Medium-risk security reports
99,069 public Guard scan reports. Each shows the site’s score, risk level and indicative NIS2 / GDPR posture from public signals.
Across the directory
All scanned sites, all time
- Websites scanned
- 150,168001234567890012345678900123456789,001234567890012345678900123456789
- Average score
- 600012345678900123456789/of100001234567890012345678900123456789
- High or critical risk
- 25%0012345678900123456789%
- Countries
- 112001234567890012345678900123456789
91,151–91,200 of 99,069
Agile Networks Ltd.agilenetworks.ie
Technology · Ireland
59Medium
NIS2 43 · GDPR 43
NIS2 43 · GDPR 43
Agile Networks Ltd. is a leading independent network integrator based in Ireland, specializing in AI-driven network infrastructure and innovative business solutions. The company offers a comprehensive range of services including network infrastructure, cloud networking, information security, IT automation, and managed services. Positioned as a trusted partner for commercial enterprises, public sector organizations, and service providers, Agile Networks emphasizes delivering intelligent infrastructure to support digital transformation and operational efficiency. The website demonstrates a mature technical infrastructure built on WordPress with Elementor, enhanced by SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. The presence of reCAPTCHA v3 on forms indicates attention to security and spam prevention. The site is well-optimized for performance and mobile responsiveness, providing a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and employs modern security practices, though it lacks explicit security policy documentation and vulnerability disclosure mechanisms. Privacy compliance is addressed with dedicated privacy and cookie policy pages, though a formal cookie consent mechanism is absent. Contact information is clearly provided, supporting user trust and engagement. Overall, Agile Networks presents a strong market presence with credible business information and a secure, professional web platform. Strategic recommendations include enhancing security transparency, adding incident response contacts, and implementing explicit cookie consent to further improve compliance and trust.
- HHoly Family University
holyfamily.edu
Education · United States
55Medium
NIS2 5 · GDPR 28
NIS2 5 · GDPR 28
Holy Family University is a private higher education institution based in the United States, offering a range of undergraduate and graduate programs. The university emphasizes a personalized educational experience, student engagement, and community involvement. Its website reflects a strong market position as a regional university with recognized academic partnerships and NCAA Division II athletics. The target audience includes prospective and current students, parents, alumni, and academic professionals. The business model centers on providing quality education and student services. Technically, the website is built on Drupal 10 and integrates multiple modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, Hotjar, and others. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and professional design. Multimedia content such as embedded videos enhances user engagement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and publicly available security or incident response policies. Privacy compliance is strong, with visible cookie consent mechanisms and a comprehensive privacy policy. The extensive use of tracking pixels indicates a high level of user tracking, balanced by compliance efforts. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for improvement in security transparency and terms of service availability. The domain registration data supports the legitimacy and consistency of the institution's online presence.
Irish League of Credit Unionscreditunion.ie
Finance · Ireland
57Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
The Irish League of Credit Unions website serves as the national representative body for credit unions across Ireland and Northern Ireland, providing comprehensive information about credit union services including loans, mortgages, savings, insurance, and community engagement. The site targets credit union members and potential members, emphasizing a not-for-profit financial cooperative model. The business is well-positioned in the finance sector with a large organizational size and a consistent brand presence. The website content is professionally presented with clear navigation and relevant information aligned with the organization's mission. Technically, the website is built on ASP.NET Web Forms and Kentico CMS, utilizing modern tools such as Google Tag Manager for analytics and OneTrust for cookie consent management. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. SEO practices are well implemented with appropriate meta tags and social media integration. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms, with CSRF tokens present in forms. However, explicit security headers are not detected, and there is no publicly available security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found in the analysis. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and professional, with a high legitimacy score based on domain registration consistency and business alignment. Strategic recommendations include enhancing security headers, publishing a security policy and vulnerability disclosure, and providing incident response contacts to further strengthen the security posture and user trust.
Oraclefideliocruise.com
Hospitality · United States
60Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
Oracle Hospitality Cruise Ship Technology website presents a comprehensive suite of cruise ship management software solutions designed to enhance passenger experience and streamline cruise operations. The site reflects Oracle's strong market position as a leading enterprise software provider with a focus on hospitality and cruise industries. Key services include shipboard property management, fleet management, dining management, and point of sale systems, all integrated with Oracle's cloud infrastructure. The website is professionally designed, mobile-optimized, and rich in content, targeting cruise lines and hospitality professionals worldwide. From a technical perspective, the website leverages modern JavaScript frameworks, Oracle's proprietary Redwood2 framework, and integrates advanced analytics and consent management tools such as Tealium and TrustArc. Hosting and CDN services are provided by Oracle Cloud and Akamai, ensuring fast performance and global availability. Accessibility and SEO best practices are well implemented, contributing to a positive user experience. Security posture is strong with HTTPS enforced, presence of security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and active consent mechanisms. However, explicit incident response and vulnerability disclosure information are not found, representing an area for improvement. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, supporting Oracle's reputation as a market leader in hospitality technology solutions.
FinTrUfintru.com
Finance · United Kingdom
66Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
FinTrU is a UK-based company specializing in technology-enabled Client Lifecycle Management (CLM) solutions, focusing on KYC, Compliance, Risk, and Legal services for global financial institutions. The company holds multiple certifications including ISO 27001 and FSQS, indicating a strong commitment to security and compliance. Their website reflects a professional market position with clear service offerings and trust indicators such as awards and diversity marks. Technically, the website employs a modern technology stack including jQuery, Foundation framework, Google reCAPTCHA v3, and OneTrust for cookie consent management. The site is built on the Umbraco CMS platform and demonstrates good mobile optimization, accessibility, and SEO practices. Analytics and marketing tools like Google Analytics, Facebook Pixel, and LinkedIn Insight Tag are used with appropriate privacy controls. From a security perspective, the site enforces HTTPS, integrates anti-bot measures, and uses a comprehensive cookie consent mechanism. However, there is room for improvement in implementing security headers and publishing explicit incident response contacts or vulnerability disclosure policies. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, adding incident response information, and publishing a security.txt file to improve transparency and security maturity.
- SSliderobes
sliderobes.com
Retail · United Kingdom
53Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Sliderobes is a well-established UK-based company specializing in bespoke fitted furniture solutions, including sliding wardrobes, home office furniture, and custom storage for unusual spaces. With over 40 years of experience, the company operates through a network of local designers and showrooms across the UK and Ireland, offering free design consultations and finance options regulated by the FCA. The website reflects a mature business with strong branding, clear navigation, and comprehensive service offerings tailored to homeowners seeking personalized furniture solutions. Technically, the website is built on the Kentico CMS platform, leveraging modern JavaScript libraries and third-party integrations such as Google Tag Manager, Microsoft Clarity, Feefo reviews, and LiveChat for enhanced user engagement and analytics. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with asynchronous loading of scripts to optimize user experience. From a security perspective, the site enforces HTTPS and uses several tracking and marketing scripts responsibly. However, explicit security headers are not detected in the provided data, suggesting room for improvement in hardening the site against common web vulnerabilities. No critical security issues or vulnerabilities were identified, and privacy compliance appears robust with clear privacy and cookie policies. Overall, Sliderobes presents a trustworthy and professional online presence with strong business credibility and a solid technical foundation. Strategic enhancements in security headers and accessibility could further strengthen their digital posture.
- VVertex, Inc.
taxamo.com
Technology · United States
65Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
Vertex, Inc. is a leading provider of integrated tax technology solutions, serving over 10,000 businesses globally since 1978. The company offers comprehensive services including tax determination, compliance reporting, e-invoicing, and audit planning, targeting businesses requiring robust tax automation and compliance across multiple jurisdictions. Their platform integrates seamlessly with major ERP, eCommerce, and financial systems, enabling real-time tax automation and continuous compliance. Technically, the website is built on Drupal with modern JavaScript libraries and employs strong privacy and security practices including HTTPS, CSP, and cookie consent mechanisms. The security posture is robust with no evident vulnerabilities or exposed sensitive data. Overall, Vertex demonstrates a mature digital infrastructure, strong market presence, and a high level of professionalism and trustworthiness.
MediaPlatformmediaplatform.com
Technology · United States
66Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
MediaPlatform is an enterprise-grade webcasting and video platform provider specializing in live webcasting, video management, delivery, and analytics. Positioned as a market leader recognized by Gartner, it serves large enterprises with a comprehensive suite of video communication services. The company recently became part of Brandlive, indicating strategic growth and consolidation in the enterprise video market. The website reflects a mature digital presence with extensive marketing and analytics integrations, professional design, and clear business messaging. However, direct contact details like emails and phone numbers are not openly published, relying instead on contact forms. Security posture is solid with HTTPS and anti-bot measures but lacks explicit published security policies or incident response information. Privacy compliance is partially addressed with policies present but missing explicit cookie consent mechanisms. Overall, the site is trustworthy, professional, and well-optimized for its target audience.
- Total Power Solutions
totalpowersolutions.ie
Energy · Ireland
56Medium
NIS2 0 · GDPR 70
NIS2 0 · GDPR 70
Total Power Solutions is a well-established Irish company specializing in UPS systems and related power solutions since 2006. They offer a comprehensive range of products including single and three-phase UPS, batteries, and monitoring systems, complemented by extensive services such as preventive maintenance, onsite service plans, battery maintenance, and installation. Their market position is supported by strong trust indicators including ISO certifications and client testimonials, targeting businesses with critical power infrastructure needs. Technically, the website is built on WordPress with modern plugins and technologies, providing a good user experience and mobile optimization. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though there is room for improvement in explicit security headers and incident response disclosures. Overall, the site reflects a credible and professional business with a solid digital presence.
VisibleThreadvisiblethread.com
Government · United States
56Medium
NIS2 45 · GDPR 28
NIS2 45 · GDPR 28
VisibleThread is an established enterprise software company specializing in RFP software and AI-driven writing assistants tailored for government contracting and regulated industries. Their platform enhances proposal efficiency, compliance, and quality, serving major government contractors and business development teams. The website demonstrates a mature digital presence with modern technologies, strong branding, and comprehensive content. Security posture is robust with HTTPS, security headers, and responsible disclosure programs, though explicit security policy documentation could be improved. Overall, the site reflects a trustworthy and professional business with a clear market position and strong customer trust signals.
Healthcare · Ireland
56Medium
NIS2 5 · GDPR 75
NIS2 5 · GDPR 75
The National Orthopaedic Hospital Cappagh is a leading public healthcare institution in Ireland specializing in elective orthopaedic surgery, research, and education. It holds a strong market position as Ireland’s largest elective orthopaedic centre and is recognized for excellent patient experience and staff retention. The hospital provides a wide range of specialist services including paediatric orthopaedics, rehabilitation, diagnostics, and virtual clinics, targeting patients, healthcare professionals, and the wider community. The website reflects a professional and comprehensive digital presence with clear navigation and relevant content tailored to its audience. Technically, the website is built on WordPress with modern frameworks such as Bootstrap and integrates essential plugins like Yoast SEO and WooCommerce. It employs Google Analytics and Tag Manager for analytics and tracking, and uses a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and performs moderately well, though accessibility features could be enhanced. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policy and incident response information. Overall, the website demonstrates a mature digital infrastructure supporting the hospital’s mission and services. The domain registration and WHOIS data align with the hospital’s identity, reinforcing legitimacy and trust. Strategic recommendations include enhancing security transparency, adding incident response contacts, and improving accessibility to further strengthen trust and compliance.
Integrity360integrity360.com
Technology · Ireland
64Medium
NIS2 60 · GDPR 75
NIS2 60 · GDPR 75
Integrity360 is a leading independent cyber security and payments compliance specialist headquartered in Ireland with a strong presence across Europe and globally. The company offers a comprehensive portfolio of managed cyber services, incident response, compliance risk and assurance, and professional consulting services. Recognized by Gartner and holding multiple certifications such as SOC 2 and ISO 27001, Integrity360 positions itself as a trusted partner for organizations seeking robust cyber resilience and compliance solutions. Their client base spans multiple sectors including finance, government, healthcare, and manufacturing. Technically, the website is built on the HubSpot CMS platform, leveraging modern JavaScript libraries and marketing tools such as Google Analytics, Hotjar, and Microsoft Clarity. The site demonstrates good performance, mobile optimization, and accessibility features. Security best practices are observed with HTTPS enforcement, security headers, and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The company maintains a strong security posture with dedicated Security Operations Centres across multiple countries and a focus on prevention, detection, and response. Their incident response services and compliance frameworks align with industry standards including ISO 27001 and NIST. However, the site lacks a public vulnerability disclosure policy and could enhance incident response contact channels. Overall, Integrity360 presents a professional, trustworthy, and mature digital presence with strong business credibility and security awareness. Strategic recommendations include implementing a public vulnerability disclosure program, enhancing form security, and continuous auditing of third-party scripts to maintain security integrity.
Smith & williamsonwilliamson.co.uk
Financial services · United kingdom
55Medium
NIS2 10 · GDPR 60
NIS2 10 · GDPR 60
IMEC Technologiesimectechnologies.com
Technology · United States
50Medium
NIS2 15 · GDPR 43
NIS2 15 · GDPR 43
IMEC Technologies is a medium-sized B2B software provider specializing in compliance management solutions across diverse industries such as energy, healthcare, environmental services, and manufacturing. Their product suite includes hazardous waste management, incident management, safety inspections, audit management, and document management software, positioning them as a comprehensive compliance partner. The website reflects a professional and consistent brand with good content quality and clear navigation, targeting organizations requiring workplace safety and compliance software solutions. Technically, the website is built on WordPress using modern themes and plugins such as Salient and WPBakery, integrated with HubSpot for marketing and Google Analytics for traffic analysis. The site is mobile-optimized and uses structured data for SEO enhancement. Performance is moderate, with asynchronous loading of scripts to improve user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a public security or incident response policy. Privacy compliance is addressed with a comprehensive privacy policy and cookie consent mechanism, indicating GDPR awareness. No critical vulnerabilities or suspicious elements were detected. Overall, IMEC Technologies presents a trustworthy and professional online presence with a solid business model and digital maturity. Strategic improvements in security headers and incident response transparency could further enhance their security posture and customer trust.
- PPoppulo
newsweaver.com
Technology
69Medium
NIS2 5 · GDPR 48
NIS2 5 · GDPR 48
Poppulo is a leading enterprise communications platform specializing in omni-channel solutions including employee communications, digital signage, and workplace experience software. The company serves large enterprises and is trusted by over 40 Fortune 100 companies, offering AI-powered tools to enhance communication effectiveness and engagement. Their platform integrates with existing tools and provides comprehensive analytics and security features. Technically, the website is built on modern frameworks such as Next.js and Chakra UI, with extensive use of analytics and optimization tools like Google Analytics, Google Tag Manager, and Visual Website Optimizer. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements key security headers, and integrates consent management for privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. However, explicit incident response contacts and vulnerability disclosure policies are not publicly available, representing an area for improvement. Overall, Poppulo's website demonstrates a strong security posture, excellent content quality, and robust business credibility, positioning it as a trustworthy and professional enterprise solution provider.
UKG Inc.immedis.com
Technology · United States
65Medium
NIS2 5 · GDPR 70
NIS2 5 · GDPR 70
UKG Inc. is a leading enterprise technology company specializing in human capital management, payroll, and workforce management solutions. Their flagship product, UKG One View, offers a unified global payroll platform designed to simplify multi-country payroll operations for multinational organizations. The website demonstrates a mature digital presence with comprehensive content, modern technology stack, and strong branding consistency. The technical infrastructure is based on Drupal 10 with advanced consent management and analytics integration, ensuring compliance with privacy regulations such as GDPR. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit incident response and vulnerability disclosure mechanisms are not publicly detailed. Overall, UKG presents a trustworthy and professional online presence aligned with its enterprise market position.
NBMnbm.ie
Technology · Ireland
55Medium
NIS2 5 · GDPR 15
NIS2 5 · GDPR 15
NBM is a well-established Irish company specializing in managed print services and document workflow solutions, with over 36 years of industry experience. The company positions itself as a market leader and a trusted partner of Xerox, serving a broad range of clients from small businesses to large international corporations. Their website reflects a mature digital presence with comprehensive service offerings including print management, digital transformation, office supplies, and video conferencing solutions. Technically, the website is built on WordPress with modern plugins and integrations such as Gravity Forms, HubSpot, and Google Analytics, demonstrating a good level of digital maturity and performance optimization. Security-wise, the site enforces HTTPS, uses reCAPTCHA on forms, and provides a robust cookie consent mechanism, although explicit security headers could be improved. Overall, the website is professional, user-friendly, and compliant with GDPR, supporting the company's credibility and trustworthiness in its sector.
- Bank of America Corporation
bofaml.com
Finance · United States
66Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Bank of America Corporation operates the website providing global financial services including commercial banking, investment banking, treasury solutions, and research. The site targets multinational corporations, institutional investors, and various business sectors, positioning itself as a leading global financial institution. The business model focuses on comprehensive financial solutions and market insights to support client growth and investment decisions. Technically, the website is built on Adobe Experience Manager with modern video and consent management technologies, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not found. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supported by clear legal disclaimers and regulatory memberships.
- TTallaght University Hospital
amnch.ie
Healthcare · Ireland
50Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Tallaght University Hospital is a large healthcare provider based in Dublin, Ireland, offering a wide range of medical services including emergency care, adult services, and patient support. The website serves multiple audiences including patients, visitors, healthcare professionals, and job seekers, providing comprehensive information and digital services such as blood test booking and video consultations. The hospital positions itself as a trusted regional healthcare institution with a strong community focus. Technically, the website uses a mature technology stack including jQuery, Bootstrap, and Google Analytics, with a CMS identified as pTools Software. The site is mobile responsive and provides a good user experience with clear navigation and relevant content. However, some accessibility and SEO optimizations could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site implements cookie consent mechanisms and privacy policies aligned with GDPR. However, explicit security policies and incident response contacts are not found. Security headers are not detected in the provided data, and SSL configuration details are unknown, suggesting room for improvement in security hardening. No vulnerabilities or exposed sensitive data were identified. Overall, the website is professional, trustworthy, and compliant with privacy regulations, but could enhance its security posture and technical optimizations to further protect users and improve digital maturity.
Linedatalinedata.com
Finance · France
58Medium
NIS2 43 · GDPR 75
NIS2 43 · GDPR 75
Linedata is a well-established global financial technology company specializing in software, services, and data solutions for asset managers, fund administrators, and lending institutions. With over 25 years of experience, it holds a strong market position supported by a comprehensive portfolio of products and services including portfolio management, order management, risk management, and AI-driven data analytics. The website reflects a mature digital presence built on Drupal CMS, integrating modern marketing and analytics tools such as Google Tag Manager, Marketo, and Hotjar. Security posture is robust with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers should be verified. The company demonstrates strong privacy compliance and transparent user consent management. Overall, the website is professional, user-friendly, and trustworthy, supporting Linedata's credibility in the financial technology sector.
Cheeverstowncheeverstown.ie
Non-profit · Ireland
56Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Cheeverstown is a well-established voluntary non-profit organization based in Ireland, providing a broad range of residential, respite, day, employment, and advocacy services to children and adults with intellectual disabilities primarily in South Dublin. The organization positions itself as a community-focused service provider with a mission to empower individuals with intellectual disabilities to live meaningful lives. Their website reflects a medium-sized non-profit with clear service offerings, volunteer and donation engagement, and active social media presence. Technically, the site is built on Webflow with modern web technologies, including Google Fonts, jQuery, and CookieHub for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS and cookie consent implemented, though it lacks explicit security policies and incident response contacts. Overall, the website is trustworthy and professional, supporting the organization's mission effectively.
Algebris Investmentsalgebris.com
Finance · Italy
55Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Algebris Investments is a global asset manager specializing in thematic and specialized investment strategies. The company targets professional and private investors with a range of funds and insightful market research. Their market position is that of a medium-sized, globally focused asset manager headquartered in Italy. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on WordPress with modern technologies including Yoast SEO, Cookiebot for consent management, and Akamai CDN for performance optimization. The site is mobile-optimized and uses service workers for enhanced user experience. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements standard security headers. Cookie consent mechanisms are in place, supporting GDPR compliance. However, there is no publicly available dedicated security policy or incident response information, which could be improved to enhance trust and transparency. Overall, the website presents a low-risk profile with no detected vulnerabilities or suspicious elements. The domain registration details align well with the business claims, supporting legitimacy. Strategic recommendations include publishing a security policy, providing incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen security posture and compliance.
Royal Berkshire NHS Foundation Trustroyalberkshire.nhs.uk
Healthcare · United Kingdom
55Medium
NIS2 0 · GDPR 28
NIS2 0 · GDPR 28
Royal Berkshire NHS Foundation Trust operates as one of the largest general hospital foundation trusts in the UK, serving a population exceeding 500,000 people primarily in Berkshire West. The trust provides a wide range of acute and specialist healthcare services, supported by a comprehensive website that targets patients, visitors, healthcare professionals, researchers, and job seekers. The website features detailed service information, accessibility support, research collaboration opportunities, and career resources, reflecting a strong community and healthcare focus. Technically, the website is built on the Umbraco CMS platform and leverages modern web technologies including Bootstrap, jQuery, Swiper.js, and Google Tag Manager. Accessibility is enhanced through the integration of Browsealoud tools and reCAPTCHA v3 for form security. The site demonstrates good mobile optimization and SEO practices, although performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms from abuse. However, it lacks visible security headers such as Content-Security-Policy and X-Frame-Options, and does not publicly disclose security or incident response policies. Privacy compliance is partial, with a privacy policy present but no explicit cookie consent mechanism detected. The domain registration details align well with the NHS trust's identity, supporting high legitimacy and trustworthiness. Overall, the Royal Berkshire NHS Foundation Trust website is a professional, trustworthy, and functional digital presence for a major healthcare provider. Strategic improvements in security headers, privacy compliance, and explicit security disclosures would further enhance its security posture and regulatory adherence.
Elevate Credit Union Limiteddouglascu.ie
Finance · Ireland
61Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
Elevate Credit Union Limited operates as a member-owned financial cooperative based in Ireland, providing a range of financial services including loans, mortgages, current accounts, savings, and insurance products. The organization targets local community members seeking an alternative to traditional banking, emphasizing personal and professional service. The website reflects a medium-sized, well-established entity with a history dating back to 1964, positioning itself as a trusted local financial institution regulated by the Central Bank of Ireland. Technically, the website is built on the Umbraco CMS platform, leveraging modern JavaScript libraries such as jQuery, Bootstrap, and Leaflet for interactive maps. It integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Performance is moderate, with a clean and professional design that supports user engagement through tools like a loan calculator and mobile app promotion. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes security headers such as Content-Security-Policy and X-Frame-Options. Cookie consent mechanisms are in place, and no exposed sensitive data or vulnerable libraries were detected. However, the absence of a dedicated security policy and incident response contact information represents an area for improvement. Overall, the security posture is solid but could benefit from formalized policies and vulnerability disclosure mechanisms. The domain registration details align well with the business claims, indicating legitimacy and trustworthiness. The website provides comprehensive contact information, including verified emails and phone numbers, and maintains active social media profiles. Privacy and cookie policies are present and GDPR compliant, supporting user trust and regulatory adherence. Strategic recommendations include publishing explicit security policies, enhancing accessibility, and maintaining regular security audits to sustain and improve the site's security and compliance posture.
Volograms Limitedvolograms.com
Technology · Ireland
53Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Volograms Limited is a technology company specializing in AI-powered 3D volumetric holograms, enabling users to create immersive holographic content from simple 2D videos or photos. Their product suite includes the Volu app, Volu Pro, and Vologram Messages, targeting creators and businesses interested in next-generation communication technologies. The company has established a strong market presence with media features in reputable outlets such as Financial Times, Wired, and CNN. Technically, the website is built on Webflow with integrations including Google Analytics, Google Tag Manager, ActiveCampaign, and Typeform for forms, demonstrating a mature digital infrastructure with good performance and mobile optimization. Security posture is solid with HTTPS enforced and privacy compliance mechanisms like cookie consent banners in place, though explicit security policies and incident response contacts are absent. Overall, the website reflects a professional, trustworthy, and innovative technology startup with a clear focus on volumetric video and hologram technology.
Options Technologyoptions-it.com
Finance · United Kingdom
60Medium
NIS2 35 · GDPR 75
NIS2 35 · GDPR 75
Options Technology is a leading provider of cloud-enabled managed IT infrastructure and services tailored for the global capital markets sector. The company offers a suite of products including Atlas for market data connectivity, AtlasWorkplace for IT support, AtlasApps for application management, and Managed Security services. Positioned as a top provider in the financial technology space, Options Technology targets asset managers, hedge funds, sell side firms, software providers, and private equity firms worldwide. The website demonstrates a mature technical infrastructure leveraging WordPress CMS with Elementor page builder, Bootstrap framework, and integrates advanced analytics and monitoring tools such as Google Analytics, HubSpot, and New Relic. The site is mobile-optimized, SEO-friendly, and employs modern web technologies ensuring a good user experience and performance. Security posture is solid with HTTPS enforced, cookie consent mechanisms in place, and use of monitoring scripts. However, there is room for improvement in implementing comprehensive security headers and publishing explicit security policies. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR compliance indicators. Overall, the website reflects a professional and trustworthy organization with strong market positioning in financial IT infrastructure. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility features to further strengthen compliance and trust.
Bark.com Global Limitedskillpages.com
Other · United Kingdom
58Medium
NIS2 5 · GDPR 63
NIS2 5 · GDPR 63
Bark.com Global Limited operates a sophisticated online marketplace platform that connects consumers with local service professionals across a wide range of categories. Founded in 2012 and based in the United Kingdom, the company has established a strong market position with a comprehensive service offering and a user-friendly, well-structured website. The platform facilitates quick quote comparisons and service provider matching, targeting both individual consumers and professionals seeking to expand their client base. The website demonstrates a high level of digital maturity, employing modern technologies such as React, advanced analytics tools, and robust consent management systems. Security practices are solid, with HTTPS enforced, CSRF protections, and error monitoring in place, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supported by strong branding and trust indicators including testimonials and press mentions.
- EEkco
ward.ie
Technology · Ireland
69Medium
NIS2 60 · GDPR 63
NIS2 60 · GDPR 63
Ekco is a managed cloud and cybersecurity service provider specializing in security-first cloud solutions, business continuity, and workspace IT services. The company positions itself as a trusted partner for businesses seeking to modernize and secure their IT infrastructure, with a strong regional presence in Ireland and the UK. Their offerings include managed cloud services, security consulting, cyber testing, and business continuity solutions, supported by a professional and content-rich website. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and various analytics and consent management tools. The site demonstrates good SEO, mobile optimization, and accessibility practices. Security posture is strong with HTTPS enforced and consent-based loading of tracking scripts, although explicit security policies and incident response contacts are not published. Overall, Ekco presents a professional and trustworthy digital presence with extensive business and technical maturity. The domain registration details align well with the business claims, supporting legitimacy. Recommendations include publishing explicit security and incident response policies and maintaining vigilance on third-party script security.
- LLane Clark & Peacock LLP
lcp.uk.com
Finance · United Kingdom
63Medium
NIS2 27 · GDPR 43
NIS2 27 · GDPR 43
Lane Clark & Peacock LLP (LCP) is a UK-based consulting firm specializing in pensions, financial services, energy transition, health analytics, and sports analytics. The company positions itself as a market leader with a strong emphasis on combining human expertise with advanced analytics to help clients navigate complex challenges and seize opportunities. Their website reflects a professional and comprehensive digital presence with clear navigation, rich content, and a focus on client engagement through insights, impact reports, and career opportunities. Technically, the site uses modern web technologies including Umbraco CMS, Google Tag Manager, CookieFirst consent management, and Vimeo for media content. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a mature digital infrastructure aligned with the company's business goals and market positioning.
Government · Ireland
52Medium
NIS2 0 · GDPR 18
NIS2 0 · GDPR 18
The Central Statistics Office (CSO) of Ireland operates as the national statistical authority, providing comprehensive and authoritative data on a wide range of topics including population, economy, environment, and social conditions. The website serves government entities, researchers, businesses, and the public by offering statistical releases, interactive visualisations, surveys, and detailed publications. The CSO maintains a strong market position as the official source of Irish statistics, emphasizing transparency and trust through clear contact information and privacy policies. Technically, the website employs a mature technology stack including jQuery, Highcharts, Leaflet, and other visualization and data handling libraries. It is hosted on official domains with CDN support, ensuring moderate performance and good mobile responsiveness. Accessibility and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site uses HTTPS with good SSL configuration and enforces cookie consent with opt-in mechanisms. Google Analytics is configured with privacy-conscious settings such as IP anonymization and consent-based activation. However, there is room for improvement by adding security headers, publishing a security policy, and updating legacy libraries like jQuery. Overall, the CSO website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for statistical data in Ireland.
- AAna Liffey Drug Project
aldp.ie
Non-profit · Ireland
53Medium
NIS2 0 · GDPR 3
NIS2 0 · GDPR 3
Ana Liffey Drug Project is a well-established Irish non-profit organization focused on providing addiction support services related to drug and alcohol use. The website serves as a comprehensive information and engagement platform, offering details about their services, news updates, volunteer opportunities, and resources. The organization is supported by government health agencies and has a clear presence in the community. Technically, the website is built on WordPress using Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. Overall, the website is professional, trustworthy, and serves its target audience effectively.
Permanent TSB Group Holdings plcpermanenttsbgroup.ie
Finance · Ireland
56Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Permanent TSB Group Holdings plc operates as a leading financial institution in Ireland, providing retail and SME banking services. The company holds a significant market position with a 16.4% mortgage market share as of December 2024. Their website reflects a professional corporate presence focused on investor relations, governance, and sustainability. The business model centers on personal and business banking, supported by subsidiaries such as Permanent TSB plc and PTSB Asset Finance. The target audience primarily includes retail and SME customers within Ireland.
- DDNS resolution error | acumenandtrust.com | Cloudflare
acumenandtrust.com
Other
53Medium
NIS2 0 · GDPR 10
NIS2 0 · GDPR 10
The website acumenandtrust.com is currently inaccessible due to a DNS resolution error served by Cloudflare, indicating misconfiguration or propagation delay. The page content is limited to a Cloudflare error message with no business-related content, policies, or contact information. This severely limits the ability to assess the company's business model, services, or market position. Technically, the site relies on Cloudflare for DNS and security services but currently fails to resolve, resulting in zero availability. Security posture is weak due to lack of accessible content, no visible security headers, and no privacy or cookie policies. Overall, the site is effectively blocked from meaningful analysis, resulting in a very low AI score and high risk from a security and compliance perspective.
EIRE Systemseiresystems.com
Technology · Japan
62Medium
NIS2 13 · GDPR 28
NIS2 13 · GDPR 28
EIRE Systems is a well-established IT support and consulting company operating primarily in the Asia Pacific region, with offices in Japan, Singapore, Hong Kong, and Shanghai. Founded in 1996, the company offers a broad range of services including IT support, project management, IT security, cloud solutions, and network penetration testing. Their market position is strong, targeting multinational corporations and SMEs with over 20 years of experience and recognized certifications such as ISO 27001. The website reflects a professional and modern digital presence, leveraging WordPress with the Avada theme and performance optimizations via NitroPack. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and comprehensive content including case studies and career opportunities. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although the absence of a cookie consent mechanism and dedicated security policy pages are noted gaps. Overall, the domain registration details align well with the business claims, supporting legitimacy and trustworthiness.
Ivantilandesk.com
Technology · United States
64Medium
NIS2 35 · GDPR 63
NIS2 35 · GDPR 63
Ivanti, formed from the merger of LANDESK and HEAT Software, is a leading enterprise IT management and security software provider. The company offers a broad portfolio of solutions including unified endpoint management, security management, service management, and asset management, serving a global enterprise customer base. The website reflects a mature business with consistent branding and comprehensive content that supports its market position. Technically, the website employs modern analytics and telemetry tools such as Google Tag Manager and Microsoft Application Insights, combined with a robust cookie consent mechanism powered by OneTrust. The site is hosted behind Cloudflare, ensuring good performance and security. The design is professional, mobile-optimized, and accessible, providing a positive user experience. Security posture is strong with HTTPS enforced, cookie consent controls, and clear security contact information. However, explicit security headers and a public vulnerability disclosure page are not evident, representing areas for improvement. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policy. Overall, the website demonstrates a high level of digital maturity and business credibility, with no signs of blocking or WAF challenges. Strategic recommendations include enhancing security header implementation, publishing vulnerability disclosure information, and providing clearer data protection officer contact details.
Allcare Pharmacyallcarepharmacy.ie
Healthcare · Ireland
58Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Allcare Pharmacy operates as a leading online health and beauty retailer and community pharmacy in Ireland, offering a wide range of products including skincare, makeup, vitamins, and pharmacy services. The website demonstrates a strong market position with comprehensive services such as free click & collect and next day delivery, targeting Irish consumers seeking convenient access to health and beauty products. The platform is built on Magento 2, leveraging modern web technologies and integrations with marketing and analytics tools like Google Tag Manager, Klaviyo, and Trustpilot, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and CSRF protections, though some security headers could be enhanced. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website presents a professional, trustworthy, and user-friendly e-commerce experience.
Andelaandela.com
Information technology and services · United states
56Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
- EEida Solutions
eidasolutions.com
Technology · Ireland
59Medium
NIS2 0 · GDPR 58
NIS2 0 · GDPR 58
Eida Solutions provides specialized construction management software tailored for complex projects in the life sciences, semiconductor, and data center sectors. Their platform digitizes and streamlines construction, commissioning, and turnover processes, positioning them as a niche B2B SaaS provider with a strong market focus. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. Technically, the site is built on WordPress with modern integrations such as Gravity Forms and HubSpot, supporting marketing and analytics needs effectively. Security posture is solid with HTTPS and consent mechanisms in place, though there is room for improvement in publishing explicit security policies and headers. Overall, the site is trustworthy and well-structured, supporting business credibility and user engagement.
ATAatagroup.ie
Manufacturing · Ireland
51Medium
NIS2 5 · GDPR 23
NIS2 5 · GDPR 23
ATA is a well-established global precision engineering company specializing in the manufacturing, supply, and distribution of cutting tools and industrial tooling solutions. With nearly 60 years of experience and 11 global facilities, ATA holds a strong market position in the manufacturing sector, serving diverse industries such as aerospace, automotive, power generation, and metal fabrication. The company emphasizes quality, innovation, and customer-centric values, supported by a consistent and professional online presence. Technically, the website is built on the Wix platform utilizing modern technologies including React 18, Wix Pro Gallery, and integrations with HubSpot and Microsoft Clarity for marketing and analytics. The site demonstrates good performance, accessibility, and SEO practices, although mobile optimization is basic and could be enhanced. From a security perspective, the site employs HTTPS with strong SSL configuration and implements security best practices such as hardened fetch/XHR and secure cookie handling. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. Overall, ATA's digital infrastructure reflects a mature and secure environment suitable for its business scale and global operations. Strategic recommendations include enhancing mobile optimization, publishing explicit security and incident response policies, and continuous monitoring of third-party integrations to maintain security and compliance.
Medmarkmedmark.ie
Healthcare · Ireland
53Medium
NIS2 0 · GDPR 55
NIS2 0 · GDPR 55
Medmark is a leading occupational healthcare provider in Ireland, operating the largest national network of specialist occupational health services. Their offerings include occupational health assessments, insurance medicals, nurse case management, and employee wellness programs, targeting businesses and educational institutions across Ireland. The website is built on WordPress with modern SEO and privacy compliance tools, demonstrating a mature digital presence. Security posture is strong with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site reflects a professional and trustworthy healthcare service provider with a solid market position in Ireland.
- Unravel Data
unraveldata.com
Technology · United States
56Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
Unravel Data is a technology company specializing in AI-native data observability and FinOps platforms designed to empower data teams in enterprises. Their platform offers automated actionability for optimization, governance, and cost management across major cloud data platforms such as Snowflake, Databricks, and BigQuery. The company is well-positioned in the market with industry recognitions and a strong customer base, emphasizing AI-driven innovation and operational efficiency. Technically, the website is built on WordPress with modern performance optimizations including lazy loading, Google Tag Manager integration, and a comprehensive cookie consent mechanism via OneTrust. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent for privacy compliance. While explicit security headers are not fully evident, no critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website presents a professional, trustworthy, and compliant digital presence with strong business credibility. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining rigorous third-party script audits to further strengthen security posture.
IT Alliance Groupitalliancegroup.com
Technology · Ireland
55Medium
NIS2 0 · GDPR 43
NIS2 0 · GDPR 43
IT Alliance Group is a well-established IT services provider founded in 1997, specializing in managed services, project delivery, consulting, and resourcing primarily across Ireland and the UK. Their unique Tier 2 Service Alliance business model enables them to partner with leading IT and technology brands to deliver IT projects and services on behalf of their clients. The company targets IT service providers and technology companies seeking reliable delivery partners. The website reflects a professional and consistent brand image with clear service offerings and client testimonials, supporting their market position as a trusted mid-sized IT services firm. Technically, the website is built on WordPress with modern front-end technologies and SEO optimizations. It uses Google Analytics and Tag Manager for tracking and employs responsive design for mobile users. The site loads with moderate performance and basic accessibility features. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks advanced security headers and explicit security policies or incident response contacts. Privacy compliance is partially addressed with privacy and cookie policies, though no active cookie consent mechanism is present. Overall, the security posture is solid but could be improved by implementing security headers, publishing security policies, and enhancing privacy compliance mechanisms. The domain registration is consistent with the business claims, showing a long operational history and no suspicious WHOIS patterns. The website is trustworthy and professionally maintained, with minor areas for improvement in security and privacy transparency.
Meridian Global Servicesmeridianglobalservices.com
Technology · United Kingdom
60Medium
NIS2 5 · GDPR 58
NIS2 5 · GDPR 58
Meridian Global Services specializes in tax technology solutions tailored for SAP environments, focusing on VAT determination and compliance. The company offers a suite of products including ARCO Determination, ARCO Compliance, VAT Add-on, and Vantage service packages, targeting global enterprises with complex VAT requirements. Their market position is supported by a medium-sized, UK-based operation with a strong client base and active industry engagement through events and webinars. Technically, the website is built on WordPress with modern SEO and analytics integrations, demonstrating a mature digital presence. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-optimized for its target audience.
- Spectrum networks
spectrumnetworks.ca
Information technology and services · Canada
56Medium
NIS2 5 · GDPR 25
NIS2 5 · GDPR 25
Newtec Servicesnewtecservices.com
Technology · Ireland
56Medium
NIS2 43 · GDPR 55
NIS2 43 · GDPR 55
Newtec Services is a reputable IT company based in Ireland, specializing in managed IT services, cybersecurity, cloud migration, and NetSuite integration. The company targets businesses seeking tailored IT solutions to improve efficiency and security. Their market position is strengthened by a professional online presence, client testimonials, and ISO 27001 certification. Technically, the website is built on WordPress with Elementor and optimized using NitroPack, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates a mature digital infrastructure with good SEO and privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response information, and adding vulnerability disclosure details to further build trust and compliance.
Radboudumcradboudumc.nl
Healthcare · Netherlands
66Medium
NIS2 0 · GDPR 48
NIS2 0 · GDPR 48
Radboudumc is a leading academic medical center in the Netherlands focused on innovative, sustainable, and affordable healthcare. The website targets patients, healthcare professionals, researchers, and students, offering comprehensive information on patient care, research, and education. The institution maintains a strong market position as a reputable healthcare provider and research institute. The site features professional design, clear navigation, and multilingual support, reflecting a mature digital presence. Technically, the website employs modern analytics tools such as Matomo and Microsoft Application Insights for performance and error monitoring, alongside accessibility tools like ReadSpeaker. The infrastructure appears robust with HTTPS enforced and a moderate performance profile. The site is mobile-optimized and SEO-friendly, though no explicit CMS or framework is identified. From a security perspective, the site demonstrates good practices including encrypted connections, privacy-compliant cookie consent, and no visible sensitive data exposure. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting Radboudumc's reputation as a credible healthcare institution. Strategic improvements in security transparency and header configurations could further strengthen its posture.
- Fund Recs
fundrecs.com
Finance · Ireland
59Medium
NIS2 5 · GDPR 43
NIS2 5 · GDPR 43
Fund Recs is a technology company specializing in fund management automation through a no-code platform that streamlines data connection, transformation, and reconciliation. The company targets financial institutions and fund administrators, positioning itself as a trusted provider with a global client base and multiple international offices. Their platform emphasizes efficiency, accuracy, and compliance in fund data workflows. Technically, the website is built on HubSpot CMS with modern JavaScript libraries and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though incident response contacts and vulnerability disclosures are not explicitly provided. Overall, the website demonstrates professionalism, trustworthiness, and compliance with privacy regulations, supporting Fund Recs' market credibility.
Clarion Consultingclarionconsulting.com
Other · Ireland
50Medium
NIS2 0 · GDPR 40
NIS2 0 · GDPR 40
Clarion Consulting is a specialist consulting firm with offices in Ireland and the UK, focusing on business consulting, IT consulting, and project management services. The company targets businesses seeking to enable agile enterprise transformation and organizational change. The website reflects a professional and consistent brand image with clear service offerings and a regional market focus. The digital infrastructure is built on WordPress with modern libraries and plugins, including Bootstrap and Google reCAPTCHA, supporting a responsive and user-friendly experience. Analytics tools such as Google Analytics and Microsoft Clarity are used for user behavior insights, with appropriate cookie consent mechanisms in place to ensure GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Overall, the website demonstrates good technical and content quality, supporting the company's credibility and trustworthiness in its market niche.
- OOcuco Ltd.
ocuco.com
Technology · Ireland
61Medium
NIS2 35 · GDPR 43
NIS2 35 · GDPR 43
Ocuco Ltd. is a leading global provider of optical software solutions, serving over 8,500 optical locations worldwide. The company specializes in delivering comprehensive software products such as Acuitas, Innovations, and OptiCommerce, designed to streamline eyecare business operations including practice management, lab processing, and digital marketing. Their market position as the #1 optical software provider is supported by decades of industry expertise and a strong customer base spanning independents, chains, and labs. Technically, the website is built on a modern WordPress CMS platform with Elementor as the page builder, leveraging popular analytics and marketing tools including Google Analytics, Microsoft Clarity, and Cookiebot for consent management. The site demonstrates excellent mobile optimization, fast performance, and good SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS with a strong SSL configuration and employs consent mechanisms for cookies, enhancing privacy compliance. While explicit security headers like Content-Security-Policy are not detected, the site shows no signs of exposed sensitive data or vulnerabilities. The absence of a published security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, Ocuco presents a professional, trustworthy online presence with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing formal security and vulnerability disclosure policies, and continuing to monitor third-party scripts for potential risks.
Government · Ireland
61Medium
NIS2 0 · GDPR 63
NIS2 0 · GDPR 63
The National Treasury Management Agency (NTMA) is a key government agency in Ireland responsible for managing public assets and liabilities, including government borrowing, debt management, and oversight of strategic investment funds. The website presents a professional and comprehensive digital presence, targeting government stakeholders, institutional investors, and the public. It offers clear information on its business areas and services, supported by structured data and consistent branding. Technically, the website employs modern JavaScript frameworks, integrates Google Analytics for performance insights, and uses CookiePro (OneTrust) for GDPR-compliant cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and valid markup. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is strong but could be enhanced with additional headers and transparency. The domain registration details align well with the official agency identity, reinforcing legitimacy and trust. No WAF or blocking mechanisms interfere with content access, enabling full analysis. Strategic recommendations include adding security headers, publishing a security policy, and implementing a vulnerability disclosure program to further strengthen trust and compliance.