing in AI-first and human-centered digital transformation. The company offers a broad range of services including applied and generative AI, intelligent automation, cloud and data modernization, digital products, and training. With a presence in 16 countries and strategic partnerships with major technology providers such as Google Cloud, AWS, and Microsoft, Xebia positions itself as a trusted partner for enterprises seeking to leverage AI and cloud technologies to gain competitive advantage. The website reflects a high level of digital maturity, utilizing modern frameworks like Next.js and integrating HubSpot for marketing and analytics. The site is well-optimized for performance, mobile responsiveness, and accessibility, providing an excellent user experience. Security posture is strong with HTTPS enforced, clientTransferProhibited domain status, and cookie consent mechanisms, although DNSSEC is not enabled and explicit security policies or incident response contacts are not publicly detailed. Overall, the website and domain registration data indicate a legitimate, professional, and trustworthy enterprise with a strong market position in technology consulting and AI services.
- Gradle
gradle.com
Technology
79Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Gradle is a technology company specializing in software delivery acceleration and developer productivity engineering. Their flagship product, Develocity®, addresses challenges posed by generative AI in continuous delivery pipelines by enhancing speed, stability, and confidence while managing costs. The company targets software development teams and enterprises seeking to optimize their build and delivery processes. The website reflects a mature business with a consistent brand and professional presentation. Technically, the site uses modern frameworks such as Next.js and React, hosted with Cloudflare DNS, and integrates analytics tools like Fathom and Google Tag Manager. Security posture is solid with HTTPS and domain transfer protections, though some security headers and policies are not explicitly present. Privacy compliance is basic with a cookie consent mechanism but lacks visible privacy or terms policies. Overall, the site is trustworthy and well-positioned in the technology sector.
- VVistaprint
vistaprint.com
Retail · United States
76Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
VistaPrint is a well-established online printing service provider specializing in custom marketing materials, business cards, signage, promotional products, and packaging. The company targets small businesses, entrepreneurs, and marketers seeking customizable print products through an e-commerce platform. The website presents a professional and consistent brand image with comprehensive product offerings and official social media presence, indicating a strong market position in the retail printing sector. Technically, the website leverages modern JavaScript frameworks such as React and uses SystemJS for module loading. The presence of Algolia indicates advanced search capabilities. The site is mobile-optimized and demonstrates good SEO practices, although performance is moderate. The CMS identified is 'ubik', suggesting a custom or proprietary content management system. However, no hosting provider or SSL configuration details were found in the provided data. From a security perspective, the website lacks visible security headers and explicit privacy or cookie policies in the provided content, which are critical for compliance and user trust. The WHOIS data is unavailable or obscured, which raises some concerns about domain registration transparency. No forms or incident response contacts were detected, limiting the assessment of data collection and security incident readiness. Overall, the security posture is moderate but could be improved with better transparency and technical safeguards. The overall risk assessment suggests the website is legitimate and professionally managed but would benefit from enhanced security practices, clearer privacy compliance, and improved WHOIS transparency. Strategic recommendations include implementing comprehensive security headers, publishing clear privacy and cookie policies, and verifying domain registration details to strengthen trust and compliance.
Clear Books Limitedclearbooks.co.uk
Technology · United Kingdom
83Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Clear Books Limited is a UK-based company providing premier online accounting software tailored for small businesses. Their platform offers comprehensive features including invoicing, bookkeeping, VAT management, multi-currency support, and compliance with HMRC's Making Tax Digital and Construction Industry Scheme. The company positions itself as an award-winning solution with a strong user base of over 15,000 UK small businesses and endorsements from accountants. Technically, the website employs a modern tech stack with jQuery, Google Tag Manager, and Visual Website Optimizer, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and CSRF protections, though there is room for improvement in implementing additional security headers. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. Overall, the website reflects a professional, trustworthy, and mature digital presence supporting Clear Books' business objectives.
- Tavily
tavily.com
Technology
76Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Tavily operates as a technology company providing a real-time search engine API tailored for AI agents and Retrieval-Augmented Generation (RAG) workflows. The company targets developers and AI application builders, offering fast and secure APIs for web search and content extraction. The website demonstrates a strong market position, trusted by over 600,000 developers and integrated with notable AI and developer platforms such as Cohere, LangChain, and MongoDB. The business model centers on API services that empower AI applications with accurate and real-time web data. From a technical perspective, Tavily's website is built using modern web technologies including React, Next.js, and Chakra UI, ensuring excellent performance, mobile optimization, and accessibility. The site features SDK examples in Python, Node.js, and cURL, facilitating easy integration for developers. The presence of Google Tag Manager indicates moderate analytics and tracking capabilities. Security posture is moderate; while HTTPS is implied and no sensitive data is exposed, the absence of visible security headers, privacy policies, cookie consent mechanisms, and WHOIS registration data introduces trust and compliance concerns. The lack of WHOIS data is particularly notable, as it raises questions about domain registration legitimacy. No vulnerability disclosure or incident response information is provided, which could be improved to enhance security transparency. Overall, Tavily presents as a professional and trustworthy technology service provider with a strong developer focus. However, improvements in privacy compliance, security best practices, and domain registration transparency are recommended to strengthen trust and regulatory adherence.
- SStackSocial
stacksocial.com
Technology · United States
78Low
NIS2 25 · GDPR 53
NIS2 25 · GDPR 53
StackSocial is an established e-commerce platform specializing in technology deals, software bundles, gadgets, and web services. The company targets technology consumers and bargain seekers by offering giveaways, pay-what-you-want deals, and curated bundles. The website demonstrates a professional design and consistent branding, positioning itself as a key player in the online tech deals marketplace. The technical infrastructure leverages modern web technologies such as Next.js and Chakra UI, with integrations like Gladly chat SDK for customer support. Performance and mobile optimization are good, though accessibility is basic. Security posture shows room for improvement, with no detected security headers and missing privacy and cookie policies, which impacts compliance and trust. The absence of WHOIS data for the domain is a notable concern, reducing domain legitimacy confidence. Overall, the site is functional and professional but would benefit from enhanced security and privacy transparency to improve trust and compliance.
DealFueldealfuel.com
Technology
80Low
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
DealFuel is an e-commerce platform specializing in offering discounted deals and subscriptions for digital products targeted at web designers, developers, marketers, bloggers, startups, and learners. The website leverages WordPress with WooCommerce and Elementor to provide a modern, user-friendly shopping experience. It integrates multiple marketing and analytics tools such as Google Tag Manager, Moosend, Trustpilot, and Hotjar to optimize user engagement and track performance. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though explicit security headers are not clearly present. The absence of WHOIS data and registrant information raises concerns about domain legitimacy and trustworthiness. Privacy and cookie policies are not clearly found, which impacts compliance and user trust. Overall, the site is functional and professional but would benefit from improved transparency and security documentation.
Grosvenorgrosvenor.com
Real Estate
82Low
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Grosvenor is a global property group specializing in urban property, rural estates, food and AgTech investments, social enterprise, and philanthropy. The website reflects a mature business with a diversified portfolio and a focus on social impact. Technically, the site uses modern analytics and consent management tools such as Google Analytics, Google Tag Manager, and Cookiebot, hosted likely behind Cloudflare. The site is well-structured, mobile-optimized, and uses HTTPS, indicating a good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. The absence of WHOIS data and privacy policy links slightly reduces trustworthiness. Overall, the site is professional and trustworthy but could improve transparency and security documentation.
SaaSPiratesaaspirate.com
Technology
76Low
NIS2 55 · GDPR 100
NIS2 55 · GDPR 100
SaaSPirate is an established online platform specializing in aggregating and delivering verified lifetime deals and discounts on SaaS products, software, AI tools, and services. Founded in 2019, it has built a strong community of over 15,000 members and has launched more than 300 SaaS tools. The platform is recognized and featured on multiple reputable sites such as Niche Pursuits, ProductHunt, and SaaSHub, positioning itself as a leading source for SaaS lifetime deals. Its business model revolves around affiliate partnerships and community engagement, targeting entrepreneurs and small to medium business owners seeking cost-effective software solutions. Technically, the website is built on WordPress using the GeneratePress theme and several plugins including Fluent Forms and Ninja Tables. It employs image optimization via ShortPixel and is hosted with Cloudflare as the registrar and DNS provider. The site demonstrates good mobile optimization, SEO practices, and moderate performance. However, it lacks DNSSEC and explicit privacy and cookie policies, which are areas for improvement. From a security perspective, the site enforces HTTPS and benefits from Cloudflare's security features, including clientTransferProhibited domain status. No critical vulnerabilities or exposed sensitive data were detected. Nonetheless, the absence of published security policies and incident response plans indicates room for enhancing its security posture. Overall, SaaSPirate presents a trustworthy and professional platform with strong business credibility and technical infrastructure. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent mechanisms, enabling DNSSEC, and publishing security and incident response documentation to bolster compliance and user trust.
Sprouting Famsproutingfam.com
Other
78Low
NIS2 17 · GDPR 100
NIS2 17 · GDPR 100
Sprouting Fam is a niche content blog established in 2018, focusing on sprouting seeds, home gardening, natural living, and healthy recipes. The website targets home gardeners and health-conscious individuals seeking educational content and product recommendations. The business model primarily revolves around content marketing, affiliate partnerships, and advertising revenue. Technically, the site is built on WordPress using the Kadence theme and blocks, hosted behind Cloudflare with DNS managed by NameCheap. The site demonstrates moderate performance and good mobile optimization, with SEO best practices implemented through structured data and meta tags. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks explicit security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Contact information is not directly available on the homepage, which may affect user trust. Overall, the website is professional and trustworthy within its niche but could improve in privacy transparency and security hardening.
TechTurtle, s.r.o.geotargetly.com
Technology · Slovakia
80Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Geo Targetly, operated by TechTurtle, s.r.o., is a specialized SaaS platform providing a comprehensive suite of geo targeting tools designed to enhance website conversions and user experience for multi-regional and multi-lingual businesses. The platform offers a wide range of products including geo redirects, geo links, geo content, popups, blocking, and location APIs, catering primarily to e-commerce and marketing professionals. The company has established a credible market position with global brand customers and positive third-party reviews. Technically, the website is built on modern frameworks such as Webflow and integrates advanced analytics and marketing tools like Google Tag Manager, Microsoft Clarity, and Visual Website Optimizer, ensuring a robust digital infrastructure. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity.
WarmupInboxwarmupinbox.com
Technology
85Low
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
WarmupInbox operates a professional SaaS platform focused on improving email deliverability through an email warmup tool and related services. The company targets marketers, sales professionals, lead generation experts, and recruiters, offering a subscription-based model with competitive pricing and a 7-day free trial. The website demonstrates strong market positioning with multiple trust signals including customer testimonials, case studies, and recognized review badges. Technically, the site is built on WordPress with modern plugins and integrations such as Elementor, Yoast SEO, and various analytics and marketing tools, ensuring good SEO, mobile optimization, and user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and public security policies. The absence of WHOIS data suggests privacy protection or recent registration, which slightly impacts trust but is common in privacy-conscious businesses. Overall, the site is professional, trustworthy, and well-optimized for its business purpose.
EmailListVerifyemaillistverify.com
Technology
85Low
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
EmailListVerify is a mature technology company founded in 2015, specializing in bulk email verification and real-time email validation API services. The company targets businesses and marketers seeking to improve email deliverability and sender reputation by cleaning email lists from invalid, disposable, and spam trap addresses. Their market position is supported by over 5 billion emails checked and positive user reviews on Trustpilot, Capterra, and G2. The business model is SaaS-based with pay-as-you-go and subscription pricing options, integrating with popular email marketing platforms.
Xexe.com
Finance
80Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Xe is a leading global provider of currency exchange rates and international money transfer services, boasting over 30 years of market presence. The company offers a comprehensive suite of services including live currency conversion tools, international transfers to over 190 countries, and a commercial-grade currency data API used by hundreds of companies worldwide. Their platform targets both individual consumers and businesses, providing secure, fast, and convenient financial services with a strong emphasis on user experience and trust. Technically, Xe employs a modern web infrastructure built on Next.js and React, integrating multiple analytics and marketing tools such as Google Tag Manager, Amplitude, and Facebook Pixel. The website is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital presence. The use of security headers and HTTPS indicates a strong security posture, although explicit security policies and incident response information are not publicly detailed. From a security perspective, the site demonstrates good practices including secure forms, no exposed sensitive data, and comprehensive use of security headers. However, the absence of a public vulnerability disclosure program and security.txt file suggests room for improvement in transparency and incident readiness. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Overall, Xe presents a trustworthy and professional online presence with robust business credibility and technical maturity. The main risk factor is the lack of publicly available WHOIS registration data, which slightly impacts domain trustworthiness assessment. Strategic recommendations include enhancing security transparency, publishing incident response details, and maintaining rigorous third-party script audits to sustain security and compliance standards.
- Podcasting Ltd
pod.co
Technology · United Kingdom
81Low
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Podcast.co is a professional podcast hosting and production platform operated by Podcasting Ltd, based in the United Kingdom. The company offers a comprehensive suite of tools for podcast creators, brands, and publishers to host, distribute, and grow their podcasts. Their market position is strong, with over 7000 podcasters and notable clients trusting their services. The platform also provides additional services such as private podcasting, studio hire, and agency partnerships, supporting a diverse business model combining SaaS and service offerings. Technically, the website is built on modern web technologies including Webflow CMS, Wistia video hosting, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs modern security headers, and uses CAPTCHA for form protection, indicating a good security posture. However, it lacks a dedicated security policy or incident response information publicly available. The WHOIS data is redacted, which is common for commercial entities but limits transparency. Overall, Podcast.co presents a professional, trustworthy, and technically sound online presence with minor areas for improvement in security transparency and incident response readiness.
- Microlink HQ
microlink.io
Technology
81Low
NIS2 2 · GDPR 58
NIS2 2 · GDPR 58
Microlink is a technology company providing a high-level API service that enables businesses and developers to control headless browsers for web scraping, metadata extraction, screenshot generation, and PDF creation. The company positions itself as a developer-first, scalable browser-as-a-service platform with a global CDN infrastructure and built-in caching to optimize performance and reliability. Their business model includes tiered pricing plans with a free tier, pro, and enterprise options, targeting developers and businesses requiring automated web data extraction and processing. Technically, the website is built using modern web technologies including React and Gatsby, hosted on Vercel and leveraging Cloudflare's CDN for global distribution. The site demonstrates excellent performance, mobile optimization, and SEO practices. Payment processing is securely handled via Stripe, and analytics are collected minimally through Vercel Insights. The site lacks a cookie consent mechanism but maintains good privacy compliance with a comprehensive privacy policy. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and isolates requests to prevent shared browser sessions. However, it lacks DNSSEC and explicit security headers, and does not publish a dedicated security policy or incident response contacts. The domain registration is privacy protected but consistent with a legitimate tech startup, with no suspicious patterns detected. Overall, Microlink presents a professional, trustworthy, and technically mature online presence with minor areas for improvement in security transparency and privacy mechanisms. The risk profile is low, with recommendations to enhance DNS security, implement security headers, and provide clearer incident response information.
Sunosuno.ai
Technology · United States
76Low
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Suno is a technology company specializing in AI-powered music creation tools that empower users ranging from casual singers to professional artists to create, share, and discover music globally. The platform leverages modern web technologies including React and Next.js, integrated with authentication and bot protection services such as Clerk.js and hCaptcha, ensuring a secure and user-friendly experience. The website demonstrates strong digital maturity with fast performance, mobile optimization, and good SEO practices. Security posture is solid with HTTPS enforced and bot mitigation, though improvements could be made by enabling DNSSEC and publishing explicit security policies. Overall, the domain's long registration history and consistent WHOIS data support the legitimacy of the business. The site maintains good privacy compliance with clear policies and consent mechanisms. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding vulnerability disclosure information to further strengthen trust and compliance.
- Epay Global LTD
epay.com
Finance · Hong Kong
76Low
NIS2 47 · GDPR 68
NIS2 47 · GDPR 68
Epay Global LTD operates a comprehensive global payment gateway platform offering services such as CNY settlement, global collection, and payments with API integration for enterprises worldwide. Founded in 2014 and headquartered in Hong Kong with multiple branch offices, Epay serves nearly one million users across 196 countries supporting 78 currencies. The company holds key financial licenses including the Hong Kong Money Services Licence and PCI DSS certification, underscoring its commitment to compliance and security. Technically, the website leverages modern frameworks like Next.js and React, integrates analytics and tracking tools, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS enforcement and PCI DSS compliance, though explicit security policies and incident response details are not publicly disclosed. WHOIS data is unavailable or privacy protected, which slightly impacts trust but is common in the financial sector. Overall, Epay presents as a credible and professional payment service provider with a solid digital presence and compliance focus.
- The Allen Institute for AI (Ai2)
semanticscholar.org
Technology · United States
79Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Semantic Scholar is a leading AI-powered research tool developed by the Allen Institute for AI (Ai2), designed to facilitate discovery and understanding of scientific literature. The platform offers advanced semantic search capabilities, an augmented reading experience via Semantic Reader, and a public API for developers, positioning itself as a critical resource for researchers and scholars worldwide. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its academic audience. Technically, the site leverages modern web technologies including React, Google Analytics, HubSpot, and Appcues, hosted likely on AWS infrastructure with strong performance and mobile optimization. The presence of multiple security headers and enforced HTTPS indicates a robust security posture, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. From a security perspective, the site demonstrates good practices with no detected vulnerabilities or exposed sensitive data. The WHOIS data is privacy protected, which is typical for institutional domains, and does not detract from the site's legitimacy given its affiliation with Ai2. Overall, Semantic Scholar presents a trustworthy, professional, and secure platform with strong business credibility in the technology and education sectors. Strategic recommendations include publishing a dedicated security policy and incident response information, establishing a vulnerability disclosure program, and enhancing direct contact options for security and support to further strengthen trust and compliance.
Agency Mavericksagencymavericks.com
Other
80Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Agency Mavericks is an online coaching and training platform focused on helping freelancers, website developers, and digital marketing agencies start and grow their businesses. The company offers business coaching, online courses, and a community platform to support digital agency owners. The website is professionally designed using WordPress and Elementor, with good SEO and structured data implementation. It integrates multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and Visual Website Optimizer, indicating a mature digital marketing infrastructure. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and terms policies. The absence of WHOIS registration data for the domain is a significant concern that impacts trust and legitimacy assessment. Overall, the site is functional and professional but would benefit from improved transparency and security practices.
Eleman Beautyelemanbeauty.com
E-commerce · United States
80Low
NIS2 2 · GDPR 85
NIS2 2 · GDPR 85
Eleman Beauty is a small-sized e-commerce business specializing in vegan cosmetics, operating primarily in the United States. The company offers a range of beauty products including lipsticks, lip glosses, and eyeshadows, targeting consumers interested in ethical and high-quality makeup products. The website is built on the Shopify platform, leveraging various third-party tools for marketing, analytics, and customer engagement. The site demonstrates good content quality, professional design, and clear navigation, providing a positive user experience. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR and related regulations. However, direct contact emails and phone numbers are not publicly listed, with communication primarily via contact forms.
- CCanva Austria GmbH
designify.com
Technology · Austria
88Low
NIS2 2 · GDPR 95
NIS2 2 · GDPR 95
Designify is an AI-driven photo editing platform specializing in automatic background removal, color enhancement, and smart shadow application to create professional product photos and marketing visuals. Positioned as a SaaS offering with free and Pro subscription tiers, it targets e-commerce businesses, car dealerships, marketers, and developers requiring batch editing and API integration. The platform is affiliated with Canva Austria GmbH, enhancing its market credibility. Technically, Designify employs modern web technologies including React, Next.js, and Chakra UI, ensuring a fast, mobile-optimized, and accessible user experience. Security is robust with HTTPS, security headers, and hCaptcha anti-bot protection, though explicit security policies and incident response details are absent. Privacy compliance is strong, with clear GDPR adherence and cookie consent mechanisms. However, the absence of WHOIS domain registration data introduces some trust concerns. Overall, Designify presents a professional, secure, and user-friendly service with room for improvement in transparency and security disclosures.
Canva Austria GmbHunscreen.com
Technology · Austria
76Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Unscreen is a technology-driven SaaS platform specializing in automatic video background removal, eliminating the need for traditional greenscreen techniques. The service targets content creators, video editors, and professionals seeking efficient background removal solutions. It offers a freemium model with a Pro subscription that includes HD output, no watermarks, API access, and plugins for popular video editing software. The platform is branded under Canva Austria GmbH, indicating strong corporate backing and market presence. Technically, the website employs modern web technologies including Vue.js, Google Fonts, FontAwesome, and Google Tag Manager for analytics. It uses HTTPS with CSRF protection and hCaptcha for form security, reflecting a mature digital infrastructure. The site is well-optimized for mobile and desktop, with excellent design and user experience. From a security perspective, the site enforces HTTPS and uses anti-bot measures but lacks explicit security headers and published security policies or incident response contacts. The absence of WHOIS data for the domain is a transparency concern but is mitigated by the professional branding and trust signals present on the site. Overall, Unscreen presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security transparency and WHOIS data availability would enhance trust and compliance posture.
Canva Austria GmbHkaleido.ai
Technology · Austria
81Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Kaleido AI GmbH, now operating as Canva Austria GmbH, is a technology company specializing in visual AI solutions. Their flagship products include remove.bg for automatic image background removal, Unscreen for video background removal, and Designify for rapid automatic design creation. These products are integrated with Canva, a leading global design platform, positioning the company strongly in the visual AI and design automation market. The company targets designers, enterprises, and businesses seeking scalable AI-powered visual tools, offering SaaS and API access with enterprise solutions. Technically, the website employs modern web technologies such as Vue.js, Google Analytics, and Bootstrap, delivering a responsive and accessible user experience with good SEO practices. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though explicit security headers and policies could be enhanced. The WHOIS data is unavailable due to privacy protection, but the website's professional presentation and clear parent company relationship with Canva support its legitimacy. Overall, the site is safe, professional, and well-positioned in its niche.
itrinityitrinity.com
Technology
78Low
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
itrinity is a technology company specializing in building and acquiring a portfolio of highly profitable SaaS businesses with millions of users worldwide. Founded in 2014, itrinity has demonstrated consistent profitability and growth, focusing on efficient portfolio management and expansion through acquisitions. Their portfolio includes well-known SaaS brands such as Mangools, Email List Verify, Uptime Robot, Warmup Inbox, and GeoTargetly, serving notable clients including Apple, Cisco, BMW, and NASA. The company targets SaaS users, investors, and business buyers, positioning itself as a fast-growing product factory in the SaaS industry. Technically, itrinity operates a modern WordPress-based website using Elementor and Yoast SEO plugins, hosted with Cloudflare DNS services. The website is well-structured, mobile-optimized, and SEO-friendly, although some accessibility features are basic. Security-wise, the site uses HTTPS with good SSL configuration but lacks advanced security headers and publicly disclosed security policies. No vulnerability disclosure or incident response information is available, indicating room for improvement in transparency and security maturity. Overall, itrinity presents a credible and professional online presence with strong business credibility and a clear market position. However, the absence of privacy and cookie policies, security headers, and incident response details slightly lowers its privacy compliance and security posture scores. Strategic enhancements in these areas would strengthen trust and regulatory compliance.
Viggleviggle.ai
Technology · United States
76Low
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Viggle is a technology company specializing in AI-powered video generation and creative tools, enabling users to create viral memes, motion capture animations, and immersive experiences. The company targets content creators, filmmakers, and social media users, positioning itself as an innovative player in the AI creative tool market. The website demonstrates a modern technical infrastructure using React, Next.js, and Ant Design, hosted with Cloudflare DNS services, delivering fast and mobile-optimized user experiences. Security posture is strong with HTTPS, domain locking, and privacy-protected WHOIS registration, though DNSSEC is not enabled and cookie consent mechanisms are absent. Overall, Viggle presents a professional and trustworthy digital presence with active community engagement and media recognition.
D-IDd-id.com
Technology
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
D-ID is a technology company specializing in AI-generated video creation, providing a leading platform for businesses and developers to create photorealistic videos from images using advanced artificial intelligence. The company positions itself as a market leader in AI video generation, targeting B2B customers with SaaS offerings and API access. The website demonstrates a mature digital infrastructure, leveraging WordPress CMS, HubSpot marketing and analytics tools, and compliance with privacy regulations through Cookiebot and detailed privacy policies. Security posture is strong with HTTPS enforcement and standard security headers, though the absence of a dedicated security policy or incident response information suggests room for improvement. The lack of WHOIS data introduces a minor trust concern but does not detract significantly from the overall legitimacy. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure mechanisms to enhance trust and compliance.
Runway AI, Inc.runwayml.com
Technology · United States
78Low
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
Runway AI, Inc. is a technology company specializing in AI research and creative tools designed to empower artists, filmmakers, and creative professionals. Positioned as an innovative leader in the AI-powered creative tools market, Runway offers foundational AI models and multimodal simulators that enable new forms of art and entertainment. Their business model focuses on applied AI research and providing accessible platforms for content generation, supported by partnerships with major industry players such as Tribeca Festival and Lionsgate. The company was founded in 2018 and operates primarily in the United States.
Canva Austria GmbHremove.bg
Technology · Austria
77Low
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Remove.bg is a mature and reputable AI-driven image background removal service operated by Canva Austria GmbH. It offers a fast, automated solution for removing backgrounds from images, targeting a broad audience including photographers, marketers, developers, and enterprises. The company leverages modern web technologies and provides extensive integrations and APIs to embed its services into various workflows. The website is professionally designed, mobile-optimized, and rich in content, including testimonials and legal documentation. Security posture is strong with HTTPS, CSRF protection, and consent management, though explicit security policies and vulnerability disclosures are not publicly visible. Overall, remove.bg presents a trustworthy and technically sound platform with a strong market position in the image processing technology sector.
Gransy, s.r.o.mangools.com
Technology · Czech Republic
78Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Mangools is a well-established SEO tools provider offering a comprehensive suite of easy-to-use SEO software solutions including keyword research, SERP analysis, rank tracking, backlink analysis, and site profiling. The company targets SEO professionals, agencies, and business owners seeking to improve organic traffic through data-driven insights. The website demonstrates a mature digital presence with modern technologies, extensive analytics, and strong branding consistency. Security posture is solid with HTTPS and error monitoring but lacks explicit security policies or vulnerability disclosures. Overall, Mangools presents a trustworthy and professional online platform with a strong market position and user trust.
- Mangools
kwfinder.com
Technology
83Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Mangools operates a well-established SaaS platform specializing in keyword research and SEO tools, with KWFinder as a flagship product. The company targets a broad audience ranging from solopreneurs and freelance SEOs to marketing agencies, offering a comprehensive suite of SEO-related services including keyword difficulty analysis, competitor research, rank tracking, and backlink analysis. The business is positioned as an intuitive, affordable, and trusted solution with a strong market presence supported by positive expert testimonials and industry reviews. Technically, the website employs modern web technologies and integrates multiple analytics and marketing tools, hosted on AWS infrastructure, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is moderate due to the presence of a cookie consent mechanism but absence of explicit privacy and terms of service pages. Overall, Mangools demonstrates a mature digital presence with high business credibility and trustworthy domain registration.
- WWordtracker
wordtracker.com
Technology
78Low
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Wordtracker operates a technology-focused website offering a free keyword research tool aimed at SEO professionals and digital marketers. The platform positions itself as a competitive alternative to Google's Keyword Planner, emphasizing the discovery of profitable longtail keywords. The website demonstrates a moderate level of digital maturity, utilizing modern analytics and marketing technologies such as Google Analytics, Google Tag Manager, Stripe for payments, and reCAPTCHA for bot protection. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and ownership transparency. Security measures are partially implemented with HTTPS and CSRF tokens, but lack comprehensive security headers and published security policies. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and clearer business credibility indicators.
Key Tools Limitedkeywordtool.io
Technology · Hong Kong
76Low
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
Keyword Tool is a well-established online keyword research platform founded in 2014 and operated by Key Tools Limited based in Hong Kong. It offers a freemium SaaS model providing keyword suggestions primarily using Google Autocomplete data, targeting marketers, business owners, and content creators globally. The website is professionally designed, mobile-optimized, and features extensive content supporting SEO and PPC keyword research across multiple search engines and languages. The platform holds a strong market position as a reliable alternative to Google Keyword Planner, supported by reputable customer logos and media endorsements. Technically, the site leverages modern web technologies including Cloudflare CDN, Google Tag Manager, Microsoft Clarity, and VWO for analytics and optimization, ensuring fast performance and good accessibility. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and explicit security policies or incident response contacts are not publicly disclosed. Privacy compliance is adequate with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is trustworthy, secure, and professionally maintained, suitable for its target audience and business model.
- WorldFirst
worldfirst.com
Finance · United Kingdom
81Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
WorldFirst is a well-established financial services company specializing in international payments and currency exchange, targeting businesses and individuals engaged in cross-border trade. Owned by Ant Group, it holds a strong market position in Europe with a large customer base. The website reflects a professional and consistent brand image with comprehensive service offerings and clear business information. Technically, the site is built on WordPress with modern optimizations including lazy loading and SEO enhancements. Security posture is strong with HTTPS and security headers implemented, though public security policy and incident response information are lacking. Privacy compliance is robust with GDPR-aligned policies and cookie consent mechanisms. Overall, the domain appears legitimate despite missing WHOIS data, which warrants monitoring.
- Google LLC
google.com.mx
Technology · United States
80Low
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
Google LLC is a global leader in internet search and technology services, operating the world's most widely used search engine and offering a broad portfolio of products including advertising platforms, cloud computing, and software solutions. The company holds a dominant market position with a comprehensive ecosystem of services and subsidiaries such as YouTube and Android. Technically, the website demonstrates a mature infrastructure with modern web technologies, fast performance, and excellent mobile optimization. Security measures are robust, featuring HTTPS enforcement and multiple security headers, reflecting a strong security posture. Privacy compliance is well addressed with clear policies and consent mechanisms, aligning with GDPR requirements. Overall, Google.com presents a highly professional, trustworthy, and secure online presence.