Medium-risk security reports
99,068 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,171001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
87,851–87,900 of 99,068
- Titulinis | Kitokie Projektai
kitokieprojektai.net
Other
65Medium
NIS2 17 · GDPR 50
NIS2 17 · GDPR 50
The website www.kitokieprojektai.net appears to be a small-scale site built using the Wix platform, as evidenced by the extensive use of Wix-specific scripts and styles. The site content is minimal and lacks substantive business information, contact details, or privacy and cookie policies. The domain WHOIS data is unavailable or the domain may not be registered, which raises significant concerns about the legitimacy and trustworthiness of the site. Technically, the site uses modern web technologies and is mobile-optimized by default through Wix, but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but no security headers or policies detected. Overall, the site presents a low trust profile and requires significant improvements in transparency, compliance, and content quality.
Shift4revelsystems.com
Technology
75Medium
NIS2 17 · GDPR 70
NIS2 17 · GDPR 70
Shift4 provides advanced restaurant management software and payment processing solutions, targeting the food and beverage industry. Their offerings include point of sale systems, contactless payments, online ordering, and cloud-based back office management, positioning them as a significant player in restaurant technology. The website reflects a professional and modern digital presence, leveraging contemporary web frameworks such as Next.js and React, and integrating multiple third-party services for analytics, accessibility, and cookie compliance. Security posture is strong with HTTPS enforced and some security best practices in place, though explicit security headers and vulnerability disclosure mechanisms are absent. The lack of WHOIS data limits domain trust verification, but the overall business credibility and website quality suggest a legitimate enterprise. Strategic recommendations include enhancing transparency with published security policies and WHOIS data, and improving privacy compliance documentation.
Widen legallextal.eu
Other · Lithuania
69Medium
NIS2 52 · GDPR 80
NIS2 52 · GDPR 80
Widen legal is a professional legal services firm established in 2023, offering a broad range of legal expertise primarily focused on the Baltic region and EU markets. The firm provides specialized services in corporate law, employment law, public procurement, tax law, data protection, and other key legal sectors. Their market position is that of a medium-sized regional legal company with experienced partners and a client-friendly approach. The website reflects a modern and professional digital presence with multilingual support and detailed team profiles, enhancing client trust and engagement. Technically, the site is built on WordPress with modern plugins for forms and translation, hosted behind Cloudflare DNS, and uses HTTPS with good SSL configuration. However, DNSSEC is not enabled, representing a minor security gap. Security posture is generally good with cookie consent implemented, but lacks explicit security policies or incident response information. Privacy compliance is basic, with no visible privacy policy or terms of service pages in the provided content. Overall, the website is professional, trustworthy, and well-structured, suitable for its target audience of legal service clients in the Baltic and EU regions.
Other
68Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website urm.lt is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha, which blocks access to any substantive content. As a result, no business information, contact details, or policies are visible. The site appears to be protected by Cloudflare's security infrastructure, but this also prevents a full analysis of its content and security posture. The lack of WHOIS data due to query limits further restricts domain legitimacy assessment. Overall, the site presents as a placeholder security checkpoint rather than an active business-facing website at this time.
- WWISE MONKS LTD
wisemonks.com
Technology · Lithuania
65Medium
NIS2 29 · GDPR 68
NIS2 29 · GDPR 68
WISE MONKS LTD is a Lithuania-based small technology company specializing in custom software engineering and product development tailored to diverse industries such as Real Estate, E-commerce, Manufacturing, Transportation, and Finance. The company positions itself as a trusted partner delivering bespoke solutions that improve operational efficiency and customer engagement. Their website reflects a mature digital presence with modern technologies like Next.js and React, hosted with Cloudflare DNS services. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, though some improvements in security headers and incident response transparency are recommended. Privacy compliance is basic with a privacy policy and cookie consent banner present but lacking detailed GDPR compliance indicators. Overall, the website demonstrates high professionalism, clear business credibility, and good technical implementation, supporting a strong market position in custom software development.
BAA Trainingbaatraining.com
Transportation · Lithuania
71Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
BAA Training is an established aviation training organization founded in 2015, offering a wide range of training services including pilot training, cabin crew training, and type rating courses. The company operates internationally with subsidiaries in Lithuania, Spain, France, Vietnam, and India, targeting individuals and airlines seeking professional aviation training. The website is built on WordPress and employs modern web technologies and SEO practices, providing a good user experience with clear navigation and mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a cookie policy and consent mechanism present but no explicit privacy or terms of service policies found. Overall, the website is professional and trustworthy, with room for enhanced privacy and security transparency.
Biomapasbiomapas.com
Healthcare
72Medium
NIS2 2 · GDPR 80
NIS2 2 · GDPR 80
Biomapas is a healthcare-focused service provider specializing in clinical research, regulatory affairs, pharmacovigilance, and medical information services. The company targets pharmaceutical and biotech firms seeking outsourcing solutions to accelerate clinical trials and optimize drug development. The website presents a professional image with clear service offerings and a consistent brand identity. Technically, the site is built on WordPress using the Divi theme, integrating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Zoho SalesIQ for visitor engagement and tracking. The site is mobile-optimized and demonstrates good SEO practices. From a security perspective, the website uses HTTPS and implements cookie consent mechanisms, but lacks visible security headers and formal security policies or incident response contacts. No vulnerability disclosure or security.txt files were found, which could be improved to enhance trust. The absence of WHOIS registration data is a notable concern, as it raises questions about domain legitimacy despite the active and professional website presence. Overall, the website is functional, well-designed, and serves its business purpose effectively. However, the lack of transparency in domain registration and absence of key compliance documents like privacy policy and terms of service reduce its trustworthiness. Strategic improvements in security posture and compliance documentation are recommended to strengthen the company's digital credibility and risk management.
- Alwark
alwark.lt
Transportation · Lithuania
59Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
Alwark is a Lithuanian company specializing in the sale and rental of new and used loading, construction, storage, intralogistics, port, airport, and municipal equipment. The website targets businesses and professionals in need of industrial and construction machinery and related services. The company appears to hold a regional market position within Lithuania, offering a range of equipment and rental solutions. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics (both Universal and GA4), Cookiebot for cookie consent management, Tawk.to for live chat support, and Meta Pixel for marketing tracking. The site is well-structured with responsive design and uses web fonts for improved aesthetics. Security-wise, HTTPS is implied and cookie consent is actively managed, but explicit security headers and policies are not evident. The absence of WHOIS data limits domain legitimacy verification. Overall, the website demonstrates a moderate security posture with room for improvement in transparency and contact availability.
- CBL Asset Management
cblam.lv
Finance · Latvia
74Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
CBL Asset Management is a Latvian-based financial services company specializing in asset management, including pension plans, investment funds, and portfolios. Affiliated with the Citadele Group, it targets private banking clients and investors primarily in Latvia and the Baltic region. The website presents a professional and consistent brand image with comprehensive information about its financial products and services. The business model focuses on wealth management and sustainable financial growth for its clients. Technically, the website uses modern JavaScript frameworks and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement, CSRF protection in forms, and a cookie consent mechanism, although some security headers and explicit security policies are not published. Overall, the site is trustworthy and compliant with GDPR, providing clear contact information and privacy policies. The domain WHOIS data aligns well with the business identity, supporting legitimacy. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and security maturity.
Sapusapu.se
Education · Sweden
55Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Högskolan Sapu is a Swedish educational institution specializing in psychotherapy and psychological treatment training, with over 30 years of experience. The website presents a professional image with clear educational offerings targeting professionals and students in psychotherapy. The technical infrastructure is based on WordPress with the Divi theme, incorporating modern web fonts and analytics tools such as Google Analytics and Facebook Pixel. While the site demonstrates good content quality and SEO optimization, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is moderate with HTTPS usage but missing DNSSEC and security headers. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.
TaxCube, UABtaxcube.lt
Finance · Lithuania
66Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
TaxCube, UAB is a leading independent tax consultancy firm in Lithuania, specializing in a broad range of financial services including tax consultancy, optimization, transfer pricing, corporate restructuring, and accounting services. The company targets manufacturing, trading, financial institutions, and professional service providers, leveraging a team with an average of 10 years of professional experience. Their market position as the largest independent specialized tax consultancy in Lithuania is supported by professional content and a clear business model. Technically, the website is built on WordPress with common plugins such as Yoast SEO and jQuery, and integrates Google Analytics and Google Ads for marketing and tracking. The site is mobile-optimized with good SEO practices and moderate performance. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented in compliance with GDPR, although explicit security headers and policies are not evident. The security posture is solid but could be improved by adding security headers, publishing a security policy, and establishing a vulnerability disclosure program. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to query limits, but the website content and contact information indicate a legitimate and professional business. Overall, TaxCube presents a trustworthy and professional online presence with room for security and compliance enhancements to further strengthen their digital maturity and risk posture.
Naujienų studijastudio4.lt
Technology · Lithuania
61Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Studio4.lt is a Lithuanian language informational news website focusing on various fields of information technology and related sectors such as health, sports, and business. The site operates as a content publishing platform delivering articles and news updates primarily targeting Lithuanian-speaking technology enthusiasts and professionals. The website is built on WordPress CMS, indicating a standard but effective digital infrastructure suitable for small to medium content sites. The technical setup includes HTTPS with a good SSL configuration, though some security headers are missing, which could be improved to enhance security posture. The site lacks explicit WHOIS data due to query limits, which slightly reduces trust but is common for smaller websites. Privacy compliance is basic with a cookie policy page present but no comprehensive privacy or terms of service pages detected. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website demonstrates a moderate level of professionalism and security, suitable for its niche content publishing role.
- AAsseco Lietuva
asseco.lt
Technology · Lithuania
70Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Asseco Lietuva is a well-established software development company operating as part of the larger Asseco Group, a leading European IT federation. The company specializes in creating information systems, software solutions, and specialized applications for automating organizational processes across various sectors including finance, insurance, libraries, and government. Their market position is strong within Lithuania and the broader European region, supported by 30 years of operational experience and recognized ISO certifications (9001, 27001, 14001). Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and standard analytics tools such as Google Analytics and LinkedIn Insight. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and use of reCAPTCHA, complemented by ISO/IEC 27001 certification, although HTTP security headers are not explicitly detected. Overall, the security posture is mature with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies including consent mechanisms. The absence of WHOIS data for the domain is a notable anomaly but likely due to subdomain usage or registry policies rather than malicious intent. The website presents a professional and trustworthy digital presence aligned with the company's business stature.
Vantage Mobilityvmivans.com
Transportation · United States
62Medium
NIS2 2 · GDPR 53
NIS2 2 · GDPR 53
Vantage Mobility operates as a leading provider of wheelchair accessible vans and mobility vehicle conversions, targeting individuals and organizations requiring accessible transportation solutions. The company holds official partnerships, such as with Toyota, and certifications including NHTSA crash-test approval, positioning it as a trusted industry leader. The website reflects a mature digital presence built on WordPress with the Divi theme, integrating multiple analytics and marketing tools to support user engagement and business operations. Security posture is strong with HTTPS enforced and reputable third-party scripts, though explicit security headers and incident response policies are absent. The lack of WHOIS registration data introduces some uncertainty regarding domain legitimacy, but the professional website and business indicators mitigate this concern. Overall, the site demonstrates good content quality, technical implementation, and privacy compliance, supporting a positive user experience and business credibility.
Conrestaconresta.lt
Real Estate · Lithuania
63Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Conresta operates as a professional general contracting and construction company based in Lithuania, offering innovative and sustainable building solutions across public and private sectors. The company has a strong market position supported by multiple ISO certifications and industry awards, reflecting a commitment to quality and environmental standards. Their website is built on WordPress, leveraging modern JavaScript libraries and SEO best practices, providing a good user experience and mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and explicit privacy policies indicates room for improvement. The lack of WHOIS data limits full domain legitimacy verification, but the professional presentation and content quality suggest a credible business. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and incident response policies, and providing clear contact information for security and compliance inquiries.
BALTIC PACK GROUPbalticpack.com
Retail · Lithuania
63Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Baltic Pack Group is a regional retail and distribution business operating primarily in the Baltic states of Lithuania, Latvia, and Estonia. The company offers packaging solutions, specialized HoReCa packaging, and wine distribution under the Vins de France brand. Their multi-site web presence reflects a localized approach to serving different Baltic markets. Technically, the website is built on WordPress with common libraries such as jQuery and Bootstrap, hosted by Hostinger. The site is accessible, uses HTTPS, but lacks advanced security headers and privacy policies, indicating room for improvement in security and compliance. No contact information or privacy-related policies are present, which may impact user trust and regulatory compliance. Overall, the website is functional but basic in content and technical sophistication.
- VRS WPI Vilnius, UAB
wpivilnius.lt
Other · Lithuania
50Medium
NIS2 10 · GDPR 10
NIS2 10 · GDPR 10
VRS WPI Vilnius, UAB is a Lithuanian brand development consultancy established since 1992, specializing in brand strategy, identity, packaging, and communication services. The company targets businesses worldwide seeking to enhance brand equity and market positioning through coherent and resilient branding solutions. Their website reflects a professional and modern digital presence with interactive design elements and clear contact information. Technically, the site employs modern JavaScript frameworks such as Livewire and Alpine.js, along with Swiper.js for UI interactions, and is optimized for mobile devices with good SEO practices. However, the absence of privacy and cookie policies indicates compliance gaps, and no explicit security headers were detected, suggesting room for improvement in security posture. WHOIS data is unavailable due to query limits, limiting domain trust verification, but the website content and social media presence support legitimacy. Overall, the site scores well on business credibility and technical implementation but requires enhancements in privacy compliance and security best practices.
- AASB Bank
asb.co.nz
Finance · New Zealand
58Medium
NIS2 47 · GDPR 53
NIS2 47 · GDPR 53
ASB Bank is a major financial institution in New Zealand offering a wide range of personal and business banking services including mortgages, loans, insurance, credit cards, and investment products. The website is professionally designed and targets New Zealand residents and businesses seeking banking solutions. The technical infrastructure leverages Adobe Experience Manager as the CMS and integrates multiple analytics and marketing tools such as Adobe Target, Google Analytics, and Facebook Pixel, indicating a mature digital marketing strategy. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and explicit privacy and cookie policies suggests room for improvement. The lack of publicly available WHOIS data is typical for .nz domains but reduces transparency. Overall, the website is trustworthy and professional, with recommendations to enhance privacy compliance and security header implementation.
- UAB SELTEKA
selteka.eu
Manufacturing · Lithuania
70Medium
NIS2 2 · GDPR 55
NIS2 2 · GDPR 55
Selteka is a well-established European Electronics Manufacturing Services (EMS) provider based in Lithuania, with a history dating back to 1956. The company specializes in EMS and ODM solutions across multiple high-impact sectors including telecommunications, automotive, medical technology, industrial applications, and smart building IoT. With a sizable facility and a skilled workforce, Selteka offers both mass production and high-mix, low-volume manufacturing tailored to complex customer needs. The website reflects a professional and consistent brand presence, supported by clear contact information and social media channels. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Fonts and Google Maps API. The site is mobile-optimized and provides a cookie consent mechanism, indicating attention to privacy compliance. However, no advanced security headers or incident response policies are evident, suggesting room for improvement in security posture. Security-wise, the site uses HTTPS with good SSL configuration, but lacks explicit security headers and documented security policies. No vulnerabilities or suspicious elements were detected in the accessible content. The absence of WHOIS registrant data is due to EURid privacy policies, but the domain and website content align with a legitimate business entity. Overall, Selteka's digital presence is solid with good business credibility and privacy compliance. Strategic enhancements in security headers, incident response transparency, and analytics integration could further strengthen their security and operational maturity.
TeleSoftastelesoftas.com
Technology · Lithuania
75Medium
NIS2 10 · GDPR 80
NIS2 10 · GDPR 80
TeleSoftas is a well-established digital product engineering and consulting company with over 20 years of experience, serving a broad range of product companies from startups to large enterprises. The company is positioned as a leading product engineering agency in the EMEA region and is part of the Helmes group, which unites over 1500 IT professionals in the Baltics. Their service portfolio includes product engineering, digital transformation, AI development, data science, dedicated teams, and mobile app services. The website reflects a mature business with strong branding, client testimonials, and a clear value proposition focused on technology mastery and user-centric design. Technically, the website is built on the HubSpot CMS platform, leveraging modern JavaScript libraries and analytics tools such as Google Analytics 4 and Facebook Pixel. The site is performant, mobile-optimized, and accessible, with a cookie consent mechanism and privacy policy indicating GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though DNSSEC is not enabled and some security headers could be improved. The domain registration is consistent with the business claims, showing a long-standing presence since 2004. Overall, TeleSoftas presents a credible, professional, and trustworthy digital presence suitable for its target market.
Indorama Ventures Public Company Limitedindoramaventures.com
Manufacturing · Thailand
67Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Indorama Ventures Public Company Limited is a global leader in the manufacturing and recycling of indispensable chemistry products, including PET resins, specialty chemicals, and fibers. The company serves diverse industries such as food and beverages, pharmaceuticals, cosmetics, personal care, and technical polymers, with a strong emphasis on sustainability and circular economy principles. The website reflects a mature enterprise with a clear market position as a top 30 global chemicals company. Technically, the website employs modern web technologies including Vue.js, Google Tag Manager, and Statamic CMS components. It is well-optimized for mobile devices and demonstrates good SEO practices. The presence of cookie consent mechanisms and privacy policies indicates a commitment to privacy compliance. However, some security headers and explicit security policies are not evident, suggesting room for improvement. From a security perspective, the site uses HTTPS and session security tokens, but lacks visible incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data for the beta subdomain is unavailable, consistent with it being a subdomain rather than a separately registered domain, which aligns with the company's operational practices. Overall, the website presents a professional, trustworthy, and secure digital presence suitable for a large multinational enterprise. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding vulnerability disclosure policies to further strengthen security posture and trust.
ESPERANZAesperanzaresort.lt
Hospitality · Lithuania
50Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Esperanza Resort is a luxury 5-star hospitality business based in Lithuania, offering resort and spa services. The website clearly communicates the current status of the business, including a renovation closure and reopening timeline. The site targets luxury travelers and tourists seeking high-end accommodation and wellness experiences. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager and Yoast SEO, supporting multilingual content in Lithuanian, English, and Russian. The site demonstrates good SEO and mobile optimization but could improve accessibility and security headers. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. WHOIS data is unavailable due to query limits, but the domain appears legitimate based on content and SSL. Overall, the site is professional and trustworthy with room for security and compliance enhancements.
UAB „Penki kontinentai“5ci.lt
Technology · Lithuania
67Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
UAB „Penki kontinentai“ is a well-established Lithuanian technology group specializing in banking technologies, innovative payment systems, fiber optic internet, IPTV, and IT solutions. The company serves a broad target audience including government agencies, financial institutions, private enterprises, and individuals, positioning itself as a regional leader with a strong international client base. Their business model focuses on delivering advanced technological solutions and services through a group of subsidiaries, each specializing in distinct but complementary sectors such as banking technology (BS/2), electronic card reader management (ASHBURN International), and telecommunications (PKKC). Technically, the website is built on WordPress with modern JavaScript libraries and plugins that enhance user experience, SEO, and multilingual support. The site demonstrates good mobile optimization, accessibility, and SEO practices. The presence of structured data and comprehensive privacy and cookie policies indicates a mature digital infrastructure. However, the lack of visible HTTP security headers suggests room for improvement in security hardening. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable due to query limits, which slightly reduces domain trust verification but the overall website professionalism and business consistency support legitimacy. Overall, the website presents a professional, secure, and privacy-conscious digital presence aligned with the company's business stature. Strategic recommendations include enhancing HTTP security headers, publishing a security.txt file, and improving incident response visibility to further strengthen trust and compliance.
BNI Lietuvabni.lt
Other · Lithuania
67Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
BNI Lietuva operates as the Lithuanian chapter of the global BNI network, providing business networking and referral services to professionals and organizations. The website presents a professional and consistent brand image aligned with BNI International, targeting business professionals seeking to expand their networks and generate referrals. The technical infrastructure includes modern JavaScript libraries such as jQuery, Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management, indicating a mature digital presence. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. Privacy compliance is well addressed through Cookiebot with a comprehensive privacy policy linked externally. Overall, the website is functional, professional, and trustworthy, though WHOIS data is unavailable due to query limits, limiting domain registration verification.
Teamgateteamgate.com
Computer software · United kingdom
73Medium
NIS2 17 · GDPR 80
NIS2 17 · GDPR 80
OAGinfare.com
Technology
70Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
OAG is a leading global provider of digital flight information and aviation analytics, serving airports, airlines, and travel technology companies. The website showcases a comprehensive suite of data products and analytics platforms, positioning OAG as a market leader in aviation data services. The technical infrastructure is built on HubSpot CMS with modern JavaScript libraries and integrates Google Analytics 4 and Tag Manager with consent management, reflecting a mature digital presence. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not published, representing an area for improvement. The absence of WHOIS registration data is unusual for a large enterprise and warrants further verification. Overall, the website is professional, content-rich, and trustworthy, with minor gaps in transparency and direct contact information.
Mediafonmediafoncs.lt
Telecommunications · Lithuania
64Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
Mediafon Carrier Services is a well-established telecommunications wholesale service provider operating primarily in the Baltic region. The company offers a comprehensive portfolio of services including voice, SMS and messaging, numbering, and number information services, targeting national and international operators, aggregators, and business representatives. With over 25 years of experience and a partner network spanning 67 countries, Mediafon positions itself as a reliable alternative fixed and mobile operator. The website reflects a professional and consistent brand image with clear navigation and multilingual support.
Pepco Poland Sp. z o.o.pepco.pl
Retail · Poland
62Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Pepco Poland Sp. z o.o. operates a large retail chain in Poland, offering affordable clothing, home goods, toys, and seasonal products. The website serves as the official platform for product information, promotions, and store location services, targeting families and general consumers seeking value. The company has a strong market presence with over 1000 stores nationwide, emphasizing low prices and accessibility. Technically, the website is built on WordPress with modern front-end technologies like Swiper.js and integrates marketing and analytics tools such as Google Tag Manager and FreshMail. The site is mobile-optimized and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS enforced and secure forms, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is partially met with a comprehensive newsletter privacy policy but lacks a visible cookie consent mechanism on the main site. Overall, the website is trustworthy, professional, and well-maintained, supporting the company's retail operations effectively.
- Evergrowth
evergrowth.io
Technology
71Medium
NIS2 17 · GDPR 95
NIS2 17 · GDPR 95
Evergrowth is an AI-driven customer intelligence platform focused on enabling sales and sales enablement leaders to optimize outreach efforts using artificial intelligence. The company positions itself as a technology provider in the sales enablement SaaS market, targeting B2B sales professionals. The website demonstrates a modern technical infrastructure leveraging Webflow CMS, React framework, and multiple analytics and marketing integrations such as Google Analytics, HubSpot, and LinkedIn Insight Tag. The presence of a comprehensive cookie consent mechanism indicates awareness of privacy compliance requirements, although no explicit privacy policy or terms of service pages were detected in the provided content. Security posture is generally good with HTTPS enforced and some security best practices observed, but lacks explicit security headers and published security policies. The absence of WHOIS registration data raises concerns about domain legitimacy and reduces overall trustworthiness. Strategic recommendations include publishing privacy and security policies, improving security header implementation, and clarifying domain registration details to enhance business credibility and compliance.
- EERROR: The request could not be satisfied
kaizenauto.com
Other
68Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website kaizenauto.com is currently inaccessible due to a 403 error generated by AWS CloudFront, indicating that the request is blocked possibly due to traffic or configuration issues. This prevents any meaningful extraction of website content, metadata, or business information. The domain is registered since 2011 with a reputable registrar and has a long expiry date, suggesting a legitimate registration. However, the lack of accessible content and absence of security or privacy policies limits the ability to assess the company's digital maturity or security posture. The technical infrastructure includes CloudFront as a CDN, but no further details on hosting or CMS are available. Security posture cannot be evaluated due to the blocked content, and no contact or compliance information is present. Overall, the site appears to be either misconfigured or intentionally restricted, resulting in a low trust and credibility score.
Other
61Medium
NIS2 17 · GDPR 28
NIS2 17 · GDPR 28
The website lukoil.lt currently serves as a parked domain with minimal content primarily focused on advertising and domain resale. There is no active business presence or detailed company information on the site. The domain appears to be monetized through Google Adsense and related advertising networks, with no visible contact or trust indicators. Technically, the site uses basic HTML and JavaScript with content delivery via Cloudfront CDN, but lacks modern security headers and privacy compliance features. The absence of WHOIS data due to query limits further reduces transparency and trustworthiness. Overall, the site presents a low-risk profile but also low business credibility and security maturity.
Thrive4it-inc.com
Technology
65Medium
NIS2 67 · GDPR 80
NIS2 67 · GDPR 80
Thrive is a managed IT services provider specializing in outsourced IT infrastructure solutions, offering strategic advantages to businesses seeking to secure, scale, and succeed in their IT operations. The company appears to be a small-sized technology business founded in 2019, with a professional and consistent online presence. The website is built on WordPress, leveraging modern frameworks such as Bootstrap and jQuery, and is hosted on Microsoft Azure DNS infrastructure. SEO optimization is evident through the use of Yoast SEO Premium plugin, and the site is mobile optimized with good user experience and navigation clarity. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers, and does not publish explicit privacy or cookie policies. No contact emails or phone numbers are explicitly provided, which may impact user trust and compliance. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security best practices.
UAB SALDAsalda.lt
Manufacturing · Lithuania
60Medium
NIS2 2 · GDPR 25
NIS2 2 · GDPR 25
UAB SALDA is a well-established Lithuanian manufacturer specializing in ventilation systems with over 30 years of experience. The company serves a broad international market, offering products for residential, commercial, industrial, and public buildings. Their website demonstrates a professional digital presence with clear product offerings, multilingual support, and active social media engagement. Technically, the site uses modern JavaScript libraries and responsive design, ensuring good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers could be improved. WHOIS data is unavailable due to query limits, limiting domain trust verification. Overall, the website reflects a credible and mature business with room for enhanced security and compliance transparency.
- InSense Clinic
hairclinic.lt
Healthcare · Lithuania
71Medium
NIS2 2 · GDPR 83
NIS2 2 · GDPR 83
InSense Clinic is a healthcare provider specializing in dermatology, plastic, and aesthetic surgery services with clinics located in Vilnius and Kaunas, Lithuania. The website presents a professional and consistent brand image, targeting patients seeking quality medical aesthetic treatments. The business operates under the umbrella of Kardiolitos klinikos, indicating a reputable market position in the regional healthcare sector. Technically, the website leverages modern web technologies including AngularJS, Google Tag Manager, Facebook Pixel, and Cookiebot for compliance and marketing. The site is well-optimized for mobile devices and provides clear navigation and relevant content. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is robust, with a comprehensive privacy policy and cookie management. Overall, the website is trustworthy and professionally maintained, though WHOIS data is unavailable, limiting domain legitimacy verification.
Inchcape plcinchcape.com
Transportation · United Kingdom
69Medium
NIS2 2 · GDPR 88
NIS2 2 · GDPR 88
Inchcape plc is a global leader in the distribution and retailing of premium and luxury automotive brands. The company operates internationally, serving automotive manufacturers, dealers, and customers with a comprehensive distribution model. The website reflects a mature enterprise with a strong market position and a focus on sustainability, investor relations, and career opportunities. Technically, the site is built on WordPress with modern SEO and analytics tools, providing a good user experience with mobile optimization and accessibility considerations. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS registration data for the domain is a transparency concern but does not detract from the overall legitimacy of the business presence online. Strategic recommendations include enhancing security transparency and verifying domain registration details to improve trust.
Frobera.eufrobera.eu
Retail · Lithuania
57Medium
NIS2 17 · GDPR 25
NIS2 17 · GDPR 25
Frobera.eu is a Lithuanian wholesale business specializing in the distribution of mushrooms and berries, including fresh, frozen, dried, salted, and organic varieties. The company targets wholesale buyers and businesses in the food retail and distribution sectors. The website is professionally designed using WordPress with modern plugins such as Slider Revolution and Yoast SEO, supporting multilingual content in Lithuanian, English, and Russian. The technical infrastructure is solid, with HTTPS enabled and integration of Google Analytics for traffic monitoring. Security posture is good with no visible vulnerabilities or exposed sensitive data, although security headers and incident response information are lacking. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating awareness of GDPR requirements. Overall, the website presents a trustworthy and professional image suitable for its business model.
Other
68Medium
NIS2 2 · GDPR 50
NIS2 2 · GDPR 50
The website at solis-tek.com/lander is currently a minimal placeholder or parking page with very limited content. It primarily serves ads via Google Adsense and includes minimal JavaScript and CSS resources. There is no visible business information, contact details, privacy or cookie policies, or terms of service. The domain is registered with GoDaddy since 2010 and is active until 2026, indicating a stable registration but the website itself lacks substantive content or business presence. Technically, the site uses basic JavaScript and a proprietary framework labeled 'PW', hosted on GoDaddy's infrastructure. Performance and mobile optimization are basic, with no advanced SEO or accessibility features detected. Security posture is minimal with no security headers and DNSSEC not enabled, though HTTPS is presumably in use given the domain status and hosting provider. Overall, the site lacks transparency, business credibility, and privacy compliance, resulting in a low trust score and limited user engagement potential.
Rubiconrubicon.nl
Technology · Netherlands
58Medium
NIS2 17 · GDPR 43
NIS2 17 · GDPR 43
Rubicon is a well-established Dutch technology consultancy and managed services provider specializing in Microsoft cloud solutions, digital transformation, and AI implementations. With over 25 years of experience, Rubicon holds multiple Microsoft Solution Partner certifications and serves a diverse clientele including enterprises, government, and non-profit sectors. Their service portfolio covers managed cloud services, hyperautomation, AI, and agile project management, positioning them as a comprehensive cloud advisor in the Netherlands. The website reflects a mature digital presence with professional design, clear navigation, and rich content including case studies and customer testimonials. Technically, the site uses modern web technologies and integrates security features such as HTTPS, CSRF tokens, and Google reCAPTCHA. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. Security posture is strong but could be enhanced by adding more HTTP security headers and publishing explicit security policies. Overall, Rubicon demonstrates a high level of business credibility and digital maturity, with a trustworthy online presence.
INITinit.lt
Telecommunications · Lithuania
60Medium
NIS2 7 · GDPR 25
NIS2 7 · GDPR 25
INIT is a Lithuanian telecommunications company specializing in fiber optic internet, smart television, mobile internet, and telephony services. The company targets residential and business customers within Lithuania, offering competitive plans and promotions. The website reflects a professional and modern digital presence, leveraging WordPress CMS with advanced SEO and analytics integrations. The company maintains active customer engagement through multiple channels including phone support, email, social media, and live chat. GDPR compliance is well implemented with clear cookie consent mechanisms and a comprehensive privacy policy. However, WHOIS data is unavailable due to query limits, though the website's content and structure indicate legitimacy and established operations since at least 2018.
Other
67Medium
NIS2 2 · GDPR 10
NIS2 2 · GDPR 10
The website vkontrole.lt is currently inaccessible beyond a Cloudflare Turnstile human verification challenge page, which blocks access to any substantive content. Due to this, no business information, contact details, or policies are publicly available. The site appears to be protected by Cloudflare's security mechanisms, but this also prevents a full analysis of its content and security posture. The lack of WHOIS data due to query limits further limits trust and transparency. Technically, the site uses Cloudflare services and standard web technologies but lacks visible security headers or privacy compliance indicators. Overall, the site presents a low trust profile and minimal publicly accessible information.
- TTeva
sicor.lt
Healthcare · Lithuania
71Medium
NIS2 2 · GDPR 33
NIS2 2 · GDPR 33
Teva Lithuania operates as a regional branch of the global pharmaceutical company Teva Pharmaceutical Industries, providing a wide range of generic and specialty medicines. The website serves as a corporate and informational platform targeting patients, healthcare professionals, and caregivers in Lithuania. It emphasizes patient safety, social responsibility, and product quality. The digital infrastructure employs modern JavaScript libraries and analytics tools such as Microsoft Clarity and Application Insights, alongside a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. The domain WHOIS data is unavailable due to query limits, but the website's branding and external links strongly indicate legitimacy. Overall, the site is professional, well-structured, and compliant with privacy regulations, supporting Teva's market position in healthcare.

Other · Lithuania
59Medium
NIS2 2 · GDPR 28
NIS2 2 · GDPR 28
The website personpremier.lt is a small local business site focused on coffee machine repair services in Šiauliai, Lithuania. It offers repair services for automatic, semi-automatic, and various coffee machines, targeting local customers who need professional maintenance and repair. The site is built on WordPress using Bootstrap and jQuery, providing a mobile-responsive and user-friendly experience with regularly updated blog content related to coffee machine repair. However, the site lacks key compliance documents such as privacy and cookie policies, and no email contact is provided, which limits direct communication channels. Social media links are generic and do not point to specific company profiles. Technically, the site uses HTTPS but does not implement advanced security headers, which could improve its security posture. No analytics or tracking scripts were detected, indicating minimal user tracking. The WHOIS data is unavailable due to query limits, which reduces transparency about domain ownership and registration details. Overall, the site is functional and professional but could improve in privacy compliance and security best practices. Security-wise, the site has a basic SSL configuration but lacks security headers and incident response information. There are no visible vulnerabilities or exposed sensitive data, but the absence of security policies and contact channels for incident reporting is a gap. The business credibility is supported by clear contact phone and physical address, but the lack of email and privacy documentation is a concern. Recommendations include adding privacy and cookie policies with consent mechanisms, implementing security headers, providing an official contact email, and improving WHOIS transparency if possible. These steps will enhance trust, compliance, and security posture for the business and its customers.
BetGamesbetgames.tv
Technology
71Medium
NIS2 55 · GDPR 53
NIS2 55 · GDPR 53
BetGames is a prominent provider in the live dealer online gaming industry, offering innovative gaming platforms and lottery solutions with minimal stakes. The company collaborates with over 180 international partners, positioning itself as a leader in the B2B gaming technology sector. The website reflects a mature digital presence built on modern frameworks such as React and Gatsby, delivering excellent performance and mobile optimization. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with comprehensive privacy and cookie policies including consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, though the lack of public WHOIS data slightly reduces transparency. Strategic recommendations include publishing security policies and incident response information to enhance trust and compliance.
- Gamtos tyrimų centras
gamtostyrimai.lt
Government · Lithuania
60Medium
NIS2 17 · GDPR 10
NIS2 17 · GDPR 10
Gamtos tyrimų centras (GTC) is a Lithuanian state scientific research institute specializing in natural sciences research and experimental development. The website reflects a professional government entity with a clear focus on scientific activities, education, and public engagement. The site is well-structured, multilingual, and includes accessibility features to accommodate users with disabilities. Technically, it is built on WordPress with modern plugins for SEO, chat, and accessibility, indicating a mature digital infrastructure. Security posture is good with HTTPS and security hardening plugins, though some HTTP security headers could be improved. The absence of WHOIS data limits domain registration insights, but the website's content and social media presence strongly support its legitimacy. Overall, the site presents a trustworthy and professional image suitable for its government research role.
- VillaCarte
villacarte.com
Real Estate · Thailand
70Medium
NIS2 17 · GDPR 73
NIS2 17 · GDPR 73
VillaCarte is a premier property services firm specializing in resort sales and rentals in Thailand, particularly in Phuket and Koh Samui. With over 12 years in the market, the company offers a comprehensive range of services including property sales, rentals, concierge services, and property management. Their business model targets property buyers, renters, and investors seeking luxury real estate and related services in popular Thai resort locations. The website reflects a medium-sized enterprise with consistent branding and a good level of content quality.
- Audimas
audimas.lt
Retail · Lithuania
74Medium
NIS2 2 · GDPR 100
NIS2 2 · GDPR 100
Audimas is a Lithuanian e-commerce retailer specializing in sportswear and active lifestyle clothing. The website targets consumers interested in comfortable and functional sports apparel, offering online sales with free and fast delivery. The brand appears established with a consistent and professional online presence, focusing on the Lithuanian market. Technically, the site employs a modern tech stack including jQuery, Bootstrap, and various UI libraries, supported by analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Adform. Accessibility is addressed via EqualWeb integration, and the site is mobile-optimized with good SEO practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No WHOIS data was available due to query limits, but the domain appears legitimate based on website content and trust signals. Overall, the site demonstrates a mature digital infrastructure suitable for its retail business model.
Macmillan Education Limitedmacmillanenglish.com
Education · United Kingdom
64Medium
NIS2 2 · GDPR 68
NIS2 2 · GDPR 68
Macmillan Education Limited, a subsidiary of Springer Nature, operates the website macmillanenglish.com offering English Language Teaching (ELT) courses, digital solutions, and educational materials. The company targets learners and educators globally, providing a comprehensive catalogue of courses and resources. The website demonstrates a mature digital infrastructure using modern frameworks like Nuxt.js and Vue.js, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though no explicit security policy or incident response contacts are published. The absence of WHOIS domain registration data raises concerns about domain legitimacy, but the website content and branding strongly indicate a reputable educational publisher. Strategic recommendations include publishing a security policy, incident response contacts, and a vulnerability disclosure policy to enhance trust and compliance.
- Chaingrow, Inc.
chain-grow.com
Technology
50Medium
NIS2 2 · GDPR 35
NIS2 2 · GDPR 35
Chaingrow, Inc. is a technology company specializing in next-generation solutions for vertical farming, focusing on IoT systems and controlled-environment agriculture to improve food quality, productivity, and sustainability. The company offers products and services such as IoT Systems Design and Integration, targeting vertical farming businesses and sustainable agriculture practitioners. Their market position is that of a niche innovator in agricultural technology. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, and Google Analytics, hosted under a GoDaddy registrar domain created in 2018. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. Security posture is basic with no detected security headers or DNSSEC enabled, and no visible SSL/TLS configuration details. Privacy compliance is weak due to the absence of privacy and cookie policies and no consent mechanisms. Contact information is limited to a contact form with no direct emails or phone numbers. Overall, the website is professional but could improve in security, privacy, and compliance to enhance trust and user confidence.
- LLife In Technology
lifeintechnology.co.uk
Technology
58Medium
NIS2 2 · GDPR 40
NIS2 2 · GDPR 40
Life In Technology operates a website focused on educating users about on-site SEO best practices, targeting website owners and SEO professionals. The site provides detailed content on SEO ranking factors such as content quality, internal linking, page speed, and meta tags. The business model appears to be content-driven education without direct commercial offerings visible on the site. Technically, the website is built with basic HTML and CSS, lacking modern frameworks or CMS platforms. Performance and mobile optimization are moderate to basic, with no advanced accessibility features detected. Security posture is weak due to the absence of HTTPS and security headers, and no privacy or cookie policies are present, indicating poor compliance with data protection regulations. The domain WHOIS data reveals that the domain is invalid or unregistered according to Nominet UK, which severely undermines the trustworthiness and legitimacy of the website. Overall, the site provides useful SEO content but suffers from critical security and legitimacy issues that should be addressed to improve trust and compliance.
Skycopskycop.com
Transportation
67Medium
NIS2 17 · GDPR 83
NIS2 17 · GDPR 83
Skycop is a specialized flight compensation company that assists air passengers in claiming compensation for disrupted flights under various international regulations including EU 261, UK261, Turkey SHY, Brazil ANAC, and Canada APPR. The company operates on a no-win, no-fee basis and offers a streamlined online claim process supported by legal experts. Their market position is strong with extensive airline coverage and positive trust indicators such as press mentions and customer reviews. Technically, the website is built on WordPress with modern performance optimizations including lazy loading, caching, and integration of analytics and marketing tools like Google Tag Manager, PostHog, and Mindbox. The site is mobile optimized, accessible, and SEO friendly, providing a professional user experience. From a security perspective, the site enforces HTTPS, uses security headers, and secures user input forms. However, it lacks a publicly available security policy and incident response information, which could be improved. The absence of WHOIS data reduces transparency but does not significantly detract from the site's legitimacy given the professional content and trust signals. Overall, Skycop presents a low-risk profile with a solid business model and good digital maturity. Strategic recommendations include publishing explicit security and incident response policies, enhancing transparency around domain registration, and considering a vulnerability disclosure program to further build trust.