Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,171001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
87,201–87,250 of 99,068
- Saolta University Health Care Group
saolta.ie
Healthcare · Ireland
62Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Saolta University Health Care Group is a prominent healthcare organization in Ireland comprising multiple university hospitals. It operates in partnership with the Health Service Executive (HSE) and provides a wide range of clinical services, research, and teaching. The website reflects a mature digital presence with clear navigation, relevant content for patients, visitors, and healthcare professionals, and strong branding consistency. The organization targets patients, general practitioners, and the public, emphasizing quality care and community health services. Technically, the website is built on Drupal 7 with a modern JavaScript stack including jQuery and Google Analytics for user tracking. The site is mobile optimized, accessible, and implements cookie consent mechanisms aligned with GDPR requirements. Performance is moderate with room for optimization. Security posture is good with HTTPS enforced and privacy-conscious analytics configurations, though explicit security policies and incident response contacts are not published. Overall, the website demonstrates a professional and trustworthy online presence suitable for a large healthcare provider. The lack of WHOIS data limits domain registration verification, but the content and official partnerships strongly support legitimacy. Strategic improvements include publishing formal security and incident response policies and enhancing HTTP security headers to further strengthen security posture.
Albrecht JUNG GmbH & Co. KGjung.lt
Technology · Lithuania
74Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Albrecht JUNG GmbH & Co. KG operates a professionally designed website focused on electrical switches and smart home systems, targeting Lithuanian customers. The site leverages modern e-commerce technology (Shopware 6) and includes essential digital marketing and performance monitoring tools. Security posture is good with HTTPS and Content Security Policy implemented, though additional security headers could enhance protection. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy detected in the provided content. WHOIS data is unavailable, which slightly impacts trust but the website's professional presentation and alignment with a known brand mitigate concerns. Overall, the site is functional, secure, and credible with room for improvement in privacy transparency and security headers.
Other
67Medium
NIS2 17 · GDPR 40
NIS2 17 · GDPR 40
The website productconnections.com is currently inaccessible, returning a 403 Forbidden error page served by Microsoft Azure Application Gateway. This prevents any meaningful content or metadata extraction, resulting in a lack of visible business information, contact details, or security policies. The domain is registered since 2002 with GoDaddy.com, LLC and is not privacy protected, indicating a legitimate registration history. However, the lack of accessible content severely limits the ability to assess the company's market position, services, or technical maturity. The hosting environment suggests enterprise-grade infrastructure but is currently configured to block access, possibly for security or maintenance reasons. Security posture cannot be evaluated due to the absence of accessible content and headers. Overall, the site presents a high risk from a user perspective due to inaccessibility and lack of transparency.
UAB Dizaino kryptiskryptis.lt
Technology · Lithuania
55Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
UAB Dizaino kryptis is a Lithuanian technology company specializing in human-centered internet platforms and mobile applications, operating since 1998. The company positions itself as a digital pioneer in Lithuania, offering services including IT service management, information security management, and environmental standards compliance, supported by multiple ISO certifications. Their target audience includes organizations and individuals seeking advanced digital solutions. Technically, the website employs modern frontend technologies such as jQuery, Bootstrap, Animate.css, and integrates Google Analytics for user tracking. The site is mobile optimized with good design and navigation, though accessibility and SEO could be improved. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and visible incident response contacts. Privacy and cookie policies are absent, indicating gaps in compliance. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.
Interjero ateljėinterjeroatelje.lt
Real Estate · Lithuania
64Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Interjero ateljė is a Lithuanian interior design business offering specialized interior design services and showcasing a portfolio of interior projects through an online gallery. The website targets local clients seeking professional interior design solutions. The business appears to be a small-scale service provider with a focused market niche in Lithuania. The website is professionally designed with good navigation and mobile optimization, though it lacks comprehensive business contact details and privacy-related policies. Technically, the site uses standard web technologies including JavaScript, CSS, and integrates Google Analytics and Google Tag Manager for visitor tracking. The site is served over HTTPS, but lacks advanced security headers which could improve its security posture. Performance is moderate with basic SEO and accessibility features implemented. From a security perspective, the website shows basic security hygiene with HTTPS enabled but misses important security headers and privacy compliance elements such as privacy and cookie policies. No forms or email contacts are present to assess input security. WHOIS data could not be retrieved due to query limits, limiting domain legitimacy verification. Overall, the site presents a moderate risk profile with room for improvement in security and compliance. Strategically, the business should focus on enhancing transparency by adding privacy and cookie policies, improving contact information with verified emails, and implementing security headers. These steps will improve trustworthiness and compliance with data protection regulations.
- hoster.by
nativita.by
Technology · Belarus
51Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
hoster.by is a Belarus-based web hosting and domain registration provider targeting Russian-speaking customers. The company offers domain registration, free site-vizitka creation, and hosting services with promotional discounts to attract new customers and domain transfers. The website currently displays a placeholder message indicating the site is temporarily unavailable, suggesting possible service interruptions or maintenance. The domain is registered with Open Contact, Ltd since 2021, indicating a relatively new but legitimate business presence. Technically, the website uses an outdated jQuery 1.8.3 library and lacks modern security headers, which may expose it to security risks. The site is basic in design and functionality, with minimal SEO and accessibility features. No privacy, cookie, or terms of service policies are present, and no contact information or social media links are provided, limiting transparency and user trust. From a security perspective, the absence of HTTPS enforcement details and security headers, combined with outdated libraries, suggests a moderate security posture with room for improvement. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website scores average in content quality and security, with significant gaps in privacy compliance and user engagement features. Strategic recommendations include updating the technology stack, implementing comprehensive security headers and HTTPS enforcement, publishing privacy and cookie policies to comply with GDPR, and providing clear contact information to enhance trust and user confidence.
Other
67Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website olifeja.lt is currently inaccessible beyond a Cloudflare Turnstile human verification challenge page, which prevents access to any substantive content or business information. Due to this, no meaningful business description, contact details, or service offerings can be identified. The site appears to be protected by Cloudflare's security mechanisms, indicating an intent to mitigate automated access or attacks but also limiting external analysis. The technical infrastructure includes Cloudflare's challenge platform and standard web technologies such as HTML5, CSS3, and JavaScript. However, no CMS or additional frameworks are detectable. Security posture cannot be fully assessed due to lack of access, but the presence of a WAF challenge suggests some level of security awareness. The absence of WHOIS data due to query limits further complicates trust evaluation. Overall, the site presents a high risk for lack of transparency and accessibility, and strategic recommendations focus on improving accessibility, transparency, and compliance once the WAF challenge is resolved.
SPL Group ATM Parts and Supportspl-group.com
Finance · Germany
62Medium
NIS2 25 · GDPR 50
NIS2 25 · GDPR 50
SPL Group is a well-established multinational corporation specializing in the supply and refurbishment of ATM parts and banking equipment. With a domain age dating back to 1997 and a strong presence in the financial services sector, the company offers a comprehensive range of services including parts supply, repair, refurbishment, training, and recycling solutions. Their target audience primarily includes banks, financial institutions, CIT companies, ATM manufacturers, and maintenance organizations. The website is professionally designed, mobile-optimized, and provides multilingual support, enhancing accessibility for a global clientele. Technically, the website is built on WordPress with WooCommerce and WPBakery Page Builder, leveraging modern web technologies and analytics tools such as Google Analytics and Tag Manager. Hosting and DNS are managed via reputable providers, including Network Solutions and Cloudflare, ensuring reliable performance and security. The site implements GDPR-compliant privacy and cookie policies with active consent mechanisms. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, DNSSEC is not enabled, and there is no published security.txt or explicit incident response contact, which are areas for improvement. The absence of certain HTTP security headers suggests potential enhancements to harden the site further. No WAF or blocking mechanisms interfere with content accessibility. Overall, SPL Group demonstrates a strong business credibility and digital maturity with good security hygiene. Strategic recommendations include enabling DNSSEC, publishing vulnerability disclosure information, and enhancing HTTP security headers to bolster trust and resilience against cyber threats.
- UUAB Quatrodev
quatrodev.com
Technology
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
QuatroDev is a technology company founded in 2012, specializing in scalable cloud solutions and operating multiple branches including Reactway and RelyOps. The company positions itself as a trusted partner empowering businesses with technological solutions. The website is built using modern technologies such as Next.js and React, hosted likely on AWS S3 with Cloudflare DNS services, indicating a moderate level of digital maturity and performance. The site design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content focused on their business offerings. Security posture is adequate with HTTPS enforced and domain transfer protections in place, but lacks advanced DNS security features like DNSSEC and security headers, and does not provide visible privacy or cookie policies, which are important for compliance. No contact information or forms are present on the homepage, limiting direct communication channels. Overall, the website is functional and professional but could improve in privacy compliance and security best practices to enhance trust and regulatory adherence.
Antera Software USAanterasoftware.com
Technology · United States
72Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Antera Software USA provides specialized cloud-based business management software tailored for the promotional products industry, including distributors, suppliers, and printers. Their solutions focus on streamlining workflows, order management, CRM, production, and web store functionalities. The company has a stable market position within this niche, targeting small to medium-sized promotional product businesses primarily in the USA. The website is built on WordPress with modern plugins and themes, hosted likely on WP Engine, and incorporates standard analytics and anti-bot measures. Security posture is moderate with HTTPS enabled and client transfer protection on the domain, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and functional but could improve in privacy and security transparency.
Malo clinic | dpcclinicdpc.lt
Hospital & health care · Lithuania
67Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Autocue group ltdautocue.com
Broadcast media · United kingdom
66Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Enturaentura.com.au
Utilities · Australia
61Medium
NIS2 10 · GDPR 53
NIS2 10 · GDPR 53
- HHikvision lietuva
hikvision.lt
Information technology and services · Lithuania
60Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Fergus softwaregofergus.com
Computer software · New zealand
64Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Markitmarkit.eu
Technology · Estonia
67Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Markit is a B2B technology platform specializing in simplifying IT purchasing for international companies by aggregating real-time offers from over 350 leading IT distributors globally. The platform offers a comprehensive suite of services including cataloguing, purchasing management, order tracking, billing, and reporting, enabling enterprises to reduce costs and streamline procurement processes. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive business information, including contact details and policies. Technically, the site uses modern web technologies such as jQuery, Bootstrap, and ASP.NET Web Forms, with Google Analytics integrated for user tracking. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though security headers and explicit incident response information are absent. The domain WHOIS data is unavailable due to EURid privacy policies, but the website's consistency and professional presentation support its legitimacy. Overall, Markit presents a trustworthy and mature digital presence suitable for its target enterprise audience.
- PPolskie Radio
polskieradio.pl
Media · Poland
57Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Polskie Radio is a major public media broadcaster in Poland offering a wide range of audio content including podcasts, radio shows, audiobooks, and reports. The website podcasty.polskieradio.pl serves as a portal for accessing these audio programs, targeting Polish-speaking audiences including children and general listeners. The platform is professionally designed with a modern tech stack leveraging Next.js, React, and analytics tools such as Gemius and Hotjar. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are missing. The absence of WHOIS data is typical for .pl domains but slightly reduces trust. Overall, the site is a credible and well-maintained digital asset of Polskie Radio.
- MMake Up Store Int AB
makeupstore.se
Retail · Sweden
66Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Make Up Store Int AB is an established Swedish cosmetics retail brand with a heritage dating back to 1996. The company is currently undergoing a rebranding and website transformation, as evidenced by the password-protected storefront and a message directing customers to an external partner site for shopping. The business operates primarily through e-commerce on the Shopify platform, targeting consumers interested in cosmetics and beauty products. The website content is currently minimal, focusing on brand messaging and newsletter subscription.
Olympic entertainment groupolympic-casino.com
Entertainment · Estonia
68Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
Technipfmctechnipfmc.com
Oil & energy · United kingdom
69Partial
DNS & email only
DNS & email only
Other
70Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
The website www.paysera.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) security challenge page employing Turnstile captcha verification. This prevents access to any meaningful content, metadata, or business information. The WHOIS lookup for the domain returned no data, indicating either the domain is unregistered, privacy protected, or the WHOIS server is not providing data for this domain. Consequently, no registrant or domain age information is available. The lack of accessible content and WHOIS data severely limits the ability to analyze the company's business model, technical infrastructure, or security posture. The presence of Cloudflare's security mechanisms suggests an intent to protect the site from automated access or attacks, but also hinders external analysis.
- NNorthern Offshore Limited
northernoffshore.com
Energy · United States
60Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Northern Offshore Limited is a medium-sized energy sector company specializing in the construction and operation of state-of-the-art jackup rigs and drilling crews. The company positions itself as a flexible and collaborative drilling contractor serving global oil and gas customers, emphasizing innovation, safety, and customer alignment. Founded in 2015, the company has established a credible market presence with certifications such as DROPS and IADC, reinforcing its industry compliance and trustworthiness. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics and Google Tag Manager for user tracking and analytics. The site is mobile optimized with good SEO practices but lacks some accessibility features and security headers. Hosting and domain registration are consistent with the business profile, with no WAF or blocking mechanisms detected. From a security perspective, the website uses HTTPS with a good SSL configuration and has domain transfer protections in place. However, it lacks DNSSEC, security headers, and explicit incident response or security policy disclosures. Privacy compliance is partial, with a comprehensive privacy policy present but no cookie consent mechanism. No contact emails or phone numbers are explicitly provided, which may impact user trust and compliance. Overall, the website demonstrates a solid business credibility and technical foundation but would benefit from enhanced security practices, improved privacy compliance, and clearer contact information to strengthen trust and regulatory adherence.
Friends & Framesfr2.lt
E-commerce · Lithuania
71Medium
NIS2 2 · GDPR 48
NIS2 2 · GDPR 48
Friends & Frames is a Lithuanian-based e-commerce retailer specializing in premium eyeglasses and sunglasses. The website is built on the Shopify platform, leveraging the Dawn theme, and offers a wide selection of branded eyewear products targeting European consumers. The site demonstrates a professional design with consistent branding and clear navigation, optimized for mobile devices. Privacy compliance is addressed through a visible cookie consent banner and a linked privacy policy page. However, contact information and legal pages such as Terms of Service are not prominently available, which could be improved for enhanced trust and compliance. Technically, the site uses HTTPS with good SSL configuration and modern web technologies, ensuring a secure and performant user experience. The absence of WHOIS data limits domain registration insights, but the overall digital maturity and security posture suggest a legitimate and well-maintained online business.
UAB Vaizdo skoniszest.lt
Media · Lithuania
70Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
ZEST Production House is a Lithuanian-based creative audiovisual production company specializing in video production and post-production services. The company serves both local and international clients, focusing on delivering high-quality visual content with attention to detail. Their client base includes large creative agencies, and they emphasize professionalism and reliability in their operations. The website reflects a well-structured portfolio showcasing a wide range of commercial and creative projects, reinforcing their market position as a trusted media production partner. Technically, the website is built on WordPress and employs modern web technologies including jQuery, Bootstrap, and Google Analytics. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. Security-wise, the site uses HTTPS and has a cookie consent mechanism, but lacks advanced security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could benefit from enhanced security headers and formal vulnerability disclosure policies. Privacy compliance is basic with a privacy policy and cookie banner present, but explicit GDPR compliance statements and data retention policies are missing. The business credibility is strong with clear contact information, company registration details, and visible client logos. Strategically, the company should focus on improving security best practices, formalizing privacy and incident response policies, and enhancing accessibility to further strengthen trust and compliance.
Login VSIloginvsi.com
Technology · United States
73Medium
NIS2 2 · GDPR 73
NIS2 2 · GDPR 73
Login VSI is a technology company specializing in automated performance and scalability testing solutions for virtual desktop infrastructure (VDI), cloud PCs, and hybrid environments. Their flagship product, Login Enterprise, provides data-driven insights to optimize user experience and system reliability. The company is well-positioned in the enterprise IT market, trusted by major technology vendors such as Citrix, Microsoft, and VMware, and serves Fortune 500 clients. Their offerings include image change control, pre-production testing, production insights, and Azure Virtual Desktop management through their Hydra product. The website reflects a mature digital presence with comprehensive content and strong branding. Technically, the site is built on WordPress and leverages a modern tech stack including jQuery, Swiper.js, and multiple analytics and marketing tools such as Google Analytics, HubSpot, and Hotjar. The site is mobile-optimized, fast-loading, and SEO-friendly, indicating a high level of digital maturity. Security best practices are observed with HTTPS enforced and no visible sensitive data exposure, though explicit security policies and incident response information are not published. The security posture is strong but could be improved by adding dedicated security and incident response pages and publishing a vulnerability disclosure policy. The absence of WHOIS data is a notable anomaly; while the website content and business references support legitimacy, the missing domain registration details reduce trust slightly. Overall, the site demonstrates professionalism, strong business credibility, and good privacy compliance with clear policies and consent mechanisms. Strategic recommendations include enhancing transparency around security policies, confirming security headers, and addressing the WHOIS data gap to improve trust and compliance visibility.
- DDAN Communications
dan.lv
Technology · Latvia
58Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
DAN Communications is a Latvia-based medium-sized technology and telecommunications company specializing in radio communications and cybersecurity solutions. The company offers a range of products including Fortinet FortiGate security solutions, Motorola radio communication devices, and backup solutions such as NAKIVO. Their services include industry-specific solutions, training, and distribution, targeting businesses and organizations primarily in the Baltic region. The website reflects a professional and consistent brand presence with clear navigation and relevant content for their target audience. Technically, the website employs legacy technologies such as jQuery 1.11.0 alongside modern analytics tools like Google Analytics and Google Tag Manager. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. There is no detected CMS or hosting provider information. SEO is basic with meta keywords and viewport settings but no structured data or Open Graph tags. From a security perspective, the site uses HTTPS and includes no visible exposed sensitive data. However, the use of an outdated jQuery version introduces potential vulnerabilities. No security headers or explicit security policies are present, and no privacy or cookie policies are disclosed, indicating gaps in compliance and security transparency. Contact information is not explicitly provided in the HTML, limiting direct communication channels. Overall, the website is functional and professional but requires improvements in security practices, privacy compliance, and transparency to enhance trust and reduce risk. Strategic recommendations include updating third-party libraries, implementing security headers, publishing privacy and cookie policies, and providing clear contact channels for security incidents.
Finance · Lithuania
63Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Lietuvos bankų asociacija (LBA) is a key financial sector association in Lithuania representing the interests of banks and credit institutions. The organization focuses on transparency, responsibility, and professionalism, providing sector representation at national and European levels, promoting financial literacy, sustainability, and security within the banking sector. The website is well-structured, primarily in Lithuanian, and targets banking clients, sector participants, and the general public interested in financial matters. Technically, the site uses modern JavaScript libraries such as jQuery, Bootstrap, and amCharts, and integrates Google Analytics and Tag Manager for user tracking and analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers are not explicitly detected. WHOIS data is unavailable due to query limits or privacy protection, but the domain and website content indicate legitimacy. Overall, the site is professional, informative, and serves as a trusted resource for Lithuania's banking sector.
CAEcaeparcaviation.com
Transportation
73Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
CAE Parc Aviation Technical Support Services operates as a specialized business unit within the larger CAE group, focusing on providing aircraft technical support services. The website content is minimal and primarily directs users to the main CAE website for comprehensive information. The business model centers on aviation technical support and resourcing services, with the latter being phased out. The target audience includes aviation industry professionals and clients seeking technical support solutions. The company leverages its parent CAE's strong market position and brand recognition.
Other · Lithuania
52Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Lietuvos buhalterių ir auditorių asociacija (LBAA) is the largest professional association in Lithuania uniting accountants, auditors, accounting and audit companies, and other related legal and natural persons. The organization provides membership services, professional training, certification, and resources aimed at enhancing the quality and professionalism of accounting services in Lithuania. The website reflects a well-structured and professional digital presence, built on the Odoo CMS platform, with clear navigation and relevant content targeted at its professional audience. Technical infrastructure includes modern frontend technologies and security features such as HTTPS and CSRF tokens, although some security headers are not detected. Privacy and cookie policies are implemented with GDPR compliance in mind, including a cookie consent mechanism. However, WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security policy transparency and incident response readiness.
Agrosuperagrosuper.com
Manufacturing · Chile
71Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Agrosuper is a large Chilean food holding company specializing in the production and commercialization of meat and aquaculture products including chicken, pork, turkey, and salmon. The company operates domestically and exports to over 50 countries, positioning itself as a leading food manufacturer in Chile. The website reflects a professional brand presence with bilingual support and investor relations content. Technically, the site is built on WordPress and integrates multiple analytics and marketing tools, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data raises questions about domain registration transparency but does not detract from the apparent legitimacy of the business. Overall, the site is functional, professional, and moderately secure but would benefit from enhanced privacy compliance and security best practices.
Public Agendapublicagenda.org
Non-profit · United States
67Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
Public Agenda is a well-established national non-profit organization focused on amplifying public voice and strengthening democracy through research and action. The website reflects a mature digital presence with a focus on democracy, education, and health initiatives. The technical infrastructure is based on WordPress with modern tools such as Elementor and HubSpot integrations, supported by Cloudflare DNS services. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced DNS security and security headers. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.
Friends universityfriends.edu
Higher education · United states
68Medium
NIS2 17 · GDPR 53
NIS2 17 · GDPR 53
- HelloFresh
hellofresh.de
Retail · Germany
75Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
HelloFresh is a leading meal kit delivery service operating in Germany, offering fresh ingredients and a wide variety of recipes delivered weekly to customers' doors. The company positions itself as the number one meal kit provider in Germany, emphasizing convenience, freshness, and sustainability. Their business model is subscription-based, targeting consumers who seek easy and balanced cooking solutions. The website reflects a mature digital infrastructure using modern technologies such as React and Next.js, hosted on AWS with strong performance and mobile optimization. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website and business demonstrate high professionalism, trustworthiness, and market leadership.
Stone Createstonecreate.com
Technology · United Kingdom
58Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Stone Create is a well-established marketing and web development agency based in Preston, UK, founded in 2011. The company offers a broad range of services including marketing, digital strategy, signage, design, and bespoke website development. Their market position is solid with a diverse client portfolio including notable organizations such as the NHS and Chester Zoo. The website reflects a professional and consistent brand image, targeting businesses seeking comprehensive marketing and digital solutions. Technically, the site is built on WordPress with modern plugins and integrations such as Google Analytics, Facebook Pixel, and live chat, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, supporting good user experience and discoverability. Security posture is good with HTTPS enforced and reCAPTCHA implemented, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is strong with clear cookie and privacy policies and consent mechanisms. Overall, the website and business demonstrate high professionalism and trustworthiness, with minor areas for security enhancement.
Government · Lithuania
62Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
The website fntt.lrv.lt appears to be a Lithuanian government subdomain, likely related to a governmental agency. However, direct content access is blocked by a Cloudflare Turnstile CAPTCHA challenge, preventing retrieval of substantive business or service information. The site uses Cloudflare's security and CDN services, indicating a focus on protecting the site from automated access and attacks. Due to the access restrictions, no privacy, cookie, or terms of service policies are visible, nor are any contact details or business descriptions. This limits the ability to fully assess the website's technical maturity or security posture. The WHOIS data is unavailable due to query limits, but the domain structure and Cloudflare protection suggest legitimacy. Overall, the site is secure in terms of access control but lacks visible transparency and user-facing content.
- TTautek UAB
tautek.lt
Technology · Lithuania
57Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
Tautek UAB is a Lithuanian software development company specializing in ASP.NET Core web applications, Windows UWP apps, cross-platform mobile development using Xamarin and MAUI, and IT consulting focused on .NET and Azure platforms. The company serves business clients including notable firms such as Cognizant and Bluebridge, positioning itself as a niche technology service provider with a small but professional team. The website reflects a modern technical infrastructure leveraging Bootstrap for frontend styling and integrates Google Analytics and Tag Manager for user tracking. Hosting is likely on Microsoft Azure, consistent with their service offerings. Security posture is moderate; while HTTPS is presumably enabled, the site lacks explicit security headers and formal privacy or cookie policies, which impacts compliance and trust. WHOIS data is unavailable due to query limits, limiting domain legitimacy verification. Overall, the website is professional and functional with clear contact information and client references, but improvements in security and privacy transparency are recommended.
Domains By Proxy, LLC (registrant proxy)production.tools
Media · United States
73Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Production Tools is a specialized SaaS provider offering casting database software tailored for casting directors and producers. The platform streamlines talent onboarding, self-tape collection, bulk messaging, and casting proposal sharing, targeting mid-sized production companies primarily in the media sector. The website demonstrates a modern technical infrastructure leveraging React, Google Analytics, Hotjar, and Cookiebot for analytics and privacy compliance. The site is well-designed, mobile-optimized, and provides clear navigation and professional content. Security posture is solid with HTTPS enforced and privacy policies in place, though improvements such as enabling DNSSEC and publishing explicit security policies are recommended. Overall, the business presents a credible and trustworthy online presence with moderate tracking and marketing integrations.
Talentatortalentator.com
Education · Lithuania
66Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Talentator is a Lithuanian-based digital learning partner specializing in creating and implementing tailored e-learning solutions, including custom e-courses, e-learning libraries, and learning management systems (LMS). The company targets businesses seeking to enhance employee training through digital transformation. The website is professionally designed using WordPress with modern plugins such as WPBakery and Slider Revolution, and it incorporates SEO best practices and structured data for enhanced search visibility. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though additional security headers could improve defenses. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy policy or terms of service pages detected. The absence of WHOIS data for the domain is a notable concern, impacting trustworthiness despite the professional web presence. Overall, Talentator presents as a credible small business in the education sector with room for improvement in transparency and privacy documentation.
Transportation · Lithuania
72Medium
NIS2 17 · GDPR 88
NIS2 17 · GDPR 88
cargoGO is a professional logistics and transportation service provider specializing in linehaul and dedicated fleet transportation across Europe. The company offers services including full truck loads (FTL), tilting, and isothermal semi-trailers, targeting businesses requiring efficient and specialized freight solutions. The website is well-structured, multilingual, and optimized for SEO, reflecting a medium-sized enterprise with a consistent brand presence and active social media engagement. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, security headers, and secure forms, though explicit security policies and incident response information are absent. Overall, the domain registration aligns with the business claims, indicating legitimacy and trustworthiness.
- FFiberta
biuroirangosnuoma.lt
Technology
68Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
Fiberta operates a laptop subscription service targeting business customers, offering flexible monthly subscriptions with IT maintenance, cloud storage, and ready-to-use laptops. The website is professionally designed using Odoo CMS and modern web technologies, with good mobile optimization and clear navigation. Security posture is adequate with HTTPS and CSRF protections, but lacks security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy despite the active and functional website. Overall, the site demonstrates moderate digital maturity but requires improvements in compliance and transparency to enhance trust.
CFlowcflow.lt
Finance · Lithuania
62Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
CFlow.lt is a Lithuanian SaaS platform providing an electronic accounting system tailored for individuals conducting individual business activities under a certificate. The platform automates key accounting tasks such as income and expense journal management, tax calculations, invoice generation, and payment tracking, targeting freelancers and sole proprietors in Lithuania. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in Lithuanian. Technically, it employs modern analytics and tracking tools including Google Analytics, Facebook Pixel, and New Relic, ensuring performance monitoring and user behavior insights. Security is well-handled with HTTPS enforced and data encryption in transit, though some security headers could be improved. Privacy compliance is partially addressed with a privacy policy present, but lacks an explicit cookie consent mechanism. WHOIS data is unavailable due to query limits, which reduces transparency but the website's professional appearance and consistent branding support legitimacy. Overall, CFlow.lt presents a credible and functional online presence for its niche market.
Life Insurance Corporation of Indialicindia.in
Finance · India
73Medium
NIS2 17 · GDPR 58
NIS2 17 · GDPR 58
Life Insurance Corporation of India (LIC) is a state-owned insurance and investment company, serving as the largest life insurer in India. The website provides comprehensive information about LIC's products, services, and customer portals, targeting prospective and existing policyholders, agents, NRIs, and employees. The business model focuses on life insurance, pension plans, and group schemes, with a strong market position supported by government ownership and extensive reach. Technically, the website is built on the Liferay DXP platform, utilizing modern web technologies such as Bootstrap, jQuery, and Font Awesome. It integrates Google Analytics and Tag Manager for tracking and marketing purposes. The site demonstrates good mobile optimization and accessibility, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks explicit privacy and cookie policies, consent mechanisms, and incident response contact information, which are important for compliance and user trust. The domain WHOIS data aligns well with the official entity, confirming legitimacy. Overall, the website is professional, trustworthy, and functional but would benefit from improved privacy compliance documentation and enhanced transparency regarding security and data protection practices.
Nordic Pro Tech ASbartoni.eu
Manufacturing · Norway
50Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Nordic Pro Tech AS is a recently established international company specializing in supplying high-quality consumables and machinery for metal cutting and welding industries, primarily serving Scandinavian and Baltic markets. Their product portfolio includes plasma cutter replacement parts, welding consumables, laser consumables, special tooling, and various machines such as plasma cutting systems and bending machines. The company targets both professional and hobbyist metalworkers, emphasizing quality and reliability. Technically, the website is built on a modern WordPress platform with WooCommerce for e-commerce functionality. It employs standard web technologies including jQuery, Google Analytics, Facebook Pixel, and Google reCAPTCHA for security. The site is well-optimized for SEO and mobile devices, with a clear navigation structure and multilingual support. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS, uses reCAPTCHA on forms, and has domain transfer protection enabled. However, DNSSEC is not enabled, and some security headers are missing, which could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and a consent mechanism in place. Overall, Nordic Pro Tech AS presents a professional and trustworthy online presence consistent with its business claims. The domain registration aligns with the company's founding date, and contact information is transparent. Strategic recommendations include enhancing DNS security, implementing additional security headers, and publishing a formal security policy to further strengthen trust and compliance.
- SSquarespace - Website Expired
mediabites.lt
Other
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
The website www.mediabites.lt is currently inaccessible and displays a 'Website Expired' message from Squarespace, indicating that the hosting account has expired. There is no active content, business information, or contact details available on the site. The technical infrastructure is based on Squarespace platform scripts and styles, but no active CMS content or metadata is present. Security posture cannot be properly assessed due to lack of accessible content and absence of security headers or SSL information. The domain WHOIS data is unavailable due to query limits, preventing extraction of registrar or registration details. Overall, the site appears abandoned or inactive, posing a high risk for trust and business credibility.
- GOMarathon
marathonclub.com.br
Other · Brazil
69Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
GOMarathon is a small local sports coaching business based in Salvador, Brazil, specializing in running and personalized training services. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard JavaScript libraries. The site is moderately optimized for mobile and SEO, with basic metadata and Open Graph tags. Security posture is adequate with HTTPS enabled and some script-based security hardening, but lacks important security headers and formal privacy or cookie policies. Contact information and business credentials are minimal or not explicitly presented, which may affect user trust and compliance. Overall, the site is functional and professional for its scale but requires improvements in privacy compliance and security best practices.
- Bars Elekter
barselekter.com
Energy · Estonia
70Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
Bars Elekter is a medium-sized industrial company specializing in energy and transportation sector services and products. As a subsidiary of BLRT Grupp, it benefits from a strong regional presence in the Baltic Sea area with branches in Estonia and Norway. The company offers multidisciplinary engineering, project management, and specialized solutions such as shore connection packages and hybrid energy storage. The website is built on WordPress with a moderate technical infrastructure including Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled and domain protections, but lacks advanced security headers and formal security policies. Privacy compliance is basic with a cookie consent banner but no privacy policy page. Overall, the website is professional and trustworthy, supporting the company's established market position.
AdKingsadkings.agency
E-commerce
63Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
AdKings is a premium digital marketing agency specializing in Facebook Ads and multichannel growth strategies for eCommerce DTC brands ranging from $1M to $100M in revenue. The company positions itself as a boutique agency focused on delivering high-quality, data-driven marketing services including creative production, conversion optimization, and international expansion. Their website demonstrates a mature digital presence with professional design, comprehensive case studies, and strong trust signals such as partnerships with Facebook, Google, and Shopify. Technically, the site uses modern web technologies including Webflow CMS, Google Tag Manager, and multiple analytics and marketing tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security headers and policies are not fully implemented. Privacy compliance is basic with a cookie consent mechanism but lacks a clear privacy policy page. WHOIS data is privacy protected, which is typical for agencies but limits transparency. Overall, the site reflects a credible and professional marketing agency with room for improvement in privacy and security disclosures.
Transportation · Lithuania
68Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Baltic Logistic Solutions (BLS) is a leading logistics company operating primarily in the Baltic region, offering a comprehensive range of services including 3PL, 4PL, cargo transportation, warehousing, and product labeling. The company positions itself as one of the largest and most stable logistics providers in the Baltics, targeting businesses in retail, hospitality, manufacturing, and office sectors. Their business model focuses on providing both integrated and individual logistics solutions to optimize supply chain operations for their clients. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates key analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook SDK. The site is mobile-optimized, well-structured, and includes multilingual support, indicating a mature digital presence. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS, implements cookie consent with opt-out mechanisms, and uses standard security headers. No exposed sensitive data or vulnerabilities were detected in the HTML content. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. Overall, the website and business appear legitimate and professionally managed, though WHOIS data is unavailable due to query limits. The company demonstrates trustworthiness through certifications like TAPA – 1 and adherence to GDPR-compliant privacy practices. Strategic recommendations include enhancing security transparency, publishing incident response information, and improving accessibility features to further strengthen their security posture and compliance.
Nativus Groupsanobiotec.com
Healthcare · United States
62Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Sanobiotec, operated by Nativus Group, is a specialized manufacturer and wholesaler of cannabinoids including CBN, CBD, CBC, and THCV isolates. The company positions itself as a leading producer in the USA, EU, and Japan markets, targeting cannabinoid product manufacturers, wholesalers, and research institutions. Their business model focuses on manufacturing and wholesale distribution, supported by research and development capabilities. The website content is professionally presented with clear navigation and multilingual support (English and Japanese). The technical infrastructure is based on WordPress CMS with modern plugins for SEO and cookie consent management, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though DNSSEC is not enabled and some security headers are missing. No explicit security or incident response policies are published. Overall, the website demonstrates good privacy compliance and business credibility with clear contact information and social media presence.
ZORVIDAS / IT paslaugos ir Sprendimaizorvidas.lt
Other
51Medium
NIS2 17 · GDPR 35
NIS2 17 · GDPR 35
The website www.zorvidas.com is hosted on the Wix platform and includes standard Wix scripts and tracking technologies such as Google Analytics, Google Tag Manager, and Facebook Pixel. However, the domain WHOIS data is unavailable, indicating the domain may not be registered or the data is withheld, which raises concerns about legitimacy. The site lacks critical compliance documents such as privacy and cookie policies, terms of service, and contact information, which are essential for trust and regulatory compliance. Technically, the site benefits from Wix's infrastructure, providing moderate performance and good mobile optimization, but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and policies. Overall, the site presents a low trust profile and requires significant improvements in transparency, compliance, and security to enhance credibility and user trust.